last executing test programs: 3m51.660592562s ago: executing program 1 (id=379): io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="01044010003e2eef6100000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) io_destroy(0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x98000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100000, 0x4000000005dd8, 0x3, 0x3, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000740)={0x77359400}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r9}, 0x10) r10 = socket(0x10, 0x2, 0x0) connect$llc(r4, &(0x7f0000000b00)={0x1a, 0x13, 0x16, 0x6f, 0x40, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x10) write(r10, &(0x7f0000000000)="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", 0xfc) ioctl$BTRFS_IOC_SEND(r8, 0x40489426, &(0x7f0000000b80)={{r4}, 0x8, &(0x7f0000000b40)=[0x3ff, 0x0, 0x6, 0x80000000, 0x1ff, 0x1, 0xffffffffffffff6b, 0xd9bd], 0xdb4, 0x11}) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f00000002c0)=0x90, 0x4) io_cancel(r0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x6, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x81, 0x0, 0x3}, 0x0) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}, {&(0x7f0000000180)=""/125, 0x7d}, {&(0x7f0000000940)=""/212, 0xd4}], 0x3, &(0x7f00000003c0)=""/170, 0xaa}, 0x2000) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000a40)={0x73, @rand_addr=0x64010102, 0x4e20, 0x4, 'wlc\x00', 0x1, 0x8, 0x70}, 0x2c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@oldalloc}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xff, 0x464, &(0x7f00000004c0)="$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") 3m50.766386524s ago: executing program 1 (id=391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) (fail_nth: 2) 3m49.975595256s ago: executing program 1 (id=402): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x8, 0x400, 0x6, 0xcd, 0x0, 0x4}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r0, 0x46ea6000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 3m49.641676337s ago: executing program 1 (id=408): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xa8}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 3m49.555200137s ago: executing program 1 (id=411): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x2a, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r2}, 0x10) syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") 3m49.436449637s ago: executing program 1 (id=415): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000540)='./file0\x00', 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c00420152c4c7ef7f633ea8000000004d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c370fd65509ff9c85cbd090000008b9412ffa005000000000000273d94d3d75d2327ae06fb74cea53cd8f2abbcf843f247be745ac8e75c32b9460623409a4af21c2568c62dbe7e78359bf47bdb82bbdd40be4a7e5d3396b0212ad24405886f22285c70296a4bb673226b70c4d0e6b98b7a9c2644d4cd55cb77b6abbec07137f6f9d178abb6b3c3bd2c932f52ff1f308e49e9ea435e999a11765291492bfbe10b148bbfddd6f7d6ca1469e4b3646ffc"], 0x9, 0xa36, &(0x7f0000001580)="$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") 3m34.435541999s ago: executing program 32 (id=415): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000540)='./file0\x00', 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c00420152c4c7ef7f633ea8000000004d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c370fd65509ff9c85cbd090000008b9412ffa005000000000000273d94d3d75d2327ae06fb74cea53cd8f2abbcf843f247be745ac8e75c32b9460623409a4af21c2568c62dbe7e78359bf47bdb82bbdd40be4a7e5d3396b0212ad24405886f22285c70296a4bb673226b70c4d0e6b98b7a9c2644d4cd55cb77b6abbec07137f6f9d178abb6b3c3bd2c932f52ff1f308e49e9ea435e999a11765291492bfbe10b148bbfddd6f7d6ca1469e4b3646ffc"], 0x9, 0xa36, &(0x7f0000001580)="$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") 2m59.375143174s ago: executing program 0 (id=1756): r0 = io_uring_setup(0x30d2, &(0x7f0000000600)={0x0, 0x3709, 0x0, 0x0, 0x4c}) close_range(r0, 0xffffffffffffffff, 0x0) 2m59.338136534s ago: executing program 0 (id=1759): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x30d2, &(0x7f0000000600)={0x0, 0x3709, 0x0, 0x0, 0x4c}) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r3, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 2m59.303271554s ago: executing program 0 (id=1762): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x7f}, 0x18) socket$netlink(0x10, 0x3, 0x0) 2m59.280885225s ago: executing program 0 (id=1764): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = inotify_init1(0x0) r3 = inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x400) r4 = dup(r2) inotify_rm_watch(r4, r3) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="8100010000000000000002008c07"], 0x14}}, 0x20004084) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = getpid() r9 = syz_open_procfs(r8, 0x0) preadv(r9, &(0x7f0000000000)=[{&(0x7f0000000180)=""/160, 0xa0}], 0x1, 0x1ef, 0x1000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) sysinfo(0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='sys_enter\x00', r12, 0x0, 0x4}, 0x18) syz_clone3(&(0x7f0000000440)={0x80380200, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m59.174709415s ago: executing program 0 (id=1767): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'geneve1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="0503092c8f0b480301020d00c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 2m58.525047256s ago: executing program 0 (id=1781): r0 = io_uring_setup(0x30d2, &(0x7f0000000600)={0x0, 0x3709, 0x0, 0x0, 0x4c}) close_range(r0, 0xffffffffffffffff, 0x0) 2m58.520957556s ago: executing program 33 (id=1781): r0 = io_uring_setup(0x30d2, &(0x7f0000000600)={0x0, 0x3709, 0x0, 0x0, 0x4c}) close_range(r0, 0xffffffffffffffff, 0x0) 1m17.952665653s ago: executing program 2 (id=4234): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x401a, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu<=0||!') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0xfffffffb, @loopback, 0x8}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r9) sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010300000000000000000100"], 0x30}}, 0x0) r11 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) pwrite64(r11, 0x0, 0x0, 0xb) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETLINK(r12, 0x400454cd, 0x339) 1m17.877348642s ago: executing program 2 (id=4236): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x80, 0x800301) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1, 0x0, 0x800000002}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='nilfs2_segment_usage_check\x00', r0, 0x0, 0x5}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}, 0x1}}, 0x10, 0x0}, 0x4000005) time(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="170000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x485e, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f00001de000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x5f}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000090000003c000380140002007663616e3000000000010000000000000800030000000000080001000100000014000600ff"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000004835e1671b178750000003540475d00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000005c0)=[{0x200000000006, 0xde, 0x0, 0x7ffc1ffb}]}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r8, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r10}, 0x10) fadvise64(0xffffffffffffffff, 0x5, 0x6, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m17.768764343s ago: executing program 2 (id=4238): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r3, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r3}}, 0x18) socket$inet6(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x25, 0x801, 0x0) sendto$inet6(r5, &(0x7f0000000200)="91", 0x1, 0x20004044, 0x0, 0x0) 1m17.691854013s ago: executing program 2 (id=4241): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x100) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x9, 0x0, 0x0, 0x19b}, 0x2, 0x1, 0x3, 0x7, 0x0, 0x12, 0x8, 0x1f, 0x7, 0x3, {0x101, 0x4, 0x1, 0x0, 0x5, 0x7fffffff}}}}]}, 0x78}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) 1m17.628833213s ago: executing program 2 (id=4242): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x1, 0x0, 0x0, 0x2000}, 0x60) 1m17.098027414s ago: executing program 2 (id=4247): socket$nl_route(0x10, 0x3, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x4300, &(0x7f0000000380)={0x0, 0x0, 0x10100, 0x0, 0xd0}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x1c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x4dae2dde534b005a}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='*'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m17.097905814s ago: executing program 34 (id=4247): socket$nl_route(0x10, 0x3, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x4300, &(0x7f0000000380)={0x0, 0x0, 0x10100, 0x0, 0xd0}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x1c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x4dae2dde534b005a}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='*'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m6.425974187s ago: executing program 4 (id=4515): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x67}, 0x18) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r5, &(0x7f0000004400), 0x400000000000203, 0x101d0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r7}, 0x10) 1m6.383502167s ago: executing program 4 (id=4516): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x67}, 0x18) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004400), 0x400000000000203, 0x101d0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 1m6.357944517s ago: executing program 4 (id=4517): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 1m6.340556827s ago: executing program 4 (id=4518): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x40, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) finit_module(r0, 0x0, 0x3) r1 = syz_io_uring_setup(0x1114, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x21e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x3, 0x7}, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000080)={[{@discard}, {@noload}]}, 0x64, 0x526, &(0x7f0000000a40)="$eJzs3c9vI1cdAPDveO0l2c3WKXCAHkqhRdkVrJ00tI04lCIhOFUCyn0JiRNFceIocdpNVNFE/AFcECBxggsXJP4DVIkLxwqpCM4gikAItnDgAAwae5zNZu04uzh26nw+0uy8N7++73n3jefNvB0HcGk9ExGvRMR/0zS9FRHlfHkhn+KgPWXbvX/vzaVsSiJNX/tbEkm+rHOsJJ9fz3ebiIivfyXiW8nDcXf29tcX6/Xadp6vNje2qjt7+7fXNhZXa6u1zfn5uRcXXlp4YWF2IPW8EREvf+lP3//uT7/88i8++8Yf7vzl5rezYk3l64/X4xEVT1vZrnqp9Vkc32H7MYNdRMVWDXOTZ9vn8BzLAwBAb9k1/ocj4lMRcSvKceX0y1kAAADgAyj9wlT8O4lIu7vabeFE9NweAAAAuIAKrTGwSaGSjwWYikKhUmmP4f1oXEvfimh+ZqWxu7ncHis7HaXCylq9NpuPFZ6OUpLl51rp+/nn2/nD9yJa+fmIeDIivleebOUrS4368qhvfgAAAMAlcf1E//+f5Xb/HwAAABgz06MuAAAAAHDu9P8BAABg/On/AwAAwFj76quvZlPa+f3r5df3dtcbr99eru2sVzZ2lypLje2tymqjsdp6Z99Gv+PVG42tz8Xm7t1qs7bTrO7s7d/ZaOxuNu+sPfAT2AAAAMAQPfmJt3+XRMTB5ydbU+Zqj22vDLVkwHkrHqWSfN6l9f/+ifb8vSEVChiKft/pvykPqSDA0BVHXQBgZEqPsrH/JwBjKemzvufgnXfy+ScHWx4AAGDwZj7e+/l/4dQ9D05fDVx4GjFcXkfP/3sN+gPGVuv5/1nbvosFGCslo/rh0uv7/L/XAIB3zhohTR+tRAAAwKBNtaakUMlv701FoVCpRNxoDfcvJStr9dpsRDwREb8tlz6U5edaeyZ9+wwAAAAAAAAAAAAAAAAAAAAAAAAAQFuaJpECAAAAYy2i8Ofkl+13+c+Un5s6eX/gavKvcuQ/EfrGj177wd3FZnN7Llv+96PlzR/my58fxR0MAAAA4KROP73TjwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAQXr/3ptLnWmYcf/6xYiY7ha/GBOt+USUIuLaP5IoHtsviYgrA4h/cBgRH+sWP8mKdRSyW/zJ848f0/mn0C3+9QHEh8vs7ez880rW/q5GxPH2V4hnWvPu7a8Y8UD+cbXOf9kJrsv5t3P+u9Kj/d84cazpHjGeevfn1Z7xDyOeKnY//3TiJz3iP3vGOn7zG/v7vdalP46Y6fr9kzwQq9rc2Kru7O3fXttYXK2t1jbn5+deXHhp4YWF2erKWr2W//nQ8Ut9ypbV/1qP+NN96v/cGev/n3fv3vtIj+Jk8W8+2yX+r36Sb/Fw/EL+3ffpPJ2tn+mkD9rp457+2a+fPq3+yz3q3+/v/+YZ63/ra9/549FOAMDI7eztry/W67XtsU1kvfQLUAyJx0uc6z/RtwZ6wDRN06xN/R/HSWLkH3gnMeozEwAAMGj3L/pHXRIAAAAAAAAAAAAAAAAAAAC4vIbxOrGTMQ+OUskgXqENAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAQ/wsAAP//Yu/R8g==") syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = getpid() clock_adjtime(0x0, &(0x7f0000000000)={0x1ff, 0x8bcc0c0000000000, 0x400, 0x0, 0x0, 0x3, 0x8000006, 0x0, 0x0, 0xffc99a3b00000000}) r6 = syz_pidfd_open(r5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r5, r4, 0x0, 0x4, &(0x7f0000000280)='GPL\x00'}, 0x30) setns(r6, 0x24020000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x8, 0x7fdf, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) syz_clone(0x5d000120, 0x0, 0x3, 0x0, 0x0, 0x0) 1m6.089543158s ago: executing program 4 (id=4520): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x5e, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={r1, 0x0, 0x0}, 0x10) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000007c0)=""/39, &(0x7f0000000040)=0x27) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0xf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0), 0x4}, 0x1206c, 0x80, 0x7, 0x0, 0x2000000000000007, 0xb, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x8) mount$9p_fd(0x20100000, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) 1m5.778190848s ago: executing program 4 (id=4530): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) sched_getscheduler(0x0) (fail_nth: 9) 1m5.752543469s ago: executing program 35 (id=4530): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) sched_getscheduler(0x0) (fail_nth: 9) 15.999250425s ago: executing program 8 (id=5812): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x1, 0x0, 0x0, 0x2000}, 0x60) 15.955994746s ago: executing program 8 (id=5813): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x4, 0x3}, {0x401, 0xfff}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 15.955315626s ago: executing program 8 (id=5815): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=@newtfilter={0x34, 0x2c, 0xd27, 0x470bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0xffe0}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 13) 15.666176046s ago: executing program 8 (id=5821): r0 = socket$igmp(0x2, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210090, &(0x7f0000000340)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@dioread_lock}]}, 0x0, 0x572, &(0x7f0000001cc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) 15.544780827s ago: executing program 8 (id=5828): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, &(0x7f00000005c0)}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) get_robust_list(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',version=9p2000.u', @ANYBLOB]) 15.079670557s ago: executing program 8 (id=5839): openat$selinux_validatetrans(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x3ccb17abd37484df}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001000370400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000340012800b000100697036746e6c0000240002800500040002000000060010005b010000060011004e22000008000100", @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x2000045}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x40000}, 0x24}}, 0x40080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}}}, 0x24}}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x100) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x44000, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.079456687s ago: executing program 36 (id=5839): openat$selinux_validatetrans(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x3ccb17abd37484df}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001000370400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000340012800b000100697036746e6c0000240002800500040002000000060010005b010000060011004e22000008000100", @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x2000045}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x40000}, 0x24}}, 0x40080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}}}, 0x24}}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x100) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x44000, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.428478264s ago: executing program 5 (id=6143): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4a) r0 = socket(0x200000000000011, 0x2, 0x9b) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000804) 2.235042355s ago: executing program 5 (id=6145): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 2.225082175s ago: executing program 5 (id=6147): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) waitid(0x0, 0x0, 0x0, 0x1, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000002140)={0x0, &(0x7f00000000c0)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000003c0)={0x5, &(0x7f0000000380)=[{0xff54, 0x9, 0x10, 0x6}, {0x232c, 0x7f, 0xb, 0xc}, {0x4, 0xb, 0x80, 0x71}, {0x4, 0x4, 0x8, 0x7}, {0xb, 0x5, 0x1, 0x5}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xd}}]}}, @TCA_RATE={0x6}]}, 0x4c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0), 0x56800, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f0000000140)='./file1\x00', 0x147842, 0x184) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="27050200790214000600002fb96dbcf706e105000607000000000000ee162fd4b8bd4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f901", 0x39}], 0x1}, 0x9cdc2384256f8178) 2.185281895s ago: executing program 9 (id=6149): r0 = socket(0xa, 0x40000000002, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) 2.114240215s ago: executing program 9 (id=6150): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x6, 0x8, 0x8, 0xb}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='kmem_cache_free\x00', r2}, 0xe) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000338000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_clone(0x8104200, &(0x7f0000000580)="c528eb", 0x3, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r4, 0x50000) 1.715019336s ago: executing program 3 (id=6152): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x34}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = fsopen(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0xa, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xfd, 0x7ffc1ffb}]}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fsmount(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 1.474535917s ago: