last executing test programs: 14m16.339530743s ago: executing program 2 (id=344): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x4006, &(0x7f0000000380)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@noblock_validity}, {@quota}, {@debug}, {@lazytime}]}, 0xfe, 0x44a, &(0x7f0000000780)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000cc0)=ANY=[@ANYRES64=r2, @ANYRES64, @ANYRES64=0x0, @ANYRES32, @ANYRES32, @ANYRESDEC=r0, @ANYRES32, @ANYRES16=r1, @ANYRES8, @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback=0x19, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x61) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x4, 0xb, 0x6, @vifc_lcl_ifindex, @rand_addr=0x64010102}, 0x10) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) r5 = openat(r1, &(0x7f0000000040)='./bus\x00', 0x101841, 0x24) getsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000500)=0xffffffffffffff93) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) fchmodat(r6, &(0x7f00000002c0)='./bus\x00', 0x47) read$hidraw(r6, &(0x7f0000000440)=""/190, 0xbe) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x0, 0x20000000000000f8, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x24, r6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000036be1bad0f96e54ea2a42f31d4ea1710302168e6bd8115f360cfc7e03ddeb54fcc9d", @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r7], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xd}, 0x1000c0, 0x10000, 0x3, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = open(&(0x7f0000000080)='./file1\x00', 0xe4802, 0x86) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) unshare(0x22040c00) r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r10, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) copy_file_range(r9, 0x0, r9, 0x0, 0x7, 0x0) 14m15.800597181s ago: executing program 2 (id=350): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(r1, 0x3, &(0x7f00000000c0)={0x3, 0x9}, 0x0) r2 = getpid() mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10010, r0, 0xf1135000) sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r6 = creat(0x0, 0xc9028ba210c11f88) faccessat2(r6, &(0x7f0000000180)='./mnt\x00', 0xa1, 0x200) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, 0x0, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x44000, 0x0, 0x0) 14m14.177493369s ago: executing program 2 (id=367): ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x2, 0x0, @loopback, 0x401}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'gre0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x80, 0x7800, 0x7fff, 0x7, {{0x5, 0x4, 0x3, 0x1e, 0x14, 0x67, 0x0, 0x90, 0x2f, 0x0, @remote, @remote}}}}) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="04", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) shutdown(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 14m14.10500605s ago: executing program 2 (id=368): socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000a00)={@broadcast, @random="e17fafb76008", @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x1, 0x4, 0x30, 0x67, 0x0, 0xf2, 0x6, 0x0, @rand_addr=0x64010102, @broadcast, {[@end, @timestamp_prespec={0x44, 0x4, 0x7e, 0x3, 0x4}]}}, {{0x4e22, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x3bc, 0x0, 0xc9c}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@user_xattr}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x4a}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r5, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x8000005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x4000000}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000a40), &(0x7f0000000a80)='system_u:object_r:dbusd_etc_t:s0\x00', 0x21, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) ptrace$cont(0x20, r0, 0x0, 0x0) 14m13.770679085s ago: executing program 2 (id=374): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x2, &(0x7f00000000c0), 0x31}, 0x0) 14m13.567722158s ago: executing program 2 (id=377): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01a663350018000000000000003400000034000000050000400b000000000000110200000001000000030000000000000904000000ffffffff000000120100000009000000000000080200000000305f6100f3a862f5dbb04d4a19489b450d6f4acb2b5d6ec3d433e1a60f6054e466e4a643a838b73a7176c7b2202ac4e8e46b82183b282427b6fd094ba1763b89ba074749281c30b1024b853ba7bcca18dcc85501ffe7d49135c7c425d11f7f53e067ed3fad5b8f50a779a3522cb5c2cab2e4a671ab8a9304aff2fad31cc5c18c8316c76f"], &(0x7f0000000480)=""/162, 0x51, 0xa2, 0x0, 0xfffffffd, 0x10000}, 0x28) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000700000000000000000007020100f8ffffffb70300000801000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r4, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$eJzs3d9rZFcdAPDvvcmkyW5qpiqyFmyLrewW3ZmksRpF2gqiTwW1vq8xmYSQSSZkJnUTiqb4BwgiKvgH+CL44KMg/RNEWNB3UVFEd/VR98qdudH8mEnGZJJZJ58PnMw598f5nnPJ3Lk/DvcGcG29EBFvRMRYRLwcETPF9LRIsd9J+XKPHr6zlKcksuytvyaRFNMO6srL4xFxs1htMiK++qWIbyQn4zZ399YX6/XadlGutja2qs3dvbtrG4urtdXa5vz83M8j4tWF2axwoX6WI+K1L/zxB9/9yRdf++Unvvm7e3++8628WZ/7UKfdEbF0oQA9dOoutbfFgXwbbV9GsCHJ+1MaG3YrAADoR36M//6I+Gj7+H8mxtpHcwAAAMAoyV6fjn8mERkAAAAwstKImI4krRRjAaYjTSuVzhjeD8aNtN5otj6+0tjZXM7nRZSjlK6s1WuzxVjhcpSSvDxXjLE9KL9yrDwfEc9ExPdnptrlylKjvjzsix8AAABwTdx8/uj5/z9m0nYeAAAAGDHlngUAAABgVDjlBwAAgNHn/B8AAABG2pfffDNP2cF7vJff3t1Zb7x9d7nWXK9s7CxVlhrbW5XVRmO1/cy+jbPqqzcaW5+MzZ371Vat2ao2d/fubTR2Nlv31o68AhsAAAC4Qs88/95vk4jY/+xUO0XxHECAI/4w7AYAgzQ27AYAQzM+7AYAQ1M6cwl7CBh1yRnzTw7e6VwrjF9dTnsAAIDBu/3hk/f/J4p5Z18bAP6fGesDANfP0bt7U0NrB3D1SucdAXhr0C0BhuV9nY+nes3v+fCOPu7/d64xZNm5GgYAAAzMdDslaaU4Tp+ONK1UIp6Ox1k5SsnKWr02W5wf/Gam9FRenmuvmZw5ZhgAAAAAAAAAAAAAAAAAAAAAAAAA6MiyJDIAAABgpEWkf0raT/OPuD3z0vTRqwPH3vr147d+eH+x1dqei5hI/jaTT5qIiNaPiumvZF4JAAAAAMM1lf/pnKcXn3PDbhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo+bRw3eWDtJVxv3L5yOi3C3+eEy2PyejFBE3/p7E+KH1kogYG0D8/Xcj4la3+Ek8zrKsXLSiW/ypS45fbm+a7vHTiLg5gPhwnb2X73/e6Pb9S+OF9mf37994kS6q9/4v/c/+b6zH/ufpY+Venn3ws2rP+O9GPDveff9zED/pxD8SIi+82Gcfv/61vb2uMw5V2S3+4VjV1sZWtbm7d3dtY3G1tlrbnJ+f+9TCpxdeXZitrqzVa8XfrmG+95FfPD6t/zd6xC8f7f+J7f9SX73P4l8P7j/8QKdQ6hb/zovdf39v9YifFr99Hyvy+fzbB/n9Tv6w53766+dO6/9yj/5PntH/O331Pz7z8le+8/uuc05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERet5/WBtudJyMTZy0w+IU29jEz27c7/48XqueDqJzLZRVYfjwE0Y+LE93QszlthErGf19XnPyQAADBi/nvQf9odJAAAAAAAAAAAAAAAAAAAAOAynfOxZJMR0ffCx2PuD6erAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACn+ncAAAD//+8b0g8=") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) syz_open_dev$evdev(0x0, 0x0, 0x802) r7 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = timerfd_create(0x0, 0x0) readv(r8, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6185}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r9}, 0x10) readlinkat(r0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x80000005) 14m13.567399729s ago: executing program 32 (id=377): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01a663350018000000000000003400000034000000050000400b000000000000110200000001000000030000000000000904000000ffffffff000000120100000009000000000000080200000000305f6100f3a862f5dbb04d4a19489b450d6f4acb2b5d6ec3d433e1a60f6054e466e4a643a838b73a7176c7b2202ac4e8e46b82183b282427b6fd094ba1763b89ba074749281c30b1024b853ba7bcca18dcc85501ffe7d49135c7c425d11f7f53e067ed3fad5b8f50a779a3522cb5c2cab2e4a671ab8a9304aff2fad31cc5c18c8316c76f"], &(0x7f0000000480)=""/162, 