last executing test programs: 2m30.31714202s ago: executing program 3 (id=120): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_pidfd_open(0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x30}}, 0x0) 2m30.260509171s ago: executing program 3 (id=122): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = syz_open_procfs(0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m30.169542171s ago: executing program 3 (id=124): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100030a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x20}, {r4, 0x1180}, {r4}, {r5, 0x4401}, {r4}, {r4, 0x8}, {r0, 0x2}, {r1, 0x61}, {r2, 0x2}], 0x9, &(0x7f0000000040), &(0x7f0000000280)={[0xc914]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r4}, 0x10) dup3(r4, r0, 0x80000) 2m30.14562196s ago: executing program 3 (id=128): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x25b, &(0x7f0000000840)="$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") ioperm(0x2, 0xb4a8, 0x7) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x143140, 0x100) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r0, 0x89e0, 0x0) open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'geneve1\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x80000006, 0x0, 0x19, 0x6}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x2f9, 0x6488, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r4, &(0x7f0000000280)="0503092c8f0b480301020d00c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 2m29.893355341s ago: executing program 3 (id=132): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1}, 0x6e) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000004500)=[{{&(0x7f0000000b00)=@abs, 0x6e, &(0x7f0000000000)=[{&(0x7f0000001700)="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", 0x1000}], 0x1}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000c00)="30d7a609479f5a16315b65246c5190f039f368fad37fb71b816fd61a7352cdbcf3c3ef99010a4f89060c8880933d023606a317938dee0ba4271665e25329f39eecf7e8eb877ca60b5144c918aee3b8adba41e4b6099bdab3597e47fc92533e1fa3c61b0e5f671dc3ffc96c10799af8d56cf8000f0f9094157ea243c0a1590ac9f17992b6", 0x84}], 0x1, &(0x7f0000000cc0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000000f80)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f00000011c0)=[{&(0x7f00000001c0)="1d8d16bbbf495471e47acdb4e9345ccda5", 0x11}], 0x1, &(0x7f00000015c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{0x0, 0x0, &(0x7f0000004440), 0x0, &(0x7f0000004480)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x5, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}], 0x4, 0x0) recvmmsg(r0, &(0x7f0000004840)=[{{&(0x7f0000000900)=@hci, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010003000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000020900020073797a31000000000900010073797a30000000000800054000000025400100000c0a01010000000000000000070000040900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1c4}}, 0x0) 2m28.799050554s ago: executing program 3 (id=143): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x25b, &(0x7f0000000840)="$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") ioperm(0x2, 0xb4a8, 0x7) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x143140, 0x100) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r0, 0x89e0, 0x0) open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'geneve1\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x80000006, 0x0, 0x19, 0x6}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x2f9, 0x6488, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r4, &(0x7f0000000280)="0503092c8f0b480301020d00c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 2m28.795954373s ago: executing program 32 (id=143): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x25b, &(0x7f0000000840)="$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") ioperm(0x2, 0xb4a8, 0x7) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x143140, 0x100) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r0, 0x89e0, 0x0) open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'geneve1\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x80000006, 0x0, 0x19, 0x6}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x2f9, 0x6488, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r4, &(0x7f0000000280)="0503092c8f0b480301020d00c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 2m10.087502314s ago: executing program 5 (id=497): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRESOCT, @ANYRES32=0x1, @ANYRES16, @ANYRESDEC=0x0, @ANYRES8, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close(0xffffffffffffffff) 2m9.995356205s ago: executing program 5 (id=501): kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 2m9.848453345s ago: executing program 5 (id=506): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000002c0)=@sg0, 0x0, &(0x7f00000003c0)) 2m9.719337235s ago: executing program 5 (id=512): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) 2m9.640855606s ago: executing program 5 (id=518): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000005000000000800040001000000", 0x24) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mlockall(0x7) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) r4 = dup(r3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="14340000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x2, &(0x7f0000000080)={0x0, 0x6c00}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) syz_emit_ethernet(0x2a, &(0x7f0000000440)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x8864, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x80, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x17, 0x81, 0x0, @empty}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000004c0)='ext4_ext_load_extent\x00', r5, 0x0, 0xdc3}, 0xfffffec6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x7, 0x10001, 0x9, 0x4481, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000600)=""/165}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x21081a, &(0x7f0000000300), 0x1, 0x507, &(0x7f0000000c00)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x851800, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r9, 0x4c04, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x93]}) 2m9.120399637s ago: executing program 5 (id=537): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00', 0x1}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'dummy0\x00'}, 0x18) 2m3.952094718s ago: executing program 1 (id=618): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) 2m3.925713668s ago: executing program 1 (id=619): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=""/203, 0xcb) 2m3.888887008s ago: executing program 1 (id=620): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000c6219a9b00dcb41d010000005143cce10000ce9a0000000000c5768900000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) r2 = syz_io_uring_setup(0x241d, &(0x7f0000000140)={0x0, 0x0, 0x13090, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30}]}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001640)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0xffffffc3}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x3, 0x0, 0x0, 0x0, 0x0) 2m3.869135988s ago: executing program 1 (id=621): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000680)="b2ff630a34ba496bbacc3653be33b139ad72e740018d7b495357d8d36ed0930abafd5e1c02a5bcaf5e2294af8aec2b18b73d77a632196c93881272f52703eaf8d97c6bf86f0ed479c5bdcff4f28cf793731045abe2be7e09a3a3a9397a7e29853aa26d2c9049d851604ac04b7ed3b972d8f04115d4f9d345580b281f8d79fd47e28d2c3dd99d4fbd7d91ead4130447c74ed099c2d7849d4b380a0900fd3dc4399beb88062c52e552f75fbefdbd1f2006ef7226a3f4cacf3849b5e4875dd14871e8a0a02fa96ca2566112fa8a30ccbdef4de074c4feeb43334bf83fdcaef5a1207ed7c23a78d2d481e638c892d2", 0xed}], 0x1) readv(r0, &(0x7f0000000040), 0x10) 2m3.803607678s ago: executing program 1 (id=622): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@grpquota}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000080009"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)=""/10, 0xa}], 0x1, 0x0, 0x20, 0x21) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors\x00', 0x275a, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x190, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000280)={0x1d, r5}, 0x10) recvmmsg(r4, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/125, 0x7d}, {0x0}], 0x2}, 0xfffffff7}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "400000008b20aaf0"}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioperm(0x0, 0x5, 0x6) socket$kcm(0x2, 0x200000000000001, 0x106) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f0000000240)={0x5, 0x0, 0x1, 0x76, 0x8}) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x10, 0x12) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ftruncate(r3, 0x9) futex(&(0x7f0000000080), 0x80, 0x0, 0x0, 0x0, 0x0) 2m2.92378722s ago: executing program 1 (id=642): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000340)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000940), &(0x7f0000000640), 0x8, 0x16, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 1m53.85320417s ago: executing program 33 (id=537): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00', 0x1}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'dummy0\x00'}, 0x18) 1m47.840439423s ago: executing program 34 (id=642): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000340)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000940), &(0x7f0000000640), 0x8, 0x16, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 3.998839401s ago: executing program 7 (id=2855): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030427bd70000000000000000000", @ANYRESOCT=r5, @ANYBLOB="a5fdad8800000000140012800b00010062617461647600000400028008000a00", @ANYRESHEX], 0x3c}}, 0x0) syz_io_uring_setup(0x3aec, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 3.464566192s ago: executing program 4 (id=2866): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r2, 0x301, 0x0, 0x0, {{0x32}, {@void, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]]}, 0x28}}, 0x0) 3.442826203s ago: executing program 4 (id=2868): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x9, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/16, 0x10}}], 0x1, 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_names\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4048004) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000180)={0x2c, 0x3, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x1, 0xaf, [0xfffffffffffff51c, 0x1]}}]}, 0x28) 3.297630993s ago: executing program 4 (id=2871): lstat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00002344000000860000000700200000010000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000010000000200"/28], 0xfffffffffffffea9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4000172, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xb9, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x44, 0x0, 0x0, 0x5dc}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x0, 0x0, 0x100000000, 0x5, 0xffff, 0x0, 0x0, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x20000000000000b9, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095", @ANYRESHEX=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x28) 2.165081425s ago: executing program 7 (id=2880): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x156, &(0x7f0000001100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x120, 0x2b, 0x0, @private2, @local, {[@hopopts={0x89, 0x21, '\x00', [@hao={0xc9, 0x10, @mcast1}, @generic={0x9, 0xf7, "79f718cd082bb66ffb27540e7af860dd9e6ee4e3c8e66545f9bcc4710e26ba8070b5ef58e1e2d33338a21d518590fdef3d2137e741316128acff57f4f6c034c89b7ce4fd9420ef4f0e9c68fc13edcb19ef952b706c28f9e6cbd028b945c54a68d66d491c2e91b888fbaa4f5e4d5d723f45eaa8d6c8ad48d90b91682197819cbd279f4d877a0f3cd7cf94822c03b8bfa7366e2acb95da150db4b7cacc724787687e0b2fe9c01555683bcb6ccb07924fdeb55f0666018f3d819c3dfd512f4c0777e563c1e6489c78d5812ba2f3f770096cde1c243c570a1d8d64caa99e841cf5ba420bfd2f4e7ab222c764e28066ba90655f1b2df13c1516"}, @generic={0x14}]}], {0x0, 0x0, 0x8}}}}}}, 0x0) 2.154804225s ago: executing program 4 (id=2881): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000540), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read(r2, &(0x7f0000001b00)=""/194, 0xc2) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'nicvf0\x00', @local}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0xc17a) write$binfmt_misc(r0, &(0x7f0000000100), 0xfdef) 2.122004575s ago: executing program 7 (id=2882): r0 = socket$kcm(0x21, 0x2, 0xa) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0'}, 0x74) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000000000001500000028000300", @ANYRES32=r6, @ANYBLOB="20002b8008000100000000001400038006000100030000000800020000000000"], 0x3c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000001001000001000000dcfe3b000000000000"], 0x18}, 0xfc00) symlink(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0/../file0\x00') 1.927641586s ago: executing program 7 (id=2885): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) 1.926245056s ago: executing program 4 (id=2887): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b"], 0x36) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000480), 0x4) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000640), 0x40002, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, r3, {0x1bf7, 0xa}}, './file0\x00'}) recvmmsg(r6, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/48, 0x30}, {&(0x7f00000003c0)=""/137}, {&(0x7f00000004c0)=""/128}, {&(0x7f00000005c0)=""/32}], 0x1, &(0x7f0000000800)=""/73, 0x3d}, 0x3}], 0x1, 0x40011021, 0x0) sendmsg$tipc(r6, &(0x7f0000000200)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)='[', 0x1}], 0x1}, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r8, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r8, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000069000305000000000000000000000000000000000800010002"], 0x20}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711035000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.878969446s ago: executing program 7 (id=2888): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010200000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000048000000030a01010000000000000000010000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000000080002"], 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000303030b0000c41976460c3a6c63ae679cef00000000000003000004080003400000000708000340000000090800034000000003080003400000f57c08000340000000090c000200fffffffe000000080c000200000000000000000b0c000200fffffffc0000000930ee579c3325e03c20f3902e05440900813af47ff82b8125a52b9272bf09b19071f2ca30e827b5f9f0da7eb49251e0e6416a7c30b75fc410907580c86e61573c4cf6a1705cc9da4fbc8e3c7eb2ab1d"], 0x60}, 0x1, 0x0, 0x0, 0x4004001}, 0x40010) 1.807640976s ago: executing program 6 (id=2889): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r2, 0x301, 0x0, 0x0, {{0x32}, {@void, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]]}, 0x28}}, 0x0) 1.756836186s ago: executing program 0 (id=2890): sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x50, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK]}, 0x50}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x200) getdents64(r1, &(0x7f00000000c0)=""/108, 0x6c) getdents64(r1, 0xfffffffffffffffe, 0x29) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x1000, &(0x7f0000000000)="0be33aad3d91b4d8ee2388d97bc6693a790ef0", 0x13, &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000002c0)="9fe25f3c895c1754f6e8a47d98b9b64e2c9e8607e23ba047aa79d4abf87cd0da00ad6b8c3ff74b48a18672093db2c2d6e400eb6c2c2a03bc9870651665d74c32344892d8fb90cc871f1c32d4e1973140f8b30dc367c57c") ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) symlink(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 1.678289526s ago: executing program 6 (id=2892): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005efe2100850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x5, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x3}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x3c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x84}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000300)) syz_emit_ethernet(0x846, &(0x7f0000001100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x810, 0x2b, 0x0, @private2, @local, {[@hopopts={0x89, 0x100, '\x00', [@hao={0xc9, 0x10, @mcast1}, @generic={0x9, 0xf7, "79f718cd082bb66ffb27540e7af860dd9e6ee4e3c8e66545f9bcc4710e26ba8070b5ef58e1e2d33338a21d518590fdef3d2137e741316128acff57f4f6c034c89b7ce4fd9420ef4f0e9c68fc13edcb19ef952b706c28f9e6cbd028b945c54a68d66d491c2e91b888fbaa4f5e4d5d723f45eaa8d6c8ad48d90b91682197819cbd279f4d877a0f3cd7cf94822c03b8bfa7366e2acb95da150db4b7cacc724787687e0b2fe9c01555683bcb6ccb07924fdeb55f0666018f3d819c3dfd512f4c0777e563c1e6489c78d5812ba2f3f770096cde1c243c570a1d8d64caa99e841cf5ba420bfd2f4e7ab222c764e28066ba90655f1b2df13c1516"}, @generic={0x14, 0x6f3, "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"}]}], {0x0, 0x0, 0x8}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) migrate_pages(0x0, 0x2, &(0x7f0000000040)=0x7, &(0x7f0000000180)=0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000080)="e9", 0x1, 0x40841, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000140)={0x0, 0x7, 0x6, "7c861c937422"}, 0xe) 1.546324377s ago: executing program 0 (id=2893): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x78) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1.433525387s ago: executing program 6 (id=2895): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x2}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r6 = dup(r1) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40eb, 0x0, r6, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000006c0)) 1.397157887s ago: executing program 0 (id=2896): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000002dc0)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xffffffffffffff56, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a01020000000000000b000a0000060900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000c080003400000000008000240000000140800014000000003080001400000000b0800014000000012080002400000001808000340"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x30048050) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x28000844}, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="e180c2000002bbbbbbbbbbbb08050005fd23e8822144da66b2fdba8f3504802bdc"], 0x0) mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'veth0_to_bond\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001c00000014000180080003000100000008000100", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) open_by_handle_at(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="080000000100000008"], 0xffa1) r9 = socket$tipc(0x1e, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808) dup3(r9, r2, 0x0) 1.250545817s ago: executing program 0 (id=2897): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, 0x0, 0x40800, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) mknod$loop(0x0, 0x100000000000600d, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) request_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000001c0)='{-^@\\\x83+C\x17\xd0]\x05\xc1\xbb]\x81\xa2!n\x94\xa0\xfb\x9c\x1c\xfa\xeb\xae\x93\xe4\xf0\x11\xdf\xed.