executing program 6 (id=6156): r0 = socket(0x2, 0x3, 0x9) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000004780)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{&(0x7f00000031c0)={0x2, 0xffff, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="3000000000000000000000000700000001071c0f"], 0x30}}], 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed000e, &(0x7f00000002c0)={[{@data_journal}, {@nolazytime}, {@debug}, {@noload}, {@min_batch_time={'min_batch_time', 0x3d, 0xd23b}}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@acl}]}, 0xfe, 0x47d, &(0x7f0000000dc0)="$eJzs3M1vFOUfAPDv7LalvP3aH+ILCFJFI761tLzIwYMaTThgYqIHjKfaLqSyUENrIoSY6gGPhsS78e4fYDzpxagnE696NyTEcAE9rZndGVi2u6VbdrvQ/XyS2T7PzLP7PN+ZeTovz84G0LfG0pckYltE/BERI7XsnQXGan9uXr8088/1SzNJVCrv/J1Uy924fmkmL5q/b2stU6lk+U1N6r38fsR0uVw6n+UnFs9+NLFw4eJLc2enT5dOl85NHTt2+NDeoaNTR+rfNrzWONO4buz+dH7PruPvXXlr5uSVD375Nm3vtmx5fRydMlZbu0090+nKemx7XToZ6GFDaEsxItLNNVjt/yNRjM23lo3Em5/3tHFAV1UqlUqz43NmqQJsYEn0ugVAb+QH+vT6N5/W6dTjvnDtteoFUH7RM3OzmC8ZiEItsW+wdnnUFWMRcXLp36/TKdq9D7GvW60CADayH9Lznxebnf8V4pFaYih9+V82hjIaEf+PiB0R8VBE7IyIhyOqZR+NiMfarL9xhGT5+U/h6pqDW4X0/O+VbGwrn7J68yKjxSy3vRr/YHJqrlw6mK2TAzG46dRcUppcoY4f3/j9y1bL6s//0imtPz8XzNpxdaDhBt3s9OL0vcRc79pnEbsHmsWfRD6Mk0TErojYvcY65p5vPSB09/hX0IFxpso3Ec/Wtv9SNMSfS1qOT06+fHTqyMRwlEsHJ/K9Yrlff7v8dqv674w/htuKvwPS7b+l6f5/K/7RZDhi4cLFM9Xx2oUmH3Kz4WKyweU/v2h5TdPm/n98e7b/DyXvVmcMZQs+mV5cPD8ZMZScWD5/6van5fm8fBr/gf3N+/+OuL0mHo+IPRGxNyKeyC690rY/GRFPRcT+Fdbxz68//WH78a9wV76D0vhn77b9o377t58onvnp+/bjz6Xb/3A1dSCbs5r/f6tt4L2sOwAAAHhQFKrfgU8K47fShcL4eO07/DtjS6E8v7D4wqn5j8/N1r4rPxqDhfxO10jd/dDJ7N5wnp9qyB/K7ht/VdxczY/PzJdnex089LmtLfp/6q9ir1sHdN0axtFe7UY7gPXneU3oX/o/9KdE/4e+pv9D/2rW/ze3LD3+XVcbA6wrx3/oX6vo/0vr9DwSsM4c/6F/6f/Ql1o+G1+4p0f+JTqWOPFcEvdBM5YlonBfNGPjJwZW/WMWbSQqI7X+n87Z1LTM8t9mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBD9FwAA//+r+eEo") 1.408776736s ago: executing program 3 (id=6157): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 1.388193777s ago: executing program 6 (id=6158): ioperm(0x400, 0xb7c, 0x2) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0xee00, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0x0, 0x0) 1.386313957s ago: executing program 3 (id=6159): syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.342143567s ago: executing program 6 (id=6160): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.341193467s ago: executing program 3 (id=6162): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000380)={0x2000029a, &(0x7f00000002c0)=[{0xbe, 0x7, 0x8, 0x3}, {0x9, 0x0, 0x9, 0xa9c0}, {0x9, 0x20, 0xff, 0x8}, {0x2, 0x2, 0x4, 0x101}, {0x8, 0x10, 0x8, 0x6}, {0x9, 0x6, 0x3, 0x2}, {0x4, 0x7, 0x4b, 0x3}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) (fail_nth: 12) 1.285248927s ago: executing program 6 (id=6163): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x98, 0x30, 0x9, 0x0, 0x0, {}, [{0x84, 0x1, [@m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x35, 0x0, 0x5}, {}, {0x0, 0x1}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) 1.055057798s ago: executing program 9 (id=6164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x1, 0x0, 0x0, 0x2000}, 0x60) 921.422318ms ago: executing program 6 (id=6167): syz_read_part_table(0x59d, &(0x7f0000000000)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@deltfilter={0x24, 0x2d, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0x1}, {0xfff3, 0x3}, {0x9, 0xa}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x536, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x4, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r2 = syz_io_uring_setup(0x3bc1, &(0x7f0000000780)={0x0, 0x942e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r1, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x4, @mcast1, 0xfffffffe}}}, 0xc9) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000007000000080000000400000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r9}, 0x10) r10 = dup(r7) write$P9_RLERRORu(r10, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r10, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r11 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x141341) ioctl$USBDEVFS_IOCTL(r11, 0xc00c5512, &(0x7f0000000200)=@usbdevfs_connect={0x7ff}) 869.918038ms ago: executing program 9 (id=6168): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000031fab574d3a3ded35ff82b3a633f0216c69c21609a50000000000000000001400"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000177b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000280)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x4, 'H0I', "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"}}, 0x110) syz_read_part_table(0x1060, &(0x7f0000000000)="$eJzsz7ttAkEABNDZ+9g+yZJdgiMX4T4sl+MrgYiQAohphirIkdCi+9ACELyXjGZXmtWGhzq0S9Yh2ZaS9Ekty9ka+WrmeClJl0tN6b6Py82YIR9vuz6ft/5ahiR/P1PbvKeMtTbzaJL1qfynPdfTNPa7v99PAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB5XQMAAP//jJwQkg==") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000), 0x3, 0x56f, &(0x7f00000016c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) listxattr(&(0x7f00000001c0)='./file1\x00', 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2, 0x1}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)=""/151}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 813.061398ms ago: executing program 5 (id=6169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x0, 0x1, 0x4, 0x100, 0x8, r3, 0x5, '\x00', 0x0, r1, 0x5, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f0000000040)=r1}, 0x20) (rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRESDEC=r2], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000020c0)=ANY=[@ANYBLOB="3800000018000100000000000000000002100000fd0300062e001680100008800c0003"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x54) 668.632778ms ago: executing program 6 (id=6170): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = gettid() r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r5, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) readv(r5, &(0x7f0000001240)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @private}, 0xc, 0x0, 0x2}}, 0x26) 521.877959ms ago: executing program 7 (id=6171): ioperm(0x400, 0xb7c, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0xee00, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0x0, 0x0) 454.373879ms ago: executing program 5 (id=6172): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="170005000000a0dc0000fa5baedf6bb4995fa64da4709416573766817c17ca12c2c6ca8f2ba330c5681b01bb06e67006954a2d65b8942e52e62c6d0000000010000000000000004900a9ad807a14d2cc52a97cbf86e5c7bdd3117be7bc47ddae342fca1e3e2e31bc67ad352b3eebc10e3b058447341fbeae668d5051476463631a0e1f6ef81335b3d6fe3a641a9e525a8fdb45680358749fe55f3ff53125bd5827751b7a212e143542cc3eb8cbc0b0c11b8d60efb715f81a8442acad33c3bd01f988de37af81d117", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="140100002b0001000000000000000000010100800c0011002000000000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x410}, 0x44) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x1000407, &(0x7f0000000040)={[{@abort}, {@norecovery}, {@orlov}, {@nomblk_io_submit}]}, 0x4, 0x5cd, &(0x7f0000001400)="$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") 429.922869ms ago: executing program 3 (id=6173): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 429.066969ms ago: executing program 3 (id=6174): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff00000000390000000e0001006e657464657673696d0000000f0002"], 0x3c}, 0x1, 0x0, 0x0, 0xc000894}, 0x24048800) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'xfrm0\x00'}}, 0x1e) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x0, 0x101}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000cc0)={0xc8, 0x9, 0x6, 0x0, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x200}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x80}}]}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x86}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}, @IPSET_ATTR_COMMENT={0x9, 0x1a, '-,+$\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_batadv\x00'}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x1, @broadcast, 'veth1_to_bridge\x00'}}, 0x1e) close(r0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8205, &(0x7f0000000180)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@norecovery}, {@grpid}, {@init_itable}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_async_commit}]}, 0x0, 0x618, &(0x7f0000000640)="$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") r7 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4000840) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x101, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRESOCT=r10, @ANYRESDEC=r7], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x49, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000c80)="b9ff060000000000000014f086dde3359859cbce2d8e29ab5fa6e7b96ba2ccc052089a3370156442", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r13, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001480)={0x10, 0x1401, 0x105, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x800) 428.595309ms ago: executing program 7 (id=6175): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) close_range(r3, 0xffffffffffffffff, 0x400000000000000) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="ad4308a803a93ae832cfe6d5ef23337e0f698efa258fa9d3bc1c9df29b8749c5ffd0074397d4b10c19ca158b9169fc747e0ce81800f6ab54701b60db0d358f0341b17544b7edabe88d90fc5a63b52a5eee75baf1278b9c106f3c728d86482d41a1b38f52ef3ad9e716e77953d785625a2279cf4fd6266ccaba213de2e35c65a01968cf04d00a1ca520baf750b816fafde164d33bfafb0fee4aae07b55527d4d61deda8a79a1be0238b8309d25f34019a61f0363bd8bdf6bae02edd9d34b01b8157e510898a6e7d7217224d331981b5c2bb14d88bdc317c7a88eb04c5ef7be4021f8dbbf25c65b82d0f787de0c0b87c2d51c21e948c9c8f8077e0341b04c4ff0c0f3e7a48fae5ca15222bc350f59307d42d0670f91610d4dec94cfbbbe3b383decd29515965a3059d4b2cbed6a77948d374d320ef04b9fd74c87eef26125b3e3418aca9bd8e98db179d57611d0f85528116cae7b18393dd78c7528c45e7a8d64db9adb31bb95564d75ff0dc06fb71fc52ee5c02779cb166d93180cbd74ab3fb7e19b3509381c4e2b6e9cb7953347d0993c3d7445d201aa1e11c8eace70bc364fb0572af4c00f9c53d1a8fa4702a792ff9a83eef082e90a18dadd9dcbbc808b8887be9f1b74d8bd5de8adfbcd46b7ab3df6ea858bff5a1b4b5d5f85a6df2e90f370f67e9b7b9e9e02f7b5cb615a86297b112bd735d61d66e25624c465d5a87bfc7f7ec3daac70d4abc99c7a12cc79a14e9a7618a86a295c0fd5cbd9f716ad49a35b152828c3a16bdd4b649d0bf6a1c80a500cdde4627b13751d91cb67fd9003ba3a91891f240be702f978e4e55354de192406defe3d84917f02e27855d6611d8ffc41f73ea5abd7b0f48ad277b691a27e5b747a7d8aa632920f3fce2788d4437fc23f59f9a4b4dbe7fa3460c5c4047277a8b02cb508a2c1853d14aa78689c4814b44391bfc4acc022e7119e9109d35225271c063d6d89d09347a8c1d2ab958bad1ac3890de420877b875272db3402a63da014a38c8ddb9568f00c7c29f31d11bcd473dac29c91247d570cc491384ece7f19ce3a3e4b2c8d72bde83120c3c7d38b49fbb640d7842f9f9a86b1ea6915b2121b72e281667bec82aeb7665d5dde31c6bceb7eb14f41f08d71faaf1b8f31f96564a8add5fbdb69045bfba0fbf3a4e1ea032bbbf3babe0de46ca56fd7738562e8c65c7ad1e8ecf3fe810cca9521a345af1d1bab6eac8a35e391bf1787bf16ee6050635188afa2f9b455c44690b2fecf9f40f08a10c7caf00744db2d389f2d618abcf44e5a45348c186fe926d1eb87f7b402735c05ae96544b5ab3367b60bdb4598152cea9f8f2844ca81fd5fd0b87383db0024db1d2b3c7469245793199cb5aba92dafaf2c90a9e1a93841ff78663ca97d8d51deba8cc06f3f5b7a1af71d3b65dfa48c9acd436bf364641db455d6e8e8ed644b30a4dd7806f1ba82f33c856c76e1f28ec3939e1ad0a7d38426e7af4ae49c0aa9e575a13d9d520aa84bd15090c28a142777e0b6a9d5ddd07918e3a20257a6be334196489ee60ba275d0b821d1ff315da51921111905409311b457fef71d2679a271752cd98cd9b0b1f871ec2e1e02525b41587f88a0bbf7bb63e34f8ca3975789c252a0b803518f2c03d327af92f9c2ed4ec9beb301da910331ad8a2d79c2c461362662c47859154ce8a26c9a12bcae161899a4005572dd3191cec8e4db0ab78816455c0a388c78a979c8ebe0593b23a7fd8681555d686507cf215dd4b1ce9ecd49fb7a4e2884f0449e40bf8eb6347f59a268e7a51441890200a4bb9e86aa18c088e5994699657d4d2d518bf83b59adc8220841e7ad807ed7adad95403d2319836d069b15d245ce013867121224e5e74371c32ff8cd9d19cc477ca36b5e0ac7c15041f2fe7f46a91a8c9cd089f4f38a6118f45f1fc9c48eb4820d355a869fecc2b391630b13aeacb2b745b22018d554a2b8d833f404784f1687d554089aedba3d7036788860bf66e8735603e6e2ed2235e8800931fdc30c9eec3d224650c5b58229faaa9cfacc31", 0x5a9}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(r9, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10, 0xffffffffffffffff}, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r12}, 0x10) r13 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r13, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) sendmmsg$unix(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="0000f400", 0x4}], 0x1, 0x0, 0x0, 0x200088c0}}], 0x1, 0x0) r14 = socket$inet(0x2, 0x4, 0x8) recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x2142) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r14, 0x89f2, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x10, 0x80, 0x4, 0x3, {{0x9, 0x4, 0x1, 0x38, 0x24, 0x66, 0x0, 0x2, 0x6d05e14bd8ba8b80, 0x0, @remote, @empty, {[@generic={0x88, 0xc, "befa80f8c90a407f174e"}, @ra={0x94, 0x4, 0x1}]}}}}}) 246.729649ms ago: executing program 7 (id=6176): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$selinux_load(r1, 0x0, 0x0) socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 240.690469ms ago: executing program 9 (id=6177): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x98, 0x30, 0x9, 0x0, 0x0, {}, [{0x84, 0x1, [@m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x35, 0x0, 0x5}, {}, {0x0, 0x1}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) 160.252219ms ago: executing program 5 (id=6178): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',uname=']) 154.856009ms ago: executing program 7 (id=6179): getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 113.958229ms ago: executing program 9 (id=6180): bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'geneve1\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @broadcast}, 0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xfffffd26) connect$unix(r3, &(0x7f0000000400)=@file={0x1, './file2\x00'}, 0x6e) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7086cfc0dddb77d0015f8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x40) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f00000001c0)=0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004011}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="780100003c000701fcffffff00000003047c000004003680600101"], 0x178}, 0x1, 0x0, 0x0, 0x4c040}, 0xc000) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) 28.66563ms ago: executing program 7 (id=6181): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x40800) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4801) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) ftruncate(r2, 0xc17a) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, '\x00', 0x0, r2, 0x2, 0x0, 0xfffffffd, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) socket$key(0xf, 0x3, 0x2) fcntl$setlease(r1, 0x400, 0x1) 0s ago: executing program 7 (id=6182): socket$kcm(0x21, 0x2, 0x2) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0xc000, &(0x7f00000006c0), 0x1, 0x246, &(0x7f00000007c0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000100)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) (async) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000200)={0x20a2, 0x1, 0x6, 0x400}) fdatasync(r4) kernel console output (not intermixed with test programs): 7295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18164 comm="syz.3.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3deb5d19 code=0x7ffc0000 [ 251.187148][ T29] audit: type=1326 audit(2000000630.266:13875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18164 comm="syz.3.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3deb5d19 code=0x7ffc0000 [ 251.188724][T18157] tipc: Started in network mode [ 251.210969][ T29] audit: type=1326 audit(2000000630.266:13876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18164 comm="syz.3.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fce3deb5d19 code=0x7ffc0000 [ 251.211013][ T29] audit: type=1326 audit(2000000630.286:13877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18164 comm="syz.3.