0x51, 0xa2, 0x0, 0xfffffffd, 0x10000}, 0x28) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000700000000000000000007020100f8ffffffb70300000801000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r4, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) syz_open_dev$evdev(0x0, 0x0, 0x802) r7 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = timerfd_create(0x0, 0x0) readv(r8, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6185}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r9}, 0x10) readlinkat(r0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x80000005) 13m28.042440348s ago: executing program 5 (id=1217): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x0) shutdown(r2, 0x0) 13m28.041648558s ago: executing program 5 (id=1218): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000200), &(0x7f0000000140)=0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140), 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$packet(0x11, 0xa, 0x300) socket$kcm(0x11, 0xa, 0x300) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x40}, 0x18) 13m27.88397548s ago: executing program 5 (id=1221): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, 0x0, 0x0) 13m27.807256771s ago: executing program 5 (id=1222): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x112, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002900)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d59720e5e205e2901d0547f2b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc342e3e7315e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644d360c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5d371c61f550e9d86aabda45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0eb154d44bd7986edf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf40030493209000a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af94802680b9aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b5997f11257d48a02041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0db2b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec08647566b1bdd75d6a9a1e600aaf0f42ce94b4725d4c2da80150dc34e5975d6904f061ed9a7608959f2d24ee6ec4f2395d16e02f53c746774b12013f738d76456c3407188eff97f31ca36e5d79e1f1c7c3b688ee21d37ba5ebf4afc2a61f16a0ab1de573c0ca748e91ddf63a14dda47b68a7ad13dab67f60f2ca53499cd0b855a3a29f5bc1f744ec031c675a7c592af1eef808b01cc4d3ce1d6f07c81fce0d4a03ce1dfe764763b1c96a5d97c29d020bce11ca14feb6f7b9ebad6fdc77b57afe2f6f9b60ad84aeb46f28b87408fa72cc7490f74581e5fb675f078ec898b075883fb5bb5605bb6d6a9efa336b74e7b1e3c968606b57ce4345c0996a7dc4186b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000004c0), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1c, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRESHEX=r1], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0}, 0xfffffffffffffea5) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x20046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x116eb, 0x3, 0x9, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r7, 0x0, 0x8001}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r8}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f00000002c0)}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00'}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 13m27.644920724s ago: executing program 5 (id=1224): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xe, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x1000000000000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 13m26.602725431s ago: executing program 5 (id=1233): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000200), &(0x7f0000000140)=0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140), 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$packet(0x11, 0xa, 0x300) socket$kcm(0x11, 0xa, 0x300) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x40}, 0x18) 13m26.602250511s ago: executing program 33 (id=1233): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000200), &(0x7f0000000140)=0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140), 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$packet(0x11, 0xa, 0x300) socket$kcm(0x11, 0xa, 0x300) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x40}, 0x18) 12m24.172458409s ago: executing program 4 (id=2224): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xe, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x1000000000000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 12m24.10582854s ago: executing program 4 (id=2226): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000ff0100005c00000000000000", @ANYRES32, @ANYBLOB="00000000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff000000000000000000"], 0x48) 12m23.741751616s ago: executing program 4 (id=2229): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00', 0x0, 0x8}, 0x18) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r2}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) ioctl$VT_DISALLOCATE(r1, 0x5608) 12m23.087948047s ago: executing program 4 (id=2234): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000000140)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x2, 0x42e, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x8800000) 12m22.906325489s ago: executing program 4 (id=2235): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xff, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x9}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00'}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') read$snapshot(r2, &(0x7f0000000100)=""/36, 0x24) pread64(r2, &(0x7f0000001600)=""/4103, 0x1007, 0x4b) statfs(&(0x7f0000000300)='./file0\x00', 0x0) 12m22.220467361s ago: executing program 4 (id=2249): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffff}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x15c, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x148, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xb0, 0x3, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x15c}}, 0x0) 12m22.181942962s ago: executing program 34 (id=2249): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffff}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x15c, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x148, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xb0, 0x3, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x15c}}, 0x0) 3.141721462s ago: executing program 1 (id=15452): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r0, 0x5, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f00000000c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0xb8, 0x3, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0xa4, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8050}, 0x4801) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x10000ca, &(0x7f0000000300), 0x2, 0x572, &(0x7f0000001600)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) fallocate(r4, 0x0, 0x0, 0x8000c62) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r5, r5, 0x0, 0x100000800000009) 2.451339352s ago: executing program 3 (id=15461): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000180)='./file0/file0/file0\x00', 0xa) sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="5966156ddb0000020000000000000002"], 0x10}}, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 2.113638677s ago: executing program 3 (id=15462): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000200000007000000", @ANYBLOB="000001008a20000014001a80100004800c000180080001"], 0x34}, 0x1, 0x0, 0x0, 0x54005}, 0x0) socket$netlink(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f00000056c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000007800)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/147, 0x93}, {&(0x7f0000000180)=""/113, 0x71}, {&(0x7f0000005740)=""/136, 0x88}, {&(0x7f00000002c0)=""/209, 0xd1}, {&(0x7f0000003cc0)=""/155, 0x9b}], 0x6, &(0x7f0000001540)=""/4096, 0x1000}, 0xfffffffa}, {{&(0x7f0000002540)=@phonet, 0x80, &(0x7f00000027c0)=[{&(0x7f00000025c0)=""/129, 0x81}, {&(0x7f0000000040)=""/61, 0x3d}, {&(0x7f0000001480)=""/10, 0xa}, {&(0x7f00000026c0)=""/215, 0xd7}], 0x4}, 0x8}, {{&(0x7f0000002800)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000002900)=[{&(0x7f0000002880)=""/27, 0x1b}, {&(0x7f00000028c0)=""/9, 0x9}], 0x2, &(0x7f0000002940)=""/232, 0xe8}, 0x7}, {{&(0x7f0000002a40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000005800), 0x0, &(0x7f0000004040)=""/4091, 0xffb}, 0xc253}, {{&(0x7f0000005040)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000051c0)=[{&(0x7f00000050c0)=""/11, 0xb}, {&(0x7f0000005100)=""/5, 0x5}, {&(0x7f0000005140)=""/114, 0x72}], 0x3, &(0x7f0000005200)=""/17, 0x11}, 0x101}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000005240)=""/250, 0xfa}, {&(0x7f0000005340)=""/243, 0xf3}], 0x2, &(0x7f0000005480)=""/177, 0xb1}, 0xa}, {{&(0x7f0000002ac0)=@pppol2tp, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002b40)=""/181, 0xb5}, {&(0x7f0000002680)=""/52, 0x34}, {&(0x7f0000003140)=""/171, 0xab}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)}, {&(0x7f0000003200)=""/111, 0x6f}, {&(0x7f0000003280)=""/107, 0x6b}, {&(0x7f0000003300)=""/122, 0x7a}, {&(0x7f0000003380)=""/22, 0x16}], 0x9, &(0x7f0000003480)=""/220, 0xdc}, 0x2f6f}, {{&(0x7f0000003580)=@qipcrtr, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003600)=""/155, 0x9b}, {&(0x7f00000036c0)=""/161, 0xa1}, {&(0x7f0000005800)=""/4096, 0x1000}, {&(0x7f0000003780)=""/143, 0x8f}, {&(0x7f0000003840)=""/18, 0x12}, {&(0x7f0000003880)=""/24, 0x18}, {&(0x7f00000038c0)=""/51, 0x33}, {&(0x7f0000003900)=""/25, 0x19}, {&(0x7f0000003940)=""/236, 0xec}], 0x9, &(0x7f0000003b00)=""/154, 0x9a}, 0xdf6}, {{&(0x7f0000003bc0)=@ax25={{0x3, @rose}, [@bcast, @default, @null, @rose, @null, @netrom, @rose, @bcast]}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003d80)=""/146, 0x92}], 0x1, &(0x7f0000006800)=""/4096, 0x1000}, 0xfffff6a1}], 0x9, 0x1, &(0x7f0000005700)={r0, r1+60000000}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000002dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000002c80)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002f80)=ANY=[@ANYRESOCT=r3, @ANYRES32, @ANYBLOB="00000000816c5f9df709319df310d514e98b5c0000000004008800c9d3b77c6daf9c477178474d78a7cecaf4509a18c5d429a8f01802508a9108b68aff3cb297b6feec1713a6b1669fe7b41c807a3b38b0c0d30750c906674704632b8096edf804ef1f46e00cd03ea6b381521979663fd2e8d0", @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r2], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000feffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_process_fork\x00', r6}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000001400)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r8, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r9, 0x1, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000003040)=ANY=[@ANYBLOB="0a00000000000000000000000000000018010000786c6c2501000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b7030000000000008500000006140000850000000e00000095823425663e47804c57819f46985376b3e1f2eb1df403bb687f1ffca1cc691179c9e6d3c3594b9f7e973643f56c707a8ade9610230ac3cad5f82d08d646417c1605e1c5f3bd93ac51edc5f8c9a67128b2db1baee2a12158115af5bcf16f388cd23767f7b373e62aca542b6f427c212ae98b35e9482fbdec48d930ccfa69347aec206473de1d40a5f813c7c0de062ec2df887c19031b1bb7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x0, 0xfffffffffffffffe, 0x6, 0x2, @buffer={0x0, 0x25, &(0x7f0000002d80)=""/37}, &(0x7f0000000040)="ff335067fcff", 0x0, 0x800804, 0x10032, 0x1000, 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffedbdf25017c0000060004"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 1.826061491s ago: executing program 1 (id=15464): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x280000, 0x4, 0x10009, 0x6}], 0x10, 0xfffffff6}, 0x94) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b1000", 0x2c}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r4, 0x1, 0xe, &(0x7f0000000700)=""/208, &(0x7f0000000800)=0xd0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x125101, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x1f) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x0, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") r7 = socket$key(0xf, 0x3, 0x2) sendfile(r7, 0xffffffffffffffff, 0x0, 0x1000) 1.824713472s ago: executing program 3 (id=15465): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x3, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x0, 0x1d}}], 0x48}, 0x0) 1.743782413s ago: executing program 3 (id=15466): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r1, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x200, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=r3, @ANYRESDEC=r4], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='mm_page_free\x00', r5, 0x0, 0x20006}, 0x18) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x8000000) r7 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x7}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) r10 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r10, &(0x7f0000000000)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) signalfd4(r10, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/19, @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x4884) 1.646251144s ago: executing program 6 (id=15470): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6(0xa, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r6}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x20, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.615029565s ago: executing program 1 (id=15471): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) pwrite64(r3, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 1.443636318s ago: executing program 6 (id=15473): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, 0x0, 0x800) 1.405877618s ago: executing program 6 (id=15475): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r0, 0x5, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}]}]}, 0x28}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0xb8, 0x3, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0xa4, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8050}, 0x4801) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x10000ca, &(0x7f0000000300), 