\a\xf2W{\x061\xb7W\xc5b\xac\xd9c^\x91\xc3\'\x8e)\f$\x1f\x03\xb1\x91K\xbeK\xb4\x80\nwO\xb0\xd5\x90TTU\xb0E\xfa\x85]\x85\xe8\xb5\t\x9b\xcf\xf4\xb9\x1c>\xc8F?\x0f\xc6\x83IC\x02b\xa2\x11\xd3\xd8\xf0\xb3\x85\v\x02I*#\xc6@\xca\xdbM\xea<\xf3\xa3_\xff*\xaa~b{+\xc4I\xd1$)\xcf^\xaf\x92\xe1\xb4\x93\xfb\x05\x00\x00\x00\x00\x00\x00\x00\x9f\v\x81\xda\xe3`\xe7\x15\x05\b\x03-\xeckHP\xee\xcd\xd0\xe3\x0e\x05)\x97z\xdd0h\x8e\xe2\xb8\xeb\x8dOKK\x1b\xf7\xac\xfe\xc9\xf7\xcb\xb5\xac\x90\x9cZ\x18\x80I\t\xa2\xee\x1f\xfa\xa1\xc9\x84\x93\xcc\x85', 0xffffffffffffffff) 1.236676538s ago: executing program 6 (id=2898): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x98) dup2(r0, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000580)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000100)={0x1d, r3}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6], 0x40}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000500), &(0x7f0000000280)=r9}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10, 0x0, 0xe}, 0x18) lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00'}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='xprtrdma_frwr_alloc\x00', r11, 0x0, 0x3c000000000}, 0x18) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r12}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a, 0x0, @perf_config_ext={0x9}, 0x104002, 0xa1b7, 0x0, 0x0, 0x6f00000000000, 0xffffffff, 0x0, 0x0, 0xffffbffe, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000380)='\x00', 0x0, 0x0, 0x1200) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r13, 0x89f1, &(0x7f0000000080)) 985.534088ms ago: executing program 7 (id=2903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b"], 0x36) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4) openat$autofs(0xffffffffffffff9c, &(0x7f0000000640), 0x40002, 0x0) recvmmsg(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/48, 0x30}, {&(0x7f00000003c0)=""/137}, {&(0x7f00000004c0)=""/128}, {&(0x7f00000005c0)=""/32}], 0x1, &(0x7f0000000800)=""/73, 0x3d}, 0x3}], 0x1, 0x40011021, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r5, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r5, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000069000305000000000000000000000000000000000800010002"], 0x20}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711035000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 808.106178ms ago: executing program 4 (id=2905): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b"], 0x36) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000480), 0x4) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000640), 0x40002, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, r3, {0x1bf7, 0xa}}, './file0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r7, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r7, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000069000305000000000000000000000000000000000800010002"], 0x20}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711035000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 649.747349ms ago: executing program 6 (id=2906): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030427bd70000000000000000000", @ANYRESOCT=r5, @ANYBLOB="a5fdad8800000000140012800b00010062617461647600000400028008000a00", @ANYRESHEX], 0x3c}}, 0x0) syz_io_uring_setup(0x3aec, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000a00)=ANY=[@ANYBLOB="0000000000001f0009f5000088a800008100000086dd62b5ceef00101100fe800000000000000000000000000026fe880000000078000000b5507c260b515c0ed9c5bef2ff0000000000014e234e"], 0x4e) 615.362579ms ago: executing program 2 (id=2907): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecffffff9402000000000000400000000000000000000000000000000000000000003800010000000200000003000000970f000004000000000000000d00000000000000c8010000000000000700000000000000040000000000000002005b81af5100000b2e71cefd1ab73c94a1ebad50795762a21235faad3e57b55f64fb6d4dd28b18e5e66191baef1045d5adab8f33acd1d6515b7688b6bda66caa12ea912be3e765e74be59b8617e8f2a47f4820070fcfc69aaf354cb9bfeed436cbee926f90c0857252c21064783e1a83cf826f5927f915c77fc1b4c861525a2f180f79f259b9d32cfe62f4d89522dbc4726e2708b78a73c1f1e487996e9251a426f37baa95b186bd020f279b19fea8703cc9abe3a713d591e8aec209ec5a3eb7f4eb17bc16ead1d75c67cb0beb041a40a0a2116aff68d690ede42f28f1d7fb0000000000"], 0x78) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 538.477669ms ago: executing program 0 (id=2908): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b"], 0x36) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000480), 0x4) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000640), 0x40002, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2, {0x1bf7, 0xa}}, './file0\x00'}) recvmmsg(r5, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/48, 0x30}, {&(0x7f00000003c0)=""/137}, {&(0x7f00000004c0)=""/128}, {&(0x7f00000005c0)=""/32}], 0x1, &(0x7f0000000800)=""/73, 0x3d}, 0x3}], 0x1, 0x40011021, 0x0) sendmsg$tipc(r5, &(0x7f0000000200)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)='[', 0x1}], 0x1}, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r7, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r7, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000069000305000000000000000000000000000000000800010002"], 0x20}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711035000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 480.893109ms ago: executing program 2 (id=2909): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x2}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r6 = dup(r1) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40eb, 0x0, r6, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000006c0)) 176.85571ms ago: executing program 2 (id=2910): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)=ANY=[], 0x78}}, 0x0) 130.43925ms ago: executing program 2 (id=2911): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x37fd, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) 75.91779ms ago: executing program 2 (id=2912): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x5, 0x7f0, &(0x7f0000001900)="$eJzs3U9sHFcZAPBvXCd1XIiqgkIUpek0LVIipe7aSV1ZPbTb9diZdr1rdtdVIoTaiDhRFKetGiqRHEhzAYGKKsSBY9sDFzghLiAkkEACTkhw5VapEocWBBIHUCWjmVkndvw3qfNH5fez4pl582be995u5tuxPTMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAETSmKzVRpNo5q25E+n6GpOd9swG65f295sVkw3ajUiKfzE0FHuror1fvL56T/HtYOyvlvbHUDEZissP7HnwmS8MDixtv0FA221wrcKLly6fP7WwMP/GHQzkNvjer1Ys/ng4tjiy01kr77bzmfp0lubddjoxPl578vhUN53Km1n3ZLeXzaSNTlbvtTvpocbhdHRi4miajZxsz7WmJ+vNLB2sCp9+YqxWG09fGJnN6p1uu/XkCyPdxvG82cxb0+WGxeqiztPFG/HFvJf2svpMmp45tzB/dGVIu1YFWVQaXVHyyeLypf2PP/jhmx/869z82GbdHauNjY2Ojo2NjicRUasNXi94auKpp2u1wdoNYlWNO/qm5R60zUdwuHUD/fwfzcijFXNxItI1vxoxGZ1ox0xcfwMvX9+3lP+//OTf/7RRu+8sy/9Vlh/Yv/f66n1R5v8D1dKB9fJ/1fbO+9eJ+XZ9Xe//xbgUl+N8nIqFWIj5eOO2tJds374Gtjey6ciiFXl0ox15zES9LEn7JWlMxHiMRy1ejuMxFd1IYyryaEYW3TgZ3ehFVr6jGtGJLOrRi3Z0Io1D0YjDkcZoTMREHI00shiJk9GOuWjFdExGvdzLmThXjvvRG+La861Xfnn2zx++W75aS5VGNxrityLKSv/coNKqZC7/c9Mi4nfbdfiGT2VxKf8DAAAAn1lJ+dP34vx/Rzxczk3lzeyrm2w1WHx7685ECAAAAHxa5W/+9xeTHcXcw5EU5/+1lZV+uuPuBAcAAABsi6S8xi6JiOF4pJpbulyqdrdjAwAAALZH+fv/A8VkOOJKWeD8HwAAAD5jXvp5f+bGe+x/sHSP3YHZ+5Nf/yM6nR3JsfdOPJ5cqBf16hfuq7brT166tsfe1L4k+jcULPc1Pnj5gWJ5sJHtT5ZunvvJ/dX04/L7vsFrm6+M47ldVWmSJEUAV2fXDSBWBLC734trAZRL8XY8WtV59HQ1Pb20purt8FTezEYa7eYzo1Gv7x7oZSd6b7567ptRdv+7rZndSZw5tzA/8vXXFk6XsVwt9nL1Qr+/q+6juEEsi/0RiIdX39242NWO8kKMfrvDVbu15f0fuLi7mBm4iTa/HQc/V9Y5OFzVHV7Z/6GizdGR9Xo/XPVvdFXPB1e/saooTvaXbojisar0sUOPVZM1ohjbKIpiLMaWR9EfhJsbizWjiAcj4t1Hr5z49+/bSXZ0syiOfsooAO6WM+Vdf4osVKWjKgv9d7FS5P9OZ8fOWJF3qg22epRLylb6T/I5+/bad/Lfenb/z+IGR/RDVZ1D1eeJwX1r5JXaGkf018+9/of+Ef3YT3703tcO/PFnt5zXh5aq7Fqaeei3DwxEGcWufhSX+2s6O5LvX8skVVZ9vyh/f912u82xpPi4cN83Lrweey5euvzEuQunzs6fnX91bOzoeO1YrfZUkvRfvMXyE4PcA8AaDsaBKpGv+4yddZ7CU34AqHL3sY3Oqu+L5KFrf1JQ5MTXYiFOx5HyaoOIeGTtdoeX/RnCkThY1f1KP+gbzlqHlz3h5cgm55Y7I/p1xzatO7zs8TLXfekHt/HlAIA74uAmeXjd/L/s3P3IJufdK3P54aru4aUI1s/lEfHsnR0NAPj/kHU+ToZ730k6nXz25dGJidF673iWdtqNF9NOPjmdpXmrl3VisN6aztLZTrvXbrSbxcxL+WTWTbtzs7PtTi+danfS2XY3P1E++T3tP/q9m83UW7280Z1tZvVuljbarV690Usn824jnZ17vpl3j2edcuPubNbIp/JGvZe3W2m3PddpZCNp2s2yZRXzyazVy6fyYraVznbymXrnakQ052aydDLrNjr5bK9d7XCprbw11e7MlLv92+67PdoAcG+4eOny+VMLC/NvbGnmhxGxouSvW9lq/daH3FgYAO6C61n6o8/fuM4P3wEAAAAAAAAAAAAA4N5wc9f/bWFm1/bucGijOotXIlavShYXF2+iiV2xSZ2d/aHa5oG6IzNXt2U/A7HWON87M8n6q1559tnz623+/JW9x7fWxKb/UwYjon+p61sf7fzFO9Wq526pOwM3v9VfIuIW2lpMNqhzd49LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCW/wUAAP//mploOA==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x90000, 0xc0) getdents(r0, 0x0, 0x58) clock_adjtime(0x0, &(0x7f0000000680)={0x19b1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x10000, 0xe5, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4b}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="7472616e732266642c7266646e6f7d89cde304a86c2873562748687ea594eb4a5a528086a4ce59894200553e5f17f9f656401af2bc098262690361ba3138c1367790f594590aa85755cd14ef3f9b00000000000000009463f03e79e40e690531d148739a63dae9d0d63f64a9301c89ec92717bdf698fee953979670849b3ca3e", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r7 = creat(&(0x7f00000002c0)='./file1\x00', 0x80) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x40086602, &(0x7f0000000000)={0x20052fa}) socket$nl_rdma(0x10, 0x3, 0x14) msync(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') chown(&(0x7f0000000000)='./cgroup\x00', 0x0, 0xee01) lseek(r9, 0x200000002, 0x0) io_setup(0x5ff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) 0s ago: executing program 2 (id=2913): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000340), 0x12) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x9}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4048014) setsockopt$sock_attach_bpf(r1, 0x29, 0x1a, 0x0, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x74, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x11}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004880}, 0x8040) kernel console output (not intermixed with test programs): : bad geometry: first data block is 0 with a 1k block and cluster size [ 156.075397][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x1 [ 156.082917][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.090360][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.097867][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.105415][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.112832][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.120427][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.127876][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.130863][ T9830] loop7: detected capacity change from 0 to 1024 [ 156.135362][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.149289][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.159687][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.167122][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.174627][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.177552][ T9830] EXT4-fs: Ignoring removed nobh option [ 156.182121][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.187692][ T9830] EXT4-fs: Ignoring removed orlov option [ 156.195075][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.208276][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.215845][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.223498][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.230921][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.238385][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.245871][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.253372][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.260782][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.268216][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.275651][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.283086][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.290559][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.298065][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.305467][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.312910][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.320341][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.327813][ T2965] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 156.336056][ T2965] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 156.337769][ T9830] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.438913][ T9830] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.460210][ T9838] loop0: detected capacity change from 0 to 128 [ 156.471220][ T9840] loop4: detected capacity change from 0 to 256 [ 156.531165][ T9840] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 156.577555][ T9840] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 156.596042][ T9843] SELinux: syz.2.2424 (9843) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 156.772279][ T9859] loop6: detected capacity change from 0 to 512 [ 156.798620][ T9859] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #2: comm syz.6.2431: corrupted xattr block 255: invalid header [ 156.833458][ T9860] smc: net device bond0 applied user defined pnetid SYZ0 [ 156.856424][ T9859] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 156.870435][ T9860] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 156.897964][ T9859] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.929632][ T9867] smc: net device bond0 erased user defined pnetid SYZ0 [ 156.943886][ T9859] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #2: comm syz.6.2431: corrupted xattr block 255: invalid header [ 156.962566][ T9859] SELinux: (dev loop6, type ext4) getxattr errno 117 [ 156.973188][ T9874] loop4: detected capacity change from 0 to 256 [ 156.975111][ T9859] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.990634][ T9874] vfat: Unknown parameter 'ÜãâæC”\XlÇ ÊäÁ [ 157.149378][ T9879] dump_stack_lvl+0xf2/0x150 [ 157.154146][ T9879] dump_stack+0x15/0x1a [ 157.158362][ T9879] should_fail_ex+0x223/0x230 [ 157.163123][ T9879] should_failslab+0x8f/0xb0 [ 157.167800][ T9879] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 157.174165][ T9879] ? kstrdup_const+0x3e/0x50 [ 157.178956][ T9879] kstrdup+0x38/0x80 [ 157.183005][ T9879] kstrdup_const+0x3e/0x50 [ 157.187468][ T9879] alloc_vfsmnt+0xa9/0x300 [ 157.191923][ T9879] clone_mnt+0x45/0x7a0 [ 157.196113][ T9879] copy_tree+0xba/0x7f0 [ 157.200394][ T9879] ? alloc_mnt_ns+0x1f0/0x240 [ 157.205102][ T9879] copy_mnt_ns+0x11e/0x5f0 [ 157.209688][ T9879] ? kmem_cache_alloc_noprof+0x22c/0x320 [ 157.215421][ T9879] ? create_new_namespaces+0x3c/0x430 [ 157.220913][ T9879] create_new_namespaces+0x89/0x430 [ 157.226195][ T9879] ? security_capable+0x81/0x90 [ 157.231121][ T9879] unshare_nsproxy_namespaces+0xe6/0x120 [ 157.236849][ T9879] ksys_unshare+0x3c9/0x6e0 [ 157.241483][ T9879] __x64_sys_unshare+0x1f/0x30 [ 157.246336][ T9879] x64_sys_call+0x1a3e/0x2dc0 [ 157.251039][ T9879] do_syscall_64+0xc9/0x1c0 [ 157.255642][ T9879] ? clear_bhb_loop+0x55/0xb0 [ 157.260539][ T9879] ? clear_bhb_loop+0x55/0xb0 [ 157.265241][ T9879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.271290][ T9879] RIP: 0033:0x7f1aea0efed9 [ 157.275727][ T9879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.295380][ T9879] RSP: 002b:00007f1ae8767058 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 157.303974][ T9879] RAX: ffffffffffffffda RBX: 00007f1aea2b5fa0 RCX: 00007f1aea0efed9 [ 157.311972][ T9879] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000024020400 [ 157.320013][ T9879] RBP: 00007f1ae87670a0 R08: 0000000000000000 R09: 0000000000000000 [ 157.328052][ T9879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.336062][ T9879] R13: 0000000000000000 R14: 00007f1aea2b5fa0 R15: 00007ffd469fa8e8 [ 157.344092][ T9879] [ 157.371037][ T9886] loop7: detected capacity change from 0 to 512 [ 157.383051][ T9886] ext4: Unknown parameter 'subj_type' [ 157.558759][ T9898] loop0: detected capacity change from 0 to 512 [ 157.565531][ T9898] EXT4-fs: Ignoring removed nobh option [ 157.571248][ T9898] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.583852][ T9898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.605850][ T9897] loop6: detected capacity change from 0 to 2048 [ 157.615583][ T9898] netlink: 'syz.0.2444': attribute type 5 has an invalid length. [ 157.654632][ T9897] loop6: p1 < > p3 p4 < > [ 157.659906][ T9897] loop6: p3 start 4284289 is beyond EOD, truncated [ 157.668329][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.707381][ T9906] loop7: detected capacity change from 0 to 512 [ 157.724966][ T9905] loop0: detected capacity change from 0 to 512 [ 157.741868][ T9906] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #2: comm syz.7.2447: corrupted xattr block 255: invalid header [ 157.764133][ T9905] EXT4-fs: inline encryption not supported [ 157.773121][ T9909] veth0_virt_wifi: entered promiscuous mode [ 157.785705][ T9906] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 157.797618][ T9909] veth0_virt_wifi: left promiscuous mode [ 157.807558][ T9906] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.826546][ T9905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.854833][ T9905] ext4 filesystem being mounted at /549/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.871842][ T9914] loop2: detected capacity change from 0 to 764 [ 157.883944][ T9906] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #2: comm syz.7.2447: corrupted xattr block 255: invalid header [ 157.922929][ T9906] SELinux: (dev loop7, type ext4) getxattr errno 117 [ 157.933383][ T9905] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2446: bg 0: block 367: padding at end of block bitmap is not set [ 157.948604][ T9906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.974129][ T9914] Symlink component flag not implemented [ 157.990807][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.001643][ T9918] smc: net device bond0 applied user defined pnetid SYZ0 [ 158.021827][ T9918] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 158.072120][ T9918] smc: net device bond0 erased user defined pnetid SYZ0 [ 158.082606][ T9918] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 158.251149][ T9946] loop0: detected capacity change from 0 to 512 [ 158.275945][ T9949] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 158.276780][ T9946] EXT4-fs: inline encryption not supported [ 158.300907][ T9950] loop2: detected capacity change from 0 to 764 [ 158.316046][ T9950] Symlink component flag not implemented [ 158.371040][ T9946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.391629][ T9946] ext4 filesystem being mounted at /553/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.416855][ T9958] loop2: detected capacity change from 0 to 512 [ 158.442257][ T9946] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2464: bg 0: block 367: padding at end of block bitmap is not set [ 158.485692][ T9960] loop6: detected capacity change from 0 to 512 [ 158.493782][ T9958] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.2469: corrupted xattr block 255: invalid header [ 158.577236][ T9958] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 158.589370][ T9960] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.2470: casefold flag without casefold feature [ 158.618751][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.633249][ T9958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.648702][ T9960] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.2470: couldn't read orphan inode 15 (err -117) [ 158.650411][ T9958] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.2469: corrupted xattr block 255: invalid header [ 158.674326][ T9968] FAULT_INJECTION: forcing a failure. [ 158.674326][ T9968] name failslab, interval 1, probability 0, space 0, times 0 [ 158.687045][ T9968] CPU: 1 UID: 0 PID: 9968 Comm: syz.4.2474 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 158.697873][ T9968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 158.707969][ T9968] Call Trace: [ 158.711278][ T9968] [ 158.714345][ T9968] dump_stack_lvl+0xf2/0x150 [ 158.719067][ T9968] dump_stack+0x15/0x1a [ 158.723328][ T9968] should_fail_ex+0x223/0x230 [ 158.728042][ T9968] should_failslab+0x8f/0xb0 [ 158.732721][ T9968] kmem_cache_alloc_noprof+0x52/0x320 [ 158.738189][ T9968] ? alloc_empty_file+0xd0/0x200 [ 158.743152][ T9968] ? _raw_spin_unlock+0x26/0x50 [ 158.748130][ T9968] alloc_empty_file+0xd0/0x200 [ 158.752981][ T9968] alloc_file_pseudo+0xc3/0x140 [ 158.757901][ T9968] anon_inode_getfd+0xc2/0x170 [ 158.762698][ T9968] btf_new_fd+0x667/0x790 [ 158.763201][ T9960] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.767051][ T9968] bpf_btf_load+0x115/0x130 [ 158.784154][ T9968] __sys_bpf+0x686/0x7a0 [ 158.788529][ T9968] __x64_sys_bpf+0x43/0x50 [ 158.793048][ T9968] x64_sys_call+0x2914/0x2dc0 [ 158.797770][ T9968] do_syscall_64+0xc9/0x1c0 [ 158.802284][ T9968] ? clear_bhb_loop+0x55/0xb0 [ 158.806975][ T9968] ? clear_bhb_loop+0x55/0xb0 [ 158.811674][ T9968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.817734][ T9968] RIP: 0033:0x7f547266fed9 [ 158.822169][ T9968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.841817][ T9968] RSP: 002b:00007f5470ce7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 158.850270][ T9968] RAX: ffffffffffffffda RBX: 00007f5472835fa0 RCX: 00007f547266fed9 [ 158.858254][ T9968] RDX: 0000000000000020 RSI: 0000000020000600 RDI: 0000000000000012 [ 158.866273][ T9968] RBP: 00007f5470ce70a0 R08: 0000000000000000 R09: 0000000000000000 [ 158.874261][ T9968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 158.882241][ T9968] R13: 0000000000000000 R14: 00007f5472835fa0 R15: 00007ffdb51a05e8 [ 158.890302][ T9968] [ 158.904031][ T9958] SELinux: (dev loop2, type ext4) getxattr errno 117 [ 158.927299][ T9958] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.088853][ T9977] FAULT_INJECTION: forcing a failure. [ 159.088853][ T9977] name failslab, interval 1, probability 0, space 0, times 0 [ 159.101585][ T9977] CPU: 1 UID: 0 PID: 9977 Comm: syz.2.2477 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 159.112547][ T9977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 159.122634][ T9977] Call Trace: [ 159.125934][ T9977] [ 159.128890][ T9977] dump_stack_lvl+0xf2/0x150 [ 159.133522][ T9977] dump_stack+0x15/0x1a [ 159.137733][ T9977] should_fail_ex+0x223/0x230 [ 159.142504][ T9977] should_failslab+0x8f/0xb0 [ 159.147188][ T9977] kmem_cache_alloc_noprof+0x52/0x320 [ 159.152599][ T9977] ? __anon_vma_prepare+0x73/0x310 [ 159.157781][ T9977] __anon_vma_prepare+0x73/0x310 [ 159.162767][ T9977] ? handle_mm_fault+0x1c6e/0x2ac0 [ 159.168250][ T9977] handle_mm_fault+0x1c76/0x2ac0 [ 159.173233][ T9977] exc_page_fault+0x3b9/0x650 [ 159.177955][ T9977] asm_exc_page_fault+0x26/0x30 [ 159.182894][ T9977] RIP: 0033:0x7f6325821b63 [ 159.187401][ T9977] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 159.207034][ T9977] RSP: 002b:00007f6323fd64c0 EFLAGS: 00010206 [ 159.213136][ T9977] RAX: 0000000000000000 RBX: 00007f6323fd6560 RCX: 00007f631bbb7000 [ 159.221207][ T9977] RDX: 00007f6323fd6700 RSI: 0000000000000007 RDI: 00007f6323fd6600 [ 159.229236][ T9977] RBP: 000000000000013b R08: 0000000000000008 R09: 00000000000000c6 [ 159.237273][ T9977] R10: 00000000000000cc R11: 00007f6323fd6560 R12: 00007f6323fd6560 [ 159.245278][ T9977] R13: 00007f63259e8720 R14: 00000000000000eb R15: 00007f6323fd6600 [ 159.253285][ T9977] [ 159.257916][ T9977] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 159.330703][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 159.330720][ T29] audit: type=1400 audit(1733604779.554:188689): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 159.400397][ T9977] loop2: detected capacity change from 0 to 8192 [ 159.430472][ T9984] loop4: detected capacity change from 0 to 512 [ 159.460745][ T9984] hub 5-0:1.0: USB hub found [ 159.465580][ T9984] hub 5-0:1.0: 8 ports detected [ 159.782076][ T5584] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.815306][ T9989] veth0_to_team: entered promiscuous mode [ 159.821109][ T9989] veth0_to_team: entered allmulticast mode [ 159.874400][ T9993] bpf_get_probe_write_proto: 2 callbacks suppressed [ 159.874493][ T9993] syz.2.2482[9993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.904844][ T9992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2480'. [ 159.943431][ T9993] syz.2.2482[9993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.943628][ T9993] syz.2.2482[9993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.032106][ T9993] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 160.063770][ T9996] loop0: detected capacity change from 0 to 512 [ 160.140654][ T9996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.349636][ T9996] ext4 filesystem being mounted at /555/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.361487][ T29] audit: type=1326 audit(1733604780.508:188690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9991 comm="syz.2.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632595fed9 code=0x7ffc0000 [ 160.385234][ T29] audit: type=1326 audit(1733604780.508:188691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9991 comm="syz.2.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632595fed9 code=0x7ffc0000 [ 160.408892][ T29] audit: type=1326 audit(1733604780.508:188692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9991 comm="syz.2.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f632595fed9 code=0x7ffc0000 [ 160.432709][ T29] audit: type=1326 audit(1733604780.508:188693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9991 comm="syz.2.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632595fed9 code=0x7ffc0000 [ 160.456594][ T29] audit: type=1326 audit(1733604780.508:188694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9991 comm="syz.2.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632595fed9 code=0x7ffc0000 [ 160.480287][ T29] audit: type=1326 audit(1733604780.508:188695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9991 comm="syz.2.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f632595fed9 code=0x7ffc0000 [ 160.503814][ T29] audit: type=1326 audit(1733604780.508:188696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9991 comm="syz.2.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632595fed9 code=0x7ffc0000 [ 160.527498][ T29] audit: type=1326 audit(1733604780.508:188697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9991 comm="syz.2.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632595fed9 code=0x7ffc0000 [ 160.551347][ T29] audit: type=1326 audit(1733604780.517:188698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9991 comm="syz.2.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f632595fed9 code=0x7ffc0000 [ 160.858852][T10008] loop2: detected capacity change from 0 to 2048 [ 160.900489][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.935778][T10008] loop2: p3 < > p4 < > [ 160.940148][T10008] loop2: partition table partially beyond EOD, truncated [ 160.949126][T10008] loop2: p3 start 4284289 is beyond EOD, truncated [ 161.015531][T10008] syz.2.2486[10008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.015614][T10008] syz.2.2486[10008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.055569][ T3002] loop2: p3 < > p4 < > [ 161.071501][ T3002] loop2: partition table partially beyond EOD, truncated [ 161.106382][T10008] syz.2.2486[10008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.127831][ T3002] loop2: p3 start 4284289 is beyond EOD, truncated [ 161.219663][T10023] veth0_virt_wifi: entered promiscuous mode [ 161.237703][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2486'. [ 161.246872][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2486'. [ 161.258342][T10023] veth0_virt_wifi: left promiscuous mode [ 161.290561][ T9672] udevd[9672]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 161.298793][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2486'. [ 161.353669][ T9672] udevd[9672]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 161.429909][T10034] smc: net device bond0 applied user defined pnetid SYZ0 [ 161.442082][T10034] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 161.464721][T10034] smc: net device bond0 erased user defined pnetid SYZ0 [ 161.483433][T10034] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 161.502474][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2497'. [ 161.931624][T10064] veth0_virt_wifi: entered promiscuous mode [ 161.955182][T10064] veth0_virt_wifi: left promiscuous mode [ 162.099632][T10075] SELinux: Context system_u:object_r:syslogd_var_run_t:s0 is not valid (left unmapped). [ 162.133796][T10074] loop0: detected capacity change from 0 to 2048 [ 162.176501][T10074] loop0: p3 < > p4 < > [ 162.180702][T10074] loop0: partition table partially beyond EOD, truncated [ 162.190975][T10082] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2511'. [ 162.211219][T10074] loop0: p3 start 4284289 is beyond EOD, truncated [ 162.236946][ T3002] loop0: p3 < > p4 < > [ 162.241297][ T3002] loop0: partition table partially beyond EOD, truncated [ 162.261290][ T3002] loop0: p3 start 4284289 is beyond EOD, truncated [ 162.272153][T10074] syz.0.2512[10074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.272265][T10074] syz.0.2512[10074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.278579][T10086] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2515'. [ 162.294020][T10074] syz.0.2512[10074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.364431][T10088] loop4: detected capacity change from 0 to 2048 [ 162.385454][T10074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2512'. [ 162.394526][T10074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2512'. [ 162.407838][T10074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2512'. [ 162.478557][T10088] loop4: p3 < > p4 < > [ 162.482758][T10088] loop4: partition table partially beyond EOD, truncated [ 162.490961][T10088] loop4: p3 start 4284289 is beyond EOD, truncated [ 162.531807][ T3002] loop4: p3 < > p4 < > [ 162.536129][ T3002] loop4: partition table partially beyond EOD, truncated [ 162.539730][T10088] syz.4.2517[10088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.569655][ T3002] loop4: p3 start 4284289 is beyond EOD, truncated [ 162.631385][T10102] veth0_virt_wifi: entered promiscuous mode [ 162.639004][T10102] veth0_virt_wifi: left promiscuous mode [ 162.650676][T10103] FAULT_INJECTION: forcing a failure. [ 162.650676][T10103] name failslab, interval 1, probability 0, space 0, times 0 [ 162.663395][T10103] CPU: 0 UID: 0 PID: 10103 Comm: syz.7.2520 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 162.674211][T10103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 162.684332][T10103] Call Trace: [ 162.687621][T10103] [ 162.690635][T10103] dump_stack_lvl+0xf2/0x150 [ 162.695333][T10103] dump_stack+0x15/0x1a [ 162.699546][T10103] should_fail_ex+0x223/0x230 [ 162.704242][T10103] ? disk_seqf_start+0x43/0xd0 [ 162.709019][T10103] should_failslab+0x8f/0xb0 [ 162.713694][T10103] __kmalloc_cache_noprof+0x4e/0x320 [ 162.718996][T10103] disk_seqf_start+0x43/0xd0 [ 162.723658][T10103] traverse+0xf3/0x3c0 [ 162.727809][T10103] seq_read_iter+0x854/0x930 [ 162.732418][T10103] proc_reg_read_iter+0x118/0x190 [ 162.737513][T10103] do_iter_readv_writev+0x394/0x450 [ 162.742799][T10103] vfs_readv+0x1df/0x660 [ 162.747058][T10103] ? vfs_write+0x596/0x920 [ 162.751514][T10103] __x64_sys_preadv+0xf4/0x1c0 [ 162.756413][T10103] x64_sys_call+0x2680/0x2dc0 [ 162.761186][T10103] do_syscall_64+0xc9/0x1c0 [ 162.765699][T10103] ? clear_bhb_loop+0x55/0xb0 [ 162.770388][T10103] ? clear_bhb_loop+0x55/0xb0 [ 162.775119][T10103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.781193][T10103] RIP: 0033:0x7f82f079fed9 [ 162.785680][T10103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.805311][T10103] RSP: 002b:00007f82eee17058 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 162.813821][T10103] RAX: ffffffffffffffda RBX: 00007f82f0965fa0 RCX: 00007f82f079fed9 [ 162.821825][T10103] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003 [ 162.829808][T10103] RBP: 00007f82eee170a0 R08: 0000000000000000 R09: 0000000000000000 [ 162.837874][T10103] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001 [ 162.845954][T10103] R13: 0000000000000000 R14: 00007f82f0965fa0 R15: 00007ffcee6c5a18 [ 162.853947][T10103] [ 162.932905][ T9672] udevd[9672]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 162.952416][ T9672] udevd[9672]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 163.149411][T10117] loop7: detected capacity change from 0 to 512 [ 163.185692][T10117] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #2: comm syz.7.2526: corrupted xattr block 255: invalid header [ 163.230357][T10117] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 163.238950][T10117] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.251662][T10117] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #2: comm syz.7.2526: corrupted xattr block 255: invalid header [ 163.280451][T10117] SELinux: (dev loop7, type ext4) getxattr errno 117 [ 163.366969][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x1 [ 