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3deb5d19 code=0x7ffc0000 [ 251.263615][T18157] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 251.270889][T18157] tipc: Enabled bearer , priority 0 [ 251.301579][T12277] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.301781][T14881] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.342173][T15606] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.359835][T18187] loop6: detected capacity change from 0 to 512 [ 251.398436][ T3374] IPVS: starting estimator thread 0... [ 251.420432][T18187] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.430694][T18200] loop7: detected capacity change from 0 to 1024 [ 251.445494][T18187] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.446217][T18204] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 251.476356][T18200] EXT4-fs: Ignoring removed orlov option [ 251.488131][T18200] EXT4-fs: Ignoring removed nobh option [ 251.503086][T18196] IPVS: using max 2304 ests per chain, 115200 per kthread [ 251.530885][T18200] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.532779][T18204] syzkaller0: entered allmulticast mode [ 251.556472][T18203] syzkaller0: left allmulticast mode [ 251.589982][T16140] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.765384][T18234] loop5: detected capacity change from 0 to 512 [ 251.776428][T18236] FAULT_INJECTION: forcing a failure. [ 251.776428][T18236] name failslab, interval 1, probability 0, space 0, times 0 [ 251.789286][T18236] CPU: 1 UID: 0 PID: 18236 Comm: syz.8.5563 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 251.800123][T18236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 251.804293][T18234] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.5562: corrupted in-inode xattr: invalid ea_ino [ 251.810191][T18236] Call Trace: [ 251.810203][T18236] [ 251.829712][T18236] dump_stack_lvl+0xf2/0x150 [ 251.830945][T18234] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.5562: couldn't read orphan inode 15 (err -117) [ 251.834349][T18236] dump_stack+0x15/0x1a [ 251.849908][T18234] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.850401][T18236] should_fail_ex+0x223/0x230 [ 251.867182][T18236] should_failslab+0x8f/0xb0 [ 251.871927][T18236] kmem_cache_alloc_noprof+0x52/0x320 [ 251.877471][T18236] ? vm_area_alloc+0xac/0x130 [ 251.882197][T18236] vm_area_alloc+0xac/0x130 [ 251.886827][T18236] __mmap_region+0x6b5/0x13f0 [ 251.891639][T18236] mmap_region+0x164/0x1e0 [ 251.896102][T18236] do_mmap+0x718/0xb60 [ 251.900337][T18236] vm_mmap_pgoff+0x133/0x290 [ 251.905053][T18236] ksys_mmap_pgoff+0xd0/0x330 [ 251.909807][T18236] ? fpregs_assert_state_consistent+0x83/0xa0 [ 251.915925][T18236] x64_sys_call+0x1940/0x2dc0 [ 251.920658][T18236] do_syscall_64+0xc9/0x1c0 [ 251.925201][T18236] ? clear_bhb_loop+0x55/0xb0 [ 251.929918][T18236] ? clear_bhb_loop+0x55/0xb0 [ 251.934653][T18236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.940642][T18236] RIP: 0033:0x7fef04075d53 [ 251.945056][T18236] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 251.964796][T18236] RSP: 002b:00007fef026e6e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 251.973227][T18236] RAX: ffffffffffffffda RBX: 0000000000000616 RCX: 00007fef04075d53 [ 251.981259][T18236] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 251.989258][T18236] RBP: 0000000020000642 R08: 00000000ffffffff R09: 0000000000000000 [ 251.997228][T18236] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000006 [ 252.005295][T18236] R13: 00007fef026e6ef0 R14: 00007fef026e6eb0 R15: 0000000020000480 [ 252.013280][T18236] [ 252.026070][T12277] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.160218][T18262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.182786][T18262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.245559][T18272] loop6: detected capacity change from 0 to 512 [ 252.253639][T18272] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 252.282426][T18272] EXT4-fs error (device loop6): ext4_quota_enable:7112: comm syz.6.5577: inode #13112832: comm syz.6.5577: iget: illegal inode # [ 252.295839][ T4914] tipc: Node number set to 11578026 [ 252.303571][T18272] EXT4-fs error (device loop6): ext4_quota_enable:7115: comm syz.6.5577: Bad quota inode: 13112832, type: 2 [ 252.317750][T18272] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-117, ino=13112832). Please run e2fsck to fix. [ 252.334125][T18272] EXT4-fs (loop6): mount failed [ 252.335521][T14881] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.453269][T18289] loop8: detected capacity change from 0 to 4096 [ 252.482134][T18289] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.520428][T15606] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.570832][T18309] loop7: detected capacity change from 0 to 512 [ 252.584501][T18309] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.597944][T18309] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.648703][T18319] loop6: detected capacity change from 0 to 1024 [ 252.656231][T18319] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 252.666094][T18319] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 252.676896][T18319] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 252.677370][T14881] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.688302][T18319] EXT4-fs error (device loop6): ext4_get_journal_inode:5809: inode #5: comm syz.6.5594: unexpected bad inode w/o EXT4_IGET_BAD [ 252.709444][T18319] EXT4-fs (loop6): no journal found [ 252.714777][T18319] EXT4-fs (loop6): can't get journal size [ 252.730878][T18319] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 252.757853][T16140] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.772404][T18324] loop7: detected capacity change from 0 to 256 [ 252.794115][T18324] FAT-fs (loop7): Directory bread(block 64) failed [ 252.806728][T18324] FAT-fs (loop7): Directory bread(block 65) failed [ 252.824371][T18324] FAT-fs (loop7): Directory bread(block 66) failed [ 252.837900][T18324] FAT-fs (loop7): Directory bread(block 67) failed [ 252.847387][T18324] FAT-fs (loop7): Directory bread(block 68) failed [ 252.848221][T18338] bridge0: port 3(bond0) entered blocking state [ 252.854242][T18324] FAT-fs (loop7): Directory bread(block 69) failed [ 252.860259][T18338] bridge0: port 3(bond0) entered disabled state [ 252.867993][T18324] FAT-fs (loop7): Directory bread(block 70) failed [ 252.875823][T18338] bond0: entered allmulticast mode [ 252.884878][T18338] bond_slave_0: entered allmulticast mode [ 252.890698][T18338] bond_slave_1: entered allmulticast mode [ 252.899663][T18324] FAT-fs (loop7): Directory bread(block 71) failed [ 252.906597][T18338] bond0: entered promiscuous mode [ 252.911737][T18338] bond_slave_0: entered promiscuous mode [ 252.917431][T18324] FAT-fs (loop7): Directory bread(block 72) failed [ 252.917494][T18338] bond_slave_1: entered promiscuous mode [ 252.931031][T18338] bridge0: port 3(bond0) entered blocking state [ 252.937367][T18338] bridge0: port 3(bond0) entered forwarding state [ 252.949228][T18324] FAT-fs (loop7): Directory bread(block 73) failed [ 253.007207][T18350] FAULT_INJECTION: forcing a failure. [ 253.007207][T18350] name failslab, interval 1, probability 0, space 0, times 0 [ 253.019929][T18350] CPU: 1 UID: 0 PID: 18350 Comm: syz.3.5607 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 253.030729][T18350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 253.031920][T18352] loop6: detected capacity change from 0 to 1024 [ 253.040850][T18350] Call Trace: [ 253.040862][T18350] [ 253.040872][T18350] dump_stack_lvl+0xf2/0x150 [ 253.049731][T18352] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 253.050507][T18350] dump_stack+0x15/0x1a [ 253.053878][T18352] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 253.058005][T18350] should_fail_ex+0x223/0x230 [ 253.073442][T18352] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 253.081477][T18350] should_failslab+0x8f/0xb0 [ 253.088517][T18352] EXT4-fs error (device loop6): ext4_get_journal_inode:5809: inode #5: comm syz.6.5608: unexpected bad inode w/o EXT4_IGET_BAD [ 253.096048][T18350] kmem_cache_alloc_node_noprof+0x59/0x320 [ 253.102188][T18352] EXT4-fs (loop6): no journal found [ 253.114309][T18350] ? __alloc_skb+0x10b/0x310 [ 253.114346][T18350] __alloc_skb+0x10b/0x310 [ 253.114372][T18350] netlink_alloc_large_skb+0xad/0xe0 [ 253.114398][T18350] netlink_sendmsg+0x3b4/0x6e0 [ 253.120209][T18352] EXT4-fs (loop6): can't get journal size [ 253.125396][T18350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.125430][T18350] __sock_sendmsg+0x140/0x180 [ 253.125466][T18350] ____sys_sendmsg+0x312/0x410 [ 253.125516][T18350] __sys_sendmsg+0x19d/0x230 [ 253.132298][T18352] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 253.134519][T18350] __x64_sys_sendmsg+0x46/0x50 [ 253.134621][T18350] x64_sys_call+0x2734/0x2dc0 [ 253.191677][T18350] do_syscall_64+0xc9/0x1c0 [ 253.196202][T18350] ? clear_bhb_loop+0x55/0xb0 [ 253.200910][T18350] ? clear_bhb_loop+0x55/0xb0 [ 253.205741][T18350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.211697][T18350] RIP: 0033:0x7fce3deb5d19 [ 253.216133][T18350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.235747][T18350] RSP: 002b:00007fce3c521038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.244193][T18350] RAX: ffffffffffffffda RBX: 00007fce3e0a5fa0 RCX: 00007fce3deb5d19 [ 253.252233][T18350] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000003 [ 253.260256][T18350] RBP: 00007fce3c521090 R08: 0000000000000000 R09: 0000000000000000 [ 253.268261][T18350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.276248][T18350] R13: 0000000000000000 R14: 00007fce3e0a5fa0 R15: 00007fff43c9a008 [ 253.284253][T18350] [ 253.302294][T18359] loop7: detected capacity change from 0 to 512 [ 253.303265][T16140] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.347635][T18359] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.366213][T18359] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.532141][T18386] FAULT_INJECTION: forcing a failure. [ 253.532141][T18386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.545684][T18386] CPU: 0 UID: 0 PID: 18386 Comm: syz.5.5622 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 253.556538][T18386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 253.566696][T18386] Call Trace: [ 253.569991][T18386] [ 253.572930][T18386] dump_stack_lvl+0xf2/0x150 [ 253.577550][T18386] dump_stack+0x15/0x1a [ 253.581778][T18386] should_fail_ex+0x223/0x230 [ 253.586495][T18386] should_fail+0xb/0x10 [ 253.590665][T18386] should_fail_usercopy+0x1a/0x20 [ 253.595724][T18386] _copy_to_user+0x20/0xa0 [ 253.600157][T18386] simple_read_from_buffer+0xa0/0x110 [ 253.605627][T18386] proc_fail_nth_read+0xf9/0x140 [ 253.610582][T18386] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 253.616145][T18386] vfs_read+0x1a2/0x700 [ 253.620399][T18386] ? __rcu_read_unlock+0x4e/0x70 [ 253.625356][T18386] ? __fget_files+0x17c/0x1c0 [ 253.630085][T18386] ksys_read+0xe8/0x1b0 [ 253.634757][T18386] __x64_sys_read+0x42/0x50 [ 253.639273][T18386] x64_sys_call+0x2874/0x2dc0 [ 253.643978][T18386] do_syscall_64+0xc9/0x1c0 [ 253.648577][T18386] ? clear_bhb_loop+0x55/0xb0 [ 253.653327][T18386] ? clear_bhb_loop+0x55/0xb0 [ 253.658009][T18386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.664029][T18386] RIP: 0033:0x7f334d1c472c [ 253.668455][T18386] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 253.688144][T18386] RSP: 002b:00007f334b831030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 253.696671][T18386] RAX: ffffffffffffffda RBX: 00007f334d3b5fa0 RCX: 00007f334d1c472c [ 253.704673][T18386] RDX: 000000000000000f RSI: 00007f334b8310a0 RDI: 0000000000000006 [ 253.712653][T18386] RBP: 00007f334b831090 R08: 0000000000000000 R09: 0000000000000000 [ 253.720629][T18386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.728617][T18386] R13: 0000000000000000 R14: 00007f334d3b5fa0 R15: 00007fffd8ecaef8 [ 253.736604][T18386] [ 253.760431][T18384] loop6: detected capacity change from 0 to 2048 [ 253.768207][T18384] EXT4-fs: Ignoring removed i_version option [ 253.774373][T18384] ext4: Unknown parameter 'noacl' [ 253.799031][T18388] __nla_validate_parse: 7 callbacks suppressed [ 253.799048][T18388] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5623'. [ 253.877550][T18393] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 253.886207][T18393] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 253.940398][T18400] FAULT_INJECTION: forcing a failure. [ 253.940398][T18400] name failslab, interval 1, probability 0, space 0, times 0 [ 253.953101][T18400] CPU: 1 UID: 0 PID: 18400 Comm: syz.5.5627 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 253.963887][T18400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 253.973969][T18400] Call Trace: [ 253.977298][T18400] [ 253.980262][T18400] dump_stack_lvl+0xf2/0x150 [ 253.985036][T18400] dump_stack+0x15/0x1a [ 253.989248][T18400] should_fail_ex+0x223/0x230 [ 253.993974][T18400] should_failslab+0x8f/0xb0 [ 253.998600][T18400] kmem_cache_alloc_noprof+0x52/0x320 [ 254.004270][T18400] ? skb_clone+0x154/0x1f0 [ 254.008786][T18400] skb_clone+0x154/0x1f0 [ 254.013082][T18400] __netlink_deliver_tap+0x2bd/0x4f0 [ 254.018475][T18400] netlink_unicast+0x64a/0x670 [ 254.023303][T18400] netlink_sendmsg+0x5cc/0x6e0 [ 254.028154][T18400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.033470][T18400] __sock_sendmsg+0x140/0x180 [ 254.038224][T18400] ____sys_sendmsg+0x312/0x410 [ 254.043102][T18400] __sys_sendmsg+0x19d/0x230 [ 254.047731][T18400] __x64_sys_sendmsg+0x46/0x50 [ 254.052549][T18400] x64_sys_call+0x2734/0x2dc0 [ 254.057267][T18400] do_syscall_64+0xc9/0x1c0 [ 254.061815][T18400] ? clear_bhb_loop+0x55/0xb0 [ 254.066538][T18400] ? clear_bhb_loop+0x55/0xb0 [ 254.071300][T18400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.077309][T18400] RIP: 0033:0x7f334d1c5d19 [ 254.081781][T18400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.101543][T18400] RSP: 002b:00007f334b831038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.109985][T18400] RAX: ffffffffffffffda RBX: 00007f334d3b5fa0 RCX: 00007f334d1c5d19 [ 254.117989][T18400] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 254.126126][T18400] RBP: 00007f334b831090 R08: 0000000000000000 R09: 0000000000000000 [ 254.134163][T18400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.142166][T18400] R13: 0000000000000000 R14: 00007f334d3b5fa0 R15: 00007fffd8ecaef8 [ 254.150169][T18400] [ 254.192257][T14881] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.340886][T18414] loop5: detected capacity change from 0 to 128 [ 254.397838][T18417] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5635'. [ 254.422368][T18419] loop5: detected capacity change from 0 to 512 [ 254.573699][T18419] EXT4-fs (loop5): orphan cleanup on readonly fs [ 254.584188][T18423] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5638'. [ 254.593247][T18423] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5638'. [ 254.604306][T18423] FAULT_INJECTION: forcing a failure. [ 254.604306][T18423] name failslab, interval 1, probability 0, space 0, times 0 [ 254.616947][T18423] CPU: 1 UID: 0 PID: 18423 Comm: syz.7.5638 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 254.627732][T18423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 254.637812][T18423] Call Trace: [ 254.641213][T18423] [ 254.644203][T18423] dump_stack_lvl+0xf2/0x150 [ 254.648853][T18423] dump_stack+0x15/0x1a [ 254.653138][T18423] should_fail_ex+0x223/0x230 [ 254.657915][T18423] should_failslab+0x8f/0xb0 [ 254.662713][T18423] __kmalloc_node_noprof+0xad/0x410 [ 254.667962][T18423] ? __kvmalloc_node_noprof+0x72/0x170 [ 254.673447][T18423] __kvmalloc_node_noprof+0x72/0x170 [ 254.678762][T18423] alloc_netdev_mqs+0x878/0x9c0 [ 254.683715][T18423] rtnl_create_link+0x233/0x680 [ 254.688693][T18423] rtnl_newlink_create+0x133/0x5d0 [ 254.693929][T18423] ? __schedule+0x6fa/0x930 [ 254.698578][T18423] rtnl_newlink+0xe20/0x1200 [ 254.703255][T18423] ? __rmqueue_pcplist+0xf7e/0x1110 [ 254.708588][T18423] ? get_partial_node+0x2ca/0x310 [ 254.713665][T18423] ? freeze_slab+0x5c/0x80 [ 254.718109][T18423] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 254.723662][T18423] ? __rcu_read_unlock+0x4e/0x70 [ 254.728827][T18423] ? avc_has_perm_noaudit+0x1cc/0x210 [ 254.734366][T18423] ? selinux_capable+0x1f2/0x260 [ 254.739347][T18423] ? security_capable+0x81/0x90 [ 254.744242][T18423] ? ns_capable+0x7d/0xb0 [ 254.748608][T18423] ? __pfx_rtnl_newlink+0x10/0x10 [ 254.753660][T18423] rtnetlink_rcv_msg+0x651/0x710 [ 254.758698][T18423] ? ref_tracker_free+0x3a5/0x410 [ 254.763748][T18423] ? __dev_queue_xmit+0x186/0x2090 [ 254.768978][T18423] netlink_rcv_skb+0x12c/0x230 [ 254.773781][T18423] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 254.779281][T18423] rtnetlink_rcv+0x1c/0x30 [ 254.783819][T18423] netlink_unicast+0x599/0x670 [ 254.788699][T18423] netlink_sendmsg+0x5cc/0x6e0 [ 254.793528][T18423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.798911][T18423] __sock_sendmsg+0x140/0x180 [ 254.803627][T18423] ____sys_sendmsg+0x312/0x410 [ 254.808492][T18423] __sys_sendmsg+0x19d/0x230 [ 254.813064][T18419] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 254.813204][T18423] __x64_sys_sendmsg+0x46/0x50 [ 254.832593][T18423] x64_sys_call+0x2734/0x2dc0 [ 254.837306][T18423] do_syscall_64+0xc9/0x1c0 [ 254.841840][T18423] ? clear_bhb_loop+0x55/0xb0 [ 254.846543][T18423] ? clear_bhb_loop+0x55/0xb0 [ 254.851312][T18423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.853490][T18419] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 254.857254][T18423] RIP: 0033:0x7f592d355d19 [ 254.868326][T18423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.883274][T18419] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #13: comm syz.5.5636: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 254.887944][T18423] RSP: 002b:00007f592b9c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.887974][T18423] RAX: ffffffffffffffda RBX: 00007f592d545fa0 RCX: 00007f592d355d19 [ 254.922186][T18423] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 254.930228][T18423] RBP: 00007f592b9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 254.933069][T18419] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.5636: couldn't read orphan inode 13 (err -117) [ 254.938230][T18423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.958156][T18423] R13: 0000000000000000 R14: 00007f592d545fa0 R15: 00007ffd66ee2fe8 [ 254.966171][T18423] [ 254.993938][T18419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 254.994432][T18426] sctp: [Deprecated]: syz.8.5635 (pid 18426) Use of int in maxseg socket option. [ 254.994432][T18426] Use struct sctp_assoc_value instead [ 255.044679][T18430] loop7: detected capacity change from 0 to 512 [ 255.067513][T18430] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.5639: corrupted in-inode xattr: invalid ea_ino [ 255.097500][T18430] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.5639: couldn't read orphan inode 15 (err -117) [ 255.111308][T18419] EXT4-fs error (device loop5): ext4_lookup:1817: inode #2: comm syz.5.5636: deleted inode referenced: 12 [ 255.116208][T18425] sit0 speed is unknown, defaulting to 1000 [ 255.133485][T18430] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.167021][T12277] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.212094][T18441] loop5: detected capacity change from 0 to 512 [ 255.254195][T14881] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.276837][T18425] chnl_net:caif_netlink_parms(): no params data found [ 255.290797][T18441] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.335821][T18441] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.349664][T18452] serio: Serial port ptm1 [ 255.379071][T18425] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.386489][T18425] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.410897][T18425] bridge_slave_0: entered allmulticast mode [ 255.440007][T18425] bridge_slave_0: entered promiscuous mode [ 255.455910][T18425] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.463211][T18425] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.481813][T18462] loop8: detected capacity change from 0 to 164 [ 255.489143][T18462] iso9660: Unknown parameter 'syzkaller' [ 255.496539][T18425] bridge_slave_1: entered allmulticast mode [ 255.505253][T18425] bridge_slave_1: entered promiscuous mode [ 255.591446][T18425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.605619][T18468] loop8: detected capacity change from 0 to 1764 [ 255.623790][T18425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.662394][T18425] team0: Port device team_slave_0 added [ 255.669635][T18425] team0: Port device team_slave_1 added [ 255.714851][T18425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.721993][T18425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.748115][T18425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.760023][T18474] loop8: detected capacity change from 0 to 512 [ 255.772514][T18474] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.5652: corrupted in-inode xattr: invalid ea_ino [ 255.777982][T18425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.793006][T18425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.804580][T18474] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.5652: couldn't read orphan inode 15 (err -117) [ 255.818997][T18425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.842464][T18474] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.865385][T18425] hsr_slave_0: entered promiscuous mode [ 255.880245][T18425] hsr_slave_1: entered promiscuous mode [ 255.887277][T18425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.899673][T18425] Cannot create hsr debugfs directory [ 255.920994][T15606] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.927878][T18480] smc: net device bond0 erased user defined pnetid SYZ0 [ 255.987588][T18425] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.001668][T18485] loop8: detected capacity change from 0 to 512 [ 256.011672][T18489] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5658'. [ 256.021553][T18485] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.5655: corrupted in-inode xattr: invalid ea_ino [ 256.035591][T18485] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.5655: couldn't read orphan inode 15 (err -117) [ 256.049333][T18485] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.065926][T18425] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.069049][T12277] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.143311][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 256.143343][ T29] audit: type=1326 audit(2000000635.436:14043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18497 comm="syz.6.5662" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d285d19 code=0x0 [ 256.147861][T15606] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.184665][T18425] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.220096][T18506] loop7: detected capacity change from 0 to 128 [ 256.236198][T18425] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.251923][T18508] loop8: detected capacity change from 0 to 1764 [ 256.261667][T18506] FAULT_INJECTION: forcing a failure. [ 256.261667][T18506] name failslab, interval 1, probability 0, space 0, times 0 [ 256.274296][T18506] CPU: 0 UID: 0 PID: 18506 Comm: syz.7.5665 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 256.285175][T18506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 256.295304][T18506] Call Trace: [ 256.298751][T18506] [ 256.301709][T18506] dump_stack_lvl+0xf2/0x150 [ 256.306361][T18506] dump_stack+0x15/0x1a [ 256.310575][T18506] should_fail_ex+0x223/0x230 [ 256.315356][T18506] should_failslab+0x8f/0xb0 [ 256.320013][T18506] kmem_cache_alloc_noprof+0x52/0x320 [ 256.325394][T18506] ? __send_signal_locked+0x155/0x780 [ 256.330878][T18506] __send_signal_locked+0x155/0x780 [ 256.336147][T18506] send_signal_locked+0x28f/0x3a0 [ 256.341277][T18506] force_sig_info_to_task+0x1ec/0x280 [ 256.346728][T18506] force_sig_fault+0x74/0xa0 [ 256.351345][T18506] __bad_area_nosemaphore+0x261/0x320 [ 256.356825][T18506] exc_page_fault+0x4fc/0x650 [ 256.361523][T18506] ? do_syscall_64+0xd6/0x1c0 [ 256.366211][T18506] asm_exc_page_fault+0x26/0x30 [ 256.371153][T18506] RIP: 0033:0x7f592d32e879 [ 256.375576][T18506] Code: f8 77 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 fd 74 0f c5 fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 [ 256.395356][T18506] RSP: 002b:00007f592b9c6e68 EFLAGS: 00010283 [ 256.401480][T18506] RAX: 0000000000000000 RBX: 00007f592b9c6ef0 RCX: 0000000000000000 [ 256.409490][T18506] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000000 [ 256.417472][T18506] RBP: 0000000020000000 R08: 00000000200000c0 R09: 0000000000000000 [ 256.425455][T18506] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000020000180 [ 256.433433][T18506] R13: 00007f592b9c6eb0 R14: 0000000000000000 R15: 0000000000000000 [ 256.441494][T18506] [ 256.478305][T18513] loop5: detected capacity change from 0 to 512 [ 256.511699][T18425] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 256.522378][T18425] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 256.532873][T18425] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 256.540513][T18513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.559711][T18425] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 256.568124][T18513] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.610900][T12277] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.651922][T18425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.660472][ T29] audit: type=1400 audit(2000000635.956:14044): avc: denied { block_suspend } for pid=18532 comm="syz.5.5672" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 256.701209][T18425] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.726592][ T5210] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.733788][ T5210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.741981][ T29] audit: type=1326 audit(2000000636.026:14045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18541 comm="syz.8.5677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef04075d19 code=0x7ffc0000 [ 256.765803][ T29] audit: type=1326 audit(2000000636.026:14046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18541 comm="syz.8.5677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef04075d19 code=0x7ffc0000 [ 256.789823][ T29] audit: type=1326 audit(2000000636.026:14047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18541 comm="syz.8.5677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef04075d19 code=0x7ffc0000 [ 256.800527][T18547] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 256.813885][ T29] audit: type=1326 audit(2000000636.026:14048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18541 comm="syz.8.5677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef04075d19 code=0x7ffc0000 [ 256.844549][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.846479][ T29] audit: type=1326 audit(2000000636.026:14049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18541 comm="syz.8.5677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef04075d19 code=0x7ffc0000 [ 256.853495][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.877181][ T29] audit: type=1326 audit(2000000636.026:14050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18541 comm="syz.8.5677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fef04075d19 code=0x7ffc0000 [ 256.908169][ T29] audit: type=1326 audit(2000000636.026:14051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18541 comm="syz.8.5677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef04075d19 code=0x7ffc0000 [ 256.908296][T18533] loop5: detected capacity change from 0 to 8192 [ 256.931800][ T29] audit: type=1326 audit(2000000636.026:14052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18541 comm="syz.8.5677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fef04075d19 code=0x7ffc0000 [ 256.978284][T18425] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 256.979736][T18546] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5678'. [ 256.988735][T18425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.018817][T18533] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 257.031699][T18547] syzkaller0: entered allmulticast mode [ 257.038917][T18533] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5672'. [ 257.048027][T18533] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5672'. [ 257.070096][T18547] syzkaller0 (unregistering): left allmulticast mode [ 257.135231][T18565] FAULT_INJECTION: forcing a failure. [ 257.135231][T18565] name failslab, interval 1, probability 0, space 0, times 0 [ 257.147923][T18565] CPU: 1 UID: 0 PID: 18565 Comm: syz.8.5684 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 257.158789][T18565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 257.168871][T18565] Call Trace: [ 257.172147][T18565] [ 257.175112][T18565] dump_stack_lvl+0xf2/0x150 [ 257.179774][T18565] dump_stack+0x15/0x1a [ 257.184008][T18565] should_fail_ex+0x223/0x230 [ 257.188694][T18565] should_failslab+0x8f/0xb0 [ 257.193485][T18565] kmem_cache_alloc_node_noprof+0x59/0x320 [ 257.199393][T18565] ? __alloc_skb+0x10b/0x310 [ 257.203987][T18565] __alloc_skb+0x10b/0x310 [ 257.208403][T18565] netlink_alloc_large_skb+0xad/0xe0 [ 257.213891][T18565] netlink_sendmsg+0x3b4/0x6e0 [ 257.218716][T18565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.224011][T18565] __sock_sendmsg+0x140/0x180 [ 257.228705][T18565] ____sys_sendmsg+0x312/0x410 [ 257.233603][T18565] __sys_sendmsg+0x19d/0x230 [ 257.238287][T18565] __x64_sys_sendmsg+0x46/0x50 [ 257.243124][T18565] x64_sys_call+0x2734/0x2dc0 [ 257.247806][T18565] do_syscall_64+0xc9/0x1c0 [ 257.252383][T18565] ? clear_bhb_loop+0x55/0xb0 [ 257.257060][T18565] ? clear_bhb_loop+0x55/0xb0 [ 257.261753][T18565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.267739][T18565] RIP: 0033:0x7fef04075d19 [ 257.272184][T18565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.291861][T18565] RSP: 002b:00007fef026e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.300279][T18565] RAX: ffffffffffffffda RBX: 00007fef04265fa0 RCX: 00007fef04075d19 [ 257.308251][T18565] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 257.316223][T18565] RBP: 00007fef026e7090 R08: 0000000000000000 R09: 0000000000000000 [ 257.324217][T18565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.332198][T18565] R13: 0000000000000000 R14: 00007fef04265fa0 R15: 00007ffd18e2fe28 [ 257.340268][T18565] [ 257.384187][T18425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.426594][T18574] tipc: Failed to obtain node identity [ 257.432143][T18574] tipc: Enabling of bearer rejected, failed to enable media [ 257.462771][T18576] pim6reg: entered allmulticast mode [ 257.476802][T18576] tls_set_device_offload_rx: netdev not found [ 257.507688][T18425] veth0_vlan: entered promiscuous mode [ 257.534718][T18425] veth1_vlan: entered promiscuous mode [ 257.595320][T18425] veth0_macvtap: entered promiscuous mode [ 257.616128][T18425] veth1_macvtap: entered promiscuous mode [ 257.627007][T18425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.637551][T18425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.647432][T18425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.657896][T18425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.667884][T18425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.678647][T18425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.688742][T18425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.699277][T18425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.709161][T18425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.719741][T18425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.729160][T18609] loop8: detected capacity change from 0 to 512 [ 257.730678][T18425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.744651][T18425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.755181][T18425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.765104][T18425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.769782][T18609] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.5694: corrupted in-inode xattr: invalid ea_ino [ 257.775732][T18425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.798959][T18425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.809431][T18425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.819346][T18425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.829836][T18425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.839699][T18425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.850163][T18425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.860011][T18425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.870450][T18425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.881031][T18425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.893234][T18609] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.5694: couldn't read orphan inode 15 (err -117) [ 257.893856][T18425] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.914049][T18425] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.922866][T18425] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.931774][T18425] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.953552][T18609] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.039213][T15606] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.093218][T18621] netlink: 'syz.3.5699': attribute type 1 has an invalid length. [ 258.177598][T18631] netlink: 'syz.6.5703': attribute type 1 has an invalid length. [ 259.382295][T18681] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 259.403001][T18672] IPVS: stopping master sync thread 18681 ... [ 259.506955][T18692] loop8: detected capacity change from 0 to 1024 [ 259.543521][T18692] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 259.553364][T18692] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 259.587939][T18692] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 259.598261][T18702] __nla_validate_parse: 10 callbacks suppressed [ 259.598276][T18702] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5731'. [ 259.699160][T18692] EXT4-fs error (device loop8): ext4_get_journal_inode:5809: inode #5: comm syz.8.5730: unexpected bad inode w/o EXT4_IGET_BAD [ 259.717559][T18692] EXT4-fs (loop8): no journal found [ 259.722847][T18692] EXT4-fs (loop8): can't get journal size [ 259.842504][T18692] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 260.612945][T18692] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5730: bg 0: block 32: padding at end of block bitmap is not set [ 260.889395][T15606] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.372747][T18733] FAULT_INJECTION: forcing a failure. [ 263.372747][T18733] name failslab, interval 1, probability 0, space 0, times 0 [ 263.385693][T18733] CPU: 0 UID: 0 PID: 18733 Comm: syz.3.5744 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 263.396485][T18733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 263.406613][T18733] Call Trace: [ 263.409990][T18733] [ 263.412949][T18733] dump_stack_lvl+0xf2/0x150 [ 263.417764][T18733] dump_stack+0x15/0x1a [ 263.421961][T18733] should_fail_ex+0x223/0x230 [ 263.426667][T18733] should_failslab+0x8f/0xb0 [ 263.431282][T18733] kmem_cache_alloc_noprof+0x52/0x320 [ 263.436717][T18733] ? mas_alloc_nodes+0x1e3/0x490 [ 263.441671][T18733] mas_alloc_nodes+0x1e3/0x490 [ 263.446478][T18733] mas_preallocate+0x44a/0x650 [ 263.451352][T18733] __mmap_region+0x809/0x13f0 [ 263.456064][T18733] mmap_region+0x164/0x1e0 [ 263.460618][T18733] do_mmap+0x718/0xb60 [ 263.464730][T18733] vm_mmap_pgoff+0x133/0x290 [ 263.469349][T18733] ksys_mmap_pgoff+0xd0/0x330 [ 263.474049][T18733] ? fpregs_assert_state_consistent+0x83/0xa0 [ 263.480135][T18733] x64_sys_call+0x1940/0x2dc0 [ 263.484934][T18733] do_syscall_64+0xc9/0x1c0 [ 263.489552][T18733] ? clear_bhb_loop+0x55/0xb0 [ 263.494269][T18733] ? clear_bhb_loop+0x55/0xb0 [ 263.498952][T18733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.504906][T18733] RIP: 0033:0x7fd107b75d53 [ 263.509386][T18733] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 263.529054][T18733] RSP: 002b:00007fd1061e0e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 263.537499][T18733] RAX: ffffffffffffffda RBX: 000000000000048d RCX: 00007fd107b75d53 [ 263.545505][T18733] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 263.553497][T18733] RBP: 0000000020000942 R08: 00000000ffffffff R09: 0000000000000000 [ 263.561540][T18733] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 263.569756][T18733] R13: 00007fd1061e0ef0 R14: 00007fd1061e0eb0 R15: 0000000020000100 [ 263.577743][T18733] [ 263.590035][T18736] loop5: detected capacity change from 0 to 1024 [ 263.612985][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 263.613004][ T29] audit: type=1326 audit(2000000642.896:14069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18738 comm="syz.7.5747" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f592d355d19 code=0x0 [ 263.645575][T18736] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 263.655469][T18736] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 263.662085][T18747] FAULT_INJECTION: forcing a failure. [ 263.662085][T18747] name failslab, interval 1, probability 0, space 0, times 0 [ 263.666833][T18736] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 263.677687][T18747] CPU: 1 UID: 0 PID: 18747 Comm: syz.8.5751 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 263.677721][T18747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 263.677736][T18747] Call Trace: [ 263.677743][T18747] [ 263.677751][T18747] dump_stack_lvl+0xf2/0x150 [ 263.719285][T18747] dump_stack+0x15/0x1a [ 263.723501][T18747] should_fail_ex+0x223/0x230 [ 263.728216][T18747] should_failslab+0x8f/0xb0 [ 263.732848][T18747] kmem_cache_alloc_noprof+0x52/0x320 [ 263.738294][T18747] ? dst_alloc+0xc0/0x100 [ 263.738813][ T29] audit: type=1107 