0x2, 0x572, &(0x7f0000001600)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) fallocate(r5, 0x0, 0x0, 0x8000c62) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r6, r6, 0x0, 0x100000800000009) 1.405650138s ago: executing program 1 (id=15476): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$eJzs3U9IHFccB/DfzO7Wqkux7aVQ+gdKKa0g9lboxV5aEIpIKYW2YCmllxYtWKU37SmXHJJjSIKnXCTkFpNj8CK5JARyMokHcwkkkkMkhySwYXcU/LOJxl13gvP5wDoz+ub93jDzfSPiMAEUVl9EDEVEKSL6I6ISEcnWBh9nn76NzbnupbGIWu2Hh0mjXbad2dyvNyJmI+KriFhMk/irHDG98Mvq4+XvPjs+Vfn03MLP3R09yA1rqyvfr58dOXZx+Mvp6zfvjyQxFNVtx9V+SZPvlZOIdw6j2GsiKec9AvZj9L8Lt+q5fzciPmnkvxJpZCfvxOQbi5X44syL9j354Mb7nRwr0H61WqV+D5ytAYWTRkQ1knQgIrL1NB0YyH6Hv13qSf+emPy3/8+JqfE/8p6pgHapRqx8e7nrUu+O/N8rZfkHjqjsj1IrP47O36mvrJfyHhDQER9ki/r9v/+3mc9D/qFw5B+KS/6huOQfikv+4ehp9v+mzcg/FJf8Q3HJPxSX/ENxHTj/p54d3qCAjtiafwCgWGpdB3pquP0PIgMdl/f8AwAAAAAAAAAAAAAAAAAA7DbXvTS2+WlPj+U9W1w9HbH2TdZ0d/1S433EEW82vvY8Srb1mOyrwsv9+lGLHbTofM5PX791N9/61z7Mt/7MeMTs/xExWC43rr1tF1Sycf0d3Nt7/Lzye4sFXtHOdwN8/VNn6+/0dD7f+sPLEVfq889gs/knjfcay+bzT7V+/lqs/8+TFjsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgY54HAAD//7UiauA=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) pwrite64(r3, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 1.253698811s ago: executing program 7 (id=15478): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000001c0)='xs_stream_read_request\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\t'], 0xa) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x9) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xa, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) socket$inet_mptcp(0x2, 0x1, 0x106) 1.202154801s ago: executing program 1 (id=15479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r2, &(0x7f0000000240)=ANY=[], 0xffe) 1.201537521s ago: executing program 7 (id=15480): open(&(0x7f0000000180)='./file0\x00', 0x40c5, 0x24) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',msize=0x0000000000001000']) 1.158664482s ago: executing program 7 (id=15481): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000180)='./file0/file0/file0\x00', 0xa) sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="5966156ddb0000020000000000000002"], 0x10}}, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 1.001979704s ago: executing program 6 (id=15483): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6(0xa, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f0000000c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x1b}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6, r6}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) r8 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x80000000}, &(0x7f0000000140)=0x8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r9}, 0x18) r10 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$selinux_access(r10, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r6, r6}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r12, r12}, &(0x7f0000000600), &(0x7f0000000640)=r11}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000cc0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r12}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x20, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 960.841215ms ago: executing program 1 (id=15484): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r3, 0x0, r2, 0x0, 0x46) close(r2) socket$igmp6(0xa, 0x3, 0x2) memfd_create(&(0x7f0000000580)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f', 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x1) keyctl$setperm(0x5, 0x0, 0x1128120) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3e, 0x3, 0x0, 0xfc, 0x0, 0x8000000003, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1}, 0x115d2, 0x0, 0x10000005, 0x3, 0xc8, 0x8, 0xfff9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 895.908756ms ago: executing program 0 (id=15485): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodiscard}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") chdir(&(0x7f0000000380)='./file0\x00') open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 881.532026ms ago: executing program 3 (id=15486): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040000}, 0x800) 790.645427ms ago: executing program 0 (id=15487): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6(0xa, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r6}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x20, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 743.615628ms ago: executing program 3 (id=15488): r0 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x4793, 0x4) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}}], 0x1, 0x44008800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000280)}, 0x5}], 0x1, 0x10000, 0x0) 629.49952ms ago: executing program 7 (id=15489): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) pwrite64(r3, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 515.604642ms ago: executing program 6 (id=15490): socket$packet(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x5, 0x2, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 437.802603ms ago: executing program 0 (id=15491): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000cc0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 402.746063ms ago: executing program 0 (id=15492): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mknod$loop(0x0, 0x2000, 0x1) 344.497274ms ago: executing program 7 (id=15493): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r0, 0x5, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}]}]}, 0x28}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0xb8, 0x3, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0xa4, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8050}, 0x4801) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x10000ca, &(0x7f0000000300), 0x2, 0x572, &(0x7f0000001600)="$eJzs3d9rU+cbAPDnpKm/v99WENnGGAUv5nCmtt0PB7twl2OTCdu9C2ks0tRIk4rthOnFvNnNkMEYE8but3svZf/A/gphCjKkbBe76TjpSW1t0jbamur5fCDyvnlP+p7nvOd5fU9OQgLIrZH0n0LEqxHxXRIxFBFJ1laMrHFkebvFR9cq6SOJpaXP/0pa26X19t9qv+5gVnklIn7/JuJEYX2/jfmF6XKtVp3N6qPNmcujjfmFkxdnylPVqeql8YmJ0+9OjH/w/nvbFutb5/758bO7H5/+9tjiD789OHwriTNxKGtbHcem9nVtub66MhIj2TEZjDNPbDjWy46/AJJ+7wBPZSDL88FI54ChGMiyHnj5fR0RS0BOJfIfcqq9Dmhf2/d0HfwSePjR8gXQ+viLy++NxL7WtdGBxWTNlVF6vTu8Df2nfdy5f/tW+ohe34cAeAbXb0TEqWJx/fyXZPPf0zu1hW2e7MP8B8/P3XT983an9U9hZf0THdY/Bzvk7tPYPP8LD7ahm67S9d+HHde/Kzethgey2v9aa77B5MLFWjWd2/4fEcdjcG9a3+h+zunFe0vd2lav/+6kh/rRtUp7LZjtx4Pi3rWvmSw3y88S82oPb0S81nH9m6yMf9Jh/NPjcW6LfRyt3n6jW9ua+O/fvrW4Lv6dtfRLxJsdx//xHa1k4/uTo63zYbR9Vqz3982jf3Trv9/xp+N/YOP4h5PV92sbvffx875/q93a1sQfneLvfP7vSb5olfdkz10tN5uzYxF7kk/XPz/++LXtenv7NP7jxzae/zqd//sj4sstxn/zyK+vbyn+Po3/ZE/j33vh3idf/dSt/83jT8f/nVbpePZMNv8NbRTXVnfwWY8fAAAAAAAA7CaFiDgUSaG0Ui4USqXlz3cciQOFWr3RPHGhPndpMlrflR2OwUL7TvfQqs9DjGWfh23Xx5+oT0TE4Yj4fmB/q16q1GuT/Q4eAAAAAAAAAAAAAAAAAAAAdomDXb7/n/pzoN97B+w4P/kN+bVp/m/HLz0Bu5L//yG/5D/kl/yH/JL/kF/yH/JL/kN+yX/IL/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAA2+rc2bPpY2nx0bVKWp+8Mj83Xb9ycrLamC7NzFVKlfrs5dJUvT5Vq5Yq9ZnN/l6tXr88Nh5zV0eb1UZztDG/cH6mPnepef7iTHmqer46+FyiAgAAAAAAAAAAAAAAAAAAgBdLY35hulyrVWd3qpDsfBcK/SwUd8du5KdQjOfSV79nJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB47L8AAAD//84fMw8=") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) fallocate(r5, 