163.374449][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.381987][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.389452][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.396986][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.404403][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.411922][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.419425][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.426932][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.434399][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.443398][T10117] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.458349][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.465839][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.473286][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.480788][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.488253][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.495699][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.503132][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.510593][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.518032][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.525481][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.532941][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.540389][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.547874][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.555506][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.562933][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.570487][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.577991][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.585398][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.592829][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.600389][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.607941][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.615438][ T2965] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 163.665635][ T2965] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 163.935462][T10081] syz.6.2515 (10081) used greatest stack depth: 7240 bytes left [ 164.135227][T10156] loop4: detected capacity change from 0 to 128 [ 164.153919][T10156] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 164.292934][T10168] loop0: detected capacity change from 0 to 512 [ 164.303726][T10168] EXT4-fs: inline encryption not supported [ 164.330126][T10174] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 164.356472][T10174] SELinux: failed to load policy [ 164.368000][T10168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.388587][T10168] ext4 filesystem being mounted at /572/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.436897][T10168] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2546: bg 0: block 367: padding at end of block bitmap is not set [ 164.483069][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.523892][T10185] IPv6: NLM_F_CREATE should be specified when creating new route [ 164.567376][T10194] FAULT_INJECTION: forcing a failure. [ 164.567376][T10194] name failslab, interval 1, probability 0, space 0, times 0 [ 164.580066][T10194] CPU: 1 UID: 0 PID: 10194 Comm: syz.2.2558 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 164.590949][T10194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 164.601060][T10194] Call Trace: [ 164.604352][T10194] [ 164.607358][T10194] dump_stack_lvl+0xf2/0x150 [ 164.611981][T10194] dump_stack+0x15/0x1a [ 164.616203][T10194] should_fail_ex+0x223/0x230 [ 164.620898][T10194] should_failslab+0x8f/0xb0 [ 164.625516][T10194] kmem_cache_alloc_node_noprof+0x59/0x320 [ 164.631348][T10194] ? __alloc_skb+0x10b/0x310 [ 164.636105][T10194] __alloc_skb+0x10b/0x310 [ 164.640611][T10194] netlink_alloc_large_skb+0xad/0xe0 [ 164.645920][T10194] netlink_sendmsg+0x3b4/0x6e0 [ 164.650718][T10194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.656107][T10194] __sock_sendmsg+0x140/0x180 [ 164.660925][T10194] ____sys_sendmsg+0x312/0x410 [ 164.665764][T10194] __sys_sendmsg+0x19d/0x230 [ 164.670556][T10194] __x64_sys_sendmsg+0x46/0x50 [ 164.675333][T10194] x64_sys_call+0x2734/0x2dc0 [ 164.680059][T10194] do_syscall_64+0xc9/0x1c0 [ 164.684706][T10194] ? clear_bhb_loop+0x55/0xb0 [ 164.689391][T10194] ? clear_bhb_loop+0x55/0xb0 [ 164.694149][T10194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.700144][T10194] RIP: 0033:0x7f632595fed9 [ 164.704645][T10194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.724307][T10194] RSP: 002b:00007f6323fd7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.733085][T10194] RAX: ffffffffffffffda RBX: 00007f6325b25fa0 RCX: 00007f632595fed9 [ 164.741069][T10194] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 164.749051][T10194] RBP: 00007f6323fd70a0 R08: 0000000000000000 R09: 0000000000000000 [ 164.757194][T10194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.765269][T10194] R13: 0000000000000000 R14: 00007f6325b25fa0 R15: 00007ffccea11cb8 [ 164.773372][T10194] [ 164.842123][T10201] loop6: detected capacity change from 0 to 764 [ 164.895285][ T29] kauditd_printk_skb: 396 callbacks suppressed [ 164.895300][ T29] audit: type=1326 audit(1733604784.764:189095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10205 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632595fed9 code=0x7ffc0000 [ 164.939726][T10206] loop2: detected capacity change from 0 to 1024 [ 164.947829][ T29] audit: type=1326 audit(1733604784.792:189096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10205 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f632595fed9 code=0x7ffc0000 [ 164.971671][ T29] audit: type=1326 audit(1733604784.792:189097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10205 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632595fed9 code=0x7ffc0000 [ 164.976465][T10201] rock: directory entry would overflow storage [ 164.995414][ T29] audit: type=1326 audit(1733604784.792:189098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10205 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632595fed9 code=0x7ffc0000 [ 165.001525][T10201] rock: sig=0x4654, size=5, remaining=4 [ 165.030806][ T29] audit: type=1326 audit(1733604784.802:189099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10205 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f632595fed9 code=0x7ffc0000 [ 165.054815][ T29] audit: type=1326 audit(1733604784.802:189100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10205 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632595fed9 code=0x7ffc0000 [ 165.078679][ T29] audit: type=1326 audit(1733604784.802:189101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10205 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632595fed9 code=0x7ffc0000 [ 165.102432][ T29] audit: type=1326 audit(1733604784.802:189102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10205 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f632595fed9 code=0x7ffc0000 [ 165.126229][ T29] audit: type=1326 audit(1733604784.802:189103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10205 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f632595ff13 code=0x7ffc0000 [ 165.149751][ T29] audit: type=1326 audit(1733604784.802:189104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10205 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f632595e98f code=0x7ffc0000 [ 165.223334][T10206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.238270][T10204] smc: net device bond0 applied user defined pnetid SYZ0 [ 165.248509][T10204] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 165.289502][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.300081][T10204] smc: net device bond0 erased user defined pnetid SYZ0 [ 165.307055][T10204] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 165.396616][T10222] netlink: 'syz.2.2565': attribute type 3 has an invalid length. [ 165.453383][T10216] smc: net device bond0 applied user defined pnetid SYZ0 [ 165.471943][T10216] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 165.499073][T10216] smc: net device bond0 erased user defined pnetid SYZ0 [ 165.515995][T10216] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 165.593698][T10233] loop6: detected capacity change from 0 to 1024 [ 165.618068][T10231] __nla_validate_parse: 7 callbacks suppressed [ 165.618088][T10231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2570'. [ 165.644023][T10233] EXT4-fs: Ignoring removed oldalloc option [ 165.675932][T10233] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 165.713113][T10237] netlink: 332 bytes leftover after parsing attributes in process `syz.7.2573'. [ 165.772980][T10233] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.798454][T10243] FAULT_INJECTION: forcing a failure. [ 165.798454][T10243] name failslab, interval 1, probability 0, space 0, times 0 [ 165.811368][T10243] CPU: 0 UID: 0 PID: 10243 Comm: syz.7.2576 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 165.822173][T10243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 165.832338][T10243] Call Trace: [ 165.835817][T10243] [ 165.838774][T10243] dump_stack_lvl+0xf2/0x150 [ 165.843421][T10243] dump_stack+0x15/0x1a [ 165.847711][T10243] should_fail_ex+0x223/0x230 [ 165.852432][T10243] should_failslab+0x8f/0xb0 [ 165.857098][T10243] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 165.863466][T10243] ? sidtab_sid2str_get+0xb8/0x140 [ 165.868620][T10243] kmemdup_noprof+0x2a/0x60 [ 165.873222][T10243] sidtab_sid2str_get+0xb8/0x140 [ 165.878201][T10243] security_sid_to_context_core+0x1eb/0x2f0 [ 165.884204][T10243] security_sid_to_context+0x27/0x30 [ 165.889539][T10243] selinux_lsmprop_to_secctx+0x2c/0x40 [ 165.895046][T10243] security_lsmprop_to_secctx+0x4a/0x90 [ 165.900664][T10243] audit_log_task_context+0x93/0x1c0 [ 165.906060][T10243] audit_log_task+0xf9/0x1c0 [ 165.910747][T10243] audit_seccomp+0x68/0x130 [ 165.915278][T10243] __seccomp_filter+0x6fa/0x1180 [ 165.920355][T10243] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 165.926098][T10243] ? vfs_write+0x596/0x920 [ 165.930630][T10243] ? putname+0xcf/0xf0 [ 165.934775][T10243] __secure_computing+0x9f/0x1c0 [ 165.939806][T10243] syscall_trace_enter+0xd1/0x1f0 [ 165.944880][T10243] ? fpregs_assert_state_consistent+0x83/0xa0 [ 165.950996][T10243] do_syscall_64+0xaa/0x1c0 [ 165.955525][T10243] ? clear_bhb_loop+0x55/0xb0 [ 165.960254][T10243] ? clear_bhb_loop+0x55/0xb0 [ 165.964992][T10243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.970983][T10243] RIP: 0033:0x7f82f079e8ec [ 165.975440][T10243] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 165.995108][T10243] RSP: 002b:00007f82eee17050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 166.003660][T10243] RAX: ffffffffffffffda RBX: 00007f82f0965fa0 RCX: 00007f82f079e8ec [ 166.011741][T10243] RDX: 000000000000000f RSI: 00007f82eee170b0 RDI: 0000000000000006 [ 166.019814][T10243] RBP: 00007f82eee170a0 R08: 0000000000000000 R09: 0000000000000000 [ 166.027814][T10243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 166.035817][T10243] R13: 0000000000000000 R14: 00007f82f0965fa0 R15: 00007ffcee6c5a18 [ 166.043891][T10243] [ 166.153727][ T5584] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.335294][T10268] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2584'. [ 166.408869][T10272] loop0: detected capacity change from 0 to 2048 [ 166.473313][T10272] loop0: p3 < > p4 < > [ 166.477529][T10272] loop0: partition table partially beyond EOD, truncated [ 166.490721][T10272] loop0: p3 start 4284289 is beyond EOD, truncated [ 166.515272][T10272] bpf_get_probe_write_proto: 2 callbacks suppressed [ 166.515289][T10272] syz.0.2587[10272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.529133][T10272] syz.0.2587[10272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.552633][T10272] syz.0.2587[10272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.561252][T10277] FAULT_INJECTION: forcing a failure. [ 166.561252][T10277] name failslab, interval 1, probability 0, space 0, times 0 [ 166.588154][T10277] CPU: 1 UID: 0 PID: 10277 Comm: syz.6.2589 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 166.599004][T10277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 166.609175][T10277] Call Trace: [ 166.612487][T10277] [ 166.615438][T10277] dump_stack_lvl+0xf2/0x150 [ 166.620089][T10277] dump_stack+0x15/0x1a [ 166.624307][T10277] should_fail_ex+0x223/0x230 [ 166.629117][T10277] should_failslab+0x8f/0xb0 [ 166.633747][T10277] kmem_cache_alloc_node_noprof+0x59/0x320 [ 166.639645][T10277] ? __alloc_skb+0x10b/0x310 [ 166.644266][T10277] ? __rtnl_unlock+0x99/0xb0 [ 166.648951][T10277] __alloc_skb+0x10b/0x310 [ 166.653425][T10277] netlink_ack+0xef/0x4f0 [ 166.657773][T10277] ? __dev_queue_xmit+0x186/0x2090 [ 166.662989][T10277] netlink_rcv_skb+0x19c/0x230 [ 166.667773][T10277] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 166.673370][T10277] rtnetlink_rcv+0x1c/0x30 [ 166.677801][T10277] netlink_unicast+0x599/0x670 [ 166.682597][T10277] netlink_sendmsg+0x5cc/0x6e0 [ 166.687442][T10277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.693361][T10277] __sock_sendmsg+0x140/0x180 [ 166.698126][T10277] ____sys_sendmsg+0x312/0x410 [ 166.702956][T10277] __sys_sendmmsg+0x227/0x4b0 [ 166.707674][T10277] __x64_sys_sendmmsg+0x57/0x70 [ 166.712578][T10277] x64_sys_call+0x29aa/0x2dc0 [ 166.717345][T10277] do_syscall_64+0xc9/0x1c0 [ 166.721914][T10277] ? clear_bhb_loop+0x55/0xb0 [ 166.726627][T10277] ? clear_bhb_loop+0x55/0xb0 [ 166.731376][T10277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.737432][T10277] RIP: 0033:0x7f1aea0efed9 [ 166.741866][T10277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.761490][T10277] RSP: 002b:00007f1ae8767058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 166.769972][T10277] RAX: ffffffffffffffda RBX: 00007f1aea2b5fa0 RCX: 00007f1aea0efed9 [ 166.778027][T10277] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 166.786007][T10277] RBP: 00007f1ae87670a0 R08: 0000000000000000 R09: 0000000000000000 [ 166.794023][T10277] R10: 000000000000008a R11: 0000000000000246 R12: 0000000000000001 [ 166.802050][T10277] R13: 0000000000000000 R14: 00007f1aea2b5fa0 R15: 00007ffd469fa8e8 [ 166.810042][T10277] [ 166.879258][T10275] smc: net device bond0 applied user defined pnetid SYZ0 [ 166.886345][T10275] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 166.912865][T10275] smc: net device bond0 erased user defined pnetid SYZ0 [ 166.919852][T10275] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 166.950792][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2587'. [ 166.959788][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2587'. [ 166.968798][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2587'. [ 167.414020][T10302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2599'. [ 167.547153][T10314] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2604'. [ 167.585254][T10317] loop0: detected capacity change from 0 to 164 [ 167.608220][T10317] ISOFS: unable to read i-node block [ 167.613621][T10317] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 167.659771][T10321] loop4: detected capacity change from 0 to 2048 [ 167.738972][T10321] loop4: p3 < > p4 < > [ 167.743190][T10321] loop4: partition table partially beyond EOD, truncated [ 167.793219][T10321] loop4: p3 start 4284289 is beyond EOD, truncated [ 167.818460][T10321] syz.4.2606[10321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.818615][T10321] syz.4.2606[10321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.856858][T10321] syz.4.2606[10321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.936786][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2606'. [ 167.957130][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2606'. [ 167.988466][T10329] smc: net device bond0 applied user defined pnetid SYZ0 [ 168.028741][T10329] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 168.055547][T10332] smc: net device bond0 erased user defined pnetid SYZ0 [ 168.062683][T10332] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 168.229529][T10349] loop0: detected capacity change from 0 to 512 [ 168.236153][T10349] EXT4-fs: inline encryption not supported [ 168.303135][T10349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.322613][T10349] ext4 filesystem being mounted at /590/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.339685][T10346] smc: net device bond0 applied user defined pnetid SYZ0 [ 168.379932][T10346] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 168.395219][T10349] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2618: bg 0: block 367: padding at end of block bitmap is not set [ 168.435049][T10346] smc: net device bond0 erased user defined pnetid SYZ0 [ 168.461249][T10346] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 168.502103][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.804415][T10390] loop2: detected capacity change from 0 to 2048 [ 168.818066][T10391] loop0: detected capacity change from 0 to 128 [ 168.872689][T10390] loop2: p3 < > p4 < > [ 168.876900][T10390] loop2: partition table partially beyond EOD, truncated [ 168.896874][T10390] loop2: p3 start 4284289 is beyond EOD, truncated [ 168.916367][T10390] syz.2.2633[10390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.916440][T10390] syz.2.2633[10390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.928818][T10390] syz.2.2633[10390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.943193][T10395] FAULT_INJECTION: forcing a failure. [ 168.943193][T10395] name failslab, interval 1, probability 0, space 0, times 0 [ 168.967303][T10395] CPU: 0 UID: 0 PID: 10395 Comm: syz.7.2635 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 168.978095][T10395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 168.988266][T10395] Call Trace: [ 168.991588][T10395] [ 168.994586][T10395] dump_stack_lvl+0xf2/0x150 [ 168.999407][T10395] dump_stack+0x15/0x1a [ 169.003605][T10395] should_fail_ex+0x223/0x230 [ 169.008374][T10395] should_failslab+0x8f/0xb0 [ 169.013081][T10395] kmem_cache_alloc_noprof+0x52/0x320 [ 169.018477][T10395] ? sctp_get_port_local+0x410/0xa90 [ 169.023795][T10395] sctp_get_port_local+0x410/0xa90 [ 169.028985][T10395] sctp_do_bind+0x3a1/0x4c0 [ 169.033523][T10395] sctp_connect_new_asoc+0x15b/0x3b0 [ 169.038834][T10395] __sctp_connect+0x41d/0x7a0 [ 169.043540][T10395] sctp_getsockopt_connectx3+0x26e/0x350 [ 169.049202][T10395] sctp_getsockopt+0x805/0xab0 [ 169.053989][T10395] sock_common_getsockopt+0x5b/0x70 [ 169.059263][T10395] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 169.065246][T10395] do_sock_getsockopt+0x1ca/0x260 [ 169.070288][T10395] __x64_sys_getsockopt+0x18c/0x200 [ 169.075504][T10395] x64_sys_call+0x1288/0x2dc0 [ 169.080217][T10395] do_syscall_64+0xc9/0x1c0 [ 169.084810][T10395] ? clear_bhb_loop+0x55/0xb0 [ 169.089509][T10395] ? clear_bhb_loop+0x55/0xb0 [ 169.094207][T10395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.100124][T10395] RIP: 0033:0x7f82f079fed9 [ 169.104599][T10395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.124278][T10395] RSP: 002b:00007f82eee17058 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 169.132716][T10395] RAX: ffffffffffffffda RBX: 00007f82f0965fa0 RCX: 00007f82f079fed9 [ 169.140762][T10395] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 169.148742][T10395] RBP: 00007f82eee170a0 R08: 00000000200001c0 R09: 0000000000000000 [ 169.156721][T10395] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.164699][T10395] R13: 0000000000000000 R14: 00007f82f0965fa0 R15: 00007ffcee6c5a18 [ 169.172686][T10395] [ 169.203964][T10381] vcan0 speed is unknown, defaulting to 1000 [ 169.399558][T10404] loop7: detected capacity change from 0 to 2048 [ 169.521571][T10405] smc: net device bond0 applied user defined pnetid SYZ0 [ 169.551279][T10405] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 169.578083][T10413] loop7: detected capacity change from 0 to 512 [ 169.599722][T10413] EXT4-fs: inline encryption not supported [ 169.607489][T10401] smc: net device bond0 erased user defined pnetid SYZ0 [ 169.617213][T10401] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 169.654866][T10413] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.687421][T10413] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.701010][T10413] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2641: bg 0: block 367: padding at end of block bitmap is not set [ 169.736048][T10421] 9pnet_fd: Insufficient options for proto=fd [ 169.795583][T10421] vcan0 speed is unknown, defaulting to 1000 [ 169.798228][ T5730] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.801771][T10381] lo speed is unknown, defaulting to 1000 [ 169.926110][T10427] loop4: detected capacity change from 0 to 1024 [ 169.950974][T10427] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 169.980902][T10431] netlink: 'syz.6.2650': attribute type 21 has an invalid length. [ 169.988761][T10431] netlink: 'syz.6.2650': attribute type 20 has an invalid length. [ 169.996674][T10431] IPv6: NLM_F_CREATE should be specified when creating new route [ 170.008319][T10427] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 170.024223][T10427] EXT4-fs (loop4): orphan cleanup on readonly fs [ 170.031103][T10427] EXT4-fs error (device loop4): ext4_map_blocks:705: inode #3: block 3: comm syz.4.2649: lblock 3 mapped to illegal pblock 3 (length 1) [ 170.049556][T10427] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.2649: Failed to acquire dquot type 0 [ 170.072399][T10427] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 3: comm syz.4.2649: lblock 3 mapped to illegal pblock 3 (length 1) [ 170.087368][T10427] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.2649: Failed to acquire dquot type 0 [ 170.098987][T10427] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.2649: Freeing blocks not in datazone - block = 0, count = 4096 [ 170.112935][T10427] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 3: comm syz.4.2649: lblock 3 mapped to illegal pblock 3 (length 1) [ 170.133993][T10427] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.2649: Failed to acquire dquot type 0 [ 170.147429][T10427] EXT4-fs (loop4): 1 orphan inode deleted [ 170.161890][T10427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 170.165884][T10438] FAULT_INJECTION: forcing a failure. [ 170.165884][T10438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.187645][T10438] CPU: 1 UID: 0 PID: 10438 Comm: syz.6.2652 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 170.198455][T10438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 170.208559][T10438] Call Trace: [ 170.211868][T10438] [ 170.214815][T10438] dump_stack_lvl+0xf2/0x150 [ 170.219471][T10438] dump_stack+0x15/0x1a [ 170.223726][T10438] should_fail_ex+0x223/0x230 [ 170.228496][T10438] should_fail+0xb/0x10 [ 170.232696][T10438] should_fail_usercopy+0x1a/0x20 [ 170.237765][T10438] _copy_from_user+0x1e/0xb0 [ 170.242454][T10438] restore_altstack+0x48/0xd0 [ 170.247164][T10438] __do_sys_rt_sigreturn+0xd7/0x160 [ 170.252410][T10438] x64_sys_call+0x2982/0x2dc0 [ 170.257134][T10438] do_syscall_64+0xc9/0x1c0 [ 170.261677][T10438] ? clear_bhb_loop+0x55/0xb0 [ 170.266506][T10438] ? clear_bhb_loop+0x55/0xb0 [ 170.271213][T10438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.277170][T10438] RIP: 0033:0x7f1aea08c0e9 [ 170.281605][T10438] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 170.301253][T10438] RSP: 002b:00007f1ae8766ac0 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 170.309746][T10438] RAX: ffffffffffffffda RBX: 00007f1aea2b5fa0 RCX: 00007f1aea08c0e9 [ 170.317829][T10438] RDX: 00007f1ae8766ac0 RSI: 00007f1ae8766bf0 RDI: 0000000000000021 [ 170.325818][T10438] RBP: 00007f1ae87670a0 R08: 0000000000000000 R09: 0000000000000000 [ 170.333953][T10438] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 170.341951][T10438] R13: 0000000000000000 R14: 00007f1aea2b5fa0 R15: 00007ffd469fa8e8 [ 170.349980][T10438] [ 170.372553][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.434727][T10421] lo speed is unknown, defaulting to 1000 [ 170.871054][ T29] kauditd_printk_skb: 372 callbacks suppressed [ 170.871072][ T29] audit: type=1326 audit(1733605019.351:189471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10461 comm="syz.6.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aea0efed9 code=0x7ffc0000 [ 170.909323][T10471] FAULT_INJECTION: forcing a failure. [ 170.909323][T10471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.922473][T10471] CPU: 1 UID: 0 PID: 10471 Comm: syz.7.2662 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 170.933348][T10471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 170.943423][T10471] Call Trace: [ 170.946718][T10471] [ 170.949669][T10471] dump_stack_lvl+0xf2/0x150 [ 170.954388][T10471] dump_stack+0x15/0x1a [ 170.958660][T10471] should_fail_ex+0x223/0x230 [ 170.963419][T10471] should_fail+0xb/0x10 [ 170.967635][T10471] should_fail_usercopy+0x1a/0x20 [ 170.972686][T10471] _copy_to_user+0x20/0xa0 [ 170.977225][T10471] simple_read_from_buffer+0xa0/0x110 [ 170.982719][T10471] proc_fail_nth_read+0xf9/0x140 [ 170.987737][T10471] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 170.993358][T10471] vfs_read+0x1a2/0x700 [ 170.997699][T10471] ? __rcu_read_unlock+0x4e/0x70 [ 171.002667][T10471] ? __fget_files+0x17c/0x1c0 [ 171.007452][T10471] ksys_read+0xe8/0x1b0 [ 171.011648][T10471] __x64_sys_read+0x42/0x50 [ 171.016187][T10471] x64_sys_call+0x2874/0x2dc0 [ 171.020947][T10471] do_syscall_64+0xc9/0x1c0 [ 171.025466][T10471] ? clear_bhb_loop+0x55/0xb0 [ 171.030177][T10471] ? clear_bhb_loop+0x55/0xb0 [ 171.034870][T10471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.040788][T10471] RIP: 0033:0x7f82f079e8ec [ 171.045243][T10471] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 171.064978][T10471] RSP: 002b:00007f82eee17050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 171.073494][T10471] RAX: ffffffffffffffda RBX: 00007f82f0965fa0 RCX: 00007f82f079e8ec [ 171.081557][T10471] RDX: 000000000000000f RSI: 00007f82eee170b0 RDI: 0000000000000007 [ 171.089552][T10471] RBP: 00007f82eee170a0 R08: 0000000000000000 R09: 0000000000000000 [ 171.097681][T10471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.105673][T10471] R13: 0000000000000000 R14: 00007f82f0965fa0 R15: 00007ffcee6c5a18 [ 171.113676][T10471] [ 171.198715][ T29] audit: type=1326 audit(1733605019.389:189472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10461 comm="syz.6.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aea0efed9 code=0x7ffc0000 [ 171.222556][ T29] audit: type=1326 audit(1733605019.389:189473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10461 comm="syz.6.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1aea0efed9 code=0x7ffc0000 [ 171.246342][ T29] audit: type=1326 audit(1733605019.389:189474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10461 comm="syz.6.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aea0efed9 code=0x7ffc0000 [ 171.270096][ T29] audit: type=1326 audit(1733605019.389:189475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10461 comm="syz.6.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aea0efed9 code=0x7ffc0000 [ 171.294037][ T29] audit: type=1326 audit(1733605019.389:189476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10461 comm="syz.6.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1aea0efed9 code=0x7ffc0000 [ 171.317791][ T29] audit: type=1326 audit(1733605019.389:189477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10461 comm="syz.6.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aea0efed9 code=0x7ffc0000 [ 171.341608][ T29] audit: type=1326 audit(1733605019.389:189478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10461 comm="syz.6.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aea0efed9 code=0x7ffc0000 [ 171.365299][ T29] audit: type=1326 audit(1733605019.604:189479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10461 comm="syz.6.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1aea0efed9 code=0x7ffc0000 [ 171.388993][ T29] audit: type=1326 audit(1733605019.604:189480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10461 comm="syz.6.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aea0efed9 code=0x7ffc0000 [ 171.713337][T10459] smc: net device bond0 applied user defined pnetid SYZ0 [ 171.755776][T10459] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 171.845376][T10467] smc: net device bond0 erased user defined pnetid SYZ0 [ 171.886263][T10484] __nla_validate_parse: 14 callbacks suppressed [ 171.886281][T10484] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2664'. [ 171.929394][T10488] loop7: detected capacity change from 0 to 512 [ 171.936297][T10467] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 171.944261][T10485] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2664'. [ 171.957502][T10488] EXT4-fs: inline encryption not supported [ 172.069137][T10488] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.122690][T10488] ext4 filesystem being mounted at /325/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.151396][T10484] 9pnet_fd: Insufficient options for proto=fd [ 172.256264][T10488] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.2665: corrupted inode contents [ 172.269790][T10488] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #2: comm syz.7.2665: mark_inode_dirty error [ 172.294563][T10488] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.2665: corrupted inode contents [ 172.355927][T10494] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.2665: corrupted inode contents [ 172.381296][T10494] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #2: comm syz.7.2665: mark_inode_dirty error [ 172.405999][T10494] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.2665: corrupted inode contents [ 172.445557][T10494] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.2665: mark_inode_dirty error [ 172.461971][T10494] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.2665: corrupted inode contents [ 172.477803][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2671'. [ 172.497702][T10494] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #2: comm syz.7.2665: mark_inode_dirty error [ 172.546651][ T5730] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.776145][T10519] loop7: detected capacity change from 0 to 1024 [ 172.836897][T10519] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.916585][ T5730] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.023757][T10536] FAULT_INJECTION: forcing a failure. [ 173.023757][T10536] name failslab, interval 1, probability 0, space 0, times 0 [ 173.036557][T10536] CPU: 1 UID: 0 PID: 10536 Comm: syz.7.2683 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 173.047365][T10536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 173.057627][T10536] Call Trace: [ 173.060933][T10536] [ 173.063884][T10536] dump_stack_lvl+0xf2/0x150 [ 173.068523][T10536] dump_stack+0x15/0x1a [ 173.072738][T10536] should_fail_ex+0x223/0x230 [ 173.077484][T10536] should_failslab+0x8f/0xb0 [ 173.082115][T10536] kmem_cache_alloc_noprof+0x52/0x320 [ 173.087548][T10536] ? skb_clone+0x154/0x1f0 [ 173.092130][T10536] skb_clone+0x154/0x1f0 [ 173.096414][T10536] __netlink_deliver_tap+0x2bd/0x4f0 [ 173.101806][T10536] netlink_unicast+0x64a/0x670 [ 173.106600][T10536] netlink_sendmsg+0x5cc/0x6e0 [ 173.111422][T10536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.116754][T10536] __sock_sendmsg+0x140/0x180 [ 173.121521][T10536] ____sys_sendmsg+0x312/0x410 [ 173.126320][T10536] __sys_sendmsg+0x19d/0x230 [ 173.130949][T10536] __x64_sys_sendmsg+0x46/0x50 [ 173.135741][T10536] x64_sys_call+0x2734/0x2dc0 [ 173.140550][T10536] do_syscall_64+0xc9/0x1c0 [ 173.145092][T10536] ? clear_bhb_loop+0x55/0xb0 [ 173.149865][T10536] ? clear_bhb_loop+0x55/0xb0 [ 173.154600][T10536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.160536][T10536] RIP: 0033:0x7f82f079fed9 [ 173.164977][T10536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.184612][T10536] RSP: 002b:00007f82eee17058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.193082][T10536] RAX: ffffffffffffffda RBX: 00007f82f0965fa0 RCX: 00007f82f079fed9 [ 173.201188][T10536] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 173.209232][T10536] RBP: 00007f82eee170a0 R08: 0000000000000000 R09: 0000000000000000 [ 173.217210][T10536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.225285][T10536] R13: 0000000000000000 R14: 00007f82f0965fa0 R15: 00007ffcee6c5a18 [ 173.233415][T10536] [ 173.353025][T10539] loop4: detected capacity change from 0 to 2048 [ 173.400709][T10539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.488972][T10539] FAULT_INJECTION: forcing a failure. [ 173.488972][T10539] name failslab, interval 1, probability 0, space 0, times 0 [ 173.501692][T10539] CPU: 1 UID: 0 PID: 10539 Comm: syz.4.2684 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 173.512587][T10539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 173.522657][T10539] Call Trace: [ 173.525947][T10539] [ 173.528893][T10539] dump_stack_lvl+0xf2/0x150 [ 173.533523][T10539] dump_stack+0x15/0x1a [ 173.537715][T10539] should_fail_ex+0x223/0x230 [ 173.542418][T10539] should_failslab+0x8f/0xb0 [ 173.547106][T10539] kmem_cache_alloc_noprof+0x52/0x320 [ 173.552522][T10539] ? getname_flags+0x81/0x3b0 [ 173.557239][T10539] getname_flags+0x81/0x3b0 [ 173.561798][T10539] __x64_sys_renameat2+0x6e/0xa0 [ 173.566841][T10539] x64_sys_call+0x1bf1/0x2dc0 [ 173.571554][T10539] do_syscall_64+0xc9/0x1c0 [ 173.576189][T10539] ? clear_bhb_loop+0x55/0xb0 [ 173.580908][T10539] ? clear_bhb_loop+0x55/0xb0 [ 173.585615][T10539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.591560][T10539] RIP: 0033:0x7f547266fed9 [ 173.596090][T10539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.615729][T10539] RSP: 002b:00007f5470ce7058 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 173.624202][T10539] RAX: ffffffffffffffda RBX: 00007f5472835fa0 RCX: 00007f547266fed9 [ 173.632210][T10539] RDX: 0000000000000005 RSI: 0000000020000000 RDI: 0000000000000005 [ 173.640296][T10539] RBP: 00007f5470ce70a0 R08: 0000000000000002 R09: 0000000000000000 [ 173.648293][T10539] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 173.656304][T10539] R13: 0000000000000000 R14: 00007f5472835fa0 R15: 00007ffdb51a05e8 [ 173.664312][T10539] [ 173.801280][T10551] syz.6.2687 (10551): attempted to duplicate a private mapping with mremap. This is not supported. [ 173.934570][T10556] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2689'. [ 173.983437][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.092347][T10565] loop0: detected capacity change from 0 to 764 [ 174.123280][T10565] Symlink component flag not implemented [ 174.159876][T10569] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2693'. [ 174.199335][T10573] FAULT_INJECTION: forcing a failure. [ 174.199335][T10573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.212603][T10573] CPU: 0 UID: 0 PID: 10573 Comm: syz.0.2695 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 174.223487][T10573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 174.233563][T10573] Call Trace: [ 174.236920][T10573] [ 174.239872][T10573] dump_stack_lvl+0xf2/0x150 [ 174.244528][T10573] dump_stack+0x15/0x1a [ 174.248760][T10573] should_fail_ex+0x223/0x230 [ 174.253472][T10573] should_fail+0xb/0x10 [ 174.257733][T10573] should_fail_usercopy+0x1a/0x20 [ 174.262791][T10573] _copy_from_user+0x1e/0xb0 [ 174.267512][T10573] move_addr_to_kernel+0x82/0x120 [ 174.272597][T10573] __sys_sendto+0x12e/0x230 [ 174.277194][T10573] __x64_sys_sendto+0x78/0x90 [ 174.281905][T10573] x64_sys_call+0x29fa/0x2dc0 [ 174.286682][T10573] do_syscall_64+0xc9/0x1c0 [ 174.291206][T10573] ? clear_bhb_loop+0x55/0xb0 [ 174.295935][T10573] ? clear_bhb_loop+0x55/0xb0 [ 174.300639][T10573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.306628][T10573] RIP: 0033:0x7f72e4961d6c [ 