audit(2000000642.986:14070): pid=18738 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 263.742718][T18747] dst_alloc+0xc0/0x100 [ 263.760121][T18736] EXT4-fs error (device loop5): ext4_get_journal_inode:5809: inode #5: comm syz.5.5746: unexpected bad inode w/o EXT4_IGET_BAD [ 263.760222][T18747] ? __pfx___ip_rt_update_pmtu+0x2/0x10 [ 263.775569][T18736] EXT4-fs (loop5): no journal found [ 263.779035][T18747] ip_route_output_key_hash_rcu+0xb90/0x12d0 [ 263.784259][T18736] EXT4-fs (loop5): can't get journal size [ 263.790220][T18747] ip_route_output_flow+0x76/0x120 [ 263.798803][T18736] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 263.801113][T18747] ip_send_unicast_reply+0x44a/0xa50 [ 263.818886][T18747] tcp_v4_send_reset+0xdc9/0x10a0 [ 263.819007][T18747] ? tcp_v4_send_reset+0xb28/0x10a0 [ 263.819048][T18747] tcp_v4_rcv+0x16f3/0x1ee0 [ 263.819094][T18747] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 263.819127][T18747] ip_protocol_deliver_rcu+0x370/0x720 [ 263.819258][T18747] ip_local_deliver_finish+0x17d/0x210 [ 263.819301][T18747] ip_local_deliver+0xec/0x1d0 [ 263.819357][T18747] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 263.819401][T18747] ? __pfx_ip_local_deliver+0x10/0x10 [ 263.819435][T18747] ip_rcv_finish+0x193/0x1b0 [ 263.819500][T18747] ? __pfx_ip_rcv+0x10/0x10 [ 263.819611][T18747] ip_rcv+0x64/0x140 [ 263.819647][T18747] ? __pfx_ip_rcv_finish+0x10/0x10 [ 263.819758][T18747] ? __pfx_ip_rcv+0x10/0x10 [ 263.819794][T18747] __netif_receive_skb+0x10a/0x280 [ 263.819825][T18747] netif_receive_skb+0x4a/0x320 [ 263.819851][T18747] ? tun_rx_batched+0xba/0x410 [ 263.819925][T18747] tun_rx_batched+0xf0/0x410 [ 263.819966][T18747] tun_get_user+0x1f3d/0x25b0 [ 263.820002][T18747] ? _parse_integer+0x27/0x30 [ 263.820025][T18747] ? ref_tracker_alloc+0x1f5/0x2f0 [ 263.820057][T18747] tun_chr_write_iter+0x188/0x240 [ 263.820094][T18747] vfs_write+0x77f/0x920 [ 263.820126][T18747] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 263.820163][T18747] ksys_write+0xe8/0x1b0 [ 263.820195][T18747] __x64_sys_write+0x42/0x50 [ 263.820227][T18747] x64_sys_call+0x287e/0x2dc0 [ 263.820286][T18747] do_syscall_64+0xc9/0x1c0 [ 263.820309][T18747] ? clear_bhb_loop+0x55/0xb0 [ 263.820332][T18747] ? clear_bhb_loop+0x55/0xb0 [ 263.820381][T18747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.820501][T18747] RIP: 0033:0x7fef040747cf [ 263.820521][T18747] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 263.820620][T18747] RSP: 002b:00007fef026e7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 263.820644][T18747] RAX: ffffffffffffffda RBX: 00007fef04265fa0 RCX: 00007fef040747cf [ 263.820660][T18747] RDX: 000000000000008a RSI: 0000000020000000 RDI: 00000000000000c8 [ 263.820751][T18747] RBP: 00007fef026e7090 R08: 0000000000000000 R09: 0000000000000000 [ 263.820766][T18747] R10: 000000000000008a R11: 0000000000000293 R12: 0000000000000001 [ 263.820781][T18747] R13: 0000000000000001 R14: 00007fef04265fa0 R15: 00007ffd18e2fe28 [ 263.820803][T18747] [ 263.881312][ T29] audit: type=1400 audit(2000000643.176:14071): avc: denied { read } for pid=18752 comm="syz.8.5752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 263.882566][T18753] netlink: 'syz.8.5752': attribute type 4 has an invalid length. [ 263.911695][ T29] audit: type=1400 audit(2000000643.196:14072): avc: denied { ioctl } for pid=18742 comm="syz.3.5749" path="socket:[60754]" dev="sockfs" ino=60754 ioctlcmd=0x89f6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 263.946422][T18736] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5746: bg 0: block 32: padding at end of block bitmap is not set [ 264.146650][T12277] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.220777][ T29] audit: type=1400 audit(2000000643.506:14073): avc: denied { setopt } for pid=18764 comm="syz.6.5757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 264.231812][T18767] loop5: detected capacity change from 0 to 512 [ 264.254876][T18771] netlink: 1100 bytes leftover after parsing attributes in process `syz.3.5760'. [ 264.284657][T18767] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.300442][ T29] audit: type=1400 audit(2000000643.586:14074): avc: denied { read } for pid=18768 comm="syz.8.5759" path="socket:[60794]" dev="sockfs" ino=60794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 264.302882][T18767] ext4 filesystem being mounted at /427/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.352014][T18770] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5759'. [ 264.431131][T18787] netlink: 'syz.6.5764': attribute type 10 has an invalid length. [ 264.439610][T12277] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.449069][T18788] FAULT_INJECTION: forcing a failure. [ 264.449069][T18788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.449095][T18788] CPU: 1 UID: 0 PID: 18788 Comm: syz.7.5765 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 264.472910][T18788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 264.483058][T18788] Call Trace: [ 264.486377][T18788] [ 264.489313][T18788] dump_stack_lvl+0xf2/0x150 [ 264.493936][T18788] dump_stack+0x15/0x1a [ 264.498117][T18788] should_fail_ex+0x223/0x230 [ 264.502842][T18788] should_fail+0xb/0x10 [ 264.507008][T18788] should_fail_usercopy+0x1a/0x20 [ 264.512077][T18788] _copy_from_user+0x1e/0xb0 [ 264.516692][T18788] restore_sigcontext+0x64/0x220 [ 264.521681][T18788] __do_sys_rt_sigreturn+0xfd/0x160 [ 264.526965][T18788] x64_sys_call+0x2982/0x2dc0 [ 264.531670][T18788] do_syscall_64+0xc9/0x1c0 [ 264.536183][T18788] ? clear_bhb_loop+0x55/0xb0 [ 264.540947][T18788] ? clear_bhb_loop+0x55/0xb0 [ 264.545632][T18788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.551545][T18788] RIP: 0033:0x7f592d2f1f29 [ 264.555966][T18788] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 264.575643][T18788] RSP: 002b:00007f592b9c6a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 264.584077][T18788] RAX: ffffffffffffffda RBX: 00007f592d545fa0 RCX: 00007f592d2f1f29 [ 264.592057][T18788] RDX: 00007f592b9c6a80 RSI: 00007f592b9c6bb0 RDI: 0000000000000021 [ 264.600042][T18788] RBP: 00007f592b9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 264.608025][T18788] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 264.615998][T18788] R13: 0000000000000000 R14: 00007f592d545fa0 R15: 00007ffd66ee2fe8 [ 264.624003][T18788] [ 264.640889][ T29] audit: type=1400 audit(2000000643.916:14075): avc: denied { bind } for pid=18784 comm="syz.6.5764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 264.669996][ T29] audit: type=1326 audit(2000000643.956:14076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18784 comm="syz.6.5764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d285d19 code=0x7ffc0000 [ 264.696632][ T29] audit: type=1326 audit(2000000643.986:14077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18784 comm="syz.6.5764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f6f5d285d19 code=0x7ffc0000 [ 264.720511][ T29] audit: type=1326 audit(2000000643.986:14078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18784 comm="syz.6.5764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d285d19 code=0x7ffc0000 [ 264.748241][T18787] team0: Port device netdevsim1 added [ 264.820230][T18803] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5772'. [ 264.870241][T18804] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 264.907038][T18819] program syz.3.5778 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.928494][T18819] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 264.975509][T18835] Cannot find set identified by id 1 to match [ 265.036996][T18847] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5790'. [ 265.050119][T18847] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.5790' sets config #0 [ 265.374525][T18878] loop5: detected capacity change from 0 to 512 [ 265.887641][T18897] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 265.941911][T18907] FAULT_INJECTION: forcing a failure. [ 265.941911][T18907] name failslab, interval 1, probability 0, space 0, times 0 [ 265.954698][T18907] CPU: 1 UID: 0 PID: 18907 Comm: syz.8.5815 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 265.965487][T18907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 265.975566][T18907] Call Trace: [ 265.978867][T18907] [ 265.981878][T18907] dump_stack_lvl+0xf2/0x150 [ 265.986507][T18907] dump_stack+0x15/0x1a [ 265.990718][T18907] should_fail_ex+0x223/0x230 [ 265.995469][T18907] should_failslab+0x8f/0xb0 [ 266.000143][T18907] kmem_cache_alloc_noprof+0x52/0x320 [ 266.005561][T18907] ? skb_clone+0x154/0x1f0 [ 266.010024][T18907] skb_clone+0x154/0x1f0 [ 266.014288][T18907] __netlink_deliver_tap+0x2bd/0x4f0 [ 266.019614][T18907] netlink_unicast+0x64a/0x670 [ 266.024460][T18907] netlink_sendmsg+0x5cc/0x6e0 [ 266.029255][T18907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.034625][T18907] __sock_sendmsg+0x140/0x180 [ 266.039341][T18907] ____sys_sendmsg+0x312/0x410 [ 266.044157][T18907] __sys_sendmmsg+0x227/0x4b0 [ 266.048889][T18907] __x64_sys_sendmmsg+0x57/0x70 [ 266.053875][T18907] x64_sys_call+0x29aa/0x2dc0 [ 266.058570][T18907] do_syscall_64+0xc9/0x1c0 [ 266.063174][T18907] ? clear_bhb_loop+0x55/0xb0 [ 266.067880][T18907] ? clear_bhb_loop+0x55/0xb0 [ 266.072570][T18907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.078490][T18907] RIP: 0033:0x7fef04075d19 [ 266.082914][T18907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.102642][T18907] RSP: 002b:00007fef026e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 266.111150][T18907] RAX: ffffffffffffffda RBX: 00007fef04265fa0 RCX: 00007fef04075d19 [ 266.119157][T18907] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000007 [ 266.127197][T18907] RBP: 00007fef026e7090 R08: 0000000000000000 R09: 0000000000000000 [ 266.135184][T18907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 266.143163][T18907] R13: 0000000000000000 R14: 00007fef04265fa0 R15: 00007ffd18e2fe28 [ 266.151150][T18907] [ 266.195258][T18909] smc: net device bond0 applied user defined pnetid SYZ0 [ 266.203304][T18909] smc: net device bond0 erased user defined pnetid SYZ0 [ 266.228503][T18913] SELinux: failed to load policy [ 266.234988][T18913] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5817'. [ 266.282005][T18920] loop8: detected capacity change from 0 to 1024 [ 266.290837][T18920] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 266.306439][T18920] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.355373][T18937] FAULT_INJECTION: forcing a failure. [ 266.355373][T18937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.368570][T18937] CPU: 0 UID: 0 PID: 18937 Comm: syz.7.5827 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 266.379390][T18937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 266.389567][T18937] Call Trace: [ 266.392857][T18937] [ 266.395798][T18937] dump_stack_lvl+0xf2/0x150 [ 266.400425][T18937] dump_stack+0x15/0x1a [ 266.404664][T18937] should_fail_ex+0x223/0x230 [ 266.409413][T18937] should_fail+0xb/0x10 [ 266.413637][T18937] should_fail_usercopy+0x1a/0x20 [ 266.418797][T18937] _copy_from_user+0x1e/0xb0 [ 266.423483][T18937] copy_msghdr_from_user+0x54/0x2a0 [ 266.428722][T18937] ? __fget_files+0x17c/0x1c0 [ 266.433493][T18937] __sys_sendmsg+0x13e/0x230 [ 266.438112][T18937] __x64_sys_sendmsg+0x46/0x50 [ 266.442912][T18937] x64_sys_call+0x2734/0x2dc0 [ 266.447676][T18937] do_syscall_64+0xc9/0x1c0 [ 266.452205][T18937] ? clear_bhb_loop+0x55/0xb0 [ 266.456892][T18937] ? clear_bhb_loop+0x55/0xb0 [ 266.461688][T18937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.467695][T18937] RIP: 0033:0x7f592d355d19 [ 266.472115][T18937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.492129][T18937] RSP: 002b:00007f592b9c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.500562][T18937] RAX: ffffffffffffffda RBX: 00007f592d545fa0 RCX: 00007f592d355d19 [ 266.508541][T18937] RDX: 0000000000008000 RSI: 0000000020000040 RDI: 0000000000000008 [ 266.516770][T18937] RBP: 00007f592b9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 266.524773][T18937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.532752][T18937] R13: 0000000000000000 R14: 00007f592d545fa0 R15: 00007ffd66ee2fe8 [ 266.540740][T18937] [ 266.577676][T15606] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.622589][T18946] smc: net device bond0 applied user defined pnetid SYZ0 [ 266.628498][T18948] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5833'. [ 266.639265][T18948] bridge_slave_1: left allmulticast mode [ 266.639742][T18946] smc: net device bond0 erased user defined pnetid SYZ0 [ 266.644993][T18948] bridge_slave_1: left promiscuous mode [ 266.645229][T18948] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.681320][T18948] bridge_slave_0: left allmulticast mode [ 266.687111][T18948] bridge_slave_0: left promiscuous mode [ 266.692915][T18948] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.764980][T18958] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 266.947380][T18964] sit0 speed is unknown, defaulting to 1000 [ 266.968205][T18982] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5845'. [ 266.977376][T18982] bridge_slave_1: left allmulticast mode [ 266.983186][T18982] bridge_slave_1: left promiscuous mode [ 266.988912][T18982] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.997206][T18982] bridge_slave_0: left allmulticast mode [ 267.002945][T18982] bridge_slave_0: left promiscuous mode [ 267.008587][T18982] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.107146][T18964] chnl_net:caif_netlink_parms(): no params data found [ 267.169438][T18964] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.176781][T18964] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.184191][T18964] bridge_slave_0: entered allmulticast mode [ 267.190832][T18964] bridge_slave_0: entered promiscuous mode [ 267.197399][T18987] smc: net device bond0 applied user defined pnetid SYZ0 [ 267.197719][T18964] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.211721][T18964] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.219375][T18987] smc: net device bond0 erased user defined pnetid SYZ0 [ 267.219397][T18964] bridge_slave_1: entered allmulticast mode [ 267.233393][T18964] bridge_slave_1: entered promiscuous mode [ 267.259592][T18964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.272362][T18964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.301375][T18964] team0: Port device team_slave_0 added [ 267.309028][T18964] team0: Port device team_slave_1 added [ 267.331831][T18964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.338921][T18964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.365055][T18964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.378165][T18964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.385175][T18964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.411211][T18964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.415798][T19009] FAULT_INJECTION: forcing a failure. [ 267.415798][T19009] name failslab, interval 1, probability 0, space 0, times 0 [ 267.434766][T19009] CPU: 1 UID: 0 PID: 19009 Comm: syz.7.5855 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 267.445563][T19009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 267.447615][T19011] Process accounting resumed [ 267.455645][T19009] Call Trace: [ 267.455722][T19009] [ 267.466541][T19009] dump_stack_lvl+0xf2/0x150 [ 267.470279][T19011] serio: Serial port ptm1 [ 267.471192][T19009] dump_stack+0x15/0x1a [ 267.479699][T19009] should_fail_ex+0x223/0x230 [ 267.484417][T19009] should_failslab+0x8f/0xb0 [ 267.489047][T19009] __kmalloc_noprof+0xab/0x3f0 [ 267.493891][T19009] ? genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 267.500178][T19009] genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 267.506298][T19009] ? ns_capable+0x7d/0xb0 [ 267.510757][T19009] genl_rcv_msg+0x470/0x6c0 [ 267.515365][T19009] ? __pfx_ieee802154_llsec_add_seclevel+0x10/0x10 [ 267.521933][T19009] ? should_fail_ex+0x31/0x230 [ 267.526857][T19009] ? __rcu_read_unlock+0x4e/0x70 [ 267.532122][T19009] ? avc_has_perm_noaudit+0x1cc/0x210 [ 267.537546][T19009] netlink_rcv_skb+0x12c/0x230 [ 267.542360][T19009] ? __pfx_genl_rcv_msg+0x10/0x10 [ 267.547420][T19009] genl_rcv+0x28/0x40 [ 267.551453][T19009] netlink_unicast+0x599/0x670 [ 267.556308][T19009] netlink_sendmsg+0x5cc/0x6e0 [ 267.561098][T19009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.566432][T19009] __sock_sendmsg+0x140/0x180 [ 267.571221][T19009] ____sys_sendmsg+0x312/0x410 [ 267.576026][T19009] __sys_sendmsg+0x19d/0x230 [ 267.580744][T19009] __x64_sys_sendmsg+0x46/0x50 [ 267.585628][T19009] x64_sys_call+0x2734/0x2dc0 [ 267.590373][T19009] do_syscall_64+0xc9/0x1c0 [ 267.594952][T19009] ? clear_bhb_loop+0x55/0xb0 [ 267.599640][T19009] ? clear_bhb_loop+0x55/0xb0 [ 267.604355][T19009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.610470][T19009] RIP: 0033:0x7f592d355d19 [ 267.614895][T19009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.634629][T19009] RSP: 002b:00007f592b9c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.643057][T19009] RAX: ffffffffffffffda RBX: 00007f592d545fa0 RCX: 00007f592d355d19 [ 267.651122][T19009] RDX: 0000000004000090 RSI: 0000000020000600 RDI: 0000000000000004 [ 267.659123][T19009] RBP: 00007f592b9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 267.667170][T19009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.675261][T19009] R13: 0000000000000000 R14: 00007f592d545fa0 R15: 00007ffd66ee2fe8 [ 267.683347][T19009] [ 267.713989][T18964] hsr_slave_0: entered promiscuous mode [ 267.724034][T18964] hsr_slave_1: entered promiscuous mode [ 267.732788][T18964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.740437][T18964] Cannot create hsr debugfs directory [ 267.752725][T19020] 9pnet: Could not find request transport: 0x0000000000000003 [ 267.845415][T19031] 9pnet: Could not find request transport: 0x0000000000000003 [ 267.853402][T19031] FAULT_INJECTION: forcing a failure. [ 267.853402][T19031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.866571][T19031] CPU: 0 