last executing test programs: 2.858691588s ago: executing program 4 (id=677): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000240)=@in6={0xa, 0x4e1e, 0x0, @remote}, 0x80, 0x0}, 0x4004840) 2.840170749s ago: executing program 4 (id=678): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000f53e5459de27ba046c79b03acc0000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000200000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000240), 0x64, 0x537, &(0x7f0000000a00)="$eJzs3c9vI1cdAPDvOHZIdrN1Chygh1JoUXYFaycNbSMObREITpWAcl9C4kRRnDhKnHYTVTQRfwAXBEic4MIFif8AVeLCsUIqgjOIIhCCLRw4wA4ae5zNZu04G5w4JJ+PNDvvza/ve/bOjzfzMg7gynomIl6NiPtpmt6KiHI+vZAPsdcesuU+uPfWQjYkkaav/y2JJJ/W2VaSj6/nq41FxNe/EvGt5NG4Wzu7q/P1em0zz1ebaxvVrZ3d2ytr88u15dr67OzMi3Mvzb0wNz2Qet6IiJe/9Kfvf/enX375F5998w93/nLz21mxvpjPP1yPx1Q8bma76qXWZ3F4hc2IV04Z78IptmqYGz/ZOvtnWB4AAHrLrvE/HBGfiohbUY6R4y9nAQAAgP9D6SsT8e8kIu1utNvEsei5PAAAAHABFSJiIpJCJe8LMBGFQqXS7sP70biWvh3R/MxSY3t9MZsXMRmlwtJKvTad9xWejFKS5Wda6Qf559v5/fcjWvnZiHgyIr5XHm/lKwuN+uKwb34AAADAFXH9SPv/n+V2+x8AAAC4ZCaHXQAAAADgzGn/AwAAwOWn/Q8AAACX2ldfey0b0s7vXy++sbO92njj9mJta7Wytr1QWWhsblSWG43l1jv71vptr95obHwu1rfvVpu1rWZ1a2f3zlpje715Z+Whn8AGAAAAztGTn3jnd0lE7H1+vDVkRnssO3KuJQPOWvEgleTjLnv/759oj98/p0IB56LfOf035XMqCHDuisMuADA0pcdZ2N8JwKWU9Jnfs/POu/n4k4MtDwAAMHhTH+/9/L9w7Jp7x88GLjw7MVxdnef/TxzJA5df6/l/rw6/R7lYgEul5IwPV17f5/+9OgC8e9IIafp4JQIAAAZtojUkhUp+e28iCoVKJeJGq7t/KVlaqdem8+cDvy2XPpTlZ1prJn3bDAAAAAAAAAAAAAAAAAAAAAAAAABAW5omkQIAAACXWkThz8kv2+/ynyo/N3H0/sBo8q9y5D8R+uaPXv/B3flmc3Mmm/73g+nNH+bTnx/GHQwAAADgqE47vdOOBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBB+uDeWwudoTMtLZ993L9+ISImu8UvxlhrPBaliLj2jySKh9ZLImJkAPH39iPiY93iJ1mxDkJ2iz9+9vFjMv8UusW/PoD4cJW9kx1/Xs32v9GIOLz/FeKZ1rj7/leMeCh/Wq3jX3aA63L87Rz/Rnrs/zeObGuyR4yn3vt5tWf8/Yinit2PP534SY/4z56wjt/8xu5ur3npjyOmup5/kodiVZtrG9Wtnd3bK2vzy7Xl2vrs7MyLcy/NvTA3XV1aqdfyfx/ZfqlP2bL6X+sRf7JP/Z87Yf3/897dex/pUZws/s1nu8T/1U/yJR6NX8jPfZ/O09n8qU56r50+7Omf/frp4+q/2KP+/b7/myes/62vfeePEXH/0FcKAAzR1s7u6ny9Xts8NpFdtvRb5qImslb6BSiGxOkSJ/0veqrE2wPdYJqmafxve0oSQ//AO4lhH5kAAIBBe3DRP+ySAAAAAAAAAAAAAAAAAAAAwNV1Hq8TOxpz7yCVDOIV2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/HfAAAA///xwNLS") r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.383681148s ago: executing program 4 (id=682): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000580)='./file1\x00', 0x110040, &(0x7f0000000040), 0x1, 0x55b, &(0x7f0000000940)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f00000009c0)=0x8, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) fallocate(r2, 0x10, 0x2, 0x7fff) open(&(0x7f0000000000)='./file1\x00', 0x14927e, 0x40) 2.268484318s ago: executing program 2 (id=684): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1000e, &(0x7f0000000080)={[{@noquota}, {@bh}, {@grpid}, {@data_writeback}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x7c000}], 0x1, 0x33000, 0x66000000, 0x3) 2.265089998s ago: executing program 4 (id=686): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000004000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='workqueue_activate_work\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4f24, 0x2, @remote}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, 0x0, &(0x7f0000000300)) dup3(r0, r4, 0x80000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000580)="fb17bb69ee350e28bad0ec1ba2859ecba191c2c00bfc47b15e5e6f0294ee0ba2f26505f4f0c4245ac6fe41a56bb8e01eb55cdc9071edc91d9c1e9ca2776415618fba643e36f882130d4742d6ac7221d7d556ef26ab626548276b04c3d91aa3100b7bc1a346989bff580df978c7c3479290576dfd71ea0767b21c01f25dbc79f422d30e6165ef935c3937a114e3d8a3d56cff3a1b00000000000000000000000000000080416cc5c01f8e52c74f7a825ff7e78b26d314e10f45860df1a9e0bfbce8686d254cfe00", 0xc7}], 0x1}, 0x4) recvmsg(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x0) 1.877489861s ago: executing program 2 (id=690): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pidfd_send_signal(r2, 0x0, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000307"], 0x20) r7 = syz_io_uring_setup(0x1114, &(0x7f0000000200), &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x10, 0x0, 0x7, 0x0, 0x0}) io_uring_enter(r7, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001000060000000000000008000b00000000002c001300e0000001000000000000000000000000fc0000000000000000000000000000000000000000000000cc0111"], 0x268}}, 0x0) 1.876832761s ago: executing program 4 (id=691): syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0xfd, 0x6b1, &(0x7f0000000280)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) 1.848022324s ago: executing program 1 (id=693): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000c98fcaf35b32223a00"/28], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYRES32=r0, @ANYRES8=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x100000000000000}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r4, r5}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(0x0, r7) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x404c804}, 0x40) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x30, 0xffffffffffffffff, 0xd00c5000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x14) munmap(&(0x7f0000fef000/0x2000)=nil, 0x2000) munmap(&(0x7f00006bd000/0x3000)=nil, 0x3000) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101a00, 0x0) fgetxattr(r8, &(0x7f00000002c0)=@known='security.selinux\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000280)=[{0x8, 0xc, 0x0, 0x7fff0006}, {0x9, 0x0, 0x6}, {0x9, 0x3e, 0xfc, 0x5}, {0x2ced, 0x10, 0xbb, 0x7f}]}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a317153000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)="37cc7d1590f48ffe80d9fdd91f634b061649f02047d1cdf4152b045826a32025e3449bf69f41a8844f60350619a36be33e6d3c492e5f348a529508f53dbe5897b2beccde1593", 0x46) 1.829110175s ago: executing program 4 (id=694): r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)={{0x12, 0x1, 0x110, 0xa0, 0xb4, 0xc4, 0x10, 0x458, 0x704a, 0x3a55, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x4, 0xc0}}]}}]}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0xd, @loopback, 0x6}, 0x1c) r2 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000440)=0x4, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0x200, 0x0, 0x1000000, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfff}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x48}}, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @empty, 0xffff8b97}, 0x1c) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000700)=ANY=[@ANYBLOB="4aeab89ee90e88d0b876d71c4e"], 0x0) r7 = dup(r5) syz_usb_connect$cdc_ncm(0x2, 0xaa, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x2, 0x1, 0xff, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "7472de7ca4"}, {0x5, 0x24, 0x0, 0x39d9}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x0, 0x3, 0x6f}, {0x6, 0x24, 0x1a, 0x2b49, 0x32}, [@mbim_extended={0x8, 0x24, 0x1c, 0x36, 0x7f, 0xb86}, @country_functional={0xc, 0x24, 0x7, 0x40, 0x1, [0xd0, 0x4, 0x2]}, @mdlm={0x15, 0x24, 0x12, 0xf944}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x23, 0x80, 0x3}, @dmm={0x7, 0x24, 0x14, 0x400, 0xff43}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xad, 0x11, 0x3}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x2, 0x0, 0x1, 0x10, 0xf5}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x1, [{0x30, &(0x7f0000000240)=@string={0x30, 0x3, "d2fb77ed59a5630596bdda6f7f1ec9568d529c59b146fb91422a78767ec23592937a1938911b607d26886d21c92e"}}]}) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000004c0), r7) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000b00)={0x434, r8, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x3f4, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x388, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x24c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xa}}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0f1f6a4336452b22d4e3439eab58a49ee92ce59936b0356752940a047d638ea8"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}, @WGPEER_A_ALLOWEDIPS={0x98, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @loopback, 0x400}}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x117}]}, 0x434}}, 0x80) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x17c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0xb}, [@IFLA_AF_SPEC={0x15c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @mcast1}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x20}]}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8}]}}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x88, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xf0}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0x4}]}]}, 0x17c}}, 0x0) 1.495994354s ago: executing program 2 (id=695): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000b7a1c7203653ad1e9418a65fb4de99e70958ae5f827a44625d27169e0b897ac3ad31935588a0aefc3a92fba2e9558cdba84030e54f0a", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a060000000e41621eb70400000000000085000000c30000009500008000"/65], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000000), &(0x7f0000000280)=r2}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x40, 0x1, 0x7f, 0x851, {{0x5, 0x4, 0x2, 0x39, 0x14, 0x68, 0x0, 0x3, 0x4, 0x0, @local, @rand_addr=0x64010100}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000006500000009000000000000000200000d000000000f0000000200000010000000010000000e0000000400000f01000000050000000f0000000500000002000000030000000800000002000000bb3a0000faffffff020000000300000008000000f90d0000000000000c0400000000000000307f2e304160610000000000"], &(0x7f0000000400)=""/19, 0x89, 0x13, 0x0, 0x5, 0x0, @void, @value}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) close(r3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000fe2c1c02054d7284df4f887b0120e7ff632c4a0fa2766c3905f672ce230256503c6ff122d2bae80804370f336017d8d200c072652f08fd8ca28e18c9170e61e6db53bd07", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f000001184c01be00"], 0x1c) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) writev(r10, &(0x7f0000000240)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r9, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @multicast2, @empty}, 0xc) getcwd(&(0x7f00000004c0)=""/239, 0xef) write$UHID_DESTROY(r8, &(0x7f0000000340), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) wait4(r0, 0x0, 0xa, 0x0) 1.495395043s ago: executing program 1 (id=696): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400200000000000000200000038000480340001800b000100746172676574000f2400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a3200000000140005800800024000faffff0700"], 0xa0}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000040)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) getrlimit(0x14, &(0x7f0000000000)) 1.423190269s ago: executing program 1 (id=698): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000004300)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x2b8, 0x0, 0x138, 0x0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00'}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x3f00, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 1.270027762s ago: executing program 1 (id=699): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200600800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lremovexattr(0x0, 0x0) setgid(0xffffffffffffffff) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000001c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000080)="e9", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_script(r1, &(0x7f0000000300), 0x19ffe) 1.269646612s ago: executing program 3 (id=700): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00 \x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000008500000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) writev(r2, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) write$cgroup_pid(r2, &(0x7f00000031c0), 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xa, 0xa, 0x0, 0x1}, @generic={0x5, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="620af8ff0c030021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece87365d0d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7becf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000800007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b201768ee58969c41595221df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b595c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac8a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e6691dd7ae8ea6eb5064ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea137fec0a294752d018702a40da8daccf080942a486721737390cbf3774cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa370246c167b096e7e60fc3541a2ae05a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6f5210d7503000000a87a27602b81f76386f1535bef1497f921860837abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e04000000868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda8bd3168971ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db41a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd574d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b0000000046829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca4f8bc2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db1183b043ef2f79d5ad5527d149d076e1a87e2df27c0cb8a67ad726bf953e88f10447e125c2c0f1aebee1f3390a9e2ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e108e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed3ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c462fa36cabf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c0000000000000005a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000020bd79e41c682139c58ac1deb039a691ad640e12c12fe11d70fe495906f2d5d71778acbd4e0100a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c51000000000000007db3d0ac3b73291e73bb6f598eab70fe1635334cb0fb1eb059db90894220865e00ac2209c1f510d5189f08fc58fc1797dec3955fa42ce3c7ee124866e733842644cf1d73f8c4f070c113e7806a60a5aa6d2384d6ea094c324f947ec772896855e5227086da5dfcb2ae984d1accdc39ca77d9f1899367dc298970a5d3e2e2791653fda4180122286f0f0248eb7e250033c751fb0e7537843ce5fc437094e6cf20bc659b95bd1828962f8e7b75e9e03916b45325d99a9a11bd2acc0e53fd4757a41a3d0eec80dca04eae5b7b84be215604a8c94f0bbbabce520337b78ad99ad4d42da8f0c8cce4c1f417811f6babab72daecc90ee55b7a848f9c9f5499c635dc00e5d6a8df77aeec4f41e4e328d8c8e3a59d88a1c556d56dea74bf98126ebcd647796b49a4c435e193b1de67a651bbf0fe4fe37a281896d72e66e9d8d9dd6b2070a58f78d40cece604040000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r8, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x61) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 1.1818423s ago: executing program 2 (id=702): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$int_in(r0, 0x5452, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x10, 0x1, 0x8000, 0x8000, {{0xe, 0x4, 0x0, 0x2c, 0x38, 0x65, 0x0, 0x6, 0x4, 0x0, @remote, @remote, {[@lsrr={0x83, 0x13, 0xf, [@private=0xa010101, @multicast2, @empty, @multicast2]}, @lsrr={0x83, 0xf, 0x78, [@rand_addr=0x64010100, @private=0xa010101, @private=0xa010102]}]}}}}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x8d1}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r2}, 0x38) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xe6) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x400, 0x10}, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x10}, 0x18) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 1.1803821s ago: executing program 3 (id=703): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb84, &(0x7f00000017c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80205b, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000200)="e9", 0x1}], 0x1) (async) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000200)="e9", 0x1}], 0x1) r7 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000021000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000400000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000000300000000000000ffff0000000000000000000000000000000062726983676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r7, 0x29, 0x45, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000140)=0x1e) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r7, 0x29, 0x45, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000140)=0x1e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x18, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x2}, [@generic={0xa3, 0x1, 0xe, 0x1000, 0x10001}, @jmp={0x5, 0x0, 0x5, 0x4, 0x5, 0xfffffffffffffffe}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x4}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}, @ldst={0x3, 0x0, 0x6, 0x1, 0x6, 0x6, 0x18}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x3, 0x6, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000900)=[{0x5, 0x3, 0x1, 0x2}, {0x4, 0x3, 0x4, 0x2}, {0x0, 0x5, 0xa, 0x3}, {0x0, 0x4, 0x4, 0x2}, {0x5, 0x2, 0x10, 0xa}, {0x4, 0x5, 0x8, 0x6}, {0x5, 0x3, 0x1, 0x6}, {0x1, 0x4, 0x10}], 0x10, 