174.311131][T10573] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 174.330961][T10573] RSP: 002b:00007f72e2fd5ee0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 174.339476][T10573] RAX: ffffffffffffffda RBX: 00007f72e2fd5fe0 RCX: 00007f72e4961d6c [ 174.347466][T10573] RDX: 0000000000000020 RSI: 00007f72e2fd6030 RDI: 0000000000000004 [ 174.355466][T10573] RBP: 0000000000000000 R08: 00007f72e2fd5f34 R09: 000000000000000c [ 174.363466][T10573] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 174.371452][T10573] R13: 00007f72e2fd5f88 R14: 00007f72e2fd6030 R15: 0000000000000000 [ 174.379460][T10573] [ 174.418966][T10578] loop4: detected capacity change from 0 to 512 [ 174.445912][T10578] EXT4-fs: inline encryption not supported [ 174.478913][T10578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.513405][T10578] ext4 filesystem being mounted at /529/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.557670][T10578] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2697: bg 0: block 367: padding at end of block bitmap is not set [ 174.728972][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.993568][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2701'. [ 175.002633][T10592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.010182][T10592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.058571][T10592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.067039][T10592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.174648][T10588] vcan0 speed is unknown, defaulting to 1000 [ 175.211966][T10603] loop6: detected capacity change from 0 to 2048 [ 175.259021][T10588] lo speed is unknown, defaulting to 1000 [ 175.273938][T10603] loop6: p3 < > p4 < > [ 175.278131][T10603] loop6: partition table partially beyond EOD, truncated [ 175.294908][T10603] loop6: p3 start 4284289 is beyond EOD, truncated [ 175.316541][T10603] syz.6.2703[10603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.316691][T10603] syz.6.2703[10603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.330575][T10603] syz.6.2703[10603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.342140][ T3002] loop6: p3 < > p4 < > [ 175.357769][ T3002] loop6: partition table partially beyond EOD, truncated [ 175.380788][ T3002] loop6: p3 start 4284289 is beyond EOD, truncated [ 175.401883][ T9672] udevd[9672]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 175.413569][T10603] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2703'. [ 175.422537][T10603] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2703'. [ 175.431934][T10603] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2703'. [ 175.442571][ T9672] udevd[9672]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 175.476623][T10588] chnl_net:caif_netlink_parms(): no params data found [ 175.611602][T10612] veth0_virt_wifi: entered promiscuous mode [ 175.627186][T10612] veth0_virt_wifi: left promiscuous mode [ 175.643536][T10588] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.650739][T10588] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.660964][T10553] syz.7.2689 (10553) used greatest stack depth: 5888 bytes left [ 175.671049][T10588] bridge_slave_0: entered allmulticast mode [ 175.680047][T10588] bridge_slave_0: entered promiscuous mode [ 175.709697][T10588] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.716907][T10588] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.770274][T10588] bridge_slave_1: entered allmulticast mode [ 175.786479][T10588] bridge_slave_1: entered promiscuous mode [ 175.826625][T10628] loop4: detected capacity change from 0 to 512 [ 175.833215][T10628] EXT4-fs: inline encryption not supported [ 175.861964][T10628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.874563][T10628] ext4 filesystem being mounted at /532/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.886994][T10628] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2711: bg 0: block 367: padding at end of block bitmap is not set [ 175.933368][T10636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2713'. [ 175.955377][T10588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.974449][T10588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.004021][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.065189][T10588] team0: Port device team_slave_0 added [ 176.091115][T10630] smc: net device bond0 applied user defined pnetid SYZ0 [ 176.101876][T10588] team0: Port device team_slave_1 added [ 176.110503][T10630] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 176.137812][T10588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.144856][T10588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.170843][T10588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.184896][T10637] smc: net device bond0 erased user defined pnetid SYZ0 [ 176.192177][T10637] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 176.251163][T10588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.258199][T10588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.284370][T10588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.339333][T10588] hsr_slave_0: entered promiscuous mode [ 176.349816][T10588] hsr_slave_1: entered promiscuous mode [ 176.359503][T10588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.368851][T10588] Cannot create hsr debugfs directory [ 176.408212][T10647] veth0_virt_wifi: entered promiscuous mode [ 176.416873][T10647] veth0_virt_wifi: left promiscuous mode [ 176.428255][ T29] kauditd_printk_skb: 259 callbacks suppressed [ 176.428273][ T29] audit: type=1326 audit(1733605024.552:189740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10648 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547266fed9 code=0x7ffc0000 [ 176.439477][T10649] loop4: detected capacity change from 0 to 2048 [ 176.470717][ T29] audit: type=1326 audit(1733605024.552:189741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10648 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547266fed9 code=0x7ffc0000 [ 176.494429][ T29] audit: type=1326 audit(1733605024.552:189742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10648 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f547266fed9 code=0x7ffc0000 [ 176.518235][ T29] audit: type=1326 audit(1733605024.552:189743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10648 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f547266ff13 code=0x7ffc0000 [ 176.541927][ T29] audit: type=1326 audit(1733605024.552:189744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10648 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f547266e98f code=0x7ffc0000 [ 176.565482][ T29] audit: type=1326 audit(1733605024.561:189745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10648 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f547266ff67 code=0x7ffc0000 [ 176.589099][ T29] audit: type=1326 audit(1733605024.561:189746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10648 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f547266e840 code=0x7ffc0000 [ 176.613146][ T29] audit: type=1326 audit(1733605024.561:189747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10648 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f547266fadb code=0x7ffc0000 [ 176.637291][ T29] audit: type=1326 audit(1733605024.599:189748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10648 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f547266eb3a code=0x7ffc0000 [ 176.661012][ T29] audit: type=1326 audit(1733605024.599:189749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10648 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f547266fadb code=0x7ffc0000 [ 176.661888][T10649] loop4: p3 < > p4 < > [ 176.688828][T10649] loop4: partition table partially beyond EOD, truncated [ 176.710420][T10652] syz.4.2717[10652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.710593][T10652] syz.4.2717[10652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.723531][T10649] loop4: p3 start 4284289 is beyond EOD, truncated [ 176.767272][T10655] loop7: detected capacity change from 0 to 764 [ 176.770666][T10652] syz.4.2717[10652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.776548][T10588] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.800927][T10655] Symlink component flag not implemented [ 176.867536][T10588] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.934237][T10588] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.997801][T10588] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.011426][T10654] loop6: detected capacity change from 0 to 512 [ 177.030268][T10654] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 177.111267][T10588] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 177.135368][T10588] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 177.166573][T10588] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 177.187327][T10588] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 177.277571][T10672] loop7: detected capacity change from 0 to 2048 [ 177.314975][T10588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.322919][T10672] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.375733][T10588] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.415009][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.422369][ T411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.447345][ T5730] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.458183][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.465282][ T411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.509311][T10683] veth1_macvtap: left promiscuous mode [ 177.542366][T10681] loop4: detected capacity change from 0 to 512 [ 177.562988][T10588] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.573416][T10588] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.628787][T10681] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 177.642045][T10588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.711461][T10692] vcan0 speed is unknown, defaulting to 1000 [ 177.731896][T10588] veth0_vlan: entered promiscuous mode [ 177.739714][T10588] veth1_vlan: entered promiscuous mode [ 177.753726][T10588] veth0_macvtap: entered promiscuous mode [ 177.761255][T10588] veth1_macvtap: entered promiscuous mode [ 177.772867][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.783351][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.793283][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.803734][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.813584][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.824023][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.833907][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.844362][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.854391][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.864867][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.875797][T10588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.888082][T10692] lo speed is unknown, defaulting to 1000 [ 177.890770][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.904432][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.914281][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.924747][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.934600][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.945062][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.947354][T10708] loop4: detected capacity change from 0 to 1024 [ 177.954960][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.954982][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.955000][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.977962][T10708] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 177.981673][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.013324][T10588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.021812][T10588] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.030647][T10588] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.039485][T10588] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.048265][T10588] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.071740][T10708] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 178.080850][T10708] EXT4-fs (loop4): orphan cleanup on readonly fs [ 178.088546][T10708] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 178.109393][T10708] EXT4-fs (loop4): Remounting filesystem read-only [ 178.116176][T10708] EXT4-fs (loop4): 1 orphan inode deleted [ 178.128806][T10708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 178.140964][T10708] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 178.149003][T10708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.245370][T10718] FAULT_INJECTION: forcing a failure. [ 178.245370][T10718] name failslab, interval 1, probability 0, space 0, times 0 [ 178.252694][T10722] syz.0.2736[10722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.258087][T10718] CPU: 0 UID: 0 PID: 10718 Comm: syz.7.2737 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 178.270023][T10722] syz.0.2736[10722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.280254][T10718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 178.280276][T10718] Call Trace: [ 178.280284][T10718] [ 178.280295][T10718] dump_stack_lvl+0xf2/0x150 [ 178.292595][T10722] syz.0.2736[10722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.301754][T10718] dump_stack+0x15/0x1a [ 178.328183][T10718] should_fail_ex+0x223/0x230 [ 178.332884][T10718] should_failslab+0x8f/0xb0 [ 178.337574][T10718] kmem_cache_alloc_noprof+0x52/0x320 [ 178.343025][T10718] ? skb_clone+0x154/0x1f0 [ 178.347491][T10718] skb_clone+0x154/0x1f0 [ 178.351745][T10718] __netlink_deliver_tap+0x2bd/0x4f0 [ 178.357047][T10718] netlink_unicast+0x64a/0x670 [ 178.361825][T10718] netlink_sendmsg+0x5cc/0x6e0 [ 178.366606][T10718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.371953][T10718] __sock_sendmsg+0x140/0x180 [ 178.376776][T10718] ____sys_sendmsg+0x312/0x410 [ 178.381556][T10718] __sys_sendmsg+0x19d/0x230 [ 178.386211][T10718] __x64_sys_sendmsg+0x46/0x50 [ 178.391001][T10718] x64_sys_call+0x2734/0x2dc0 [ 178.395809][T10718] do_syscall_64+0xc9/0x1c0 [ 178.400348][T10718] ? clear_bhb_loop+0x55/0xb0 [ 178.405042][T10718] ? clear_bhb_loop+0x55/0xb0 [ 178.409809][T10718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.415743][T10718] RIP: 0033:0x7f82f079fed9 [ 178.420182][T10718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.439802][T10718] RSP: 002b:00007f82eee17058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.448228][T10718] RAX: ffffffffffffffda RBX: 00007f82f0965fa0 RCX: 00007f82f079fed9 [ 178.456206][T10718] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 178.464193][T10718] RBP: 00007f82eee170a0 R08: 0000000000000000 R09: 0000000000000000 [ 178.472171][T10718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.480159][T10718] R13: 0000000000000000 R14: 00007f82f0965fa0 R15: 00007ffcee6c5a18 [ 178.488151][T10718] [ 178.528989][T10721] __nla_validate_parse: 3 callbacks suppressed [ 178.529009][T10721] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2738'. [ 178.544974][T10722] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 178.633588][T10730] netlink: 'syz.6.2742': attribute type 7 has an invalid length. [ 178.657057][T10737] loop4: detected capacity change from 0 to 512 [ 178.691439][T10742] loop0: detected capacity change from 0 to 128 [ 178.710634][T10737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.758032][T10737] ext4 filesystem being mounted at /539/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.776948][T10737] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.2741: corrupted xattr block 32: invalid header [ 178.841130][T10737] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 178.873128][T10737] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.2741: corrupted xattr block 32: invalid header [ 178.898542][T10761] loop2: detected capacity change from 0 to 512 [ 178.913633][T10761] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 178.932760][T10737] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 178.939561][T10763] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2753'. [ 178.948981][T10737] EXT4-fs error (device loop4): ext4_xattr_block_list:768: inode #15: comm syz.4.2741: corrupted xattr block 32: invalid header [ 178.968224][T10761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.988721][T10761] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.2751: corrupted inode contents [ 179.000919][T10728] veth1: entered promiscuous mode [ 179.014090][T10759] smc: net device bond0 applied user defined pnetid SYZ0 [ 179.021162][T10759] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 179.032071][T10759] smc: net device bond0 erased user defined pnetid SYZ0 [ 179.039108][T10759] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 179.040264][T10761] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #2: comm syz.2.2751: mark_inode_dirty error [ 179.064860][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.072894][T10771] FAULT_INJECTION: forcing a failure. [ 179.072894][T10771] name failslab, interval 1, probability 0, space 0, times 0 [ 179.086592][T10771] CPU: 1 UID: 0 PID: 10771 Comm: syz.2.2751 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 179.097466][T10771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 179.107632][T10771] Call Trace: [ 179.110938][T10771] [ 179.113884][T10771] dump_stack_lvl+0xf2/0x150 [ 179.118571][T10771] dump_stack+0x15/0x1a [ 179.122823][T10771] should_fail_ex+0x223/0x230 [ 179.127540][T10771] should_failslab+0x8f/0xb0 [ 179.132206][T10771] kmem_cache_alloc_noprof+0x52/0x320 [ 179.137604][T10771] ? getname_flags+0x81/0x3b0 [ 179.142297][T10771] getname_flags+0x81/0x3b0 [ 