UID: 0 PID: 19031 Comm: syz.5.5863 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 267.877353][T19031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 267.887451][T19031] Call Trace: [ 267.890780][T19031] [ 267.893728][T19031] dump_stack_lvl+0xf2/0x150 [ 267.898088][T18964] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 267.898348][T19031] dump_stack+0x15/0x1a [ 267.909188][T19031] should_fail_ex+0x223/0x230 [ 267.913895][T19031] should_fail+0xb/0x10 [ 267.918069][T19031] should_fail_usercopy+0x1a/0x20 [ 267.923188][T19031] _copy_from_user+0x1e/0xb0 [ 267.927845][T19031] __x64_sys_futimesat+0x9c/0x1a0 [ 267.932910][T19031] ? fpregs_assert_state_consistent+0x83/0xa0 [ 267.939098][T19031] x64_sys_call+0x2d2e/0x2dc0 [ 267.943806][T19031] do_syscall_64+0xc9/0x1c0 [ 267.948322][T19031] ? clear_bhb_loop+0x55/0xb0 [ 267.953100][T19031] ? clear_bhb_loop+0x55/0xb0 [ 267.957784][T19031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.963721][T19031] RIP: 0033:0x7f334d1c5d19 [ 267.968203][T19031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.987937][T19031] RSP: 002b:00007f334b831038 EFLAGS: 00000246 ORIG_RAX: 0000000000000105 [ 267.996362][T19031] RAX: ffffffffffffffda RBX: 00007f334d3b5fa0 RCX: 00007f334d1c5d19 [ 268.004343][T19031] RDX: 0000000020000380 RSI: 0000000000000000 RDI: 0000000000000003 [ 268.012338][T19031] RBP: 00007f334b831090 R08: 0000000000000000 R09: 0000000000000000 [ 268.020334][T19031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.028357][T19031] R13: 0000000000000000 R14: 00007f334d3b5fa0 R15: 00007fffd8ecaef8 [ 268.036344][T19031] [ 268.058378][T18964] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 268.084568][T18964] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 268.102260][T18964] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 268.218272][T18964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.231017][T18964] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.250961][T19049] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.258108][T19049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.287229][T19049] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.294536][T19049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.318354][T19069] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 268.339608][T19069] syzkaller0: entered allmulticast mode [ 268.347204][T19069] syzkaller0 (unregistering): left allmulticast mode [ 268.504126][T18964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.623214][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 268.623231][ T29] audit: type=1400 audit(2000000647.916:14217): avc: denied { unlink } for pid=12277 comm="syz-executor" name="file0" dev="tmpfs" ino=2435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 268.687885][T19117] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5888'. [ 268.819967][T18964] veth0_vlan: entered promiscuous mode [ 268.832922][T19140] veth1_macvtap: left promiscuous mode [ 268.838495][T19140] macsec0: entered allmulticast mode [ 268.851531][T18964] veth1_vlan: entered promiscuous mode [ 268.875230][T18964] veth0_macvtap: entered promiscuous mode [ 268.894438][T18964] veth1_macvtap: entered promiscuous mode [ 268.915584][T18964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.926172][T18964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.936151][T18964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.946663][T18964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.956514][T18964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.967036][T18964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.976990][T18964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.987441][T18964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.997379][T18964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.007966][T18964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.017957][T18964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.028599][T18964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.039496][T18964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.050759][T18964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.061315][T18964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.071198][T18964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.081664][T18964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.091547][T18964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.102011][T18964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.111897][T18964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.122354][T18964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.132569][T18964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.143183][T18964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.153148][T18964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.163759][T18964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.173896][T18964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.184477][T18964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.198955][T18964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.206839][T19133] geneve1: entered promiscuous mode [ 269.212461][T19167] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5902'. [ 269.225952][T19162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5903'. [ 269.235192][T19162] bridge_slave_1: left allmulticast mode [ 269.240881][T19162] bridge_slave_1: left promiscuous mode [ 269.247187][T19162] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.255673][T19162] bridge_slave_0: left allmulticast mode [ 269.261345][T19162] bridge_slave_0: left promiscuous mode [ 269.267408][T19162] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.369200][T18964] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.378202][T18964] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.387496][T18964] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.396218][T18964] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.409737][T19140] sit0 speed is unknown, defaulting to 1000 [ 269.500828][ T29] audit: type=1326 audit(2000000648.776:14218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19179 comm="syz.7.5907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592d355d19 code=0x7ffc0000 [ 269.524483][ T29] audit: type=1326 audit(2000000648.776:14219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19179 comm="syz.7.5907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592d355d19 code=0x7ffc0000 [ 269.548480][ T29] audit: type=1326 audit(2000000648.776:14220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19179 comm="syz.7.5907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f592d355d19 code=0x7ffc0000 [ 269.572066][ T29] audit: type=1326 audit(2000000648.776:14221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19179 comm="syz.7.5907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592d355d19 code=0x7ffc0000 [ 269.595748][ T29] audit: type=1326 audit(2000000648.776:14222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19179 comm="syz.7.5907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592d355d19 code=0x7ffc0000 [ 269.619401][ T29] audit: type=1326 audit(2000000648.776:14223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19179 comm="syz.7.5907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f592d355d19 code=0x7ffc0000 [ 269.643180][ T29] audit: type=1326 audit(2000000648.776:14224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19179 comm="syz.7.5907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592d355d19 code=0x7ffc0000 [ 269.666771][ T29] audit: type=1326 audit(2000000648.786:14225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19179 comm="syz.7.5907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f592d355d19 code=0x7ffc0000 [ 269.690395][ T29] audit: type=1326 audit(2000000648.786:14226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19179 comm="syz.7.5907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592d355d19 code=0x7ffc0000 [ 269.806160][T19203] FAULT_INJECTION: forcing a failure. [ 269.806160][T19203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.819428][T19203] CPU: 0 UID: 0 PID: 19203 Comm: syz.5.5917 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 269.830267][T19203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 269.840426][T19203] Call Trace: [ 269.843728][T19203] [ 269.846726][T19203] dump_stack_lvl+0xf2/0x150 [ 269.851442][T19203] dump_stack+0x15/0x1a [ 269.855638][T19203] should_fail_ex+0x223/0x230 [ 269.860408][T19203] should_fail+0xb/0x10 [ 269.864665][T19203] should_fail_usercopy+0x1a/0x20 [ 269.869738][T19203] _copy_from_user+0x1e/0xb0 [ 269.874377][T19203] copy_msghdr_from_user+0x54/0x2a0 [ 269.879659][T19203] ? __fget_files+0x17c/0x1c0 [ 269.884458][T19203] __sys_sendmsg+0x13e/0x230 [ 269.889114][T19203] __x64_sys_sendmsg+0x46/0x50 [ 269.893916][T19203] x64_sys_call+0x2734/0x2dc0 [ 269.898728][T19203] do_syscall_64+0xc9/0x1c0 [ 269.903270][T19203] ? clear_bhb_loop+0x55/0xb0 [ 269.907970][T19203] ? clear_bhb_loop+0x55/0xb0 [ 269.912690][T19203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.918677][T19203] RIP: 0033:0x7f334d1c5d19 [ 269.923268][T19203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.942939][T19203] RSP: 002b:00007f334b831038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.951381][T19203] RAX: ffffffffffffffda RBX: 00007f334d3b5fa0 RCX: 00007f334d1c5d19 [ 269.959923][T19203] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 269.967915][T19203] RBP: 00007f334b831090 R08: 0000000000000000 R09: 0000000000000000 [ 269.975992][T19203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.983977][T19203] R13: 0000000000000000 R14: 00007f334d3b5fa0 R15: 00007fffd8ecaef8 [ 269.992014][T19203] [ 270.033640][T19201] loop9: detected capacity change from 0 to 8192 [ 270.051485][T19206] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5918'. [ 270.070034][T19206] bond0: left allmulticast mode [ 270.075094][T19206] bond_slave_0: left allmulticast mode [ 270.080699][T19206] bond_slave_1: left allmulticast mode [ 270.086353][T19206] bond0: left promiscuous mode [ 270.091133][T19206] bond_slave_0: left promiscuous mode [ 270.096627][T19206] bond_slave_1: left promiscuous mode [ 270.102298][T19206] bridge0: port 3(bond0) entered disabled state [ 270.109031][T19201] loop9: p1 < > p3 < > p4 [ 270.113521][T19201] loop9: partition table partially beyond EOD, truncated [ 270.120666][T19201] loop9: p1 start 4294967040 is beyond EOD, truncated [ 270.128446][T19201] loop9: p4 size 50331776 extends beyond EOD, truncated [ 270.136344][T19206] bridge_slave_1: left allmulticast mode [ 270.142137][T19206] bridge_slave_1: left promiscuous mode [ 270.148256][T19206] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.169261][T19206] bridge_slave_0: left allmulticast mode [ 270.175031][T19206] bridge_slave_0: left promiscuous mode [ 270.180782][T19206] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.191000][T19217] FAULT_INJECTION: forcing a failure. [ 270.191000][T19217] name failslab, interval 1, probability 0, space 0, times 0 [ 270.203686][T19217] CPU: 0 UID: 0 PID: 19217 Comm: syz.5.5921 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 270.214471][T19217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 270.224611][T19217] Call Trace: [ 270.227971][T19217] [ 270.230918][T19217] dump_stack_lvl+0xf2/0x150 [ 270.235589][T19217] dump_stack+0x15/0x1a [ 270.239835][T19217] should_fail_ex+0x223/0x230 [ 270.244714][T19217] should_failslab+0x8f/0xb0 [ 270.249368][T19217] kmem_cache_alloc_noprof+0x52/0x320 [ 270.254858][T19217] ? audit_log_start+0x34c/0x6b0 [ 270.259838][T19217] audit_log_start+0x34c/0x6b0 [ 270.264716][T19217] ? bpf_link_settle+0x78/0x90 [ 270.269524][T19217] audit_seccomp+0x4b/0x130 [ 270.274116][T19217] __seccomp_filter+0x6fa/0x1180 [ 270.279101][T19217] ? bpf_raw_tracepoint_open+0x149/0x2c0 [ 270.284886][T19217] ? __sys_bpf+0x32b/0x7a0 [ 270.289338][T19217] __secure_computing+0x9f/0x1c0 [ 270.294379][T19217] syscall_trace_enter+0xd1/0x1f0 [ 270.299520][T19217] ? fpregs_assert_state_consistent+0x83/0xa0 [ 270.305659][T19217] do_syscall_64+0xaa/0x1c0 [ 270.310194][T19217] ? clear_bhb_loop+0x55/0xb0 [ 270.315135][T19217] ? clear_bhb_loop+0x55/0xb0 [ 270.319850][T19217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.325786][T19217] RIP: 0033:0x7f334d1c472c [ 270.330282][T19217] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 270.349999][T19217] RSP: 002b:00007f334b7ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 270.358445][T19217] RAX: ffffffffffffffda RBX: 00007f334d3b6160 RCX: 00007f334d1c472c [ 270.366427][T19217] RDX: 000000000000000f RSI: 00007f334b7ef0a0 RDI: 0000000000000008 [ 270.374412][T19217] RBP: 00007f334b7ef090 R08: 0000000000000000 R09: 0000000000000000 [ 270.382380][T19217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 270.390417][T19217] R13: 0000000000000000 R14: 00007f334d3b6160 R15: 00007fffd8ecaef8 [ 270.398411][T19217] [ 270.598107][T19227] smc: net device bond0 applied user defined pnetid SYZ0 [ 270.605775][T19227] smc: net device bond0 erased user defined pnetid SYZ0 [ 270.747388][T19249] loop9: detected capacity change from 0 to 512 [ 270.754406][T19250] FAULT_INJECTION: forcing a failure. [ 270.754406][T19250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.758866][T19249] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 270.767514][T19250] CPU: 1 UID: 0 PID: 19250 Comm: syz.6.5931 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 270.781309][T19249] EXT4-fs (loop9): 1 truncate cleaned up [ 270.788136][T19250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 270.788155][T19250] Call Trace: [ 270.788164][T19250] [ 270.788174][T19250] dump_stack_lvl+0xf2/0x150 [ 270.788215][T19250] dump_stack+0x15/0x1a [ 270.796327][T19249] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.803915][T19250] should_fail_ex+0x223/0x230 [ 270.803951][T19250] should_fail+0xb/0x10 [ 270.803978][T19250] should_fail_usercopy+0x1a/0x20 [ 270.804014][T19250] _copy_from_user+0x1e/0xb0 [ 270.850100][T19250] copy_msghdr_from_user+0x54/0x2a0 [ 270.855343][T19250] do_recvmmsg+0x256/0x6d0 [ 270.859827][T19250] __x64_sys_recvmmsg+0xe2/0x170 [ 270.864794][T19250] x64_sys_call+0x2a9a/0x2dc0 [ 270.869483][T19250] do_syscall_64+0xc9/0x1c0 [ 270.874046][T19250] ? clear_bhb_loop+0x55/0xb0 [ 270.878821][T19250] ? clear_bhb_loop+0x55/0xb0 [ 270.883508][T19250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.889429][T19250] RIP: 0033:0x7f6f5d285d19 [ 270.893852][T19250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.913625][T19250] RSP: 002b:00007f6f5b8d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 270.922071][T19250] RAX: ffffffffffffffda RBX: 00007f6f5d476080 RCX: 00007f6f5d285d19 [ 270.930100][T19250] RDX: 0000000000006254 RSI: 00000000200000c0 RDI: 0000000000000003 [ 270.938134][T19250] RBP: 00007f6f5b8d6090 R08: 0000000000000000 R09: 0000000000000000 [ 270.946143][T19250] R10: 0000000040010060 R11: 0000000000000246 R12: 0000000000000001 [ 270.954255][T19250] R13: 0000000000000001 R14: 00007f6f5d476080 R15: 00007ffd2a985958 [ 270.962240][T19250] [ 270.980431][T19249] tipc: Started in network mode [ 270.985413][T19249] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 270.992629][T19249] tipc: Enabled bearer , priority 0 [ 271.013214][T18964] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.090392][T19262] smc: net device bond0 applied user defined pnetid SYZ0 [ 271.098131][T19262] smc: net device bond0 erased user defined pnetid SYZ0 [ 271.164671][T19276] veth0_to_team: entered promiscuous mode [ 271.170574][T19276] macsec1: entered allmulticast mode [ 271.176217][T19276] veth0_to_team: entered allmulticast mode [ 271.187908][T19276] veth0_to_team: left allmulticast mode [ 271.193676][T19276] veth0_to_team: left promiscuous mode [ 271.318041][T19300] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5954'. [ 271.328559][T19300] xt_cluster: node mask cannot exceed total number of nodes [ 271.413489][T19305] cgroup: Bad value for 'name' [ 271.496310][T19307] loop5: detected capacity change from 0 to 1764 [ 271.590636][T19320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5961'. [ 271.600067][T19320] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5961'. [ 271.657802][T19324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5963'. [ 271.668221][T19330] FAULT_INJECTION: forcing a failure. [ 271.668221][T19330] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 271.681633][T19330] CPU: 0 UID: 0 PID: 19330 Comm: syz.6.5965 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 271.692483][T19330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 271.702573][T19330] Call Trace: [ 271.705869][T19330] [ 271.708880][T19330] dump_stack_lvl+0xf2/0x150 [ 271.713518][T19330] dump_stack+0x15/0x1a [ 271.717713][T19330] should_fail_ex+0x223/0x230 [ 271.722529][T19330] should_fail_alloc_page+0xfd/0x110 [ 271.727866][T19330] __alloc_pages_noprof+0x109/0x340 [ 271.731973][T19336] tun0: tun_chr_ioctl cmd 1074025675 [ 271.733134][T19330] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 271.733177][T19330] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 271.733211][T19330] handle_mm_fault+0xdd7/0x2ac0 [ 271.733233][T19330] ? __rcu_read_lock+0x36/0x50 [ 271.733278][T19330] __get_user_pages+0xf2c/0x2670 [ 271.733377][T19330] ? strncpy_from_kernel_nofault+0x101/0x140 [ 271.733425][T19330] __gup_longterm_locked+0x2ea/0xf90 [ 271.733475][T19330] ? should_fail_ex+0xd7/0x230 [ 271.733507][T19330] ? __kmalloc_node_noprof+0x1e9/0x410 [ 271.733540][T19330] pin_user_pages+0x86/0xc0 [ 271.733574][T19330] xdp_umem_create+0x71b/0x9b0 [ 271.733603][T19330] xsk_setsockopt+0x4df/0x520 [ 271.733727][T19330] ? __pfx_xsk_setsockopt+0x10/0x10 [ 271.733778][T19330] __sys_setsockopt+0x187/0x200 [ 271.733867][T19330] __x64_sys_setsockopt+0x66/0x80 [ 271.733940][T19330] x64_sys_call+0x282e/0x2dc0 [ 271.739369][T19336] tun0: persist enabled [ 271.744567][T19330] do_syscall_64+0xc9/0x1c0 [ 271.744594][T19330] ? clear_bhb_loop+0x55/0xb0 [ 271.753679][T19336] tun0: tun_chr_ioctl