0x4f0, @void, @value}, 0x94) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x18, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x2}, [@generic={0xa3, 0x1, 0xe, 0x1000, 0x10001}, @jmp={0x5, 0x0, 0x5, 0x4, 0x5, 0xfffffffffffffffe}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x4}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}, @ldst={0x3, 0x0, 0x6, 0x1, 0x6, 0x6, 0x18}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x3, 0x6, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000900)=[{0x5, 0x3, 0x1, 0x2}, {0x4, 0x3, 0x4, 0x2}, {0x0, 0x5, 0xa, 0x3}, {0x0, 0x4, 0x4, 0x2}, {0x5, 0x2, 0x10, 0xa}, {0x4, 0x5, 0x8, 0x6}, {0x5, 0x3, 0x1, 0x6}, {0x1, 0x4, 0x10}], 0x10, 0x4f0, @void, @value}, 0x94) ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x40086607, &(0x7f0000000240)) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x2, 0x0, 0x82, 0x0, 0x84825, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x2, 0x40}, 0x0, 0x0, 0x4, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000001, 0x10012, r5, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000001, 0x10012, r5, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) 968.696998ms ago: executing program 3 (id=704): setrlimit(0xa, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r1, &(0x7f0000000000)=""/48, 0x30, 0x7) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x7040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x808, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_L}, {@cache_mmap}, {@access_uid}], [], 0x6b}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='qrtr_ns_server_add\x00', r5, 0x0, 0x8}, 0x18) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r6, 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000840}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) 867.665147ms ago: executing program 3 (id=708): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000002000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x1fe8, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x16, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x4}) io_uring_enter(r2, 0x11af, 0xdfd2, 0x1, 0x0, 0x0) 550.036524ms ago: executing program 0 (id=714): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00s\x00'/29], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) socket$kcm(0x2, 0xa, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r5, 0x8921, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c20000001704b45adbde810000000800450000680000000000019078ac1e0001ac1414aa05009078e00000e0430000000000000000110000ac04000000000000000300443400030000000001000000ffffffff00000000ac1414"], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0x28}}, 0x4041) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c8b04db3c5459ecb4000000000000000001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) sendmsg$NFQNL_MSG_VERDICT_BATCH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000030301010000000000000000000000000c0002"], 0x20}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000540)={0x13, 0x10, 0xfa00, {&(0x7f0000000340), r8}}, 0x18) r9 = getpgrp(0x0) msgget(0x0, 0x28c) syz_open_procfs(r9, &(0x7f00000000c0)='attr/fscreate\x00') setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000080)=0x7, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) gettid() openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0x20000, 0x0) 489.352389ms ago: executing program 0 (id=715): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x10a00, 0x0) fcntl$setlease(r2, 0x400, 0x1) fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x8, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x1}, @generic={0x5, 0x0, 0x0, 0x3}, @jmp, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 415.238305ms ago: executing program 0 (id=716): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r1}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000010c0), r3) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0100000000000200000001000000"], 0x14}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000740)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000025bd7000fddbdf25200000001c002d800800030006000000050004000000000005000400010000009cb780d2dbcd445735d181d7a3fd8dce4da4e8bd24fad84d62763bbe3fac930055c0c305e0a16cfadf11a26b594576b92398385bdf9f1ded063e70aa9c627aba0eef150293137f06388f7d9aae028db5bd1acf589aa4a4cb6ea474e8463b20eb8ac2bb8a8d36b07fda8dda0de3748acfd76dbcf4c65b6432dba1f49484c22cc75db15f077f8172bb64b9204d7d8592eb59128254676baba6e5cbd3d75b1496275a2432f74a6703b0bb8f8df831bbd6b84fe7345d7e0142f8cac39a70c55148cd8ab305fa55bf57bb294982d2eb99955fbb5f78281479aa2d441692c508e5116b12685c69cce450b0162e87156f9679f27aa2ef55b40c7042054bf9fd2eeb90fdd899837ff6a48406d2c8e9b755fcb0c03b9e4ba8221a1438f42278689d153800d163d70621e93b3b4f789f2f8740aa2c9363f267af7bcde466b2e0647df2a6ef5d20c0d3d9da21164a3b800b2ea193e28bae07d5c64d5fa85700e633b92251313640138d03ef97dae17831834f6c7d5f6e1a7f536c9b3d658b5e7ffb050891ac5dded2d36c24ce55fa57e8152579d8e0305042b7483cb23522aec4566000"], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000085) r5 = inotify_init1(0x0) dup3(r5, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000c00)=@urb_type_iso={0x0, {0x5}, 0x3, 0xc0, &(0x7f0000000940)="58b4fb9f93ad7bd2cdaf83972fa23b3664f1d9773e80bceaa2b211f78823bd5f193d63704b7bcbd912ddcf6ab87412f7053a7b6cf3af567b47c6d76037af6482703003e033f78529a2d73d2c590f9312d0a5886ae12a930ab7f4cc125f1acdb0074074bc00e9c5cda79b92b641889a7bc885858de8286a38645e6351e7e3ec36a9d15c437cad4312c75d19b49689cbc7e69b4fc48dd7be00817029d13e0bafcf97d412", 0xa3, 0x1, 0x7000000, 0x17, 0x6, 0x9, &(0x7f0000000a00)="a21baf5b8be2d910477d9061882d4c969e3188af743b5d0dccba0da46c015e6e278eb54e60d444a51879220e7b79e6fab1c3c8763ddda01ad342fba94cf847f3f5e3ea1be19c4d3593b71bf9de271850cafc173237391bf7e382e03dd90f35bf173212fc86a2e94456572ae56f1a0a6286ebd1a93a079a99499111df5e568719", [{0x88c040a, 0x7, 0xfffffffc}, {0x1, 0x0, 0x6}, {0x4, 0x101, 0x1}, {0x7, 0x0, 0x3ff}, {0xb, 0x3, 0xb5fe}, {0x476, 0x8}, {0x3, 0x101, 0x80}, {0x9, 0x0, 0x7ff}, {0x5c665007, 0xa2, 0x400}, {0x8, 0x20000, 0x3}, {0x7, 0x328a, 0x3}, {0x0, 0x4000, 0x6b0}, {0x1b70ae76, 0x7fff, 0x800}, {0x0, 0xfffffff7, 0x6}, {0x3, 0xffffffff, 0xffff}, {0x3, 0x9, 0x80}, {0x80, 0x4, 0xd}, {0x7f, 0x101, 0x8}, {0x6, 0x9, 0x2}, {0x3fd, 0x5, 0x191a0000}, {0x4f, 0x80000000, 0x7}, {0x5, 0x5, 0xb}, {0x4, 0x1, 0x5}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) 414.770215ms ago: executing program 1 (id=717): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='rpcb_register\x00', r0}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000008, 0x0) 392.930856ms ago: executing program 0 (id=718): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000001000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) listen(r0, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4000, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 340.997711ms ago: executing program 0 (id=719): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) fcntl$notify(r0, 0x402, 0x80000010) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003b) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 340.143262ms ago: executing program 0 (id=720): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@nodiscard}]}, 0x1, 0x501, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000006c0)) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 339.888092ms ago: executing program 2 (id=721): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) semget$private(0x0, 0x6, 0x0) io_setup(0xb2, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 111.157831ms ago: executing program 1 (id=722): socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x89) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)='%-5lx \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0xfffffffd, @local, 0x3}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x1}, 0x41) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) close_range(r6, 0xffffffffffffffff, 0x0) 110.72068ms ago: executing program 2 (id=723): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@nodiscard}]}, 0x1, 0x501, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000006c0)) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 110.114971ms ago: executing program 3 (id=724): lstat(&(0x7f0000000280)='./file2\x00', &(0x7f00000003c0)) (async) lstat(&(0x7f0000000280)='./file2\x00', &(0x7f00000003c0)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@dev, @in=@remote}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000001c0)='./file2\x00', 0x40, &(0x7f0000000740)={[{@init_itable}, {@noacl}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@auto_da_alloc}, {@nodiscard}, {@dioread_nolock}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) (async) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendto$inet(r1, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) open(&(0x7f0000000200)='./file1\x00', 0x921000, 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) (async) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) fstatfs(r5, &(0x7f0000000000)=""/22) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) (async) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) unlink(&(0x7f0000000180)='./file1\x00') (async) unlink(&(0x7f0000000180)='./file1\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) 0s ago: executing program 3 (id=725): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x3, 0x4, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000200)={[{@noblock_validity}, {@data_err_abort}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@auto_da_alloc}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) getdents64(r0, 0x0, 0x2e) kernel console output (not intermixed with test programs): 225745][ T4685] ? should_fail_ex+0xd7/0x230 [ 58.230532][ T4685] __get_vm_area_node+0x15e/0x1b0 [ 58.235566][ T4685] __vmalloc_node_range_noprof+0x2c3/0xec0 [ 58.241380][ T4685] ? bpf_prog_alloc_no_stats+0x49/0x360 [ 58.246974][ T4685] ? mntput_no_expire+0x70/0x3c0 [ 58.251930][ T4685] ? avc_has_perm_noaudit+0x1cc/0x210 [ 58.257366][ T4685] ? selinux_capable+0x1f2/0x260 [ 58.262318][ T4685] ? bpf_prog_alloc_no_stats+0x49/0x360 [ 58.268059][ T4685] __vmalloc_noprof+0x5e/0x70 [ 58.272886][ T4685] ? bpf_prog_alloc_no_stats+0x49/0x360 [ 58.278461][ T4685] bpf_prog_alloc_no_stats+0x49/0x360 [ 58.283965][ T4685] ? bpf_prog_alloc+0x28/0x150 [ 58.288878][ T4685] bpf_prog_alloc+0x3a/0x150 [ 58.293498][ T4685] bpf_prog_load+0x4d1/0x1070 [ 58.298237][ T4685] ? __rcu_read_unlock+0x4e/0x70 [ 58.303232][ T4685] __sys_bpf+0x463/0x7a0 [ 58.307497][ T4685] __x64_sys_bpf+0x43/0x50 [ 58.311950][ T4685] x64_sys_call+0x2625/0x2d60 [ 58.316717][ T4685] do_syscall_64+0xc9/0x1c0 [ 58.321235][ T4685] ? clear_bhb_loop+0x55/0xb0 [ 58.326196][ T4685] ? clear_bhb_loop+0x55/0xb0 [ 58.330954][ T4685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.336923][ T4685] RIP: 0033:0x7f01d6f8dff9 [ 58.341407][ T4685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.361114][ T4685] RSP: 002b:00007f01d5c07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 58.369539][ T4685] RAX: ffffffffffffffda RBX: 00007f01d7145f80 RCX: 00007f01d6f8dff9 [ 58.377611][ T4685] RDX: 000000000000001a RSI: 00000000200001c0 RDI: 0000000000000005 [ 58.385598][ T4685] RBP: 00007f01d5c07090 R08: 0000000000000000 R09: 0000000000000000 [ 58.393576][ T4685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.401592][ T4685] R13: 0000000000000000 R14: 00007f01d7145f80 R15: 00007fff09e19478 [ 58.409677][ T4685] [ 58.412783][ T4688] CPU: 0 UID: 0 PID: 4688 Comm: syz.0.396 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 58.423420][ T4688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 58.433522][ T4688] Call Trace: [ 58.436863][ T4688] [ 58.439888][ T4688] dump_stack_lvl+0xf2/0x150 [ 58.444574][ T4688] dump_stack+0x15/0x20 [ 58.448860][ T4688] should_fail_ex+0x223/0x230 [ 58.453615][ T4688] ? getname_flags+0x81/0x3b0 [ 58.458450][ T4688] should_failslab+0x8f/0xb0 [ 58.463072][ T4688] kmem_cache_alloc_noprof+0x4c/0x290 [ 58.468539][ T4688] getname_flags+0x81/0x3b0 [ 58.473190][ T4688] __x64_sys_mkdirat+0x41/0x60 [ 58.478010][ T4688] x64_sys_call+0x2cd3/0x2d60 [ 58.482719][ T4688] do_syscall_64+0xc9/0x1c0 [ 58.487269][ T4688] ? clear_bhb_loop+0x55/0xb0 [ 58.492163][ T4688] ? clear_bhb_loop+0x55/0xb0 [ 58.497148][ T4688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.503082][ T4688] RIP: 0033:0x7f9c80dadff9 [ 58.507548][ T4688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.527752][ T4688] RSP: 002b:00007f9c7fa06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 58.536198][ T4688] RAX: ffffffffffffffda RBX: 00007f9c80f66058 RCX: 00007f9c80dadff9 [ 58.544293][ T4688] RDX: 0000000000000000 RSI: 0000000020002040 RDI: ffffffffffffff9c [ 58.552268][ T4688] RBP: 00007f9c7fa06090 R08: 0000000000000000 R09: 0000000000000000 [ 58.560351][ T4688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.568475][ T4688] R13: 0000000000000001 R14: 00007f9c80f66058 R15: 00007ffdf6945368 [ 58.576465][ T4688] [ 58.618377][ T4698] Driver unsupported XDP return value 0 on prog (id 375) dev N/A, expect packet loss! [ 58.646670][ T4704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.408'. [ 58.668410][ T4698] netlink: 'syz.1.398': attribute type 4 has an invalid length. [ 58.691577][ T4698] netlink: 25 bytes leftover after parsing attributes in process `syz.1.398'. [ 58.744609][ T4719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.412'. [ 58.753021][ T4723] netlink: 56 bytes leftover after parsing attributes in process `syz.2.414'. [ 58.760042][ T4719] selinux_netlink_send: 54 callbacks suppressed [ 58.760123][ T4719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4719 comm=syz.0.412 [ 58.783911][ T4719] lo speed is unknown, defaulting to 1000 [ 58.789727][ T4719] lo speed is unknown, defaulting to 1000 [ 58.795616][ T4719] lo speed is unknown, defaulting to 1000 [ 58.802121][ T4719] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 58.809947][ T4719] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 58.822665][ T4725] No such timeout policy "syz0" [ 58.829442][ T4719] lo speed is unknown, defaulting to 1000 [ 58.835721][ T4719] lo speed is unknown, defaulting to 1000 [ 58.843639][ T4719] lo speed is unknown, defaulting to 1000 [ 58.849882][ T4719] lo speed is unknown, defaulting to 1000 [ 58.856100][ T4719] lo speed is unknown, defaulting to 1000 [ 58.917768][ T4725] loop1: detected capacity change from 0 to 8192 [ 58.929735][ T4725] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.943710][ T4725] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 58.952758][ T4725] FAT-fs (loop1): Filesystem has been set read-only [ 58.980133][ T4735] netlink: 100 bytes leftover after parsing attributes in process `+}[@'. [ 58.992818][ T4735] loop0: detected capacity change from 0 to 512 [ 58.999563][ T4735] EXT4-fs: Ignoring removed oldalloc option [ 59.007492][ T4735] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm +}[@: Parent and EA inode have the same ino 15 [ 59.021122][ T4735] EXT4-fs (loop0): Remounting filesystem read-only [ 59.027680][ T4735] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 59.038002][ T4735] EXT4-fs (loop0): 1 orphan inode deleted [ 59.045606][ T4735] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 59.071421][ T4744] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 59.100146][ T4746] FAULT_INJECTION: forcing a failure. [ 59.100146][ T4746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.113352][ T4746] CPU: 0 UID: 0 PID: 4746 Comm: syz.1.423 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 59.124025][ T4746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 59.134220][ T4746] Call Trace: [ 59.137558][ T4746] [ 59.140542][ T4746] dump_stack_lvl+0xf2/0x150 [ 59.145219][ T4746] dump_stack+0x15/0x20 [ 59.149412][ T4746] should_fail_ex+0x223/0x230 [ 59.154133][ T4746] should_fail+0xb/0x10 [ 59.158430][ T4746] should_fail_usercopy+0x1a/0x20 [ 59.163581][ T4746] _copy_from_user+0x1e/0xd0 [ 59.168760][ T4746] copy_msghdr_from_user+0x54/0x2a0 [ 59.174065][ T4746] __sys_sendmsg+0x171/0x270 [ 59.178763][ T4746] __x64_sys_sendmsg+0x46/0x50 [ 59.183644][ T4746] x64_sys_call+0x2689/0x2d60 [ 59.188418][ T4746] do_syscall_64+0xc9/0x1c0 [ 59.193052][ T4746] ? clear_bhb_loop+0x55/0xb0 [ 59.197803][ T4746] ? clear_bhb_loop+0x55/0xb0 [ 59.202525][ T4746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.208923][ T4746] RIP: 0033:0x7fb0c79ddff9 [ 59.213379][ T4746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.233018][ T4746] RSP: 002b:00007fb0c6657038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.241599][ T4746] RAX: ffffffffffffffda RBX: 00007fb0c7b95f80 RCX: 00007fb0c79ddff9 [ 59.250427][ T4746] RDX: 0000000000000010 RSI: 0000000020000300 RDI: 0000000000000006 [ 59.258425][ T4746] RBP: 00007fb0c6657090 R08: 0000000000000000 R09: 0000000000000000 [ 59.266503][ T4746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.274671][ T4746] R13: 0000000000000000 R14: 00007fb0c7b95f80 R15: 00007ffdf4c130c8 [ 59.282667][ T4746] [ 59.303053][ T4748] mmap: syz.1.424 (4748) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 59.559800][ T4754] loop3: detected capacity change from 0 to 512 [ 59.748808][ T4754] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.787904][ T4754] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #19: comm syz.3.426: corrupted inode contents [ 59.818531][ T4754] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #19: comm syz.3.426: mark_inode_dirty error [ 59.839186][ T4754] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #19: comm syz.3.426: corrupted inode contents [ 59.854342][ T4735] +}[@ invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 59.858087][ T4754] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #19: comm syz.3.426: mark_inode_dirty error [ 59.868068][ T4735] CPU: 0 UID: 0 PID: 4735 Comm: +}[@ Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 59.890390][ T4735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 59.893612][ T4754] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #19: comm syz.3.426: mark inode dirty (error -117) [ 59.900639][ T4735] Call Trace: [ 59.900652][ T4735] [ 59.900661][ T4735] dump_stack_lvl+0xf2/0x150 [ 59.900693][ T4735] dump_stack+0x15/0x20 [ 59.900718][ T4735] dump_header+0x83/0x2d0 [ 59.900754][ T4735] oom_kill_process+0x341/0x4c0 [ 59.916389][ T4754] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 59.916601][ T4735] out_of_memory+0x9af/0xbe0 [ 59.951159][ T4735] ? css_next_descendant_pre+0x11c/0x140 [ 59.956887][ T4735] mem_cgroup_out_of_memory+0x13e/0x190 [ 59.962490][ T4735] try_charge_memcg+0x51b/0x810 [ 59.967629][ T4735] obj_cgroup_charge_pages+0xbd/0x1a0 [ 59.973192][ T4735] __memcg_kmem_charge_page+0x9d/0x170 [ 59.978687][ T4735] __alloc_pages_noprof+0x1bc/0x340 [ 59.983959][ T4735] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 59.989454][ T4735] alloc_pages_noprof+0xe1/0x100 [ 59.994426][ T4735] __vmalloc_node_range_noprof+0x72e/0xec0 [ 60.000348][ T4735] __kvmalloc_node_noprof+0x121/0x170 [ 60.005930][ T4735] ? ip_set_alloc+0x1f/0x30 [ 60.010542][ T4735] ip_set_alloc+0x1f/0x30 [ 60.014888][ T4735] hash_netiface_create+0x273/0x730 [ 60.020118][ T4735] ? __nla_parse+0x40/0x60 [ 60.024709][ T4735] ? __pfx_hash_netiface_create+0x10/0x10 [ 60.030461][ T4735] ip_set_create+0x359/0x8a0 [ 60.035095][ T4735] ? memchr+0x21/0x50 [ 60.039191][ T4735] ? __nla_parse+0x40/0x60 [ 60.043659][ T4735] nfnetlink_rcv_msg+0x4a9/0x570 [ 60.048724][ T4735] netlink_rcv_skb+0x12c/0x230 [ 60.053599][ T4735] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 60.059123][ T4735] nfnetlink_rcv+0x16c/0x15c0 [ 60.063947][ T4735] ? kmem_cache_free+0xdc/0x2d0 [ 60.069008][ T4735] ? nlmon_xmit+0x51/0x60 [ 60.073352][ T4735] ? __kfree_skb+0x102/0x150 [ 60.077966][ T4735] ? consume_skb+0x49/0x160 [ 60.082513][ T4735] ? nlmon_xmit+0x51/0x60 [ 60.086898][ T4735] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 60.092290][ T4735] ? __dev_queue_xmit+0xb4c/0x2040 [ 60.097749][ T4735] ? ref_tracker_free+0x3a5/0x410 [ 60.102790][ T4735] ? __dev_queue_xmit+0x161/0x2040 [ 60.108169][ T4735] ? ref_tracker_alloc+0x1f5/0x2f0 [ 60.113297][ T4735] ? __netlink_deliver_tap+0x495/0x4c0 [ 60.118774][ T4735] netlink_unicast+0x599/0x670 [ 60.123567][ T4735] netlink_sendmsg+0x5cc/0x6e0 [ 60.128413][ T4735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.133896][ T4735] __sock_sendmsg+0x140/0x180 [ 60.138747][ T4735] ____sys_sendmsg+0x312/0x410 [ 60.143564][ T4735] __sys_sendmsg+0x1d9/0x270 [ 60.148328][ T4735] __x64_sys_sendmsg+0x46/0x50 [ 60.153120][ T4735] x64_sys_call+0x2689/0x2d60 [ 60.157924][ T4735] do_syscall_64+0xc9/0x1c0 [ 60.162454][ T4735] ? clear_bhb_loop+0x55/0xb0 [ 60.167155][ T4735] ? clear_bhb_loop+0x55/0xb0 [ 60.171850][ T4735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.177912][ T4735] RIP: 0033:0x7f9c80dadff9 [ 60.182363][ T4735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.202097][ T4735] RSP: 002b:00007f9c7fa27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.210546][ T4735] RAX: ffffffffffffffda RBX: 00007f9c80f65f80 RCX: 00007f9c80dadff9 [ 60.218633][ T4735] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 60.226738][ T4735] RBP: 00007f9c80e20296 R08: 0000000000000000 R09: 0000000000000000 [ 60.234734][ T4735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.242780][ T4735] R13: 0000000000000000 R14: 00007f9c80f65f80 R15: 00007ffdf6945368 [ 60.251274][ T4735] [ 60.254584][ T4735] memory: usage 307200kB, limit 307200kB, failcnt 142 [ 60.261812][ T4735] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 60.269794][ T4735] kmem: usage 306764kB, limit 9007199254740988kB, failcnt 0 [ 60.277180][ T4735] Memory cgroup stats for /syz0: [ 60.277525][ T4735] cache 434176 [ 60.285887][ T4735] rss 0 [ 60.288735][ T4735] shmem 0 [ 60.291826][ T4735] mapped_file 434176 [ 60.295798][ T4735] dirty 434176 [ 60.299279][ T4735] writeback 0 [ 60.303013][ T4735] workingset_refault_anon 23 [ 60.308516][ T4735] workingset_refault_file 0 [ 60.313319][ T4735] swap 188416 [ 60.316874][ T4735] swapcached 12288 [ 60.320911][ T4735] pgpgin 24617 [ 60.324370][ T4735] pgpgout 24508 [ 60.327981][ T4735] pgfault 30532 [ 60.331531][ T4735] pgmajfault 15 [ 60.335429][ T4735] inactive_anon 0 [ 60.339097][ T4735] active_anon 12288 [ 60.343203][ T4735] inactive_file 0 [ 60.347037][ T4735] active_file 434176 [ 60.351427][ T4735] unevictable 0 [ 60.354886][ T4735] hierarchical_memory_limit 314572800 [ 60.360427][ T4735] hierarchical_memsw_limit 9223372036854771712 [ 60.366705][ T4735] total_cache 434176 [ 60.370660][ T4735] total_rss 0 [ 60.374049][ T4735] total_shmem 0 [ 60.377579][ T4735] total_mapped_file 434176 [ 60.382061][ T4735] total_dirty 434176 [ 60.385952][ T4735] total_writeback 0 [ 60.389792][ T4735] total_workingset_refault_anon 23 [ 60.397427][ T4735] total_workingset_refault_file 0 [ 60.402481][ T4735] total_swap 188416 [ 60.406282][ T4735] total_swapcached 12288 [ 60.410623][ T4735] total_pgpgin 24617 [ 60.414531][ T4735] total_pgpgout 24508 [ 60.418513][ T4735] total_pgfault 30532 [ 60.422628][ T4735] total_pgmajfault 15 [ 60.426723][ T4735] total_inactive_anon 0 [ 60.430928][ T4735] total_active_anon 12288 [ 60.435279][ T4735] total_inactive_file 0 [ 60.439543][ T4735] total_active_file 434176 [ 60.443991][ T4735] total_unevictable 0 [ 60.447982][ T4735] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.419,pid=4734,uid=0 [ 60.462632][ T4735] Memory cgroup out of memory: Killed process 4734 (syz.0.419) total-vm:86984kB, anon-rss:740kB, file-rss:16292kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 60.607936][ T4774] FAULT_INJECTION: forcing a failure. [ 60.607936][ T4774] name failslab, interval 1, probability 0, space 0, times 0 [ 60.622708][ T4774] CPU: 0 UID: 0 PID: 4774 Comm: syz.2.432 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 60.633444][ T4774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 60.643622][ T4774] Call Trace: [ 60.646986][ T4774] [ 60.649923][ T4774] dump_stack_lvl+0xf2/0x150 [ 60.654651][ T4774] dump_stack+0x15/0x20 [ 60.658888][ T4774] should_fail_ex+0x223/0x230 [ 60.663617][ T4774] ? qdisc_get_rtab+0x1a3/0x2c0 [ 60.668597][ T4774] should_failslab+0x8f/0xb0 [ 60.673697][ T4774] __kmalloc_cache_noprof+0x4b/0x2a0 [ 60.679093][ T4774] qdisc_get_rtab+0x1a3/0x2c0 [ 60.684236][ T4774] tbf_change+0x172/0xca0 [ 60.688589][ T4774] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 60.694127][ T4774] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 60.699964][ T4774] ? rtnetlink_rcv+0x1c/0x30 [ 60.704578][ T4774] ? netlink_unicast+0x599/0x670 [ 60.709624][ T4774] ? netlink_sendmsg+0x5cc/0x6e0 [ 60.714658][ T4774] ? __sock_sendmsg+0x140/0x180 [ 60.719543][ T4774] ? ____sys_sendmsg+0x312/0x410 [ 60.724528][ T4774] ? __sys_sendmsg+0x1d9/0x270 [ 60.729373][ T4774] ? __x64_sys_sendmsg+0x46/0x50 [ 60.734455][ T4774] ? read_tsc+0x9/0x20 [ 60.738638][ T4774] tbf_init+0x72/0x90 [ 60.742726][ T4774] ? __pfx_tbf_init+0x10/0x10 [ 60.747420][ T4774] qdisc_create+0x6c1/0xae0 [ 60.751934][ T4774] ? __nla_parse+0x40/0x60 [ 60.756993][ T4774] tc_modify_qdisc+0x65f/0x1050 [ 60.762358][ T4774] ? ns_capable+0x7d/0xb0 [ 60.766814][ T4774] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 60.772274][ T4774] rtnetlink_rcv_msg+0x6aa/0x710 [ 60.777501][ T4774] ? ref_tracker_free+0x3a5/0x410 [ 60.783118][ T4774] ? __dev_queue_xmit+0x161/0x2040 [ 60.788259][ T4774] ? ref_tracker_alloc+0x1f5/0x2f0 [ 60.793538][ T4774] netlink_rcv_skb+0x12c/0x230 [ 60.798773][ T4774] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 60.804347][ T4774] rtnetlink_rcv+0x1c/0x30 [ 60.808925][ T4774] netlink_unicast+0x599/0x670 [ 60.813873][ T4774] netlink_sendmsg+0x5cc/0x6e0 [ 60.818932][ T4774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.824436][ T4774] __sock_sendmsg+0x140/0x180 [ 60.829382][ T4774] ____sys_sendmsg+0x312/0x410 [ 60.834445][ T4774] __sys_sendmsg+0x1d9/0x270 [ 60.839119][ T4774] __x64_sys_sendmsg+0x46/0x50 [ 60.843955][ T4774] x64_sys_call+0x2689/0x2d60 [ 60.849041][ T4774] do_syscall_64+0xc9/0x1c0 [ 60.853675][ T4774] ? clear_bhb_loop+0x55/0xb0 [ 60.858482][ T4774] ? clear_bhb_loop+0x55/0xb0 [ 60.863180][ T4774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.869308][ T4774] RIP: 0033:0x7f7f34d1dff9 [ 60.873816][ T4774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.893934][ T4774] RSP: 002b:00007f7f33997038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.902661][ T4774] RAX: ffffffffffffffda RBX: 00007f7f34ed5f80 RCX: 00007f7f34d1dff9 [ 60.910783][ T4774] RDX: 0000000000000000 RSI: 0000000020001200 RDI: 0000000000000006 [ 60.918759][ T4774] RBP: 00007f7f33997090 R08: 0000000000000000 R09: 0000000000000000 [ 60.926817][ T4774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.934984][ T4774] R13: 0000000000000000 R14: 00007f7f34ed5f80 R15: 00007ffc0e27c858 [ 60.943331][ T4774] [ 60.946554][ T4774] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 60.979830][ T4776] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 60.992145][ T29] kauditd_printk_skb: 902 callbacks suppressed [ 60.992162][ T29] audit: type=1326 audit(1729099780.578:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.4.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d6f8dff9 code=0x7ffc0000 [ 61.022387][ T29] audit: type=1326 audit(1729099780.578:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.4.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d6f8dff9 code=0x7ffc0000 [ 61.047350][ T29] audit: type=1326 audit(1729099780.578:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.4.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01d6f8dff9 code=0x7ffc0000 [ 61.072035][ T29] audit: type=1326 audit(1729099780.578:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.4.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d6f8dff9 code=0x7ffc0000 [ 61.095581][ T29] audit: type=1326 audit(1729099780.578:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.4.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d6f8dff9 code=0x7ffc0000 [ 61.119160][ T29] audit: type=1326 audit(1729099780.578:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.4.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01d6f8dff9 code=0x7ffc0000 [ 61.143473][ T29] audit: type=1326 audit(1729099780.578:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.4.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d6f8dff9 code=0x7ffc0000 [ 61.160923][ T4787] loop2: detected capacity change from 0 to 1024 [ 61.167151][ T29] audit: type=1326 audit(1729099780.658:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.4.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01d6f8dff9 code=0x7ffc0000 [ 61.195062][ T4787] EXT4-fs: Ignoring removed i_version option [ 61.197176][ T29] audit: type=1326 audit(1729099780.658:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.4.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d6f8dff9 code=0x7ffc0000 [ 61.218030][ T4789] syz.1.438[4789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.226500][ T29] audit: type=1326 audit(1729099780.658:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.4.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01d6f8dff9 code=0x7ffc0000 [ 61.260946][ T4787] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.261310][ T4789] syz.1.438[4789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.270328][ T4789] syz.1.438[4789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.282951][ T4789] FAULT_INJECTION: forcing a failure. [ 61.282951][ T4789] name failslab, interval 1, probability 0, space 0, times 0 [ 61.308294][ T4789] CPU: 1 UID: 0 PID: 4789 Comm: syz.1.438 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 61.319902][ T4789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 61.330714][ T4789] Call Trace: [ 61.334215][ T4789] [ 61.337191][ T4789] dump_stack_lvl+0xf2/0x150 [ 61.342008][ T4789] dump_stack+0x15/0x20 [ 61.346214][ T4789] should_fail_ex+0x223/0x230 [ 61.351022][ T4789] ? mas_alloc_nodes+0x1d3/0x4a0 [ 61.355979][ T4789] should_failslab+0x8f/0xb0 [ 61.361076][ T4789] kmem_cache_alloc_noprof+0x4c/0x290 [ 61.368168][ T4789] mas_alloc_nodes+0x1d3/0x4a0 [ 61.372965][ T4789] mas_preallocate+0x449/0x650 [ 61.378141][ T4789] __split_vma+0x244/0x6a0 [ 61.382702][ T4789] vms_gather_munmap_vmas+0x175/0x7a0 [ 61.388900][ T4789] ? mas_walk+0x204/0x320 [ 61.393559][ T4789] mmap_region+0x385/0x16e0 [ 61.398301][ T4789] do_mmap+0x718/0xb60 [ 61.402873][ T4789] vm_mmap_pgoff+0x133/0x290 [ 61.408211][ T4789] ksys_mmap_pgoff+0x286/0x330 [ 61.413203][ T4789] x64_sys_call+0x1884/0x2d60 [ 61.418332][ T4789] do_syscall_64+0xc9/0x1c0 [ 61.423557][ T4789] ? clear_bhb_loop+0x55/0xb0 [ 61.428461][ T4789] ? clear_bhb_loop+0x55/0xb0 [ 61.433351][ T4789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.439671][ T4789] RIP: 0033:0x7fb0c79ddff9 [ 61.444195][ T4789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.463997][ T4789] RSP: 002b:00007fb0c6657038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 61.472613][ T4789] RAX: ffffffffffffffda RBX: 00007fb0c7b95f80 RCX: 00007fb0c79ddff9 [ 61.480810][ T4789] RDX: 0000000000000001 RSI: 00007fffdf003000 RDI: 0000000020ffc000 [ 61.489323][ T4789] RBP: 00007fb0c6657090 R08: 0000000000000005 R09: 0000000000000000 [ 61.497498][ T4789] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 61.505480][ T4789] R13: 0000000000000000 R14: 00007fb0c7b95f80 R15: 00007ffdf4c130c8 [ 61.513581][ T4789] [ 61.540739][ T4796] loop0: detected capacity change from 0 to 512 [ 61.541807][ T4797] loop1: detected capacity change from 0 to 512 [ 61.562476][ T4797] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.574943][ T4796] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.639925][ T4796] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #19: comm syz.0.440: corrupted inode contents [ 61.653499][ T4796] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #19: comm syz.0.440: mark_inode_dirty error [ 61.665905][ T4797] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #19: comm syz.1.441: corrupted inode contents [ 61.680029][ T4797] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #19: comm syz.1.441: mark_inode_dirty error [ 61.693716][ T4797] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #19: comm syz.1.441: corrupted inode contents [ 61.700587][ T4796] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #19: comm syz.0.440: corrupted inode contents [ 61.706169][ T4797] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3006: inode #19: comm syz.1.441: mark_inode_dirty error [ 61.722431][ T4796] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3006: inode #19: comm syz.0.440: mark_inode_dirty error [ 61.732248][ T4797] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3009: inode #19: comm syz.1.441: mark inode dirty (error -117) [ 61.742036][ T4796] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3009: inode #19: comm syz.0.440: mark inode dirty (error -117) [ 61.768074][ T4796] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 61.779744][ T4797] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 61.864695][ T4814] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 61.876582][ T4812] loop1: detected capacity change from 0 to 2048 [ 61.901450][ T4821] netlink: 64 bytes leftover after parsing attributes in process `syz.0.448'. [ 61.930809][ T4821] netlink: 'syz.0.448': attribute type 4 has an invalid length. [ 61.953875][ T985] lo speed is unknown, defaulting to 1000 [ 61.962641][ T4821] netlink: 'syz.0.448': attribute type 4 has an invalid length. [ 61.980676][ T3342] lo speed is unknown, defaulting to 1000 [ 61.990986][ T4831] netlink: 100 bytes leftover after parsing attributes in process `+}[@'. [ 62.019489][ T4831] loop1: detected capacity