179.146816][T10771] getname+0x17/0x20 [ 179.150725][T10771] do_sys_openat2+0x67/0x120 [ 179.155361][T10771] __x64_sys_open+0xe6/0x110 [ 179.160026][T10771] x64_sys_call+0x13e1/0x2dc0 [ 179.164728][T10771] do_syscall_64+0xc9/0x1c0 [ 179.169394][T10771] ? clear_bhb_loop+0x55/0xb0 [ 179.174082][T10771] ? clear_bhb_loop+0x55/0xb0 [ 179.178814][T10771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.184768][T10771] RIP: 0033:0x7f632595fed9 [ 179.189192][T10771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.209081][T10771] RSP: 002b:00007f6323fb6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 179.217516][T10771] RAX: ffffffffffffffda RBX: 00007f6325b26080 RCX: 00007f632595fed9 [ 179.225531][T10771] RDX: 0000000000000008 RSI: 0000000000418601 RDI: 0000000020000040 [ 179.233512][T10771] RBP: 00007f6323fb60a0 R08: 0000000000000000 R09: 0000000000000000 [ 179.241713][T10771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.249783][T10771] R13: 0000000000000001 R14: 00007f6325b26080 R15: 00007ffccea11cb8 [ 179.257830][T10771] [ 179.268418][T10761] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.2751: corrupted inode contents [ 179.350776][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.491046][T10788] loop0: detected capacity change from 0 to 512 [ 179.499325][T10788] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 179.517032][T10788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.531963][T10788] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.2762: corrupted inode contents [ 179.594352][T10797] loop2: detected capacity change from 0 to 1024 [ 179.607404][T10788] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #2: comm syz.0.2762: mark_inode_dirty error [ 179.625946][T10788] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.2762: corrupted inode contents [ 179.650463][T10797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.675235][T10785] smc: net device bond0 applied user defined pnetid SYZ0 [ 179.689304][T10785] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 179.730166][T10785] smc: net device bond0 erased user defined pnetid SYZ0 [ 179.737511][T10785] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 179.746118][T10811] FAULT_INJECTION: forcing a failure. [ 179.746118][T10811] name failslab, interval 1, probability 0, space 0, times 0 [ 179.758746][T10811] CPU: 1 UID: 0 PID: 10811 Comm: syz.7.2770 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 179.769540][T10811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 179.779627][T10811] Call Trace: [ 179.782999][T10811] [ 179.785935][T10811] dump_stack_lvl+0xf2/0x150 [ 179.790554][T10811] dump_stack+0x15/0x1a [ 179.794799][T10811] should_fail_ex+0x223/0x230 [ 179.799513][T10811] should_failslab+0x8f/0xb0 [ 179.804146][T10811] kmem_cache_alloc_noprof+0x52/0x320 [ 179.809542][T10811] ? __send_signal_locked+0x155/0x780 [ 179.814936][T10811] __send_signal_locked+0x155/0x780 [ 179.820174][T10811] send_signal_locked+0x28f/0x3a0 [ 179.825214][T10811] do_send_sig_info+0x9f/0xf0 [ 179.829937][T10811] group_send_sig_info+0x6d/0x90 [ 179.834928][T10811] bpf_send_signal_common+0x20b/0x2e0 [ 179.840417][T10811] bpf_send_signal+0x1d/0x30 [ 179.845022][T10811] bpf_prog_9fbc3d1d47c9b36c+0x23/0x2a [ 179.850486][T10811] bpf_trace_run1+0xe7/0x1b0 [ 179.855168][T10811] __bpf_trace_mm_vmscan_write_folio+0x1d/0x30 [ 179.861772][T10811] shrink_folio_list+0x234e/0x2710 [ 179.866931][T10811] reclaim_folio_list+0x81/0x2f0 [ 179.871934][T10811] ? __mod_memcg_lruvec_state+0x141/0x290 [ 179.877686][T10811] reclaim_pages+0x215/0x270 [ 179.882358][T10811] madvise_cold_or_pageout_pte_range+0xeb7/0xf30 [ 179.888756][T10811] walk_pgd_range+0x7e4/0x1110 [ 179.893570][T10811] __walk_page_range+0xed/0x350 [ 179.898461][T10811] walk_page_range_mm+0x395/0x4e0 [ 179.903533][T10811] walk_page_range+0x56/0x70 [ 179.908259][T10811] do_madvise+0x1da8/0x2a70 [ 179.912842][T10811] ? __fget_files+0x17c/0x1c0 [ 179.917621][T10811] __x64_sys_madvise+0x61/0x70 [ 179.922477][T10811] x64_sys_call+0x23ab/0x2dc0 [ 179.927255][T10811] do_syscall_64+0xc9/0x1c0 [ 179.931799][T10811] ? clear_bhb_loop+0x55/0xb0 [ 179.936567][T10811] ? clear_bhb_loop+0x55/0xb0 [ 179.941265][T10811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.947309][T10811] RIP: 0033:0x7f82f079fed9 [ 179.951736][T10811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.971357][T10811] RSP: 002b:00007f82eee17058 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 179.979847][T10811] RAX: ffffffffffffffda RBX: 00007f82f0965fa0 RCX: 00007f82f079fed9 [ 179.987851][T10811] RDX: 0000000000000015 RSI: 0000000000600002 RDI: 0000000020000000 [ 179.995857][T10811] RBP: 00007f82eee170a0 R08: 0000000000000000 R09: 0000000000000000 [ 180.003835][T10811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.011833][T10811] R13: 0000000000000000 R14: 00007f82f0965fa0 R15: 00007ffcee6c5a18 [ 180.019824][T10811] [ 180.164285][T10826] pim6reg1: entered promiscuous mode [ 180.169890][T10826] pim6reg1: entered allmulticast mode [ 180.191188][T10826] FAULT_INJECTION: forcing a failure. [ 180.191188][T10826] name failslab, interval 1, probability 0, space 0, times 0 [ 180.203871][T10826] CPU: 0 UID: 0 PID: 10826 Comm: syz.7.2775 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 180.214828][T10826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 180.224919][T10826] Call Trace: [ 180.228226][T10826] [ 180.231283][T10826] dump_stack_lvl+0xf2/0x150 [ 180.235914][T10826] dump_stack+0x15/0x1a [ 180.240151][T10826] should_fail_ex+0x223/0x230 [ 180.244941][T10826] ? ____ip_mc_inc_group+0x1c4/0x550 [ 180.250267][T10826] should_failslab+0x8f/0xb0 [ 180.254897][T10826] __kmalloc_cache_noprof+0x4e/0x320 [ 180.260288][T10826] ____ip_mc_inc_group+0x1c4/0x550 [ 180.265478][T10826] ip_mc_up+0xbb/0x150 [ 180.269578][T10826] inetdev_event+0x904/0xac0 [ 180.274215][T10826] ? cfg802154_netdev_notifier_call+0xa8/0x560 [ 180.280421][T10826] ? __pfx_arp_netdev_event+0x10/0x10 [ 180.285859][T10826] ? __pfx_inetdev_event+0x10/0x10 [ 180.291065][T10826] raw_notifier_call_chain+0x6f/0x1d0 [ 180.296480][T10826] call_netdevice_notifiers_info+0xae/0x100 [ 180.302481][T10826] __dev_notify_flags+0xff/0x1a0 [ 180.307500][T10826] dev_change_flags+0xab/0xd0 [ 180.312297][T10826] dev_ifsioc+0x67f/0xa10 [ 180.316685][T10826] dev_ioctl+0x7fa/0xab0 [ 180.320992][T10826] sock_do_ioctl+0x11c/0x260 [ 180.325631][T10826] sock_ioctl+0x40f/0x600 [ 180.329993][T10826] ? __pfx_sock_ioctl+0x10/0x10 [ 180.334948][T10826] __se_sys_ioctl+0xc9/0x140 [ 180.339676][T10826] __x64_sys_ioctl+0x43/0x50 [ 180.344314][T10826] x64_sys_call+0x1690/0x2dc0 [ 180.349094][T10826] do_syscall_64+0xc9/0x1c0 [ 180.353682][T10826] ? clear_bhb_loop+0x55/0xb0 [ 180.358416][T10826] ? clear_bhb_loop+0x55/0xb0 [ 180.363177][T10826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.369199][T10826] RIP: 0033:0x7f82f079fed9 [ 180.373641][T10826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.393281][T10826] RSP: 002b:00007f82eee17058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.401735][T10826] RAX: ffffffffffffffda RBX: 00007f82f0965fa0 RCX: 00007f82f079fed9 [ 180.409737][T10826] RDX: 0000000020000100 RSI: 0000000000008914 RDI: 0000000000000009 [ 180.417749][T10826] RBP: 00007f82eee170a0 R08: 0000000000000000 R09: 0000000000000000 [ 180.425781][T10826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.433780][T10826] R13: 0000000000000000 R14: 00007f82f0965fa0 R15: 00007ffcee6c5a18 [ 180.441792][T10826] [ 180.540608][T10853] FAULT_INJECTION: forcing a failure. [ 180.540608][T10853] name failslab, interval 1, probability 0, space 0, times 0 [ 180.546324][T10849] loop6: detected capacity change from 0 to 764 [ 180.553389][T10853] CPU: 0 UID: 0 PID: 10853 Comm: syz.0.2784 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 180.553424][T10853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 180.553440][T10853] Call Trace: [ 180.580578][T10853] [ 180.580593][T10853] dump_stack_lvl+0xf2/0x150 [ 180.580639][T10853] dump_stack+0x15/0x1a [ 180.580672][T10853] should_fail_ex+0x223/0x230 [ 180.600359][T10853] should_failslab+0x8f/0xb0 [ 180.605006][T10853] __kmalloc_noprof+0xab/0x3f0 [ 180.609831][T10853] ? trace_probe_init+0x50/0x280 [ 180.614800][T10853] trace_probe_init+0x50/0x280 [ 180.619628][T10853] alloc_trace_uprobe+0x9b/0x1f0 [ 180.624631][T10853] create_local_trace_uprobe+0xb7/0x2d0 [ 180.630214][T10853] perf_uprobe_init+0xc2/0x140 [ 180.635040][T10853] perf_uprobe_event_init+0xe2/0x140 [ 180.640849][T10853] perf_try_init_event+0xcb/0x4f0 [ 180.645907][T10853] ? perf_event_alloc+0xac6/0x12e0 [ 180.651168][T10853] perf_event_alloc+0xad1/0x12e0 [ 180.656238][T10853] __se_sys_perf_event_open+0x5ac/0x2230 [ 180.661901][T10853] ? proc_fail_nth_write+0x12a/0x150 [ 180.667213][T10853] ? vfs_write+0x4d1/0x920 [ 180.671724][T10853] __x64_sys_perf_event_open+0x67/0x80 [ 180.677286][T10853] x64_sys_call+0x1deb/0x2dc0 [ 180.681978][T10853] do_syscall_64+0xc9/0x1c0 [ 180.686498][T10853] ? clear_bhb_loop+0x55/0xb0 [ 180.691235][T10853] ? clear_bhb_loop+0x55/0xb0 [ 180.695970][T10853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.701986][T10853] RIP: 0033:0x7fa83bf8fed9 [ 180.706415][T10853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.726077][T10853] RSP: 002b:00007fa83a607058 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 180.734502][T10853] RAX: ffffffffffffffda RBX: 00007fa83c155fa0 RCX: 00007fa83bf8fed9 [ 180.742516][T10853] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000400 [ 180.750641][T10853] RBP: 00007fa83a6070a0 R08: 0000000000000000 R09: 0000000000000000 [ 180.758673][T10853] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 180.766681][T10853] R13: 0000000000000000 R14: 00007fa83c155fa0 R15: 00007ffd45f2a9f8 [ 180.774667][T10853] [ 180.778021][T10853] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 180.880148][T10829] smc: net device bond0 applied user defined pnetid SYZ0 [ 180.887997][T10849] rock: directory entry would overflow storage [ 180.892386][T10829] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 180.894171][T10849] rock: sig=0x4654, size=5, remaining=4 [ 180.949981][T10829] smc: net device bond0 erased user defined pnetid SYZ0 [ 180.980452][T10829] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 181.032756][T10868] syzkaller1: entered promiscuous mode [ 181.038426][T10868] syzkaller1: entered allmulticast mode [ 181.151324][T10875] loop4: detected capacity change from 0 to 764 [ 181.199773][T10875] rock: directory entry would overflow storage [ 181.206028][T10875] rock: sig=0x4654, size=5, remaining=4 [ 181.235455][T10881] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2797'. [ 181.534712][T10909] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2805'. [ 181.660221][T10931] loop2: detected capacity change from 0 to 764 [ 181.696561][T10931] rock: directory entry would overflow storage [ 181.702821][T10931] rock: sig=0x4654, size=5, remaining=4 [ 181.736301][T10934] syz.7.2814[10934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.736371][T10934] syz.7.2814[10934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.760255][T10909] vlan2: entered promiscuous mode [ 181.796501][T10934] syz.7.2814[10934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.827675][T10934] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 181.852762][T10926] smc: net device bond0 applied user defined pnetid SYZ0 [ 181.874847][T10926] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 181.891748][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 181.891764][ T29] audit: type=1326 audit(1733605716.666:190049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10930 comm="syz.7.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f079fed9 code=0x7ffc0000 [ 181.922149][ T29] audit: type=1326 audit(1733605716.666:190050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10930 comm="syz.7.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f079fed9 code=0x7ffc0000 [ 181.956816][T10905] smc: net device bond0 erased user defined pnetid SYZ0 [ 181.991301][T10905] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 182.003405][ T29] audit: type=1326 audit(1733605716.722:190051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10930 comm="syz.7.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f82f073c0e9 code=0x7ffc0000 [ 182.027069][ T29] audit: type=1326 audit(1733605716.722:190052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10930 comm="syz.7.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f82f079fed9 code=0x7ffc0000 [ 182.123931][ T29] audit: type=1326 audit(1733605716.872:190053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10930 comm="syz.7.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f079fed9 code=0x7ffc0000 [ 182.147881][ T29] audit: type=1326 audit(1733605716.872:190054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10930 comm="syz.7.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f079fed9 code=0x7ffc0000 [ 182.243483][T10963] loop2: detected capacity change from 0 to 512 [ 182.263121][T10963] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 182.273189][T10963] EXT4-fs (loop2): group descriptors corrupted! [ 182.761479][T11033] loop4: detected capacity change from 0 to 764 [ 182.776098][T11033] Symlink component flag not implemented [ 182.783778][ T29] audit: type=1400 audit(1733605717.489:190055): avc: denied { create } for pid=11034 comm="syz.0.2822" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=can_socket permissive=1 [ 182.804134][ T29] audit: type=1400 audit(1733605717.489:190056): avc: denied { create } for pid=11034 comm="syz.0.2822" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 182.825501][ T29] audit: type=1400 audit(1733605717.489:190057): avc: denied { write } for pid=11034 comm="syz.0.2822" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 182.846806][ T29] audit: type=1400 audit(1733605717.489:190058): avc: denied { read } for pid=11034 comm="syz.0.2822" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 182.976327][T11053] syz.4.2831[11053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.976466][T11053] syz.4.2831[11053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.015629][T11059] veth0_virt_wifi: entered promiscuous mode [ 183.045073][T11053] syz.4.2831[11053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.066514][T11064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2827'. [ 183.078112][T11053] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 183.139184][T11059] veth0_virt_wifi: left promiscuous mode [ 183.444593][T11082] loop7: detected capacity change from 0 to 2048 [ 183.493138][T11082] loop7: p1 < > p4 [ 183.501226][T11082] loop7: p4 size 8388608 extends beyond EOD, truncated [ 183.609797][ T9672] udevd[9672]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 183.614501][ T9648] udevd[9648]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 183.997733][T11104] loop2: detected capacity change from 0 to 2048 [ 184.013950][T11102] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2846'. [ 184.129149][T11104] FAULT_INJECTION: forcing a failure. [ 184.129149][T11104] name failslab, interval 1, probability 0, space 0, times 0 [ 184.141965][T11104] CPU: 0 UID: 0 PID: 11104 Comm: syz.2.2847 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 184.152747][T11104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 184.162875][T11104] Call Trace: [ 184.166163][T11104] [ 184.169148][T11104] dump_stack_lvl+0xf2/0x150 [ 184.173833][T11104] dump_stack+0x15/0x1a [ 184.178025][T11104] should_fail_ex+0x223/0x230 [ 184.182725][T11104] should_failslab+0x8f/0xb0 [ 184.187406][T11104] kmem_cache_alloc_noprof+0x52/0x320 [ 184.192862][T11104] ? getname_flags+0x81/0x3b0 [ 184.197578][T11104] getname_flags+0x81/0x3b0 [ 184.202292][T11104] getname+0x17/0x20 [ 184.206266][T11104] do_sys_openat2+0x67/0x120 [ 184.210914][T11104] __x64_sys_openat+0xf3/0x120 [ 184.215717][T11104] x64_sys_call+0x2b30/0x2dc0 [ 184.220422][T11104] do_syscall_64+0xc9/0x1c0 [ 184.224933][T11104] ? clear_bhb_loop+0x55/0xb0 [ 184.229654][T11104] ? clear_bhb_loop+0x55/0xb0 [ 184.234339][T11104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.240292][T11104] RIP: 0033:0x7f632595fed9 [ 184.244748][T11104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.264449][T11104] RSP: 002b:00007f6323fd7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 184.272954][T11104] RAX: ffffffffffffffda RBX: 00007f6325b25fa0 RCX: 00007f632595fed9 [ 184.281005][T11104] RDX: 0000000000040c00 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 184.288996][T11104] RBP: 00007f6323fd70a0 R08: 0000000000000000 R09: 0000000000000000 [ 184.297016][T11104] R10: 0000000000000160 R11: 0000000000000246 R12: 0000000000000001 [ 184.305005][T11104] R13: 0000000000000000 R14: 00007f6325b25fa0 R15: 00007ffccea11cb8 [ 184.313019][T11104] [ 184.319871][T11111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2849'. [ 184.364902][T11122] loop0: detected capacity change from 0 to 1024 [ 184.444492][T11131] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2855'. [ 184.490781][T11133] loop2: detected capacity change from 0 to 512 [ 184.545721][T11133] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 184.555061][T11133] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 184.564119][T11130] veth0_virt_wifi: entered promiscuous mode [ 184.570479][T11133] EXT4-fs (loop2): mount failed [ 184.608471][T11130] veth0_virt_wifi: left promiscuous mode [ 184.665268][T11141] loop0: detected capacity change from 0 to 512 [ 184.716613][T11141] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.2859: Failed to acquire dquot type 1 [ 