cmd 1074025675 [ 271.754799][T19330] ? clear_bhb_loop+0x55/0xb0 [ 271.759650][T19336] tun0: persist disabled [ 271.764556][T19330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.764604][T19330] RIP: 0033:0x7f6f5d285d19 [ 271.857982][T19330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.877707][T19330] RSP: 002b:00007f6f5b8f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 271.886184][T19330] RAX: ffffffffffffffda RBX: 00007f6f5d475fa0 RCX: 00007f6f5d285d19 [ 271.894174][T19330] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 271.902157][T19330] RBP: 00007f6f5b8f7090 R08: 0000000000000020 R09: 0000000000000000 [ 271.910136][T19330] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 271.918133][T19330] R13: 0000000000000000 R14: 00007f6f5d475fa0 R15: 00007ffd2a985958 [ 271.926211][T19330] [ 271.990085][T19341] bond3: entered promiscuous mode [ 271.995220][T19341] bond3: entered allmulticast mode [ 272.001339][T19341] 8021q: adding VLAN 0 to HW filter on device bond3 [ 272.012067][T19341] bond3 (unregistering): Released all slaves [ 272.023176][ T24] tipc: Node number set to 11578026 [ 272.036234][T19351] netlink: 'syz.6.5970': attribute type 32 has an invalid length. [ 272.075643][T19355] loop9: detected capacity change from 0 to 1024 [ 272.082424][T19355] EXT4-fs: Ignoring removed orlov option [ 272.091944][T19355] EXT4-fs: Ignoring removed nobh option [ 272.104481][T19360] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 272.124283][T19360] syzkaller0: entered allmulticast mode [ 272.135110][T19355] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.148429][T19360] syzkaller0 (unregistering): left allmulticast mode [ 272.326984][T18964] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.341039][T19379] FAULT_INJECTION: forcing a failure. [ 272.341039][T19379] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 272.354506][T19379] CPU: 0 UID: 0 PID: 19379 Comm: syz.7.5984 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 272.365392][T19379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 272.368678][T19383] FAULT_INJECTION: forcing a failure. [ 272.368678][T19383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.375511][T19379] Call Trace: [ 272.375521][T19379] [ 272.375530][T19379] dump_stack_lvl+0xf2/0x150 [ 272.399515][T19379] dump_stack+0x15/0x1a [ 272.403862][T19379] should_fail_ex+0x223/0x230 [ 272.408565][T19379] should_fail_alloc_page+0xfd/0x110 [ 272.413881][T19379] __alloc_pages_noprof+0x109/0x340 [ 272.419170][T19379] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 272.424576][T19379] alloc_pages_noprof+0xe1/0x100 [ 272.429635][T19379] kimage_alloc_control_pages+0x14a/0x730 [ 272.435383][T19379] alloc_pgt_page+0x17/0x50 [ 272.439904][T19379] kernel_ident_mapping_init+0x12c/0x2c0 [ 272.445599][T19379] machine_kexec_prepare+0x162/0x670 [ 272.450949][T19379] ? __pfx_alloc_pgt_page+0x10/0x10 [ 272.456220][T19379] do_kexec_load+0x38d/0x490 [ 272.460909][T19379] __se_sys_kexec_load+0x12b/0x160 [ 272.466101][T19379] __x64_sys_kexec_load+0x55/0x70 [ 272.471234][T19379] x64_sys_call+0x2cac/0x2dc0 [ 272.475927][T19379] do_syscall_64+0xc9/0x1c0 [ 272.480438][T19379] ? clear_bhb_loop+0x55/0xb0 [ 272.485118][T19379] ? clear_bhb_loop+0x55/0xb0 [ 272.489844][T19379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.495822][T19379] RIP: 0033:0x7f592d355d19 [ 272.500306][T19379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.519958][T19379] RSP: 002b:00007f592b9c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 272.528382][T19379] RAX: ffffffffffffffda RBX: 00007f592d545fa0 RCX: 00007f592d355d19 [ 272.536406][T19379] RDX: 0000000020000900 RSI: 0000000000000002 RDI: 0000000000000000 [ 272.544387][T19379] RBP: 00007f592b9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 272.552426][T19379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.560406][T19379] R13: 0000000000000000 R14: 00007f592d545fa0 R15: 00007ffd66ee2fe8 [ 272.568395][T19379] [ 272.571421][T19383] CPU: 1 UID: 0 PID: 19383 Comm: syz.9.5985 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 272.582327][T19383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 272.592434][T19383] Call Trace: [ 272.595717][T19383] [ 272.598731][T19383] dump_stack_lvl+0xf2/0x150 [ 272.603402][T19383] dump_stack+0x15/0x1a [ 272.607680][T19383] should_fail_ex+0x223/0x230 [ 272.612375][T19383] should_fail+0xb/0x10 [ 272.616540][T19383] should_fail_usercopy+0x1a/0x20 [ 272.621575][T19383] _copy_from_iter+0xd5/0xd00 [ 272.626270][T19383] ? __rcu_read_unlock+0x4e/0x70 [ 272.631224][T19383] packet_sendmsg+0x216c/0x3670 [ 272.636145][T19383] ? __rcu_read_unlock+0x4e/0x70 [ 272.641171][T19383] ? avc_has_perm+0xd4/0x160 [ 272.645848][T19383] ? selinux_socket_sendmsg+0x185/0x1c0 [ 272.651405][T19383] ? __pfx_packet_sendmsg+0x10/0x10 [ 272.656620][T19383] __sock_sendmsg+0x140/0x180 [ 272.661473][T19383] ____sys_sendmsg+0x312/0x410 [ 272.666249][T19383] __sys_sendmsg+0x19d/0x230 [ 272.670961][T19383] __x64_sys_sendmsg+0x46/0x50 [ 272.675763][T19383] x64_sys_call+0x2734/0x2dc0 [ 272.680487][T19383] do_syscall_64+0xc9/0x1c0 [ 272.685137][T19383] ? clear_bhb_loop+0x55/0xb0 [ 272.689858][T19383] ? clear_bhb_loop+0x55/0xb0 [ 272.694546][T19383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.700516][T19383] RIP: 0033:0x7fc200525d19 [ 272.705078][T19383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.724704][T19383] RSP: 002b:00007fc1feb91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.733132][T19383] RAX: ffffffffffffffda RBX: 00007fc200715fa0 RCX: 00007fc200525d19 [ 272.741212][T19383] RDX: 9cdc2384256f8178 RSI: 0000000020000080 RDI: 0000000000000003 [ 272.749234][T19383] RBP: 00007fc1feb91090 R08: 0000000000000000 R09: 0000000000000000 [ 272.757211][T19383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.765275][T19383] R13: 0000000000000000 R14: 00007fc200715fa0 R15: 00007fffdcb06278 [ 272.773266][T19383] [ 272.857392][T19393] loop5: detected capacity change from 0 to 512 [ 272.868469][T19396] xt_hashlimit: max too large, truncated to 1048576 [ 272.910378][T19402] syzkaller0: entered allmulticast mode [ 272.917901][T19402] syzkaller0 (unregistering): left allmulticast mode [ 273.006244][T19404] FAULT_INJECTION: forcing a failure. [ 273.006244][T19404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.019619][T19404] CPU: 1 UID: 0 PID: 19404 Comm: syz.6.5992 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 273.030536][T19404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 273.040711][T19404] Call Trace: [ 273.044010][T19404] [ 273.046954][T19404] dump_stack_lvl+0xf2/0x150 [ 273.051592][T19404] dump_stack+0x15/0x1a [ 273.055791][T19404] should_fail_ex+0x223/0x230 [ 273.060517][T19404] should_fail+0xb/0x10 [ 273.064810][T19404] should_fail_usercopy+0x1a/0x20 [ 273.069906][T19404] _copy_from_user+0x1e/0xb0 [ 273.074589][T19404] copy_msghdr_from_user+0x54/0x2a0 [ 273.079816][T19404] ? __fget_files+0x17c/0x1c0 [ 273.084515][T19404] __sys_recvmsg+0x140/0x260 [ 273.089241][T19404] __x64_sys_recvmsg+0x46/0x50 [ 273.094103][T19404] x64_sys_call+0xc64/0x2dc0 [ 273.098797][T19404] do_syscall_64+0xc9/0x1c0 [ 273.103308][T19404] ? clear_bhb_loop+0x55/0xb0 [ 273.107995][T19404] ? clear_bhb_loop+0x55/0xb0 [ 273.112707][T19404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.118627][T19404] RIP: 0033:0x7f6f5d285d19 [ 273.123119][T19404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.142737][T19404] RSP: 002b:00007f6f5b8d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 273.151251][T19404] RAX: ffffffffffffffda RBX: 00007f6f5d476080 RCX: 00007f6f5d285d19 [ 273.159374][T19404] RDX: 000000004c2103a0 RSI: 0000000020000280 RDI: 000000000000000a [ 273.167352][T19404] RBP: 00007f6f5b8d6090 R08: 0000000000000000 R09: 0000000000000000 [ 273.175416][T19404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.183394][T19404] R13: 0000000000000000 R14: 00007f6f5d476080 R15: 00007ffd2a985958 [ 273.191401][T19404] [ 273.275122][T19407] smc: net device bond0 applied user defined pnetid SYZ0 [ 273.282471][T19407] smc: net device bond0 erased user defined pnetid SYZ0 [ 273.326837][T19418] loop5: detected capacity change from 0 to 512 [ 273.337347][T19418] xt_TCPMSS: Only works on TCP SYN packets [ 273.353662][T19421] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 273.353662][T19421] The task syz.9.5997 (19421) triggered the difference, watch for misbehavior. [ 273.422491][T19425] sd 0:0:1:0: device reset [ 273.439377][T19425] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 273.447849][T19425] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 273.545802][T19425] geneve2: entered promiscuous mode [ 273.551097][T19425] geneve2: entered allmulticast mode [ 273.665442][T19462] syzkaller0: entered allmulticast mode [ 273.681496][T19462] syzkaller0 (unregistering): left allmulticast mode [ 273.732749][T19416] Set syz1 is full, maxelem 65536 reached [ 273.807409][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 273.807427][ T29] audit: type=1326 audit(2000000653.096:14461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.6.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6f5d27cce7 code=0x7ffc0000 [ 273.849977][ T29] audit: type=1326 audit(2000000653.096:14462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.6.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f5d221f29 code=0x7ffc0000 [ 273.873891][ T29] audit: type=1326 audit(2000000653.096:14463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.6.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6f5d27cce7 code=0x7ffc0000 [ 273.897456][ T29] audit: type=1326 audit(2000000653.096:14464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.6.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f5d221f29 code=0x7ffc0000 [ 273.921391][ T29] audit: type=1326 audit(2000000653.096:14465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.6.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d285d19 code=0x7ffc0000 [ 273.945178][ T29] audit: type=1326 audit(2000000653.096:14466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.6.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d285d19 code=0x7ffc0000 [ 273.967630][T19490] smc: net device bond0 applied user defined pnetid SYZ0 [ 273.968776][ T29] audit: type=1400 audit(2000000653.096:14467): avc: denied { mounton } for pid=19475 comm="syz.6.6007" path="/sys/kernel/crash_elfcorehdr_size" dev="sysfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 273.988976][T19490] smc: net device bond0 erased user defined pnetid SYZ0 [ 274.000532][ T29] audit: type=1326 audit(2000000653.106:14468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.6.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f6f5d285d19 code=0x7ffc0000 [ 274.031389][ T29] audit: type=1326 audit(2000000653.106:14469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.6.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d285d19 code=0x7ffc0000 [ 274.055118][ T29] audit: type=1326 audit(2000000653.106:14470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19475 comm="syz.6.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d285d19 code=0x7ffc0000 [ 274.120305][T19491] smc: net device bond0 applied user defined pnetid SYZ0 [ 274.129249][T19491] smc: net device bond0 erased user defined pnetid SYZ0 [ 274.256259][T19505] syzkaller0: entered allmulticast mode [ 274.279851][T19505] syzkaller0 (unregistering): left allmulticast mode [ 274.461422][T19518] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 274.484787][T19520] netlink: 'syz.3.6024': attribute type 10 has an invalid length. [ 274.498152][T19520] team0: Port device netdevsim1 added [ 274.506865][T19518] syzkaller0: entered allmulticast mode [ 274.526401][T19518] syzkaller0 (unregistering): left allmulticast mode [ 274.658859][T19535] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6030'. [ 274.761615][T19543] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6035'. [ 274.777101][T19544] smc: net device bond0 applied user defined pnetid SYZ0 [ 274.785006][T19544] smc: net device bond0 erased user defined pnetid SYZ0 [ 275.017825][T19571] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6045'. [ 275.348992][T19586] loop9: detected capacity change from 0 to 512 [ 275.360868][T19586] EXT4-fs: Ignoring removed orlov option [ 275.368712][T19586] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 275.403338][T19586] EXT4-fs (loop9): 1 truncate cleaned up [ 275.409667][T19586] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.502374][T18964] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.545366][T19602] syz.9.6055[19602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 275.545475][T19602] syz.9.6055[19602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 275.558038][T19601] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6056'. [ 275.558659][T19602] syz.9.6055[19602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.049576][T19628] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6066'. [ 276.120437][T19628] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 276.433833][T19640] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6071'. [ 276.602324][T19650] FAULT_INJECTION: forcing a failure. [ 276.602324][T19650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.615537][T19650] CPU: 0 UID: 0 PID: 19650 Comm: syz.9.6075 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 276.626334][T19650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 276.636421][T19650] Call Trace: [ 276.639717][T19650] [ 276.642858][T19650] dump_stack_lvl+0xf2/0x150 [ 276.647492][T19650] dump_stack+0x15/0x1a [ 276.651889][T19650] should_fail_ex+0x223/0x230 [ 276.655069][T19658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6080'. [ 276.656584][T19650] should_fail+0xb/0x10 [ 276.656615][T19650] should_fail_usercopy+0x1a/0x20 [ 276.665755][T19658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.669609][T19650] _copy_from_iter+0xd5/0xd00 [ 276.674951][T19658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.681983][T19650] ? __alloc_skb+0x1b5/0x310 [ 276.682010][T19650] ? kmalloc_reserve+0x16e/0x190 [ 276.691224][T19659] FAULT_INJECTION: forcing a failure. [ 276.691224][T19659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.693781][T19650] ? __build_skb_around+0x196/0x1f0 [ 276.721664][T19650] ? __alloc_skb+0x21f/0x310 [ 276.726275][T19650] ? __virt_addr_valid+0x1ed/0x250 [ 276.731427][T19650] ? __check_object_size+0x364/0x520 [ 276.736824][T19650] netlink_sendmsg+0x460/0x6e0 [ 276.741603][T19650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.746900][T19650] __sock_sendmsg+0x140/0x180 [ 276.751709][T19650] ____sys_sendmsg+0x312/0x410 [ 276.756486][T19650] __sys_sendmsg+0x19d/0x230 [ 276.761102][T19650] __x64_sys_sendmsg+0x46/0x50 [ 276.765901][T19650] x64_sys_call+0x2734/0x2dc0 [ 276.770589][T19650] do_syscall_64+0xc9/0x1c0 [ 276.775140][T19650] ? clear_bhb_loop+0x55/0xb0 [ 276.779952][T19650] ? clear_bhb_loop+0x55/0xb0 [ 276.784814][T19650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.790754][T19650] RIP: 0033:0x7fc200525d19 [ 276.795262][T19650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.814966][T19650] RSP: 002b:00007fc1feb91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.823412][T19650] RAX: ffffffffffffffda RBX: 00007fc200715fa0 RCX: 00007fc200525d19 [ 276.831443][T19650] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 276.839496][T19650] RBP: 00007fc1feb91090 R08: 0000000000000000 R09: 0000000000000000 [ 276.847568][T19650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.855611][T19650] R13: 0000000000000000 R14: 00007fc200715fa0 R15: 00007fffdcb06278 [ 276.863596][T19650] [ 276.866682][T19659] CPU: 1 UID: 0 PID: 19659 Comm: syz.5.6078 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 276.877565][T19659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 276.887699][T19659] Call Trace: [ 276.889331][T19660] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6079'. [ 276.891059][T19659] [ 276.891070][T19659] dump_stack_lvl+0xf2/0x150 [ 276.891138][T19659] dump_stack+0x15/0x1a [ 276.911899][T19659] should_fail_ex+0x223/0x230 [ 276.916586][T19659] should_fail+0xb/0x10 [ 276.920752][T19659] should_fail_usercopy+0x1a/0x20 [ 276.925870][T19659] _copy_from_user+0x1e/0xb0 [ 276.930514][T19659] copy_msghdr_from_user+0x54/0x2a0 [ 276.935819][T19659] ? __fget_files+0x17c/0x1c0 [ 276.940603][T19659] __sys_sendmsg+0x13e/0x230 [ 276.945238][T19659] __x64_sys_sendmsg+0x46/0x50 [ 276.950127][T19659] x64_sys_call+0x2734/0x2dc0 [ 276.954836][T19659] do_syscall_64+0xc9/0x1c0 [ 276.959373][T19659] ? clear_bhb_loop+0x55/0xb0 [ 276.964055][T19659] ? clear_bhb_loop+0x55/0xb0 [ 276.968889][T19659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.974901][T19659] RIP: 0033:0x7f334d1c5d19 [ 276.979349][T19659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.999209][T19659] RSP: 002b:00007f334b831038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.007636][T19659] RAX: ffffffffffffffda RBX: 00007f334d3b5fa0 RCX: 00007f334d1c5d19 [ 277.015625][T19659] RDX: 0000000000000800 RSI: 0000000020001500 RDI: 0000000000000003 [ 277.023600][T19659] RBP: 00007f334b831090 R08: 0000000000000000 R09: 0000000000000000 [ 277.031648][T19659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.039688][T19659] R13: 0000000000000000 R14: 00007f334d3b5fa0 R15: 00007fffd8ecaef8 [ 277.047755][T19659] [ 277.053011][T19658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.060525][T19658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.085009][T19667] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6081'. [ 277.200266][T19685] FAULT_INJECTION: forcing a failure. [ 277.200266][T19685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.213793][T19685] CPU: 0 UID: 0 PID: 19685 Comm: syz.7.6089 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 277.224842][T19685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 277.234922][T19685] Call Trace: [ 277.238219][T19685] [ 277.241201][T19685] dump_stack_lvl+0xf2/0x150 [ 277.245830][T19685] dump_stack+0x15/0x1a [ 277.250244][T19685] should_fail_ex+0x223/0x230 [ 277.254954][T19685] should_fail+0xb/0x10 [ 277.259197][T19685] should_fail_usercopy+0x1a/0x20 [ 277.264344][T19685] _copy_to_user+0x20/0xa0 [ 277.268817][T19685] simple_read_from_buffer+0xa0/0x110 [ 277.274236][T19685] proc_fail_nth_read+0xf9/0x140 [ 277.279212][T19685] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 277.284793][T19685] vfs_read+0x1a2/0x700 [ 277.289104][T19685] ? __cond_resched+0x28/0x50 [ 277.293863][T19685] ksys_read+0xe8/0x1b0 [ 277.298065][T19685] __x64_sys_read+0x42/0x50 [ 277.302613][T19685] x64_sys_call+0x2874/0x2dc0 [ 277.307385][T19685] do_syscall_64+0xc9/0x1c0 [ 277.311929][T19685] ? clear_bhb_loop+0x55/0xb0 [ 277.316658][T19685] ? clear_bhb_loop+0x55/0xb0 [ 277.321367][T19685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.327384][T19685] RIP: 0033:0x7f592d35472c [ 277.331824][T19685] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 277.351479][T19685] RSP: 002b:00007f592b9c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 277.360001][T19685] RAX: ffffffffffffffda RBX: 00007f592d545fa0 RCX: 00007f592d35472c [ 277.368024][T19685] RDX: 000000000000000f RSI: 00007f592b9c70a0 RDI: 0000000000000005 [ 277.376021][T19685] RBP: 00007f592b9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 277.384079][T19685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 277.392149][T19685] R13: 0000000000000000 R14: 00007f592d545fa0 R15: 00007ffd66ee2fe8 [ 277.400156][T19685] [ 277.519113][T19691] FAULT_INJECTION: forcing a failure. [ 277.519113][T19691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.532783][T19691] CPU: 0 UID: 0 PID: 19691 Comm: +}[@ Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 277.543070][T19691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 277.553144][T19691] Call Trace: [ 277.556433][T19691] [ 277.559377][T19691] dump_stack_lvl+0xf2/0x150 [ 277.564058][T19691] dump_stack+0x15/0x1a [ 277.568251][T19691] should_fail_ex+0x223/0x230 [ 277.572957][T19691] should_fail+0xb/0x10 [ 277.577139][T19691] should_fail_usercopy+0x1a/0x20 [ 277.582201][T19691] _copy_from_user+0x1e/0xb0 [ 277.586826][T19691] copy_msghdr_from_user+0x54/0x2a0 [ 277.592128][T19691] ? __fget_files+0x17c/0x1c0 [ 277.596874][T19691] __sys_sendmsg+0x13e/0x230 [ 277.601583][T19691] __x64_sys_sendmsg+0x46/0x50 [ 277.606434][T19691] x64_sys_call+0x2734/0x2dc0 [ 277.611142][T19691] do_syscall_64+0xc9/0x1c0 [ 277.615715][T19691] ? clear_bhb_loop+0x55/0xb0 [ 277.620472][T19691] ? clear_bhb_loop+0x55/0xb0 [ 277.625183][T19691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.631216][T19691] RIP: 0033:0x7f6f5d285d19 [ 277.635659][T19691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.655290][T19691] RSP: 002b:00007f6f5b8f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.663738][T19691] RAX: ffffffffffffffda RBX: 00007f6f5d475fa0 RCX: 00007f6f5d285d19 [ 277.671736][T19691] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 277.679961][T19691] RBP: 00007f6f5b8f7090 R08: 0000000000000000 R09: 0000000000000000 [ 277.688002][T19691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.695994][T19691] R13: 0000000000000000 R14: 00007f6f5d475fa0 R15: 00007ffd2a985958 [ 277.704017][T19691] [ 278.194737][T19687] Set syz1 is full, maxelem 65536 reached [ 278.205357][T19700] loop7: detected capacity change from 0 to 8192 [ 278.252008][T19715] syzkaller0: entered allmulticast mode [ 278.258135][T19700] loop7: p2 p3 p4 [ 278.262204][T19700] loop7: p2 start 14935 is beyond EOD, truncated [ 278.268651][T19700] loop7: p3 size 196608 extends beyond EOD, truncated [ 278.277891][T19715] syzkaller0 (unregistering): left allmulticast mode [ 278.301644][T19700] loop7: p4 start 4026530307 is beyond EOD, truncated [ 278.419963][T19731] loop7: detected capacity change from 0 to 512 [ 278.431609][T19731] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 278.456082][T19729] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6108'. [ 278.465957][T19731] EXT4-fs (loop7): 1 truncate cleaned up [ 278.472086][T19731] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.496827][T19731] tipc: Started in network mode [ 278.501837][T19731] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 278.509080][T19731] tipc: Enabled bearer , priority 0 [ 278.585171][T14881] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.598792][T19753] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6117'. [ 278.815673][T19771] FAULT_INJECTION: forcing a failure. [ 278.815673][T19771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.828844][T19771] CPU: 1 UID: 0 PID: 19771 Comm: syz.3.6123 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 278.839672][T19771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 278.849761][T19771] Call Trace: [ 278.853075][T19771] [ 278.856134][T19771] dump_stack_lvl+0xf2/0x150 [ 278.860768][T19771] dump_stack+0x15/0x1a [ 278.864973][T19771] should_fail_ex+0x223/0x230 [ 278.869853][T19771] should_fail+0xb/0x10 [ 278.874042][T19771] should_fail_usercopy+0x1a/0x20 [ 278.879116][T19771] _copy_to_user+0x20/0xa0 [ 278.883615][T19771] simple_read_from_buffer+0xa0/0x110 [ 278.884038][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 278.884055][ T29] audit: type=1400 audit(2000000658.176:14837): avc: denied { ioctl } for pid=19776 comm="syz.6.6126" path="socket:[64761]" dev="sockfs" ino=64761 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 278.889047][T19771] proc_fail_nth_read+0xf9/0x140 [ 278.924923][T19771] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 278.930516][T19771] vfs_read+0x1a2/0x700 [ 278.934733][T19771] ? __rcu_read_unlock+0x4e/0x70 [ 278.939715][T19771] ? __fget_files+0x17c/0x1c0 [ 278.944499][T19771] ksys_read+0xe8/0x1b0 [ 278.948679][T19771] __x64_sys_read+0x42/0x50 [ 278.953204][T19771] x64_sys_call+0x2874/0x2dc0 [ 278.957922][T19771] do_syscall_64+0xc9/0x1c0 [ 278.962442][T19771] ? clear_bhb_loop+0x55/0xb0 [ 278.967132][T19771] ? clear_bhb_loop+0x55/0xb0 [ 278.971826][T19771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.977752][T19771] RIP: 0033:0x7fd107b7472c [ 278.982180][T19771] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 279.001799][T19771] RSP: 002b:00007fd1061e1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 279.010268][T19771] RAX: ffffffffffffffda RBX: 00007fd107d65fa0 RCX: 00007fd107b7472c [ 279.018261][T19771] RDX: 000000000000000f RSI: 00007fd1061e10a0 RDI: 0000000000000007 [ 279.026241][T19771] RBP: 00007fd1061e1090 R08: 0000000000000000 R09: 0000000000000000 [ 279.034281][T19771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.042317][T19771] R13: 0000000000000000 R14: 00007fd107d65fa0 R15: 00007ffd261016f8 [ 279.050376][T19771] [ 279.370750][T19811] netlink: 'syz.9.6139': attribute type 21 has an invalid length. [ 279.386983][T19809] loop9: detected capacity change from 0 to 1764 [ 279.406118][T19814] FAULT_INJECTION: forcing a failure. [ 279.406118][T19814] name failslab, interval 1, probability 0, space 0, times 0 [ 279.418863][T19814] CPU: 1 UID: 0 PID: 19814 Comm: syz.6.6140 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 279.429661][T19814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 279.439810][T19814] Call Trace: [ 279.443118][T19814] [ 279.446074][T19814] dump_stack_lvl+0xf2/0x150 [ 279.450780][T19814] dump_stack+0x15/0x1a [ 279.455104][T19814] should_fail_ex+0x223/0x230 [ 279.459886][T19814] should_failslab+0x8f/0xb0 [ 279.464655][T19814] kmem_cache_alloc_noprof+0x52/0x320 [ 279.470082][T19814] ? skb_clone+0x154/0x1f0 [ 279.474610][T19814] skb_clone+0x154/0x1f0 [ 279.478943][T19814] pfkey_sendmsg+0x2de/0x970 [ 279.483601][T19814] ? selinux_socket_sendmsg+0x185/0x1c0 [ 279.489198][T19814] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 279.494322][T19814] __sock_sendmsg+0x140/0x180 [ 279.499053][T19814] ____sys_sendmsg+0x312/0x410 [ 279.503883][T19814] __sys_sendmsg+0x19d/0x230 [ 279.508523][T19814] __x64_sys_sendmsg+0x46/0x50 [ 279.513302][T19814] x64_sys_call+0x2734/0x2dc0 [ 279.518012][T19814] do_syscall_64+0xc9/0x1c0 [ 279.522531][T19814] ? clear_bhb_loop+0x55/0xb0 [ 279.527214][T19814] ? clear_bhb_loop+0x55/0xb0 [ 279.531962][T19814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.537882][T19814] RIP: 0033:0x7f6f5d285d19 [ 279.542310][T19814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.561945][T19814] RSP: 002b:00007f6f5b8f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.570430][T19814] RAX: ffffffffffffffda RBX: 00007f6f5d475fa0 RCX: 00007f6f5d285d19 [ 279.578517][T19814] RDX: 0000000000000000 RSI: 0000000020003780 RDI: 0000000000000003 [ 279.586515][T19814] RBP: 00007f6f5b8f7090 R08: 0000000000000000 R09: 0000000000000000 [ 279.594512][T19814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.602542][T19814] R13: 0000000000000000 R14: 00007f6f5d475fa0 R15: 00007ffd2a985958 [ 279.610529][T19814] [ 279.630850][ T8] tipc: Node number set to 11578026 [ 279.670163][ T29] audit: type=1326 audit(2000000658.956:14838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19825 comm="syz.5.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334d1c5d19 code=0x7ffc0000 [ 279.693947][ T29] audit: type=1326 audit(2000000658.956:14839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19825 comm="syz.5.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334d1c5d19 code=0x7ffc0000 [ 279.717754][ T29] audit: type=1326 audit(2000000658.956:14840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19825 comm="syz.5.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f334d1c5d19 code=0x7ffc0000 [ 279.741973][ T29] audit: type=1326 audit(2000000658.956:14841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19825 comm="syz.5.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334d1c5d19 code=0x7ffc0000 [ 279.765873][ T29] audit: type=1326 audit(2000000658.956:14842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19825 comm="syz.5.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334d1c5d19 code=0x7ffc0000 [ 279.789782][ T29] audit: type=1326 audit(2000000658.956:14843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19825 comm="syz.5.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f334d1c5d19 code=0x7ffc0000 [ 279.813518][ T29] audit: type=1326 audit(2000000658.956:14844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19825 comm="syz.5.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334d1c5d19 code=0x7ffc0000 [ 279.837008][T19837] FAULT_INJECTION: forcing a failure. [ 279.837008][T19837] name failslab, interval 1, probability 0, space 0, times 0 [ 279.837274][ T29] audit: type=1326 audit(2000000658.956:14845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19825 comm="syz.5.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334d1c5d19 code=0x7ffc0000 [ 279.850380][T19837] CPU: 1 UID: 0 PID: 19837 Comm: syz.6.6148 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 279.873648][ T29] audit: type=1326 audit(2000000658.956:14846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19825 comm="syz.5.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f334d1c5d19 code=0x7ffc0000 [ 279.884338][T19837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 279.884356][T19837] Call Trace: [ 279.884366][T19837] [ 279.924186][T19837] dump_stack_lvl+0xf2/0x150 [ 279.928804][T19837] dump_stack+0x15/0x1a [ 279.933037][T19837] should_fail_ex+0x223/0x230 [ 279.938249][T19837] should_failslab+0x8f/0xb0 [ 279.942909][T19837] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 279.948647][T19837] ? __d_alloc+0x3d/0x340 [ 279.952992][T19837] __d_alloc+0x3d/0x340 [ 279.957163][T19837] d_alloc_pseudo+0x1e/0x80 [ 279.961788][T19837] alloc_file_pseudo+0x70/0x140 [ 279.966716][T19837] __shmem_file_setup+0x1bb/0x1f0 [ 279.971862][T19837] shmem_file_setup+0x3b/0x50 [ 279.976559][T19837] __se_sys_memfd_create+0x31d/0x5c0 [ 279.981905][T19837] __x64_sys_memfd_create+0x31/0x40 [ 279.987140][T19837] x64_sys_call+0x2d4c/0x2dc0 [ 279.991882][T19837] do_syscall_64+0xc9/0x1c0 [ 279.996453][T19837] ? clear_bhb_loop+0x55/0xb0 [ 280.001170][T19837] ? clear_bhb_loop+0x55/0xb0 [ 280.005909][T19837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.011996][T19837] RIP: 0033:0x7f6f5d285d19 [ 280.016507][T19837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.036226][T19837] RSP: 002b:00007f6f5b8d5e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 280.044661][T19837] RAX: ffffffffffffffda RBX: 00000000000005cd RCX: 00007f6f5d285d19 [ 280.052661][T19837] RDX: 00007f6f5b8d5ef0 RSI: 0000000000000000 RDI: 00007f6f5d302381 [ 280.060740][T19837] RBP: 0000000020001400 R08: 00007f6f5b8d5bb7 R09: 00007f6f5b8d5e40 [ 280.068720][T19837] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000100 [ 280.076700][T19837] R13: 00007f6f5b8d5ef0 R14: 00007f6f5b8d5eb0 R15: 0000000020000040 [ 280.084753][T19837] [ 280.200811][T19844] loop7: detected capacity change from 0 to 512 [ 280.266775][T19844] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.546990][T14881] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.628996][T19870] FAULT_INJECTION: forcing a failure. [ 280.628996][T19870] name failslab, interval 1, probability 0, space 0, times 0 [ 280.641792][T19870] CPU: 0 UID: 0 PID: 19870 Comm: syz.3.6162 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 280.652622][T19870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 280.662770][T19870] Call Trace: [ 280.666155][T19870] [ 280.669111][T19870] dump_stack_lvl+0xf2/0x150 [ 280.673824][T19870] dump_stack+0x15/0x1a [ 280.678072][T19870] should_fail_ex+0x223/0x230 [ 280.682873][T19870] should_failslab+0x8f/0xb0 [ 280.687566][T19870] kmem_cache_alloc_noprof+0x52/0x320 [ 280.693086][T19870] ? security_file_alloc+0x32/0x100 [ 280.698390][T19870] security_file_alloc+0x32/0x100 [ 280.703516][T19870] init_file+0x5b/0x1b0 [ 280.707774][T19870] alloc_empty_file+0xea/0x200 [ 280.712790][T19870] alloc_file_pseudo+0xc3/0x140 [ 280.717703][T19870] anon_inode_getfd+0xc2/0x170 [ 280.722591][T19870] __se_sys_fsopen+0x174/0x1c0 [ 280.727478][T19870] __x64_sys_fsopen+0x31/0x40 [ 280.732238][T19870] x64_sys_call+0x358/0x2dc0 [ 280.736910][T19870] do_syscall_64+0xc9/0x1c0 [ 280.741462][T19870] ? clear_bhb_loop+0x55/0xb0 [ 280.746201][T19870] ? clear_bhb_loop+0x55/0xb0 [ 280.750949][T19870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.756871][T19870] RIP: 0033:0x7fd107b75d19 [ 280.761302][T19870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.780978][T19870] RSP: 002b:00007fd1061c0038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 280.789402][T19870] RAX: ffffffffffffffda RBX: 00007fd107d66080 RCX: 00007fd107b75d19 [ 280.797380][T19870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 280.805502][T19870] RBP: 00007fd1061c0090 R08: 0000000000000000 R09: 0000000000000000 [ 280.813483][T19870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 280.821505][T19870] R13: 0000000000000000 R14: 00007fd107d66080 R15: 00007ffd261016f8 [ 280.829511][T19870] [ 281.021288][T19878] loop7: detected capacity change from 0 to 128 [ 281.138424][T19878] syz.7.6166: attempt to access beyond end of device [ 281.138424][T19878] loop7: rw=0, sector=121, nr_sectors = 920 limit=128 [ 281.167133][T19880] loop9: detected capacity change from 0 to 8192 [ 281.214913][T19880] loop9: p2 p3 p4 [ 281.218809][T19880] loop9: p2 start 14935 is beyond EOD, truncated [ 281.225225][T19880] loop9: p3 size 196608 extends beyond EOD, truncated [ 281.264863][T19880] loop9: p4 start 4026530307 is beyond EOD, truncated [ 281.377659][T19888] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6169'. [ 281.503271][T19900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6174'. [ 281.521526][T19897] netlink: 'syz.5.6172': attribute type 1 has an invalid length. [ 281.529344][T19897] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6172'. [ 281.539858][T19900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=19900 comm=syz.3.6174 [ 281.567958][T19897] loop5: detected capacity change from 0 to 1024 [ 281.582067][T19897] EXT4-fs: Ignoring removed orlov option [ 281.587823][T19897] EXT4-fs: Ignoring removed nomblk_io_submit option [ 281.603564][T19897] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 281.614741][T19897] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 281.655046][T19897] EXT4-fs (loop5): invalid journal inode [ 281.672836][T19897] EXT4-fs (loop5): can't get journal size [ 281.686773][T19897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 281.718807][T12277] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.908836][T19918] netlink: '+}[@': attribute type 1 has an invalid length. [ 281.927419][ T3374] ================================================================== [ 281.935655][ T3374] BUG: KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_handshake_receive_worker [ 281.946369][ T3374] [ 281.948724][ T3374] read-write to 0xffff88810f27a870 of 8 bytes by task 4914 on cpu 1: [ 281.956808][ T3374] wg_packet_handshake_receive_worker+0x4c4/0x5f0 [ 281.963350][ T3374] process_scheduled_works+0x483/0x9a0 [ 281.968837][ T3374] worker_thread+0x51d/0x6f0 [ 281.973452][ T3374] kthread+0x1d1/0x210 [ 281.977557][ T3374] ret_from_fork+0x4b/0x60 [ 281.981991][ T3374] ret_from_fork_asm+0x1a/0x30 [ 281.986785][ T3374] [ 281.989170][ T3374] read-write to 0xffff88810f27a870 of 8 bytes by task 3374 on cpu 0: [ 281.997255][ T3374] wg_packet_handshake_receive_worker+0x4c4/0x5f0 [ 282.003700][ T3374] process_scheduled_works+0x483/0x9a0 [ 282.009219][ T3374] worker_thread+0x51d/0x6f0 [ 282.014088][ T3374] kthread+0x1d1/0x210 [ 282.018175][ T3374] ret_from_fork+0x4b/0x60 [ 282.022646][ T3374] ret_from_fork_asm+0x1a/0x30 [ 282.027424][ T3374] [ 282.029747][ T3374] value changed: 0x00000000000000cc -> 0x0000000000000128 [ 282.036855][ T3374] [ 282.039177][ T3374] Reported by Kernel Concurrency Sanitizer on: [ 282.045336][ T3374] CPU: 0 UID: 0 PID: 3374 Comm: kworker/0:5 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 282.056104][ T3374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 282.066165][ T3374] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 282.073378][ T3374] ==================================================================