change from 0 to 512 [ 62.026337][ T4831] EXT4-fs: Ignoring removed oldalloc option [ 62.040162][ T4831] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm +}[@: Parent and EA inode have the same ino 15 [ 62.040695][ T4838] loop0: detected capacity change from 0 to 512 [ 62.053594][ T4831] EXT4-fs (loop1): Remounting filesystem read-only [ 62.065912][ T4831] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 62.079359][ T4831] EXT4-fs (loop1): 1 orphan inode deleted [ 62.085677][ T4831] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 62.087239][ T4840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'. [ 62.105424][ T4838] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.168682][ T4850] FAULT_INJECTION: forcing a failure. [ 62.168682][ T4850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.181877][ T4850] CPU: 1 UID: 0 PID: 4850 Comm: syz.4.459 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 62.192517][ T4850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 62.202653][ T4850] Call Trace: [ 62.205946][ T4850] [ 62.208894][ T4850] dump_stack_lvl+0xf2/0x150 [ 62.213579][ T4850] dump_stack+0x15/0x20 [ 62.217835][ T4850] should_fail_ex+0x223/0x230 [ 62.222577][ T4850] should_fail+0xb/0x10 [ 62.226849][ T4850] should_fail_usercopy+0x1a/0x20 [ 62.231942][ T4850] _copy_from_user+0x1e/0xd0 [ 62.236594][ T4850] copy_msghdr_from_user+0x54/0x2a0 [ 62.241876][ T4850] __sys_sendmsg+0x171/0x270 [ 62.246581][ T4850] __x64_sys_sendmsg+0x46/0x50 [ 62.251585][ T4850] x64_sys_call+0x2689/0x2d60 [ 62.256290][ T4850] do_syscall_64+0xc9/0x1c0 [ 62.260826][ T4850] ? clear_bhb_loop+0x55/0xb0 [ 62.265717][ T4850] ? clear_bhb_loop+0x55/0xb0 [ 62.270448][ T4850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.276397][ T4850] RIP: 0033:0x7f01d6f8dff9 [ 62.280905][ T4850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.301186][ T4850] RSP: 002b:00007f01d5c07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.309803][ T4850] RAX: ffffffffffffffda RBX: 00007f01d7145f80 RCX: 00007f01d6f8dff9 [ 62.317888][ T4850] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000003 [ 62.325888][ T4850] RBP: 00007f01d5c07090 R08: 0000000000000000 R09: 0000000000000000 [ 62.333998][ T4850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.342035][ T4850] R13: 0000000000000000 R14: 00007f01d7145f80 R15: 00007fff09e19478 [ 62.350111][ T4850] [ 62.363992][ T4852] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #19: comm syz.0.455: corrupted inode contents [ 62.381017][ T4852] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #19: comm syz.0.455: mark_inode_dirty error [ 62.410352][ T4852] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #19: comm syz.0.455: corrupted inode contents [ 62.448857][ T4852] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3006: inode #19: comm syz.0.455: mark_inode_dirty error [ 62.483813][ T4852] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3009: inode #19: comm syz.0.455: mark inode dirty (error -117) [ 62.520640][ T4852] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 62.557203][ T4862] loop2: detected capacity change from 0 to 1024 [ 62.564039][ T4862] EXT4-fs: Ignoring removed orlov option [ 62.569957][ T4862] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.632903][ T4866] netlink: 132 bytes leftover after parsing attributes in process `syz.2.465'. [ 62.697341][ T4870] loop2: detected capacity change from 0 to 1024 [ 62.705786][ T4870] EXT4-fs: Ignoring removed bh option [ 62.745725][ T4870] lo speed is unknown, defaulting to 1000 [ 62.825192][ T4879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.468'. [ 62.862733][ T4879] random: crng reseeded on system resumption [ 62.959004][ T4884] loop1: detected capacity change from 0 to 512 [ 62.966262][ T4886] loop3: detected capacity change from 0 to 512 [ 62.972980][ T4884] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.981715][ T4886] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.991463][ T4884] EXT4-fs (loop1): orphan cleanup on readonly fs [ 62.993116][ T4886] EXT4-fs (loop3): orphan cleanup on readonly fs [ 62.998469][ T4884] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.470: bg 0: block 248: padding at end of block bitmap is not set [ 63.020845][ T4886] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.471: bg 0: block 248: padding at end of block bitmap is not set [ 63.029915][ T4892] netlink: 148 bytes leftover after parsing attributes in process `syz.2.473'. [ 63.035985][ T4884] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.470: Failed to acquire dquot type 1 [ 63.059760][ T4886] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.471: Failed to acquire dquot type 1 [ 63.064423][ T4884] EXT4-fs (loop1): 1 truncate cleaned up [ 63.072558][ T4886] EXT4-fs (loop3): 1 truncate cleaned up [ 63.106585][ T4894] loop2: detected capacity change from 0 to 512 [ 63.107542][ T4896] loop3: detected capacity change from 0 to 512 [ 63.120454][ T4894] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.121332][ T4896] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.142997][ T4896] EXT4-fs (loop3): 1 truncate cleaned up [ 63.153742][ T4894] EXT4-fs (loop2): 1 truncate cleaned up [ 63.162623][ T4894] FAULT_INJECTION: forcing a failure. [ 63.162623][ T4894] name failslab, interval 1, probability 0, space 0, times 0 [ 63.175889][ T4894] CPU: 0 UID: 0 PID: 4894 Comm: syz.2.474 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 63.186567][ T4894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 63.192368][ T4896] SELinux: Context system_u:object_r:auditd_var_run_t:s0 is not valid (left unmapped). [ 63.196632][ T4894] Call Trace: [ 63.196642][ T4894] [ 63.196656][ T4894] dump_stack_lvl+0xf2/0x150 [ 63.217254][ T4894] dump_stack+0x15/0x20 [ 63.221418][ T4894] should_fail_ex+0x223/0x230 [ 63.226166][ T4894] ? ext4_mb_new_blocks+0x2fc/0x2020 [ 63.231530][ T4894] should_failslab+0x8f/0xb0 [ 63.236180][ T4894] kmem_cache_alloc_noprof+0x4c/0x290 [ 63.241577][ T4894] ext4_mb_new_blocks+0x2fc/0x2020 [ 63.246822][ T4894] ? ext4_get_branch+0x323/0x3a0 [ 63.251788][ T4894] ? ext4_inode_to_goal_block+0x197/0x1f0 [ 63.257663][ T4894] ext4_ind_map_blocks+0xb3e/0x14a0 [ 63.262910][ T4894] ext4_map_blocks+0x54c/0xcf0 [ 63.267698][ T4894] ext4_convert_inline_data_nolock+0x2b2/0x780 [ 63.273887][ T4894] ? ext4_journal_check_start+0xf3/0x180 [ 63.279638][ T4894] ? __ext4_journal_start_sb+0x130/0x340 [ 63.285359][ T4894] ext4_convert_inline_data+0x2c2/0x370 [ 63.291044][ T4894] ext4_fallocate+0xac/0x1170 [ 63.295822][ T4894] vfs_fallocate+0x368/0x3b0 [ 63.300447][ T4894] do_vfs_ioctl+0x144b/0x1530 [ 63.305142][ T4894] ? __fget_files+0x1d4/0x210 [ 63.309839][ T4894] __se_sys_ioctl+0x81/0x140 [ 63.314542][ T4894] __x64_sys_ioctl+0x43/0x50 [ 63.319235][ T4894] x64_sys_call+0x15cc/0x2d60 [ 63.324077][ T4894] do_syscall_64+0xc9/0x1c0 [ 63.328665][ T4894] ? clear_bhb_loop+0x55/0xb0 [ 63.333388][ T4894] ? clear_bhb_loop+0x55/0xb0 [ 63.338178][ T4894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.344331][ T4894] RIP: 0033:0x7f7f34d1dff9 [ 63.348795][ T4894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.368552][ T4894] RSP: 002b:00007f7f33997038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.377102][ T4894] RAX: ffffffffffffffda RBX: 00007f7f34ed5f80 RCX: 00007f7f34d1dff9 [ 63.385133][ T4894] RDX: 0000000020000240 RSI: 0000000040305829 RDI: 0000000000000009 [ 63.393107][ T4894] RBP: 00007f7f33997090 R08: 0000000000000000 R09: 0000000000000000 [ 63.401097][ T4894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.409074][ T4894] R13: 0000000000000000 R14: 00007f7f34ed5f80 R15: 00007ffc0e27c858 [ 63.417285][ T4894] [ 63.431673][ T3269] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 63.452760][ T3269] EXT4-fs error (device loop3): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 63.473176][ T3269] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 63.494543][ T3269] EXT4-fs error (device loop3): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 63.515935][ T3269] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 63.539978][ T3269] EXT4-fs error (device loop3): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 63.561573][ T3269] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 63.583925][ T3269] EXT4-fs error (device loop3): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 63.611118][ T3269] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 63.632690][ T3269] EXT4-fs error (device loop3): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 63.658817][ T4911] loop2: detected capacity change from 0 to 512 [ 63.667665][ T4911] EXT4-fs: Ignoring removed oldalloc option [ 63.676217][ T4911] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm +}[@: Parent and EA inode have the same ino 15 [ 63.692303][ T4911] EXT4-fs (loop2): Remounting filesystem read-only [ 63.699530][ T4911] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 63.712639][ T4911] EXT4-fs (loop2): 1 orphan inode deleted [ 63.719683][ T4911] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 63.786726][ T4924] loop0: detected capacity change from 0 to 512 [ 63.812136][ T4924] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.827561][ T4924] hsr_slave_0: left promiscuous mode [ 63.834544][ T4924] hsr_slave_1: left promiscuous mode [ 63.879617][ T4927] Process accounting resumed [ 63.930278][ T4927] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 64.004202][ T3820] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.026453][ T4933] loop1: detected capacity change from 0 to 512 [ 64.043065][ T3820] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.062878][ T4936] loop0: detected capacity change from 0 to 512 [ 64.076414][ T4933] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.088719][ T4933] syz.1.490[4933] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.088848][ T4933] syz.1.490[4933] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.111128][ T4933] syz.1.490[4933] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.152563][ T4936] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.190035][ T3820] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.205501][ T4946] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.490: Failed to acquire dquot type 0 [ 64.254942][ T4951] loop0: detected capacity change from 0 to 512 [ 64.274501][ T3820] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.301552][ T4939] lo speed is unknown, defaulting to 1000 [ 64.353002][ T4951] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.379418][ T3820] bridge_slave_1: left allmulticast mode [ 64.385190][ T3820] bridge_slave_1: left promiscuous mode [ 64.390934][ T3820] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.398544][ T4951] FAULT_INJECTION: forcing a failure. [ 64.398544][ T4951] name failslab, interval 1, probability 0, space 0, times 0 [ 64.399171][ T4956] __nla_validate_parse: 1 callbacks suppressed [ 64.399191][ T4956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.494'. [ 64.411318][ T4951] CPU: 0 UID: 0 PID: 4951 Comm: syz.0.493 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 64.437405][ T4951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 64.447557][ T4951] Call Trace: [ 64.450854][ T4951] [ 64.453815][ T4951] dump_stack_lvl+0xf2/0x150 [ 64.458446][ T4951] dump_stack+0x15/0x20 [ 64.462663][ T4951] should_fail_ex+0x223/0x230 [ 64.467391][ T4951] ? getname_flags+0x81/0x3b0 [ 64.472167][ T4951] should_failslab+0x8f/0xb0 [ 64.476789][ T4951] kmem_cache_alloc_noprof+0x4c/0x290 [ 64.482286][ T4951] getname_flags+0x81/0x3b0 [ 64.486891][ T4951] user_path_at+0x26/0x110 [ 64.491422][ T4951] __x64_sys_listxattr+0x76/0x130 [ 64.496608][ T4951] x64_sys_call+0x1fbc/0x2d60 [ 64.501315][ T4951] do_syscall_64+0xc9/0x1c0 [ 64.505986][ T4951] ? clear_bhb_loop+0x55/0xb0 [ 64.510691][ T4951] ? clear_bhb_loop+0x55/0xb0 [ 64.515668][ T4951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.522860][ T4951] RIP: 0033:0x7f9c80dadff9 [ 64.527393][ T4951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.547395][ T4951] RSP: 002b:00007f9c7fa27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 64.555834][ T4951] RAX: ffffffffffffffda RBX: 00007f9c80f65f80 RCX: 00007f9c80dadff9 [ 64.563826][ T4951] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0 [ 64.571811][ T4951] RBP: 00007f9c7fa27090 R08: 0000000000000000 R09: 0000000000000000 [ 64.579852][ T4951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.588062][ T4951] R13: 0000000000000000 R14: 00007f9c80f65f80 R15: 00007ffdf6945368 [ 64.596073][ T4951] [ 64.601547][ T3820] bridge_slave_0: left allmulticast mode [ 64.607302][ T3820] bridge_slave_0: left promiscuous mode [ 64.613015][ T3820] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.653899][ T4959] random: crng reseeded on system resumption [ 64.739794][ T4963] loop4: detected capacity change from 0 to 512 [ 64.748559][ T4963] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.877326][ T4969] loop0: detected capacity change from 0 to 164 [ 64.890969][ T4969] iso9660: Unknown parameter '?º¬˜Û¬Z'mIÑ„éLv¥/ȃ¦îú?Ù¯ðUƒK#°¶òÊÄ/–©flª^lXí|šÁ(é…d&%¢è8®ÏåðÛœSá27'•Dj AÆ%®ŒÒ+vÞJÙ­6Xx$1Q„{ájáàRúéñ)wCîEô³8FÓúhUºe u)žøN¾±Ð$‰0Èáµ²µ¡¼µÄ[š`Œ×è¡KMI<„–LÆx b6S³oê' [ 64.922058][ T3820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.942422][ C1] ------------[ cut here ]------------ [ 64.944443][ T3820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.948626][ C1] refcount_t: underflow; use-after-free. [ 64.948882][ C1] WARNING: CPU: 1 PID: 23 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 64.972693][ C1] Modules linked in: [ 64.976651][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 64.987399][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 64.997524][ C1] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 65.004126][ C1] Code: 72 ff ff ff e8 8b 85 71 ff 48 c7 c7 3e d9 b2 86 e8 2f 6b 8a ff c6 05 f6 30 f4 04 01 90 48 c7 c7 85 a2 1b 86 e8 8b 4b 53 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 5c 85 71 ff 48 c7 c7 3b d9 b2 86 e8 [ 65.024408][ C1] RSP: 0018:ffffc900000cf9e8 EFLAGS: 00010246 [ 65.030991][ C1] RAX: 67276a86afb5a100 RBX: ffff88812bcc30e4 RCX: ffff888100f92100 [ 65.039663][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.047967][ C1] RBP: 0000000000000003 R08: ffffffff8111f547 R09: 0000000000000000 [ 65.056020][ C1] R10: 0001ffffffffffff R11: 0001c900000cf8e0 R12: 0000000000000001 [ 65.064184][ C1] R13: ffff8881149c5200 R14: ffff88812bcc30e4 R15: 0000000000000000 [ 65.072537][ C1] FS: 0000000000000000(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 65.082426][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.089513][ C1] CR2: 0000000000000000 CR3: 000000012914e000 CR4: 00000000003506f0 [ 65.097642][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.105771][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.113821][ C1] Call Trace: [ 65.117340][ C1] [ 65.120456][ C1] ? __warn+0x141/0x350 [ 65.124688][ C1] ? report_bug+0x315/0x420 [ 65.129307][ C1] ? refcount_warn_saturate+0x1c6/0x230 [ 65.134906][ C1] ? handle_bug+0x60/0x90 [ 65.139362][ C1] ? exc_invalid_op+0x1a/0x50 [ 65.144283][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 65.149476][ C1] ? __warn_printk+0x167/0x1b0 [ 65.154404][ C1] ? refcount_warn_saturate+0x1c6/0x230 [ 65.160114][ C1] ? refcount_warn_saturate+0x1c5/0x230 [ 65.165743][ C1] sk_skb_reason_drop+0xe9/0x290 [ 65.170790][ C1] j1939_xtp_rx_cts+0x3c4/0x6c0 [ 65.175983][ C1] j1939_tp_recv+0x699/0xa80 [ 65.180670][ C1] j1939_can_recv+0x45f/0x550 [ 65.185647][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 65.191065][ C1] can_rcv_filter+0x225/0x4c0 [ 65.196150][ C1] can_receive+0x182/0x1f0 [ 65.200727][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 65.205621][ C1] can_rcv+0xe7/0x180 [ 65.210021][ C1] ? __pfx_can_rcv+0x10/0x10 [ 65.215667][ C1] __netif_receive_skb+0x123/0x280 [ 65.220986][ C1] process_backlog+0x22e/0x440 [ 65.226659][ C1] __napi_poll+0x63/0x3c0 [ 65.231523][ C1] ? net_rx_action+0x376/0x7f0 [ 65.236353][ C1] net_rx_action+0x3a1/0x7f0 [ 65.241424][ C1] handle_softirqs+0xbf/0x280 [ 65.246863][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 65.252967][ C1] run_ksoftirqd+0x1c/0x30 [ 65.257537][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 65.263518][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 65.269430][ C1] kthread+0x1d1/0x210 [ 65.273944][ C1] ? __pfx_kthread+0x10/0x10 [ 65.278602][ C1] ret_from_fork+0x4b/0x60 [ 65.283317][ C1] ? __pfx_kthread+0x10/0x10 [ 65.288072][ C1] ret_from_fork_asm+0x1a/0x30 [ 65.293154][ C1] [ 65.296218][ C1] ---[ end trace 0000000000000000 ]--- [ 65.310723][ T3820] bond0 (unregistering): Released all slaves [ 65.327433][ T4939] chnl_net:caif_netlink_parms(): no params data found [ 65.397096][ T4974] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 65.476176][ T4939] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.483530][ T4939] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.513125][ T4939] bridge_slave_0: entered allmulticast mode [ 65.536495][ T4939] bridge_slave_0: entered promiscuous mode [ 65.561757][ T4939] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.568940][ T4939] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.581811][ T4939] bridge_slave_1: entered allmulticast mode [ 65.594743][ T4939] bridge_slave_1: entered promiscuous mode [ 65.640689][ T4972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.497'. [ 65.656937][ T3820] hsr_slave_0: left promiscuous mode [ 65.663197][ T3820] hsr_slave_1: left promiscuous mode [ 65.672327][ T3820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.680095][ T3820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.688597][ T3820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.696650][ T3820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.697320][ T4986] loop4: detected capacity change from 0 to 4096 [ 65.714501][ T3820] veth1_macvtap: left promiscuous mode [ 65.720233][ T3820] veth0_macvtap: left promiscuous mode [ 65.725839][ T3820] veth1_vlan: left promiscuous mode [ 65.731250][ T3820] veth0_vlan: left promiscuous mode [ 65.852839][ T3820] team0 (unregistering): Port device team_slave_1 removed [ 65.865819][ T3820] team0 (unregistering): Port device team_slave_0 removed [ 65.902257][ T4992] loop4: detected capacity change from 0 to 512 [ 65.911794][ T4939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.924618][ T4939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.942434][ T4992] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.965236][ T4994] loop1: detected capacity change from 0 to 1024 [ 65.976518][ T4939] team0: Port device team_slave_0 added [ 65.983282][ T4939] team0: Port device team_slave_1 added [ 65.985600][ T4994] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 65.998757][ T4994] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 66.008586][ T4994] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 66.021292][ T4994] EXT4-fs error (device loop1): ext4_get_journal_inode:5762: inode #5: comm syz.1.503: unexpected bad inode w/o EXT4_IGET_BAD [ 66.040102][ T4939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.047131][ T4939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.073221][ T4939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.083903][ T4994] EXT4-fs (loop1): no journal found [ 66.089178][ T4994] EXT4-fs (loop1): can't get journal size [ 66.091280][ T4939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.101940][ T4939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.104028][ T4994] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.503: bg 0: block 32: padding at end of block bitmap is not set [ 66.127989][ T4939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.153203][ T4994] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 66.171806][ T5006] netlink: 16 bytes leftover after parsing attributes in process `syz.0.506'. [ 66.193648][ T4939] hsr_slave_0: entered promiscuous mode [ 66.205139][ T4939] hsr_slave_1: entered promiscuous mode [ 66.221568][ T4939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.229339][ T29] kauditd_printk_skb: 474 callbacks suppressed [ 66.229376][ T29] audit: type=1326 audit(1729099785.808:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5003 comm="syz.0.506" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c80dadff9 code=0x0 [ 66.239364][ T4939] Cannot create hsr debugfs directory [ 66.428072][ T5029] loop1: detected capacity change from 0 to 8192 [ 66.436458][ T29] audit: type=1400 audit(1729099786.018:2880): avc: denied { mount } for pid=5028 comm="syz.1.513" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 66.438519][ T5029] FAULT_INJECTION: forcing a failure. [ 66.438519][ T5029] name failslab, interval 1, probability 0, space 0, times 0 [ 66.471378][ T5029] CPU: 1 UID: 0 PID: 5029 Comm: syz.1.513 Tainted: G W 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 66.483497][ T5029] Tainted: [W]=WARN [ 66.487311][ T5029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 66.497600][ T5029] Call Trace: [ 66.500878][ T5029] [ 66.503897][ T5029] dump_stack_lvl+0xf2/0x150 [ 66.508515][ T5029] dump_stack+0x15/0x20 [ 66.512669][ T5029] should_fail_ex+0x223/0x230 [ 66.517389][ T5029] ? iter_file_splice_write+0x102/0x980 [ 66.522970][ T5029] should_failslab+0x8f/0xb0 [ 66.527635][ T5029] __kmalloc_noprof+0xa5/0x370 [ 66.532472][ T5029] iter_file_splice_write+0x102/0x980 [ 66.537870][ T5029] ? __pfx_iter_file_splice_write+0x10/0x10 [ 66.543792][ T5029] direct_splice_actor+0x160/0x2c0 [ 66.548957][ T5029] splice_direct_to_actor+0x302/0x670 [ 66.554339][ T5029] ? __pfx_direct_splice_actor+0x10/0x10 [ 66.560188][ T5029] do_splice_direct+0xd7/0x150 [ 66.564987][ T5029] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 66.570894][ T5029] do_sendfile+0x39b/0x970 [ 66.575329][ T5029] __x64_sys_sendfile64+0xbd/0x150 [ 66.580455][ T5029] x64_sys_call+0xed5/0x2d60 [ 66.585129][ T5029] do_syscall_64+0xc9/0x1c0 [ 66.589660][ T5029] ? clear_bhb_loop+0x55/0xb0 [ 66.594437][ T5029] ? clear_bhb_loop+0x55/0xb0 [ 66.599344][ T5029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.605308][ T5029] RIP: 0033:0x7fb0c79ddff9 [ 66.609754][ T5029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.630435][ T5029] RSP: 002b:00007fb0c6657038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 66.638948][ T5029] RAX: ffffffffffffffda RBX: 00007fb0c7b95f80 RCX: 00007fb0c79ddff9 [ 66.647040][ T5029] RDX: 0000000020000240 RSI: 0000000000000004 RDI: 0000000000000004 [ 66.655056][ T5029] RBP: 00007fb0c6657090 R08: 0000000000000000 R09: 0000000000000000 [ 66.663051][ T5029] R10: 0000000000007f06 R11: 0000000000000246 R12: 0000000000000002 [ 66.671157][ T5029] R13: 0000000000000000 R14: 00007fb0c7b95f80 R15: 00007ffdf4c130c8 [ 66.679683][ T5029] [ 66.690761][ T29] audit: type=1400 audit(1729099786.278:2881): avc: denied { unmount } for pid=3268 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 66.730523][ T5031] loop1: detected capacity change from 0 to 512 [ 66.741508][ T5031] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.777721][ T5031] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #19: comm syz.1.514: corrupted inode contents [ 66.789921][ T5031] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #19: comm syz.1.514: mark_inode_dirty error [ 66.801648][ T5031] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #19: comm syz.1.514: corrupted inode contents [ 66.813835][ T5031] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3006: inode #19: comm syz.1.514: mark_inode_dirty error [ 66.827418][ T5031] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3009: inode #19: comm syz.1.514: mark inode dirty (error -117) [ 66.829000][ T4939] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.841387][ T5031] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 66.858798][ T4939] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.869116][ T4939] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.879199][ T4939] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.901722][ T5035] loop4: detected capacity change from 0 to 512 [ 66.908905][ T5035] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.920207][ T4939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.922040][ T5035] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #17: comm syz.4.516: iget: bad i_size value: -6917529027641081756 [ 66.946268][ T4939] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.953482][ T5035] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.516: couldn't read orphan inode 17 (err -117) [ 66.967287][ T3820] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.974389][ T3820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.980082][ T5035] EXT4-fs mount: 79 callbacks suppressed [ 66.980100][ T5035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.982107][ T29] audit: type=1326 audit(1729099786.558:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5038 comm="syz.1.515" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0c79ddff9 code=0x0 [ 66.988573][ T3820] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.029951][ T3820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.072575][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.086528][ T29] audit: type=1400 audit(1729099786.668:2883): avc: denied { read } for pid=5038 comm="syz.1.515" name="usbmon4" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 67.109984][ T29] audit: type=1400 audit(1729099786.668:2884): avc: denied { open } for pid=5038 comm="syz.1.515" path="/dev/usbmon4" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 67.181425][ T29] audit: type=1326 audit(1729099786.768:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.4.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d6f8dff9 code=0x7ffc0000 [ 67.183352][ T5049] Cannot find del_set index 0 as target [ 67.208152][ T4939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.238463][ T29] audit: type=1326 audit(1729099786.768:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.4.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01d6f8dff9 code=0x7ffc0000 [ 67.260255][ T5048] loop0: detected capacity change from 0 to 8192 [ 67.262070][ T29] audit: type=1326 audit(1729099786.768:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.4.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d6f8dff9 code=0x7ffc0000 [ 67.291882][ T29] audit: type=1326 audit(1729099786.768:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.4.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01d6f8dff9 code=0x7ffc0000 [ 67.328268][ T5058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.518'. [ 67.334270][ T5048] syzkaller0: entered promiscuous mode [ 67.342681][ T5048] syzkaller0: entered allmulticast mode [ 67.354891][ T5058] random: crng reseeded on system resumption [ 67.449265][ T4939] veth0_vlan: entered promiscuous mode [ 67.467388][ T4939] veth1_vlan: entered promiscuous mode [ 67.484327][ T4939] veth0_macvtap: entered promiscuous mode [ 67.495523][ T4939] veth1_macvtap: entered promiscuous mode [ 67.506529][ T4939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.517151][ T4939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.521091][ T5066] loop4: detected capacity change from 0 to 512 [ 67.527103][ T4939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.544127][ T4939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.554114][ T4939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.561064][ T5066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.564544][ T4939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.577997][ T5066] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.586858][ T4939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.586879][ T4939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.588256][ T4939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.623359][ T5072] syz.0.522[5072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.626006][ T5072] syz.0.522[5072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.638136][ T5072] syz.0.522[5072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.641684][ T4939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.671351][ T4939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.679942][ T5072] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 67.681240][ T4939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.681259][ T4939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.681273][ T4939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.719715][ T4939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.731335][ T4939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.742373][ T4939] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.751203][ T4939] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.759020][ T5066] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #19: comm syz.4.520: corrupted inode contents [ 67.759953][ T4939] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.780554][ T4939] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.780852][ T5066] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #19: comm syz.4.520: mark_inode_dirty error [ 67.801394][ T5066] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #19: comm syz.4.520: corrupted inode contents [ 67.813780][ T5066] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #19: comm syz.4.520: mark_inode_dirty error [ 67.834210][ T5066] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #19: comm syz.4.520: mark inode dirty (error -117) [ 67.848644][ T5066] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 67.868311][ T5078] loop1: detected capacity change from 0 to 512 [ 67.889871][ T5080] vlan2: entered allmulticast mode [ 67.891971][ T5078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.908200][ T5078] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.921143][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.963985][ T5078] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #19: comm syz.1.524: corrupted inode contents [ 67.977102][ T5078] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #19: comm syz.1.524: mark_inode_dirty error [ 67.980167][ T5093] 9pnet_fd: Insufficient options for proto=fd [ 67.989031][ T5078] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #19: comm syz.1.524: corrupted inode contents [ 68.008369][ T5078] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3006: inode #19: comm syz.1.524: mark_inode_dirty error [ 68.024178][ T5078] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3009: inode #19: comm syz.1.524: mark inode dirty (error -117) [ 68.029353][ T5095] loop4: detected capacity change from 0 to 512 [ 68.043169][ T5078] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 68.053185][ T5095] EXT4-fs warning (device loop4): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop4. [ 68.087852][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.176014][ T5112] loop3: detected capacity change from 0 to 128 [ 68.183189][ T5112] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 68.195624][ T5112] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 68.213238][ T5113] loop1: detected capacity change from 0 to 256 [ 68.224847][ T5112] SELinux: policydb string SýÝm·¡ does not match my string SE Linux [ 68.233697][ T5112] SELinux: failed to load policy [ 68.239585][ T5113] FAT-fs (loop1): bogus number of FAT sectors [ 68.246027][ T5113] FAT-fs (loop1): Can't find a valid FAT filesystem [ 68.319885][ T5121] loop3: detected capacity change from 0 to 1024 [ 68.347278][ T5121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0008-0000-000000000000 r/w without journal. Quota mode: none. [ 68.435893][ T4939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0008-0000-000000000000. [ 68.488296][ T5133] loop3: detected capacity change from 0 to 128 [ 68.498490][ T5133] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.511749][ T5133] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.568078][ T4939] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.593458][ T5136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.542'. [ 68.606299][ T5136] ebt_among: dst integrity fail: 32d [ 68.630477][ T5138] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 68.672123][ T5140] loop3: detected capacity change from 0 to 1024 [ 68.680781][ T5140] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 68.691071][ T5140] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 68.702005][ T5140] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 68.712731][ T5140] EXT4-fs error (device loop3): ext4_get_journal_inode:5762: inode #5: comm syz.3.544: unexpected bad inode w/o EXT4_IGET_BAD [ 68.727176][ T5140] EXT4-fs (loop3): no journal found [ 68.732542][ T5140] EXT4-fs (loop3): can't get journal size [ 68.741114][ T5140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.756060][ T5140] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.544: bg 0: block 32: padding at end of block bitmap is not set [ 68.791041][ T4939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.963187][ T5164] loop3: detected capacity change from 0 to 512 [ 68.974492][ T5166] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 68.981366][ T5166] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 68.982627][ T5164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.989382][ T5166] vhci_hcd vhci_hcd.0: Device attached [ 69.006601][ T5164] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.012389][ T5168] vhci_hcd: connection closed [ 69.021224][ T36] vhci_hcd: stop threads [ 69.031346][ T36] vhci_hcd: release socket [ 69.036145][ T36] vhci_hcd: disconnect device [ 69.058694][ T4939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.078230][ T5171] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 