184.736774][T11149] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2862'. [ 184.808156][T11141] EXT4-fs (loop0): 1 truncate cleaned up [ 184.821456][T11141] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.991700][T11156] loop6: detected capacity change from 0 to 512 [ 184.998232][T11156] EXT4-fs: inline encryption not supported [ 185.076092][T11156] ext4 filesystem being mounted at /455/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.096777][T11156] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2865: bg 0: block 367: padding at end of block bitmap is not set [ 185.175457][T11169] loop0: detected capacity change from 0 to 1024 [ 185.281504][T11180] veth0_virt_wifi: entered promiscuous mode [ 185.289191][T11180] veth0_virt_wifi: left promiscuous mode [ 185.311271][T11173] smc: net device bond0 applied user defined pnetid SYZ0 [ 185.318402][T11173] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 185.334059][T11173] smc: net device bond0 erased user defined pnetid SYZ0 [ 185.341131][T11173] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 185.389913][T11126] syz.7.2855 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 185.404118][T11126] CPU: 0 UID: 0 PID: 11126 Comm: syz.7.2855 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 185.415016][T11126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 185.425131][T11126] Call Trace: [ 185.428419][T11126] [ 185.431383][T11126] dump_stack_lvl+0xf2/0x150 [ 185.436163][T11126] dump_stack+0x15/0x1a [ 185.440429][T11126] dump_header+0x83/0x2d0 [ 185.444779][T11126] oom_kill_process+0x341/0x4c0 [ 185.449678][T11126] out_of_memory+0x9af/0xbe0 [ 185.454362][T11126] ? css_next_descendant_pre+0x11c/0x140 [ 185.460099][T11126] mem_cgroup_out_of_memory+0x13e/0x190 [ 185.465807][T11126] try_charge_memcg+0x508/0x7f0 [ 185.470758][T11126] obj_cgroup_charge_pages+0xbd/0x1a0 [ 185.476153][T11126] __memcg_kmem_charge_page+0x9d/0x170 [ 185.481623][T11126] __alloc_pages_noprof+0x1bc/0x340 [ 185.486860][T11126] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 185.492338][T11126] alloc_pages_noprof+0xe1/0x100 [ 185.497295][T11126] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 185.503242][T11126] __kvmalloc_node_noprof+0x121/0x170 [ 185.508652][T11126] ? ip_set_alloc+0x1f/0x30 [ 185.513228][T11126] ip_set_alloc+0x1f/0x30 [ 185.517591][T11126] hash_ipport_create+0x4dc/0x9f0 [ 185.522748][T11126] ? __pfx_hash_ipport_create+0x10/0x10 [ 185.528316][T11126] ip_set_create+0x359/0x8a0 [ 185.533013][T11126] ? memchr+0x1/0x50 [ 185.536954][T11126] ? __nla_parse+0x40/0x60 [ 185.541510][T11126] nfnetlink_rcv_msg+0x4a9/0x570 [ 185.546541][T11126] netlink_rcv_skb+0x12c/0x230 [ 185.551314][T11126] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 185.556797][T11126] nfnetlink_rcv+0x16c/0x15d0 [ 185.561600][T11126] ? kmem_cache_free+0xdc/0x2d0 [ 185.566529][T11126] ? nlmon_xmit+0x51/0x60 [ 185.570883][T11126] ? __kfree_skb+0x102/0x150 [ 185.575476][T11126] ? consume_skb+0x49/0x160 [ 185.579998][T11126] ? nlmon_xmit+0x51/0x60 [ 185.584353][T11126] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 185.589666][T11126] ? __dev_queue_xmit+0xb6e/0x2090 [ 185.594870][T11126] ? __pfx_do_sync_core+0x10/0x10 [ 185.599906][T11126] ? ref_tracker_free+0x3a5/0x410 [ 185.605033][T11126] ? __dev_queue_xmit+0x186/0x2090 [ 185.610156][T11126] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 185.615639][T11126] netlink_unicast+0x599/0x670 [ 185.620431][T11126] netlink_sendmsg+0x5cc/0x6e0 [ 185.625263][T11126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.630673][T11126] __sock_sendmsg+0x140/0x180 [ 185.635394][T11126] ____sys_sendmsg+0x312/0x410 [ 185.640228][T11126] __sys_sendmsg+0x19d/0x230 [ 185.644894][T11126] __x64_sys_sendmsg+0x46/0x50 [ 185.649737][T11126] x64_sys_call+0x2734/0x2dc0 [ 185.654420][T11126] do_syscall_64+0xc9/0x1c0 [ 185.658943][T11126] ? clear_bhb_loop+0x55/0xb0 [ 185.663623][T11126] ? clear_bhb_loop+0x55/0xb0 [ 185.668318][T11126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.674301][T11126] RIP: 0033:0x7f82f079fed9 [ 185.678735][T11126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.698479][T11126] RSP: 002b:00007f82eee17058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.707034][T11126] RAX: ffffffffffffffda RBX: 00007f82f0965fa0 RCX: 00007f82f079fed9 [ 185.715032][T11126] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 000000000000000b [ 185.723100][T11126] RBP: 00007f82f0813cc8 R08: 0000000000000000 R09: 0000000000000000 [ 185.731077][T11126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.739117][T11126] R13: 0000000000000000 R14: 00007f82f0965fa0 R15: 00007ffcee6c5a18 [ 185.747101][T11126] [ 185.750296][T11126] memory: usage 307196kB, limit 307200kB, failcnt 2976 [ 185.757257][T11126] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 185.765327][T11126] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 185.772686][T11126] Memory cgroup stats for /syz7: [ 185.773354][T11126] cache 8192 [ 185.781610][T11126] rss 4096 [ 185.784659][T11126] shmem 8192 [ 185.787918][T11126] mapped_file 1576960 [ 185.791945][T11126] dirty 0 [ 185.794909][T11126] writeback 0 [ 185.798214][T11126] workingset_refault_anon 104 [ 185.803026][T11126] workingset_refault_file 0 [ 185.807572][T11126] swap 208896 [ 185.810894][T11126] swapcached 16384 [ 185.814772][T11126] pgpgin 275770 [ 185.818284][T11126] pgpgout 275764 [ 185.821829][T11126] pgfault 144769 [ 185.825450][T11126] pgmajfault 48 [ 185.828927][T11126] inactive_anon 0 [ 185.832566][T11126] active_anon 16384 [ 185.836440][T11126] inactive_file 0 [ 185.840148][T11126] active_file 0 [ 185.843637][T11126] unevictable 8192 [ 185.847422][T11126] hierarchical_memory_limit 314572800 [ 185.852802][T11126] hierarchical_memsw_limit 9223372036854771712 [ 185.858997][T11126] total_cache 8192 [ 185.862819][T11126] total_rss 4096 [ 185.866428][T11126] total_shmem 8192 [ 185.870164][T11126] total_mapped_file 1576960 [ 185.874697][T11126] total_dirty 0 [ 185.878207][T11126] total_writeback 0 [ 185.882051][T11126] total_workingset_refault_anon 104 [ 185.887457][T11126] total_workingset_refault_file 0 [ 185.892487][T11126] total_swap 208896 [ 185.896448][T11126] total_swapcached 16384 [ 185.900729][T11126] total_pgpgin 275770 [ 185.904896][T11126] total_pgpgout 275764 [ 185.909017][T11126] total_pgfault 144769 [ 185.913123][T11126] total_pgmajfault 48 [ 185.917154][T11126] total_inactive_anon 0 [ 185.921365][T11126] total_active_anon 16384 [ 185.925889][T11126] total_inactive_file 0 [ 185.930218][T11126] total_active_file 0 [ 185.934253][T11126] total_unevictable 8192 [ 185.938498][T11126] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2855,pid=11125,uid=0 [ 185.953287][T11126] Memory cgroup out of memory: Killed process 11125 (syz.7.2855) total-vm:94952kB, anon-rss:616kB, file-rss:24108kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 186.056797][T11187] loop2: detected capacity change from 0 to 512 [ 186.087310][T11187] ext4: Unknown parameter 'nouser_xattr' [ 186.162453][T11187] loop2: detected capacity change from 0 to 2048 [ 186.194197][T11187] EXT4-fs: Ignoring removed mblk_io_submit option [ 186.258970][T11197] loop4: detected capacity change from 0 to 512 [ 186.267535][T11187] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a840e128, mo2=0102] [ 186.281692][T11187] System zones: 0-7 [ 186.301638][T11202] netlink: 'syz.7.2882': attribute type 3 has an invalid length. [ 186.309953][T11187] EXT4-fs mount: 12 callbacks suppressed [ 186.309966][T11187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.330989][T11197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.345074][T11197] ext4 filesystem being mounted at /559/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.363792][T11187] 9pnet_virtio: no channels available for device 127.0.0.1 [ 186.390496][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.415874][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.474813][T11213] veth0_virt_wifi: entered promiscuous mode [ 186.475878][T11208] syz.0.2883[11208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.480879][T11208] syz.0.2883[11208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.493343][T11213] veth1_macvtap: entered promiscuous mode [ 186.517921][T11208] syz.0.2883[11208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.525254][T11218] loop7: detected capacity change from 0 to 512 [ 186.532764][T11213] veth1_macvtap: left promiscuous mode [ 186.552571][T11213] veth0_virt_wifi: left promiscuous mode [ 186.553054][T11208] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 186.566892][T11218] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 186.624124][T11218] EXT4-fs (loop7): mount failed [ 186.691136][T11230] loop2: detected capacity change from 0 to 512 [ 186.696592][T11218] vcan0 speed is unknown, defaulting to 1000 [ 186.697799][T11230] EXT4-fs: inline encryption not supported [ 186.711840][T11220] smc: net device bond0 applied user defined pnetid SYZ0 [ 186.746365][T11220] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 186.765659][T11220] smc: net device bond0 erased user defined pnetid SYZ0 [ 186.783661][T11220] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 186.786129][T11230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.793225][T11218] lo speed is unknown, defaulting to 1000 [ 186.803893][T11230] ext4 filesystem being mounted at /569/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.827376][T11230] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2891: bg 0: block 367: padding at end of block bitmap is not set [ 186.916356][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.979849][T11242] xt_hashlimit: max too large, truncated to 1048576 [ 187.004855][T11242] SELinux: Context Ü is not valid (left unmapped). [ 187.033203][T11242] macvlan1: entered promiscuous mode [ 187.054706][T11242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2894'. [ 187.106707][T11242] macvlan1 (unregistering): left promiscuous mode [ 187.233159][T11218] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2888'. [ 187.289776][T11257] syz.0.2900[11257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.289854][T11257] syz.0.2900[11257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.337174][T11257] syz.0.2900[11257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.367021][T11261] veth0_virt_wifi: entered promiscuous mode [ 187.431474][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 187.431491][ T29] audit: type=1326 audit(1733605721.848:190312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11256 comm="syz.0.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83bf8fed9 code=0x7ffc0000 [ 187.469101][T11261] veth0_virt_wifi: left promiscuous mode [ 187.471171][T11268] loop2: detected capacity change from 0 to 512 [ 187.475246][ T29] audit: type=1326 audit(1733605721.848:190313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11256 comm="syz.0.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa83bf8fed9 code=0x7ffc0000 [ 187.505149][T11268] EXT4-fs: inline encryption not supported [ 187.513095][ T29] audit: type=1326 audit(1733605721.923:190314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11256 comm="syz.0.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83bf8fed9 code=0x7ffc0000 [ 187.537040][ T29] audit: type=1326 audit(1733605721.951:190315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11256 comm="syz.0.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83bf8fed9 code=0x7ffc0000 [ 187.584877][T11268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.632758][T11268] ext4 filesystem being mounted at /573/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.698998][T11268] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2904: bg 0: block 367: padding at end of block bitmap is not set [ 187.776057][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.802706][T11269] smc: net device bond0 applied user defined pnetid SYZ0 [ 187.811745][T11269] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 187.843785][T11269] smc: net device bond0 erased user defined pnetid SYZ0 [ 187.852664][T11269] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 187.866736][T11287] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2906'. [ 187.982511][T11289] smc: net device bond0 applied user defined pnetid SYZ0 [ 187.993192][T11289] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 188.016234][ T29] audit: type=1326 audit(1733605722.372:190316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11280 comm="syz.6.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aea0efed9 code=0x7ffc0000 [ 188.040281][ T29] audit: type=1326 audit(1733605722.372:190317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11280 comm="syz.6.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aea0efed9 code=0x7ffc0000 [ 188.064025][ T29] audit: type=1326 audit(1733605722.372:190318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11280 comm="syz.6.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1aea0efed9 code=0x7ffc0000 [ 188.087826][ T29] audit: type=1326 audit(1733605722.372:190319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11280 comm="syz.6.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aea0efed9 code=0x7ffc0000 [ 188.111652][ T29] audit: type=1326 audit(1733605722.372:190320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11280 comm="syz.6.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aea0efed9 code=0x7ffc0000 [ 188.112137][T11279] smc: net device bond0 erased user defined pnetid SYZ0 [ 188.135326][ T29] audit: type=1326 audit(1733605722.372:190321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11280 comm="syz.6.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1aea0efed9 code=0x7ffc0000 [ 188.178769][T11279] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 188.246544][T11283] smc: net device bond0 applied user defined pnetid SYZ0 [ 188.269313][T11283] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 188.282769][T11283] smc: net device bond0 erased user defined pnetid SYZ0 [ 188.289991][T11283] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 188.330253][T11300] loop2: detected capacity change from 0 to 764 [ 188.342446][T11300] rock: directory entry would overflow storage [ 188.348756][T11300] rock: sig=0x4654, size=5, remaining=4 [ 188.441798][T11281] ================================================================== [ 188.449976][T11281] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 188.457832][T11281] [ 188.460158][T11281] write to 0xffffea00056d5a58 of 8 bytes by task 11191 on cpu 0: [ 188.467874][T11281] __filemap_remove_folio+0x1ac/0x2c0 [ 188.473300][T11281] filemap_remove_folio+0x6b/0x1f0 [ 188.478434][T11281] truncate_inode_folio+0x42/0x50 [ 188.483468][T11281] shmem_undo_range+0x25b/0xa70 [ 188.488315][T11281] shmem_evict_inode+0x14d/0x530 [ 188.493254][T11281] evict+0x2f0/0x570 [ 188.497177][T11281] iput+0x42a/0x5b0 [ 188.501043][T11281] dentry_unlink_inode+0x24f/0x260 [ 188.506179][T11281] __dentry_kill+0x18b/0x4c0 [ 188.510767][T11281] dput+0x5c/0xd0 [ 188.514397][T11281] __fput+0x3fb/0x6d0 [ 188.518375][T11281] ____fput+0x1c/0x30 [ 188.522358][T11281] task_work_run+0x13a/0x1a0 [ 188.526948][T11281] do_exit+0x5dd/0x17f0 [ 188.531117][T11281] do_group_exit+0x102/0x150 [ 188.535712][T11281] get_signal+0xeb9/0x1000 [ 188.540168][T11281] arch_do_signal_or_restart+0x95/0x4b0 [ 188.545730][T11281] irqentry_exit_to_user_mode+0xa7/0x120 [ 188.551384][T11281] irqentry_exit+0x12/0x50 [ 188.555818][T11281] asm_exc_page_fault+0x26/0x30 [ 188.560713][T11281] [ 188.563045][T11281] read to 0xffffea00056d5a58 of 8 bytes by task 11281 on cpu 1: [ 188.570673][T11281] folio_mapping+0xa0/0x120 [ 188.575197][T11281] evict_folios+0x83f/0x3240 [ 188.579827][T11281] try_to_shrink_lruvec+0x5d2/0x750 [ 188.585054][T11281] shrink_lruvec+0x22d/0x1840 [ 188.589736][T11281] shrink_node+0x603/0x1d80 [ 188.594250][T11281] do_try_to_free_pages+0x3c6/0xc50 [ 188.599455][T11281] try_to_free_mem_cgroup_pages+0x1e3/0x490 [ 188.605353][T11281] try_charge_memcg+0x2bc/0x7f0 [ 188.610203][T11281] obj_cgroup_charge_pages+0xbd/0x1a0 [ 188.615575][T11281] __memcg_kmem_charge_page+0x9d/0x170 [ 188.621036][T11281] __alloc_pages_noprof+0x1bc/0x340 [ 188.626253][T11281] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 188.631641][T11281] alloc_pages_noprof+0xe1/0x100 [ 188.636586][T11281] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 188.642403][T11281] __kvmalloc_node_noprof+0x121/0x170 [ 188.647905][T11281] ip_set_alloc+0x1f/0x30 [ 188.652286][T11281] hash_ipport_create+0x4dc/0x9f0 [ 188.657319][T11281] ip_set_create+0x359/0x8a0 [ 188.661923][T11281] nfnetlink_rcv_msg+0x4a9/0x570 [ 188.666887][T11281] netlink_rcv_skb+0x12c/0x230 [ 188.671683][T11281] nfnetlink_rcv+0x16c/0x15d0 [ 188.676380][T11281] netlink_unicast+0x599/0x670 [ 188.681150][T11281] netlink_sendmsg+0x5cc/0x6e0 [ 188.685919][T11281] __sock_sendmsg+0x140/0x180 [ 188.690606][T11281] ____sys_sendmsg+0x312/0x410 [ 188.695370][T11281] __sys_sendmsg+0x19d/0x230 [ 188.699981][T11281] __x64_sys_sendmsg+0x46/0x50 [ 188.704749][T11281] x64_sys_call+0x2734/0x2dc0 [ 188.709425][T11281] do_syscall_64+0xc9/0x1c0 [ 188.713923][T11281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.719829][T11281] [ 188.722143][T11281] value changed: 0xffff8881185f81f0 -> 0x0000000000000000 [ 188.729244][T11281] [ 188.731557][T11281] Reported by Kernel Concurrency Sanitizer on: [ 188.737699][T11281] CPU: 1 UID: 0 PID: 11281 Comm: syz.6.2906 Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 188.748555][T11281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 188.758630][T11281] ==================================================================