69.107872][ T5173] netlink: 84 bytes leftover after parsing attributes in process `syz.3.555'. [ 69.197280][ T5181] loop3: detected capacity change from 0 to 512 [ 69.205131][ T5181] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 69.235818][ T5181] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 69.258193][ T5181] loop3: detected capacity change from 0 to 2048 [ 69.281801][ T5181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.298226][ T5191] 9pnet_fd: Insufficient options for proto=fd [ 69.340262][ T4939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.385243][ T5197] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 69.413641][ T5199] netlink: 'syz.3.566': attribute type 10 has an invalid length. [ 69.711284][ T5226] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 69.741385][ T5230] loop4: detected capacity change from 0 to 512 [ 69.751265][ T5230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.764079][ T5230] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.802800][ T5230] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #19: comm syz.4.577: corrupted inode contents [ 69.814873][ T5230] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #19: comm syz.4.577: mark_inode_dirty error [ 69.826323][ T5230] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #19: comm syz.4.577: corrupted inode contents [ 69.838813][ T5230] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #19: comm syz.4.577: mark_inode_dirty error [ 69.850979][ T5230] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #19: comm syz.4.577: mark inode dirty (error -117) [ 69.864390][ T5230] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 69.885262][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.959279][ T5235] loop4: detected capacity change from 0 to 128 [ 70.316194][ T5243] loop3: detected capacity change from 0 to 512 [ 70.334451][ T5243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.348708][ T5243] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.367312][ T5252] loop1: detected capacity change from 0 to 512 [ 70.374662][ T4939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.390888][ T5252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.405196][ T5252] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.419985][ T5252] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 70.443739][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.463955][ T5265] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 70.568667][ T5276] loop3: detected capacity change from 0 to 128 [ 70.597710][ T5278] FAULT_INJECTION: forcing a failure. [ 70.597710][ T5278] name failslab, interval 1, probability 0, space 0, times 0 [ 70.612778][ T5278] CPU: 0 UID: 0 PID: 5278 Comm: syz.3.593 Tainted: G W 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 70.627213][ T5278] Tainted: [W]=WARN [ 70.631912][ T5278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 70.643019][ T5278] Call Trace: [ 70.646576][ T5278] [ 70.650061][ T5278] dump_stack_lvl+0xf2/0x150 [ 70.655444][ T5278] dump_stack+0x15/0x20 [ 70.660669][ T5278] should_fail_ex+0x223/0x230 [ 70.666617][ T5278] ? allocate_cgrp_cset_links+0x7f/0x1f0 [ 70.672666][ T5278] should_failslab+0x8f/0xb0 [ 70.677788][ T5278] __kmalloc_cache_noprof+0x4b/0x2a0 [ 70.684677][ T5278] allocate_cgrp_cset_links+0x7f/0x1f0 [ 70.690583][ T5278] find_css_set+0x59f/0xd60 [ 70.695840][ T5278] ? _parse_integer_limit+0x167/0x180 [ 70.701839][ T5278] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 70.707320][ T5278] cgroup_migrate_prepare_dst+0x75/0x3e0 [ 70.713250][ T5278] cgroup_attach_task+0x1c2/0x460 [ 70.718628][ T5278] __cgroup1_procs_write+0x1ca/0x250 [ 70.723996][ T5278] cgroup1_procs_write+0x2a/0x40 [ 70.729296][ T5278] ? __pfx_cgroup1_procs_write+0x10/0x10 [ 70.735201][ T5278] cgroup_file_write+0x16f/0x320 [ 70.740270][ T5278] ? __check_object_size+0x364/0x520 [ 70.745656][ T5278] ? __pfx_cgroup_file_write+0x10/0x10 [ 70.751165][ T5278] kernfs_fop_write_iter+0x1c8/0x2c0 [ 70.756504][ T5278] vfs_write+0x76a/0x910 [ 70.760802][ T5278] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 70.766742][ T5278] ksys_write+0xeb/0x1b0 [ 70.771013][ T5278] __x64_sys_write+0x42/0x50 [ 70.775680][ T5278] x64_sys_call+0x27dd/0x2d60 [ 70.780507][ T5278] do_syscall_64+0xc9/0x1c0 [ 70.785148][ T5278] ? clear_bhb_loop+0x55/0xb0 [ 70.790063][ T5278] ? clear_bhb_loop+0x55/0xb0 [ 70.794839][ T5278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.800858][ T5278] RIP: 0033:0x7f07b871dff9 [ 70.805396][ T5278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.825019][ T5278] RSP: 002b:00007f07b7391038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 70.833721][ T5278] RAX: ffffffffffffffda RBX: 00007f07b88d5f80 RCX: 00007f07b871dff9 [ 70.842320][ T5278] RDX: 0000000000000012 RSI: 0000000020000140 RDI: 0000000000000008 [ 70.850308][ T5278] RBP: 00007f07b7391090 R08: 0000000000000000 R09: 0000000000000000 [ 70.858396][ T5278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.866403][ T5278] R13: 0000000000000000 R14: 00007f07b88d5f80 R15: 00007ffede5330d8 [ 70.874409][ T5278] [ 70.916552][ T5282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.596'. [ 70.929533][ T5282] bridge_slave_1: left allmulticast mode [ 70.935260][ T5282] bridge_slave_1: left promiscuous mode [ 70.941131][ T5282] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.958938][ T5282] bridge_slave_0: left allmulticast mode [ 70.965146][ T5282] bridge_slave_0: left promiscuous mode [ 70.971212][ T5282] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.999194][ T5294] raw_sendmsg: syz.0.597 forgot to set AF_INET. Fix it! [ 71.140776][ T5302] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 71.171511][ T5304] loop0: detected capacity change from 0 to 512 [ 71.190272][ T5304] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.601: invalid block [ 71.204353][ T5304] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.601: invalid indirect mapped block 4294967295 (level 1) [ 71.221537][ T5304] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.601: invalid indirect mapped block 4294967295 (level 1) [ 71.236109][ T5304] EXT4-fs (loop0): 2 truncates cleaned up [ 71.243882][ T5304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.268926][ T3264] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.291567][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 71.291733][ T29] audit: type=1326 audit(1729099790.878:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5306 comm="syz.0.602" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c80dadff9 code=0x0 [ 71.407308][ T29] audit: type=1400 audit(1729099790.988:3148): avc: denied { create } for pid=5309 comm="syz.1.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 71.442869][ T29] audit: type=1400 audit(1729099790.998:3149): avc: denied { sys_admin } for pid=5309 comm="syz.1.603" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 71.472619][ T29] audit: type=1326 audit(1729099791.058:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.1.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c79ddff9 code=0x7ffc0000 [ 71.496232][ T29] audit: type=1326 audit(1729099791.058:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.1.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fb0c79ddff9 code=0x7ffc0000 [ 71.522800][ T29] audit: type=1326 audit(1729099791.058:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.1.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c79ddff9 code=0x7ffc0000 [ 71.546815][ T29] audit: type=1326 audit(1729099791.058:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.1.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fb0c79ddff9 code=0x7ffc0000 [ 71.570657][ T29] audit: type=1326 audit(1729099791.058:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.1.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c79ddff9 code=0x7ffc0000 [ 71.594160][ T29] audit: type=1326 audit(1729099791.058:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.1.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb0c79ddff9 code=0x7ffc0000 [ 71.617443][ T29] audit: type=1326 audit(1729099791.058:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.1.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c79ddff9 code=0x7ffc0000 [ 72.149122][ T5324] loop0: detected capacity change from 0 to 2048 [ 72.155766][ T5324] ext4: Unknown parameter 'dont_hash' [ 72.187118][ T5329] loop0: detected capacity change from 0 to 512 [ 72.196060][ T5329] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.607: invalid block [ 72.208328][ T5329] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.607: invalid indirect mapped block 4294967295 (level 1) [ 72.223620][ T5329] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.607: invalid indirect mapped block 4294967295 (level 1) [ 72.237896][ T5329] EXT4-fs (loop0): 2 truncates cleaned up [ 72.244732][ T5329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.271343][ T3264] EXT4-fs error (device loop0): ext4_lookup:1813: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 72.284291][ T3264] EXT4-fs error (device loop0): ext4_lookup:1813: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 72.432563][ T5346] netlink: 100 bytes leftover after parsing attributes in process `+}[@'. [ 72.457537][ T5346] loop1: detected capacity change from 0 to 512 [ 72.465180][ T5346] EXT4-fs: Ignoring removed oldalloc option [ 72.486446][ T5346] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm +}[@: Parent and EA inode have the same ino 15 [ 72.498824][ T5346] EXT4-fs (loop1): Remounting filesystem read-only [ 72.505438][ T5346] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 72.515723][ T5346] EXT4-fs (loop1): 1 orphan inode deleted [ 72.522100][ T5346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.534302][ T5346] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 72.542277][ T5346] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.553115][ T5332] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.578107][ T5357] FAULT_INJECTION: forcing a failure. [ 72.578107][ T5357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.579772][ T5355] pim6reg1: entered promiscuous mode [ 72.591587][ T5357] CPU: 1 UID: 0 PID: 5357 Comm: syz.4.617 Tainted: G W 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 72.596739][ T5355] pim6reg1: entered allmulticast mode [ 72.608810][ T5357] Tainted: [W]=WARN [ 72.608821][ T5357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 72.608842][ T5357] Call Trace: [ 72.608850][ T5357] [ 72.608859][ T5357] dump_stack_lvl+0xf2/0x150 [ 72.608889][ T5357] dump_stack+0x15/0x20 [ 72.608907][ T5357] should_fail_ex+0x223/0x230 [ 72.608939][ T5357] should_fail+0xb/0x10 [ 72.652672][ T5357] should_fail_usercopy+0x1a/0x20 [ 72.657734][ T5357] copy_page_from_iter_atomic+0x22e/0xfa0 [ 72.663520][ T5357] ? shmem_write_begin+0xa2/0x180 [ 72.668635][ T5357] ? shmem_write_begin+0xda/0x180 [ 72.673682][ T5357] generic_perform_write+0x2f1/0x4a0 [ 72.678997][ T5357] shmem_file_write_iter+0xc2/0xe0 [ 72.684149][ T5357] vfs_write+0x76a/0x910 [ 72.688411][ T5357] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 72.694300][ T5357] ksys_write+0xeb/0x1b0 [ 72.698564][ T5357] __x64_sys_write+0x42/0x50 [ 72.703172][ T5357] x64_sys_call+0x27dd/0x2d60 [ 72.707893][ T5357] do_syscall_64+0xc9/0x1c0 [ 72.712465][ T5357] ? clear_bhb_loop+0x55/0xb0 [ 72.717250][ T5357] ? clear_bhb_loop+0x55/0xb0 [ 72.721952][ T5357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.728110][ T5357] RIP: 0033:0x7f01d6f8cadf [ 72.732635][ T5357] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 72.752816][ T5357] RSP: 002b:00007f01d5c06df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 72.761335][ T5357] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f01d6f8cadf [ 72.769818][ T5357] RDX: 0000000000100000 RSI: 00007f01cd7e7000 RDI: 0000000000000004 [ 72.777829][ T5357] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000763 [ 72.786596][ T5357] R10: 0000000020000fc2 R11: 0000000000000293 R12: 0000000000000004 [ 72.794618][ T5357] R13: 00007f01d5c06ef0 R14: 00007f01d5c06eb0 R15: 00007f01cd7e7000 [ 72.802737][ T5357] [ 72.813810][ T5357] loop4: detected capacity change from 0 to 2048 [ 72.861594][ T5355] loop3: detected capacity change from 0 to 128 [ 72.873136][ T5360] loop1: detected capacity change from 0 to 128 [ 72.880587][ T5355] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.900578][ T5357] EXT4-fs (loop4): failed to initialize system zone (-117) [ 72.908137][ T5357] EXT4-fs (loop4): mount failed [ 72.928181][ T5355] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.017019][ T5355] syz.3.616[5355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.017102][ T5355] syz.3.616[5355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.065044][ T5355] syz.3.616[5355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.117479][ T5363] lo speed is unknown, defaulting to 1000 [ 73.199920][ T5363] chnl_net:caif_netlink_parms(): no params data found [ 73.231984][ T4939] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.283921][ T5363] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.291348][ T5363] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.305554][ T5363] bridge_slave_0: entered allmulticast mode [ 73.322848][ T5363] bridge_slave_0: entered promiscuous mode [ 73.342806][ T5389] lo speed is unknown, defaulting to 1000 [ 73.349739][ T5363] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.356828][ T5363] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.373786][ T5363] bridge_slave_1: entered allmulticast mode [ 73.374243][ T5363] bridge_slave_1: entered promiscuous mode [ 73.405890][ T5363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.427246][ T5363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.447548][ T5401] siw: device registration error -23 [ 73.448235][ T5363] team0: Port device team_slave_0 added [ 73.460048][ T5363] team0: Port device team_slave_1 added [ 73.473987][ T5399] loop1: detected capacity change from 0 to 4096 [ 73.481551][ T5363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.482808][ T5399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.488900][ T5363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.531530][ T5363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.543643][ T5363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.551717][ T5363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.578842][ T5363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.590138][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.613573][ T5406] FAULT_INJECTION: forcing a failure. [ 73.613573][ T5406] name failslab, interval 1, probability 0, space 0, times 0 [ 73.626413][ T5406] CPU: 0 UID: 0 PID: 5406 Comm: syz.1.627 Tainted: G W 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 73.638524][ T5406] Tainted: [W]=WARN [ 73.642327][ T5406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 73.652532][ T5406] Call Trace: [ 73.655908][ T5406] [ 73.658895][ T5406] dump_stack_lvl+0xf2/0x150 [ 73.663499][ T5406] dump_stack+0x15/0x20 [ 73.667932][ T5406] should_fail_ex+0x223/0x230 [ 73.672750][ T5406] ? security_context_to_sid_core+0x66/0x3b0 [ 73.679377][ T5406] should_failslab+0x8f/0xb0 [ 73.684241][ T5406] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 73.690702][ T5406] kmemdup_nul+0x30/0x80 [ 73.695010][ T5406] security_context_to_sid_core+0x66/0x3b0 [ 73.700858][ T5406] security_context_to_sid+0x2f/0x40 [ 73.706957][ T5406] selinux_inode_setxattr+0x4d8/0x700 [ 73.712533][ T5406] ? path_openat+0x1a5a/0x1fa0 [ 73.717482][ T5406] security_inode_setxattr+0x169/0x1f0 [ 73.722985][ T5406] __vfs_setxattr_locked+0x88/0x1d0 [ 73.728219][ T5406] vfs_setxattr+0x140/0x290 [ 73.732790][ T5406] __se_sys_fsetxattr+0x2aa/0x360 [ 73.737867][ T5406] __x64_sys_fsetxattr+0x67/0x80 [ 73.742907][ T5406] x64_sys_call+0x16a5/0x2d60 [ 73.747884][ T5406] do_syscall_64+0xc9/0x1c0 [ 73.752406][ T5406] ? clear_bhb_loop+0x55/0xb0 [ 73.757176][ T5406] ? clear_bhb_loop+0x55/0xb0 [ 73.762074][ T5406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.768172][ T5406] RIP: 0033:0x7fb0c79ddff9 [ 73.772604][ T5406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.792832][ T5406] RSP: 002b:00007fb0c6657038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 73.801902][ T5406] RAX: ffffffffffffffda RBX: 00007fb0c7b95f80 RCX: 00007fb0c79ddff9 [ 73.809971][ T5406] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000000000007 [ 73.818561][ T5406] RBP: 00007fb0c6657090 R08: 0000000000000000 R09: 0000000000000000 [ 73.827480][ T5406] R10: 000000000000001e R11: 0000000000000246 R12: 0000000000000001 [ 73.836198][ T5406] R13: 0000000000000000 R14: 00007fb0c7b95f80 R15: 00007ffdf4c130c8 [ 73.844258][ T5406] [ 73.851392][ T5363] hsr_slave_0: entered promiscuous mode [ 73.857807][ T5363] hsr_slave_1: entered promiscuous mode [ 73.864126][ T5363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.872085][ T5363] Cannot create hsr debugfs directory [ 73.933804][ T5363] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.983109][ T5363] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.990705][ T5411] syz.1.628 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 74.053378][ T5363] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.113846][ T5363] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.180416][ T5363] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.190155][ T5413] loop4: detected capacity change from 0 to 1024 [ 74.198730][ T5363] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.205908][ T5413] EXT4-fs: Ignoring removed orlov option [ 74.212211][ T5413] EXT4-fs: Ignoring removed nobh option [ 74.220844][ T5363] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.221228][ T5417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.630'. [ 74.234250][ T5415] loop1: detected capacity change from 0 to 512 [ 74.237170][ T5417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.630'. [ 74.253816][ T5417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.630'. [ 74.256646][ T5415] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.264298][ T5363] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.274161][ T5413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.285236][ T5415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.317999][ T5415] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.318587][ T5415] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.338687][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.341225][ T5363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.356234][ T5363] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.401754][ T5423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.632'. [ 74.412263][ T5428] netlink: 156 bytes leftover after parsing attributes in process `syz.1.634'. [ 74.422997][ T3809] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.430316][ T3809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.444990][ T3819] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.452204][ T3819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.534910][ T5440] lo speed is unknown, defaulting to 1000 [ 74.557486][ T5363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.584764][ T5445] loop3: detected capacity change from 0 to 512 [ 74.622505][ T5445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.635880][ T5445] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.673524][ T5363] veth0_vlan: entered promiscuous mode [ 74.683313][ T5363] veth1_vlan: entered promiscuous mode [ 74.696014][ T5445] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #19: comm syz.3.640: corrupted inode contents [ 74.707489][ T5363] veth0_macvtap: entered promiscuous mode [ 74.716006][ T5363] veth1_macvtap: entered promiscuous mode [ 74.723082][ T5445] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #19: comm syz.3.640: mark_inode_dirty error [ 74.736073][ T5445] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #19: comm syz.3.640: corrupted inode contents [ 74.748254][ T5445] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #19: comm syz.3.640: mark_inode_dirty error [ 74.762318][ T5445] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #19: comm syz.3.640: mark inode dirty (error -117) [ 74.776782][ T5445] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 74.781453][ T5363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.796482][ T5363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.806444][ T5363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.817155][ T5363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.827224][ T5363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.837943][ T5363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.847883][ T5363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.858627][ T5363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.868500][ T5363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.879091][ T5363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.891614][ T5363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.893285][ T4939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.900003][ T5363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.918476][ T5363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.928520][ T5363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.938997][ T5363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.948948][ T5363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.959409][ T5363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.969774][ T5363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.980369][ T5363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.997329][ T5363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.015417][ T5363] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.016155][ T5461] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 75.024271][ T5363] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.043803][ T5363] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.052876][ T5363] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.174927][ T5462] lo speed is unknown, defaulting to 1000 [ 75.211294][ T5481] netlink: 156 bytes leftover after parsing attributes in process `syz.3.646'. [ 75.280041][ T5486] loop3: detected capacity change from 0 to 164 [ 75.288119][ T5462] chnl_net:caif_netlink_parms(): no params data found [ 75.296021][ T5486] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 75.310836][ T5486] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 75.321653][ T5486] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 75.331088][ T5490] syz.0.649[5490] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.331148][ T5490] syz.0.649[5490] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.342830][ T5490] syz.0.649[5490] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.383950][ T5494] ALSA: seq fatal error: cannot create timer (-22) [ 75.413995][ T5462] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.418273][ T5497] loop3: detected capacity change from 0 to 1024 [ 75.421247][ T5462] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.435789][ T5462] bridge_slave_0: entered allmulticast mode [ 75.441183][ T5497] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 75.442835][ T5462] bridge_slave_0: entered promiscuous mode [ 75.451671][ T5497] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 75.459423][ T5462] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.474552][ T5462] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.483909][ T5462] bridge_slave_1: entered allmulticast mode [ 75.490771][ T5462] bridge_slave_1: entered promiscuous mode [ 75.512815][ T5497] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 75.529161][ T5462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.541552][ T5497] EXT4-fs error (device loop3): ext4_get_journal_inode:5762: inode #5: comm syz.3.651: unexpected bad inode w/o EXT4_IGET_BAD [ 75.541682][ T5497] EXT4-fs (loop3): no journal found [ 75.541781][ T5497] EXT4-fs (loop3): can't get journal size [ 75.547004][ T5462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.556749][ T5497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.595864][ T5497] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.651: bg 0: block 32: padding at end of block bitmap is not set [ 75.611608][ T5462] team0: Port device team_slave_0 added [ 75.620452][ T5462] team0: Port device team_slave_1 added [ 75.630580][ T4939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.648563][ T5508] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 75.652992][ T5462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.663689][ T5462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.689715][ T5462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.705281][ T5462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.712423][ T5462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.738585][ T5462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.769607][ T5462] hsr_slave_0: entered promiscuous mode [ 75.782300][ T5462] hsr_slave_1: entered promiscuous mode [ 75.789424][ T5462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.797411][ T5462] Cannot create hsr debugfs directory [ 75.871856][ T5518] loop0: detected capacity change from 0 to 512 [ 75.882508][ T5462] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.895820][ T5518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.909612][ T5518] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.944317][ T5462] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.968502][ T5363] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.983567][ T5462] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.995160][ T5527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.662'. [ 76.006363][ T5527] geneve2: entered promiscuous mode [ 76.031059][ T5462] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.104510][ T5529] program syz.0.663 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.113283][ T5462] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.122519][ T5462] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.133736][ T5462] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.143410][ T5462] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.159809][ T5462] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.166916][ T5462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.205522][ T5462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.217664][ T3809] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.254994][ T5462] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.269225][ T3819] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.276348][ T3819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.287310][ T3819] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.294541][ T3819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.303506][ T29] kauditd_printk_skb: 744 callbacks suppressed [ 76.303524][ T29] audit: type=1326 audit(1729099795.888:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01d6f84fa7 code=0x7ffc0000 [ 76.306155][ T5542] loop0: detected capacity change from 0 to 512 [ 76.309846][ T29] audit: type=1326 audit(1729099795.888:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f01d6f29959 code=0x7ffc0000 [ 76.362814][ T29] audit: type=1326 audit(1729099795.888:3903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f01d6f8dff9 code=0x7ffc0000 [ 76.387935][ T29] audit: type=1326 audit(1729099795.928:3904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01d6f84fa7 code=0x7ffc0000 [ 76.412364][ T29] audit: type=1326 audit(1729099795.928:3905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f01d6f29959 code=0x7ffc0000 [ 76.436024][ T29] audit: type=1326 audit(1729099795.928:3906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f01d6f8dff9 code=0x7ffc0000 [ 76.459661][ T29] audit: type=1326 audit(1729099795.928:3907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01d6f84fa7 code=0x7ffc0000 [ 76.483055][ T29] audit: type=1326 audit(1729099795.928:3908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f01d6f29959 code=0x7ffc0000 [ 76.483308][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x7 [ 76.506841][ T29] audit: type=1326 audit(1729099795.928:3909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f01d6f8dff9 code=0x7ffc0000 [ 76.514152][ T24] hid-generic 0000:0000:0000.0002: ignoring exceeding usage max [ 76.537690][ T29] audit: type=1326 audit(1729099795.928:3910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.4.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01d6f84fa7 code=0x7ffc0000 [ 76.549617][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 76.582827][ T5542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.595415][ T5542] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.606782][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 76.614771][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 76.622274][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 76.629861][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 76.637347][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 76.644825][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 76.652321][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 76.659878][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 76.667274][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 76.674716][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 76.682194][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 76.689652][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 76.697063][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 76.704500][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 76.711953][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 76.719472][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 76.726878][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 76.728720][ T5462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.734305][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 76.748631][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 76.756080][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 76.756674][ T5556] loop1: detected capacity change from 0 to 2048 [ 76.765376][ T24] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 76.834912][ T5572] program syz.4.673 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.860676][ T5556] loop1: p1 < > p4 [ 76.860881][ T5580] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 76.875325][ T5556] loop1: p4 size 8388608 extends beyond EOD, truncated [ 76.885192][ T5560] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #19: comm syz.0.667: corrupted inode contents [ 76.892152][ T5462] veth0_vlan: entered promiscuous mode [ 76.903838][ T5560] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #19: comm syz.0.667: mark_inode_dirty error [ 76.905343][ T5462] veth1_vlan: entered promiscuous mode [ 76.932500][ T5462] veth0_macvtap: entered promiscuous mode [ 76.939788][ T5462] veth1_macvtap: entered promiscuous mode [ 76.946305][ T5560] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #19: comm syz.0.667: corrupted inode contents [ 76.950057][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.968647][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.978651][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.982794][ T5560] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3006: inode #19: comm syz.0.667: mark_inode_dirty error [ 76.989174][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.007943][ T5560] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3009: inode #19: comm syz.0.667: mark inode dirty (error -117) [ 77.010849][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.010866][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.010880][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.025855][ T5560] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 77.033882][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.033905][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.084422][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.094377][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.097312][ T5589] loop4: detected capacity change from 0 to 512 [ 77.104811][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.105659][ T5462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.129771][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.140378][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.150337][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.158912][ T5585] loop1: detected capacity change from 0 to 2048 [ 77.160888][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.160903][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.187526][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.197388][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.207826][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.217696][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.222453][ T5581] loop3: detected capacity change from 0 to 1024 [ 77.228198][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.229212][ T5462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.252987][ T5462] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.253339][ T5363] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.261716][ T5462] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.261784][ T5462] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.288174][ T5462] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.303810][ T5581] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 77.313673][ T5581] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 77.323850][ T5585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.326367][ T5581] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 77.340203][ T5585] EXT4-fs (loop1): shut down requested (0) [ 77.350376][ T5581] EXT4-fs error (device loop3): ext4_get_journal_inode:5762: inode #5: comm syz.3.674: unexpected bad inode w/o EXT4_IGET_BAD [ 77.370749][ T5585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 77.376746][ T5581] EXT4-fs (loop3): no journal found [ 77.382894][ T5589] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 77.384800][ T5581] EXT4-fs (loop3): can't get journal size [ 77.393126][ T5589] System zones: 0-2, 18-18, 34-34 [ 77.400925][ T5585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 77.406268][ T5589] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.678: bg 0: block 248: padding at end of block bitmap is not set [ 77.412637][ T5585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 77.428888][ T5589] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.678: Failed to acquire dquot type 1 [ 77.448077][ T5581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.465750][ T5589] EXT4-fs (loop4): 1 truncate cleaned up [ 77.471783][ T5589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.482702][ T5581] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.674: bg 0: block 32: padding at end of block bitmap is not set [ 77.485018][ T5589] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.521896][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.531758][ T4939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.542898][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.545370][ T3342] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 77.559772][ T3342] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 77.567841][ T3342] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 77.577020][ T3342] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 77.606941][ T5605] loop4: detected capacity change from 0 to 1024 [ 77.646877][ T5612] loop2: detected capacity change from 0 to 2048 [ 77.664335][ T5620] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 77.677133][ T5612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.710802][ T5462] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.711138][ T5624] FAULT_INJECTION: forcing a failure. [ 77.711138][ T5624] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 77.733144][ T5624] CPU: 0 UID: 0 PID: 5624 Comm: syz.1.689 Tainted: G W 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 77.734555][ T5627] loop4: detected capacity change from 0 to 164 [ 77.745262][ T5624] Tainted: [W]=WARN [ 77.745347][ T5624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 77.745360][ T5624] Call Trace: [ 77.745367][ T5624] [ 77.745375][ T5624] dump_stack_lvl+0xf2/0x150 [ 77.776418][ T5624] dump_stack+0x15/0x20 [ 77.780583][ T5624] should_fail_ex+0x223/0x230 [ 77.785282][ T5624] should_fail_alloc_page+0xfd/0x110 [ 77.790581][ T5624] __alloc_pages_noprof+0x109/0x340 [ 77.795810][ T5624] ___kmalloc_large_node+0x7a/0x120 [ 77.801078][ T5624] __kmalloc_large_noprof+0x1f/0xb0 [ 77.806436][ T5624] bpf_check+0x76/0xcd90 [ 77.810726][ T5624] ? __rcu_read_unlock+0x4e/0x70 [ 77.815683][ T5624] ? obj_cgroup_charge_pages+0x13d/0x1a0 [ 77.821389][ T5624] ? __rcu_read_unlock+0x4e/0x70 [ 77.826393][ T5624] ? __memcg_kmem_charge_page+0xd2/0x170 [ 77.832041][ T5624] ? __alloc_pages_noprof+0x1bc/0x340 [ 77.837429][ T5624] ? alloc_pages_bulk_noprof+0x298/0x6b0 [ 77.843145][ T5624] ? policy_nodemask+0x2ba/0x3e0 [ 77.848191][ T5624] ? _find_next_zero_bit+0x29/0x90 [ 77.853317][ T5624] ? pcpu_block_update_hint_alloc+0x685/0x6a0 [ 77.859496][ T5624] ? cgroup_rstat_updated+0x99/0x550 [ 77.864790][ T5624] ? pcpu_block_update_hint_alloc+0x685/0x6a0 [ 77.870887][ T5624] ? cgroup_rstat_updated+0x99/0x550 [ 77.876243][ T5624] ? pcpu_chunk_relocate+0x183/0x280 [ 77.881549][ T5624] ? __mod_memcg_state+0x104/0x1f0 [ 77.886669][ T5624] ? __rcu_read_unlock+0x4e/0x70 [ 77.891773][ T5624] ? pcpu_memcg_post_alloc_hook+0x158/0x1c0 [ 77.897696][ T5624] ? pcpu_alloc_noprof+0xb9b/0x10a0 [ 77.902928][ T5624] ? should_fail_ex+0xd7/0x230 [ 77.907808][ T5624] ? selinux_bpf_prog_load+0x35/0xe0 [ 77.913176][ T5624] ? should_failslab+0x8f/0xb0 [ 77.917960][ T5624] ? __kmalloc_cache_noprof+0x10b/0x2a0 [ 77.923646][ T5624] ? selinux_bpf_prog_load+0xbb/0xe0 [ 77.928939][ T5624] bpf_prog_load+0xed4/0x1070 [ 77.933641][ T5624] ? __rcu_read_unlock+0x4e/0x70 [ 77.938641][ T5624] __sys_bpf+0x463/0x7a0 [ 77.942895][ T5624] __x64_sys_bpf+0x43/0x50 [ 77.947328][ T5624] x64_sys_call+0x2625/0x2d60 [ 77.952050][ T5624] do_syscall_64+0xc9/0x1c0 [ 77.956592][ T5624] ? clear_bhb_loop+0x55/0xb0 [ 77.961290][ T5624] ? clear_bhb_loop+0x55/0xb0 [ 77.966081][ T5624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.972053][ T5624] RIP: 0033:0x7fb0c79ddff9 [ 77.976469][ T5624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.996095][ T5624] RSP: 002b:00007fb0c6657038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.004519][ T5624] RAX: ffffffffffffffda RBX: 00007fb0c7b95f80 RCX: 00007fb0c79ddff9 [ 78.012519][ T5624] RDX: 0000000000000094 RSI: 0000000020000500 RDI: 0000000000000005 [ 78.020531][ T5624] RBP: 00007fb0c6657090 R08: 0000000000000000 R09: 0000000000000000 [ 78.028533][ T5624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 78.036514][ T5624] R13: 0000000000000001 R14: 00007fb0c7b95f80 R15: 00007ffdf4c130c8 [ 78.044500][ T5624] [ 78.096550][ T5635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.105735][ T5630] FAULT_INJECTION: forcing a failure. [ 78.105735][ T5630] name failslab, interval 1, probability 0, space 0, times 0 [ 78.118459][ T5630] CPU: 1 UID: 0 PID: 5630 Comm: syz.0.692 Tainted: G W 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 78.130555][ T5630] Tainted: [W]=WARN [ 78.134493][ T5630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 78.144584][ T5630] Call Trace: [ 78.147894][ T5630] [ 78.150833][ T5630] dump_stack_lvl+0xf2/0x150 [ 78.155473][ T5630] dump_stack+0x15/0x20 [ 78.159648][ T5630] should_fail_ex+0x223/0x230 [ 78.164472][ T5630] ? __alloc_skb+0x10b/0x310 [ 78.169098][ T5630] should_failslab+0x8f/0xb0 [ 78.172614][ T5631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.690'. [ 78.173759][ T5630] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 78.188740][ T5630] __alloc_skb+0x10b/0x310 [ 78.193223][ T5630] audit_log_start+0x368/0x6b0 [ 78.198020][ T5630] ? __rcu_read_unlock+0x4e/0x70 [ 78.203164][ T5630] audit_seccomp+0x4b/0x130 [ 78.207702][ T5630] __seccomp_filter+0x6fa/0x1180 [ 78.212723][ T5630] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 78.218505][ T5630] ? vfs_write+0x580/0x910 [ 78.219677][ T5633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.693'. [ 78.223059][ T5630] __secure_computing+0x9f/0x1c0 [ 78.237182][ T5630] syscall_trace_enter+0xd1/0x1f0 [ 78.242497][ T5630] ? __x64_sys_pwritev+0x18a/0x1c0 [ 78.247808][ T5630] ? fpregs_assert_state_consistent+0x83/0xa0 [ 78.253998][ T5630] do_syscall_64+0xaa/0x1c0 [ 78.258801][ T5630] ? clear_bhb_loop+0x55/0xb0 [ 78.263635][ T5630] ? clear_bhb_loop+0x55/0xb0 [ 78.268590][ T5630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.274523][ T5630] RIP: 0033:0x7f39dc6aca3c [ 78.279031][ T5630] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 78.298789][ T5630] RSP: 002b:00007f39db321030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.307275][ T5630] RAX: ffffffffffffffda RBX: 00007f39dc865f80 RCX: 00007f39dc6aca3c [ 78.315728][ T5630] RDX: 000000000000000f RSI: 00007f39db3210a0 RDI: 0000000000000006 [ 78.324332][ T5630] RBP: 00007f39db321090 R08: 0000000000000000 R09: 0000000000000000 [ 78.332916][ T5630] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000001 [ 78.341187][ T5630] R13: 0000000000000000 R14: 00007f39dc865f80 R15: 00007ffc4bf7faa8 [ 78.349691][ T5630] [ 78.367335][ T5630] loop0: detected capacity change from 0 to 512 [ 78.373914][ T5635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.401901][ T3318] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 78.407170][ T5630] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.692: corrupted in-inode xattr: invalid ea_ino [ 78.409841][ T3318] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 78.446583][ T5630] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.692: couldn't read orphan inode 15 (err -117) [ 78.459530][ T5646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.467691][ T5642] netlink: 'syz.2.695': attribute type 4 has an invalid length. [ 78.489222][ T5630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.506129][ T5646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.526302][ T5649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.531562][ T3318] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 78.550539][ T3318] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 78.558485][ T3318] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 78.566737][ T3318] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 78.568375][ T5652] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 78.574905][ T3318] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 78.574937][ T3318] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 78.574964][ T3318] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 78.609412][ T3318] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 78.617750][ T3318] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 78.625738][ T3318] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 78.633761][ T3318] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 78.641857][ T3318] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 78.649791][ T3318] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 78.657627][ T3318] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 78.667214][ T3318] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 78.689213][ T5658] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 78.733758][ T5363] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.777748][ T5662] loop3: detected capacity change from 0 to 4096 [ 78.796326][ T5664] loop0: detected capacity change from 0 to 512 [ 78.799061][ T5662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.816008][ T5664] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.701: corrupted in-inode xattr: invalid ea_ino [ 78.820378][ T5662] EXT4-fs (loop3): shut down requested (0) [ 78.830853][ T5664] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.701: couldn't read orphan inode 15 (err -117) [ 78.848795][ T5664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.887303][ T5662] ebtables: ebtables: counters copy to user failed while replacing table [ 78.915240][ T4939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.960411][ T5363] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.000375][ T5680] smc: net device bond0 applied user defined pnetid SYZ0 [ 79.027229][ T5683] loop0: detected capacity change from 0 to 512 [ 79.042652][ T5683] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.055949][ T5683] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.079076][ T5363] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.243592][ T5691] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 79.352612][ T5698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.713'. [ 79.386059][ T5702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.714'. [ 79.395322][ T5702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.714'. [ 79.406968][ T5702] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 79.415610][ T5702] syz_tun: entered promiscuous mode [ 79.455089][ T5704] lo speed is unknown, defaulting to 1000 [ 79.576570][ T5716] loop0: detected capacity change from 0 to 512 [ 79.698262][ T5716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.769509][ T5716] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.826086][ T5724] loop2: detected capacity change from 0 to 512 [ 79.828927][ T5728] loop3: detected capacity change from 0 to 512 [ 79.839671][ T5728] ext3: Unknown parameter 'noacl' [ 79.842753][ T5724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.864196][ T5716] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #19: comm syz.0.720: corrupted inode contents [ 79.864213][ T5724] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.864364][ T5716] ================================================================== [ 79.864402][ T5716] BUG: KCSAN: data-race in data_push_tail / number [ 79.864453][ T5716] [ 79.864462][ T5716] write to 0xffffffff88b9d706 of 1 bytes by task 5724 on cpu 0: [ 79.864485][ T5716] number+0x85f/0xa90 [ 79.864523][ T5716] date_str+0x67/0xf0 [ 79.864549][ T5716] rtc_str+0x220/0x2b0 [ 79.864576][ T5716] time64_str+0xb3/0xe0 [ 79.864602][ T5716] time_and_date+0x84/0x2b0 [ 79.864625][ T5716] pointer+0x1eb/0xd20 [ 79.864662][ T5716] vsnprintf+0x861/0xe30 [ 79.864700][ T5716] vscnprintf+0x42/0x90 [ 79.864737][ T5716] printk_sprint+0x30/0x2d0 [ 79.864773][ T5716] vprintk_store+0x570/0x810 [ 79.864818][ T5716] vprintk_emit+0x15e/0x680 [ 79.864848][ T5716] vprintk_default+0x26/0x30 [ 79.864880][ T5716] vprintk+0x75/0x80 [ 79.864900][ T5716] _printk+0x7a/0xa0 [ 79.864925][ T5716] mnt_warn_timestamp_expiry+0x1cd/0x210 [ 79.864953][ T5716] do_new_mount+0x316/0x690 [ 79.864991][ T5716] path_mount+0x49b/0xb30 [ 79.865028][ T5716] __se_sys_mount+0x27c/0x2d0 [ 79.865068][ T5716] __x64_sys_mount+0x67/0x80 [ 79.865110][ T5716] x64_sys_call+0x203e/0x2d60 [ 79.865146][ T5716] do_syscall_64+0xc9/0x1c0 [ 79.865174][ T5716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.865217][ T5716] [ 79.865226][ T5716] read to 0xffffffff88b9d700 of 8 bytes by task 5716 on cpu 1: [ 79.865249][ T5716] data_push_tail+0x102/0x430 [ 79.865284][ T5716] data_alloc+0xbe/0x2c0 [ 79.865315][ T5716] prb_reserve+0x85e/0xb60 [ 79.865347][ T5716] vprintk_store+0x53f/0x810 [ 79.865384][ T5716] vprintk_emit+0x15e/0x680 [ 79.865423][ T5716] vprintk_default+0x26/0x30 [ 79.865462][ T5716] vprintk+0x75/0x80 [ 79.865487][ T5716] _printk+0x7a/0xa0 [ 79.865517][ T5716] __ext4_error_inode+0x2da/0x400 [ 79.865556][ T5716] ext4_mark_iloc_dirty+0x325/0xe10 [ 79.865599][ T5716] __ext4_mark_inode_dirty+0x314/0x440 [ 79.865632][ T5716] ext4_dirty_inode+0x91/0xb0 [ 79.865668][ T5716] __mark_inode_dirty+0x166/0x7e0 [ 79.865712][ T5716] ext4_xattr_release_block+0x5ed/0x690 [ 79.865746][ T5716] ext4_xattr_delete_inode+0x6f4/0x790 [ 79.865776][ T5716] ext4_evict_inode+0xa82/0xdd0 [ 79.865805][ T5716] evict+0x2f0/0x580 [ 79.865842][ T5716] iput+0x42a/0x5b0 [ 79.865863][ T5716] ext4_ext_migrate+0x8e3/0x9a0 [ 79.865897][ T5716] ext4_ioctl+0x103f/0x2dd0 [ 79.865921][ T5716] __se_sys_ioctl+0xcd/0x140 [ 79.865954][ T5716] __x64_sys_ioctl+0x43/0x50 [ 79.865987][ T5716] x64_sys_call+0x15cc/0x2d60 [ 79.866018][ T5716] do_syscall_64+0xc9/0x1c0 [ 79.866041][ T5716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.866082][ T5716] [ 79.866089][ T5716] value changed: 0x00000000ffffe531 -> 0x38333032206c6974 [ 79.866107][ T5716] [ 79.866114][ T5716] Reported by Kernel Concurrency Sanitizer on: [ 79.866130][ T5716] CPU: 1 UID: 0 PID: 5716 Comm: syz.0.720 Tainted: G W 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 79.866171][ T5716] Tainted: [W]=WARN [ 79.866182][ T5716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 79.866200][ T5716] ================================================================== [ 80.204877][ T5716] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #19: comm syz.0.720: mark_inode_dirty error [ 80.221263][ T5716] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #19: comm syz.0.720: corrupted inode contents [ 80.225993][ T5733] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #19: comm syz.2.723: corrupted inode contents [ 80.243178][ T5716] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3006: inode #19: comm syz.0.720: mark_inode_dirty error [ 80.257441][ T5733] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #19: comm syz.2.723: mark_inode_dirty error [ 80.261001][ T5716] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3009: inode #19: comm syz.0.720: mark inode dirty (error -117) [ 80.282331][ T5716] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 80.282375][ T5733] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #19: comm syz.2.723: corrupted inode contents [ 80.282552][ T5733] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3006: inode #19: comm syz.2.723: mark_inode_dirty error [ 80.318636][ T5733] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3009: inode #19: comm syz.2.723: mark inode dirty (error -117) [ 80.320022][ T5363] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.343001][ T5733] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 80.345844][ T5736] loop3: detected capacity change from 0 to 1024 [ 80.359120][ T5736] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 80.377691][ T5462] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.