0x0, 0x0, 0x8000c62) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r6, r6, 0x0, 0x100000800000009) 336.550494ms ago: executing program 0 (id=15494): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1, 0x0, 0x2000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) syz_init_net_socket$x25(0x9, 0x5, 0x0) 187.014417ms ago: executing program 6 (id=15495): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6(0xa, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6, r6}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) r7 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x80000000}, &(0x7f0000000140)=0x8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r8}, 0x18) r9 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$selinux_access(r9, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r6, r6}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r11, r11}, &(0x7f0000000600), &(0x7f0000000640)=r10}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000cc0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x20, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 186.339266ms ago: executing program 0 (id=15505): socket$packet(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x5, 0x2, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 0s ago: executing program 7 (id=15496): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r1, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x200, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=r3, @ANYRESDEC=r4], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='mm_page_free\x00', r5, 0x0, 0x20006}, 0x18) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x8000000) r7 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x7}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) r10 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r10, &(0x7f0000000000)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) signalfd4(r10, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/19, @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x4884) kernel console output (not intermixed with test programs): tem read-only [ 873.898387][T13723] EXT4-fs (loop7): 1 truncate cleaned up [ 874.251843][T13740] loop7: detected capacity change from 0 to 128 [ 874.320758][T13740] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 874.371449][T13747] xt_CT: No such helper "pptp" [ 874.483456][T13760] loop0: detected capacity change from 0 to 512 [ 874.491437][T13760] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 874.514312][T13760] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.14888: corrupted xattr entries [ 874.527228][T13760] EXT4-fs (loop0): Remounting filesystem read-only [ 874.536379][T13760] EXT4-fs (loop0): 1 truncate cleaned up [ 874.706961][T13772] syzkaller1: entered promiscuous mode [ 874.712577][T13772] syzkaller1: entered allmulticast mode [ 874.955864][T13779] validate_nla: 4 callbacks suppressed [ 874.955879][T13779] netlink: 'syz.3.14896': attribute type 9 has an invalid length. [ 874.969275][T13779] netlink: 'syz.3.14896': attribute type 6 has an invalid length. [ 874.977083][T13779] netlink: 'syz.3.14896': attribute type 7 has an invalid length. [ 874.984989][T13779] netlink: 'syz.3.14896': attribute type 8 has an invalid length. [ 875.115198][T13793] netlink: 'syz.1.14902': attribute type 1 has an invalid length. [ 875.136044][T13793] 8021q: adding VLAN 0 to HW filter on device bond14 [ 875.291197][T13808] IPv4: Oversized IP packet from 127.202.26.0 [ 875.301895][T13810] loop6: detected capacity change from 0 to 128 [ 875.310198][T13810] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 875.420477][T13815] netlink: 'syz.3.14909': attribute type 9 has an invalid length. [ 875.428420][T13815] netlink: 'syz.3.14909': attribute type 6 has an invalid length. [ 875.436288][T13815] netlink: 'syz.3.14909': attribute type 7 has an invalid length. [ 875.444172][T13815] netlink: 'syz.3.14909': attribute type 8 has an invalid length. [ 875.486842][T13825] loop0: detected capacity change from 0 to 128 [ 875.489674][T13824] netlink: 'syz.6.14911': attribute type 1 has an invalid length. [ 875.502989][T13825] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 875.527264][T13824] 8021q: adding VLAN 0 to HW filter on device bond8 [ 875.550466][T13824] macvlan2: entered promiscuous mode [ 875.555884][T13824] macvlan2: entered allmulticast mode [ 875.568770][T13824] bond8: entered promiscuous mode [ 875.574091][T13824] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 875.583320][T13824] bond8: left promiscuous mode [ 875.699131][T13836] xt_CT: No such helper "pptp" [ 875.990486][T13845] IPv4: Oversized IP packet from 127.202.26.0 [ 876.087620][T13854] loop6: detected capacity change from 0 to 128 [ 876.121418][T13856] loop7: detected capacity change from 0 to 512 [ 876.133840][T13854] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 876.167583][T13856] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 876.233581][T13856] EXT4-fs error (device loop7): xattr_find_entry:333: inode #15: comm syz.7.14924: corrupted xattr entries [ 876.246959][T13856] EXT4-fs (loop7): Remounting filesystem read-only [ 876.254433][T13856] EXT4-fs (loop7): 1 truncate cleaned up [ 876.293486][T13862] loop6: detected capacity change from 0 to 128 [ 876.394383][T13862] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 876.455464][T13868] xt_CT: No such helper "pptp" [ 876.545205][T13873] 8021q: adding VLAN 0 to HW filter on device bond5 [ 876.613415][T13873] macvlan2: entered promiscuous mode [ 876.619075][T13873] macvlan2: entered allmulticast mode [ 876.625766][T13873] bond5: entered promiscuous mode [ 876.637913][T13873] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 876.645648][T13880] IPv4: Oversized IP packet from 127.202.26.0 [ 876.654225][T13873] bond5: left promiscuous mode [ 876.701516][T13877] syzkaller1: entered promiscuous mode [ 876.707049][T13877] syzkaller1: entered allmulticast mode [ 876.769427][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 876.769442][ T29] audit: type=1326 audit(1752269602.808:49423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13892 comm="syz.3.14934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03865e929 code=0x7ffc0000 [ 876.800210][ T29] audit: type=1326 audit(1752269602.808:49424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13892 comm="syz.3.14934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd03865d290 code=0x7ffc0000 [ 876.824148][ T29] audit: type=1326 audit(1752269602.808:49425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13892 comm="syz.3.14934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd038660157 code=0x7ffc0000 [ 876.848583][ T29] audit: type=1326 audit(1752269602.808:49426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13892 comm="syz.3.14934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd03865e929 code=0x7ffc0000 [ 876.855067][T13896] syzkaller1: entered promiscuous mode [ 876.872346][ T29] audit: type=1326 audit(1752269602.808:49427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13892 comm="syz.3.14934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd038660157 code=0x7ffc0000 [ 876.877759][T13896] syzkaller1: entered allmulticast mode [ 876.907719][ T29] audit: type=1326 audit(1752269602.808:49428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13892 comm="syz.3.14934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd03865d58a code=0x7ffc0000 [ 876.931342][ T29] audit: type=1326 audit(1752269602.808:49429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13892 comm="syz.3.14934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03865e929 code=0x7ffc0000 [ 876.955715][ T29] audit: type=1326 audit(1752269602.808:49430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13892 comm="syz.3.14934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03865e929 code=0x7ffc0000 [ 877.135722][T13907] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 877.382012][T13919] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14943'. [ 877.580734][ T29] audit: type=1326 audit(1752269603.618:49431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13930 comm="syz.6.14947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff293e929 code=0x7ffc0000 [ 877.605104][ T29] audit: type=1326 audit(1752269603.618:49432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13930 comm="syz.6.14947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0ff293d290 code=0x7ffc0000 [ 877.673370][T24685] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.810198][T24685] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.824873][T13923] chnl_net:caif_netlink_parms(): no params data found [ 877.904385][T13948] loop0: detected capacity change from 0 to 128 [ 877.915265][T13948] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 877.931404][T24685] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.942964][T13923] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.950187][T13923] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.964554][T13923] bridge_slave_0: entered allmulticast mode [ 877.986654][T13923] bridge_slave_0: entered promiscuous mode [ 877.997305][T13923] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.005044][T13923] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.022743][T13923] bridge_slave_1: entered allmulticast mode [ 878.030017][T13923] bridge_slave_1: entered promiscuous mode [ 878.040224][T24685] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.067378][T13923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 878.080510][T13923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 878.104371][T13923] team0: Port device team_slave_0 added [ 878.119272][T13960] loop7: detected capacity change from 0 to 1024 [ 878.129641][T13923] team0: Port device team_slave_1 added [ 878.170059][T13960] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.14953: Allocating blocks 385-513 which overlap fs metadata [ 878.190278][T13923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 878.197241][T13923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.223961][T13923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 878.270223][T13923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 878.277206][T13923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.303196][T13923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.328988][T13957] EXT4-fs (loop7): pa ffff888106e1e4d0: logic 16, phys. 129, len 24 [ 878.337167][T13957] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 878.389347][T24685] bridge_slave_1: left allmulticast mode [ 878.395242][T24685] bridge_slave_1: left promiscuous mode [ 878.401638][T24685] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.421137][T24685] bridge_slave_0: left allmulticast mode [ 878.426860][T24685] bridge_slave_0: left promiscuous mode [ 878.433309][T24685] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.472991][T13972] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 878.506194][T13977] loop6: detected capacity change from 0 to 128 [ 878.549788][T13977] bio_check_eod: 9 callbacks suppressed [ 878.549804][T13977] syz.6.14958: attempt to access beyond end of device [ 878.549804][T13977] loop6: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 878.571931][T13977] syz.6.14958: attempt to access beyond end of device [ 878.571931][T13977] loop6: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 878.585498][T13977] buffer_io_error: 8 callbacks suppressed [ 878.585516][T13977] Buffer I/O error on dev loop6, logical block 156, lost async page write [ 878.602084][T13977] syz.6.14958: attempt to access beyond end of device [ 878.602084][T13977] loop6: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 878.615871][T13977] Buffer I/O error on dev loop6, logical block 157, lost async page write [ 878.625666][T13977] syz.6.14958: attempt to access beyond end of device [ 878.625666][T13977] loop6: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 878.639254][T13977] Buffer I/O error on dev loop6, logical block 158, lost async page write [ 878.647966][T13977] syz.6.14958: attempt to access beyond end of device [ 878.647966][T13977] loop6: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 878.661468][T13977] Buffer I/O error on dev loop6, logical block 159, lost async page write [ 878.672747][T13977] syz.6.14958: attempt to access beyond end of device [ 878.672747][T13977] loop6: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 878.686326][T13977] Buffer I/O error on dev loop6, logical block 160, lost async page write [ 878.694865][T13977] syz.6.14958: attempt to access beyond end of device [ 878.694865][T13977] loop6: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 878.708508][T13977] Buffer I/O error on dev loop6, logical block 161, lost async page write [ 878.717194][T24685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 878.717225][T13977] syz.6.14958: attempt to access beyond end of device [ 878.717225][T13977] loop6: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 878.717245][T13977] Buffer I/O error on dev loop6, logical block 132, lost async page write [ 878.717288][T13977] syz.6.14958: attempt to access beyond end of device [ 878.717288][T13977] loop6: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 878.761242][T13977] Buffer I/O error on dev loop6, logical block 133, lost async page write [ 878.770144][T13977] syz.6.14958: attempt to access beyond end of device [ 878.770144][T13977] loop6: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 878.783643][T13977] Buffer I/O error on dev loop6, logical block 150, lost async page write [ 878.792346][T13977] Buffer I/O error on dev loop6, logical block 151, lost async page write [ 878.792528][T24685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 878.811316][T24685] bond0 (unregistering): Released all slaves [ 878.823294][T24685] bond1 (unregistering): Released all slaves [ 878.833518][T24685] bond2 (unregistering): Released all slaves [ 878.843030][T24685] bond3 (unregistering): Released all slaves [ 878.854268][T24685] bond4 (unregistering): Released all slaves [ 878.864680][T24685] bond5 (unregistering): Released all slaves [ 878.875527][T24685] bond6 (unregistering): Released all slaves [ 878.886450][T24685] bond7 (unregistering): Released all slaves [ 878.896140][T24685] bond8 (unregistering): Released all slaves [ 878.906979][T24685] bond9 (unregistering): Released all slaves [ 878.916709][T24685] bond10 (unregistering): Released all slaves [ 878.927215][T24685] bond11 (unregistering): Released all slaves [ 878.937317][T24685] bond12 (unregistering): Released all slaves [ 878.948272][T24685] bond13 (unregistering): Released all slaves [ 878.959856][T24685] bond14 (unregistering): Released all slaves [ 878.971697][T13923] hsr_slave_0: entered promiscuous mode [ 878.979412][T13923] hsr_slave_1: entered promiscuous mode [ 878.985361][T13923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 878.993153][T13923] Cannot create hsr debugfs directory [ 879.004799][T13981] 8021q: adding VLAN 0 to HW filter on device bond3 [ 879.030257][T13992] 8021q: adding VLAN 0 to HW filter on device bond9 [ 879.061950][T24685] hsr_slave_0: left promiscuous mode [ 879.072510][T24685] hsr_slave_1: left promiscuous mode [ 879.079766][T24685] batman_adv: batadv0: Removing interface: team0 [ 879.086525][T24685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 879.094061][T24685] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 879.150885][T24685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 879.158540][T24685] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 879.228217][T24685] veth1_macvtap: left promiscuous mode [ 879.233762][T24685] veth0_macvtap: left promiscuous mode [ 879.243124][T24685] veth1_vlan: left promiscuous mode [ 879.253941][T24685] veth0_vlan: left promiscuous mode [ 879.261216][T14005] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14967'. [ 879.395335][T24685] team0 (unregistering): Port device team_slave_1 removed [ 879.406763][T24685] team0 (unregistering): Port device team_slave_0 removed [ 879.451211][T13992] macvlan2: entered promiscuous mode [ 879.456579][T13992] macvlan2: entered allmulticast mode [ 879.467110][T13992] bond9: entered promiscuous mode [ 879.480258][T13992] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 879.530919][T13992] bond9: left promiscuous mode [ 879.610209][T14021] loop0: detected capacity change from 0 to 128 [ 879.631901][T14023] loop6: detected capacity change from 0 to 1024 [ 879.640157][T14021] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 879.758536][T14034] loop0: detected capacity change from 0 to 128 [ 879.768994][T14034] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 879.851380][T24685] IPVS: stop unused estimator thread 0... [ 880.031084][T13923] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 880.052489][T13923] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 880.075887][T13923] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 880.086908][T14046] loop0: detected capacity change from 0 to 128 [ 880.089984][T13923] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 880.100321][T14046] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 880.118904][T14049] validate_nla: 17 callbacks suppressed [ 880.118968][T14049] netlink: 'syz.3.14979': attribute type 2 has an invalid length. [ 880.132990][T14049] netlink: 'syz.3.14979': attribute type 9 has an invalid length. [ 880.141269][T14049] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14979'. [ 880.176181][T14052] netlink: 'syz.7.14984': attribute type 1 has an invalid length. [ 880.258355][T14052] 8021q: adding VLAN 0 to HW filter on device bond4 [ 880.276153][T14065] netlink: 'syz.0.14987': attribute type 1 has an invalid length. [ 880.299533][T14065] 8021q: adding VLAN 0 to HW filter on device bond10 [ 880.315332][T14052] macvlan2: entered promiscuous mode [ 880.321505][T14052] macvlan2: entered allmulticast mode [ 880.328276][T14052] bond4: entered promiscuous mode [ 880.333587][T14052] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 880.352397][T14061] netlink: 'syz.6.14986': attribute type 9 has an invalid length. [ 880.360415][T14061] netlink: 'syz.6.14986': attribute type 6 has an invalid length. [ 880.368257][T14061] netlink: 'syz.6.14986': attribute type 7 has an invalid length. [ 880.376067][T14061] netlink: 'syz.6.14986': attribute type 8 has an invalid length. [ 880.384365][T14052] bond4: left promiscuous mode [ 880.413348][T13923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 880.432350][T14078] netlink: 'syz.3.14989': attribute type 1 has an invalid length. [ 880.437147][T13923] 8021q: adding VLAN 0 to HW filter on device team0 [ 880.458046][T14078] 8021q: adding VLAN 0 to HW filter on device bond6 [ 880.473458][T24688] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.480597][T24688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 880.502955][T14085] 9pnet_fd: Insufficient options for proto=fd [ 880.503365][T14078] macvlan2: entered promiscuous mode [ 880.514397][T14078] macvlan2: entered allmulticast mode [ 880.521065][T14078] bond6: entered promiscuous mode [ 880.531097][T14088] netlink: 'syz.7.14992': attribute type 1 has an invalid length. [ 880.539955][T14078] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 880.556958][T14078] bond6: left promiscuous mode [ 880.588177][T14088] 8021q: adding VLAN 0 to HW filter on device bond5 [ 880.677468][T24691] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.684553][T24691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 880.731880][T14106] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.14997'. [ 880.832224][T13923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 880.837641][T14106] loop7: detected capacity change from 0 to 512 [ 880.853323][T14114] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 880.877443][T14106] EXT4-fs (loop7): too many log groups per flexible block group [ 880.886598][T14106] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 880.937816][T14128] 9pnet_fd: Insufficient options for proto=fd [ 880.938843][T14106] EXT4-fs (loop7): mount failed [ 880.965823][T14130] syzkaller1: entered promiscuous mode [ 880.971442][T14130] syzkaller1: entered allmulticast mode [ 881.042077][T13923] veth0_vlan: entered promiscuous mode [ 881.064881][T13923] veth1_vlan: entered promiscuous mode [ 881.081497][T14138] IPv4: Oversized IP packet from 127.202.26.0 [ 881.096202][T13923] veth0_macvtap: entered promiscuous mode [ 881.104012][T13923] veth1_macvtap: entered promiscuous mode [ 881.118334][T14136] loop7: detected capacity change from 0 to 512 [ 881.155569][T13923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 881.166523][T13923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 881.166821][T14136] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.15006: bg 0: block 248: padding at end of block bitmap is not set [ 881.175058][T13923] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.197067][T13923] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.205921][T13923] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.214766][T13923] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.233940][T14136] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.15006: Failed to acquire dquot type 1 [ 881.289719][T14136] EXT4-fs (loop7): 1 truncate cleaned up [ 881.295970][T14136] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 881.329289][T14156] syzkaller1: entered promiscuous mode [ 881.334857][T14156] syzkaller1: entered allmulticast mode [ 881.637045][T14172] xt_CT: No such helper "pptp" [ 881.713430][T14177] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.15015'. [ 881.761684][T14181] 8021q: adding VLAN 0 to HW filter on device bond6 [ 881.806625][T14177] loop0: detected capacity change from 0 to 512 [ 881.862543][T14177] EXT4-fs (loop0): too many log groups per flexible block group [ 881.872432][T14177] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 881.904637][T14177] EXT4-fs (loop0): mount failed [ 882.004935][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 882.004949][ T29] audit: type=1326 audit(1752269608.038:49488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14196 comm="syz.0.15023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d4d3e929 code=0x7ffc0000 [ 882.046052][ T29] audit: type=1326 audit(1752269608.038:49489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14196 comm="syz.0.15023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d4d3e929 code=0x7ffc0000 [ 882.069892][ T29] audit: type=1326 audit(1752269608.078:49490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14196 comm="syz.0.15023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3d4d3e929 code=0x7ffc0000 [ 882.093591][ T29] audit: type=1326 audit(1752269608.078:49491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14196 comm="syz.0.15023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d4d3e929 code=0x7ffc0000 [ 882.117355][ T29] audit: type=1326 audit(1752269608.078:49492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14196 comm="syz.0.15023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d4d3e929 code=0x7ffc0000 [ 882.141045][ T29] audit: type=1326 audit(1752269608.078:49493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14196 comm="syz.0.15023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3d4d3e929 code=0x7ffc0000 [ 882.164793][ T29] audit: type=1326 audit(1752269608.078:49494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14196 comm="syz.0.15023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d4d3e929 code=0x7ffc0000 [ 882.188481][ T29] audit: type=1326 audit(1752269608.078:49495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14196 comm="syz.0.15023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fb3d4d3e929 code=0x7ffc0000 [ 882.212508][ T29] audit: type=1326 audit(1752269608.078:49496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14196 comm="syz.0.15023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d4d3e929 code=0x7ffc0000 [ 882.334425][T14204] xt_CT: No such helper "pptp" [ 882.547813][ T29] audit: type=1326 audit(1752269608.578:49497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14222 comm="syz.1.15031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b525ae929 code=0x7ffc0000 [ 882.588604][T14228] 9pnet_fd: Insufficient options for proto=fd [ 882.589233][T14225] 8021q: adding VLAN 0 to HW filter on device bond11 [ 882.920546][T14243] xt_CT: No such helper "pptp" [ 882.967544][T14248] syzkaller1: entered promiscuous mode [ 882.973313][T14248] syzkaller1: entered allmulticast mode [ 883.101272][T14260] 9pnet_fd: Insufficient options for proto=fd [ 883.154273][T14264] loop7: detected capacity change from 0 to 128 [ 883.553777][T14283] syzkaller1: entered promiscuous mode [ 883.559390][T14283] syzkaller1: entered allmulticast mode [ 883.571335][T14287] IPv4: Oversized IP packet from 127.202.26.0 [ 883.656513][T14294] 9pnet_fd: Insufficient options for proto=fd [ 883.724096][T14300] 8021q: adding VLAN 0 to HW filter on device bond12 [ 883.764312][T14300] macvlan2: entered promiscuous mode [ 883.769703][T14300] macvlan2: entered allmulticast mode [ 883.798111][T14300] bond12: entered promiscuous mode [ 883.803529][T14300] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 883.814925][T14300] bond12: left promiscuous mode [ 884.090408][T14325] loop0: detected capacity change from 0 to 512 [ 884.097497][T14325] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 884.108919][T14323] 9pnet_fd: Insufficient options for proto=fd [ 884.116552][T14325] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.15067: corrupted xattr entries [ 884.149426][T14325] EXT4-fs (loop0): Remounting filesystem read-only [ 884.158987][T14325] EXT4-fs (loop0): 1 truncate cleaned up [ 884.221303][T14335] IPv4: Oversized IP packet from 127.202.26.0 [ 884.431847][T14350] 8021q: adding VLAN 0 to HW filter on device bond7 [ 884.484167][T14350] macvlan2: entered promiscuous mode [ 884.489525][T14350] macvlan2: entered allmulticast mode [ 884.536252][T14350] bond7: entered promiscuous mode [ 884.562037][T14350] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 884.578921][T14350] bond7: left promiscuous mode [ 884.760096][T14376] loop7: detected capacity change from 0 to 512 [ 884.790671][T14376] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.15086: bg 0: block 248: padding at end of block bitmap is not set [ 884.805430][T14376] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.15086: Failed to acquire dquot type 1 [ 884.819429][T14376] EXT4-fs (loop7): 1 truncate cleaned up [ 884.825528][T14376] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 884.887198][T14386] loop0: detected capacity change from 0 to 1024 [ 884.933633][T14386] EXT4-fs mount: 95 callbacks suppressed [ 884.933647][T14386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 885.166884][T11336] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.301054][T14394] loop0: detected capacity change from 0 to 128 [ 885.366945][T14394] bio_check_eod: 28 callbacks suppressed [ 885.366964][T14394] syz.0.15090: attempt to access beyond end of device [ 885.366964][T14394] loop0: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 885.366982][T14398] IPv4: Oversized IP packet from 127.202.26.0 [ 885.367009][T14394] syz.0.15090: attempt to access beyond end of device [ 885.367009][T14394] loop0: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 885.405780][T14394] buffer_io_error: 26 callbacks suppressed [ 885.405809][T14394] Buffer I/O error on dev loop0, logical block 156, lost async page write [ 885.458172][T14394] syz.0.15090: attempt to access beyond end of device [ 885.458172][T14394] loop0: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 885.471890][T14394] Buffer I/O error on dev loop0, logical block 157, lost async page write [ 885.507142][T14400] syzkaller1: entered promiscuous mode [ 885.512751][T14400] syzkaller1: entered allmulticast mode [ 885.518429][T14394] syz.0.15090: attempt to access beyond end of device [ 885.518429][T14394] loop0: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 885.532002][T14394] Buffer I/O error on dev loop0, logical block 158, lost async page write [ 885.568696][T14394] syz.0.15090: attempt to access beyond end of device [ 885.568696][T14394] loop0: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 885.582301][T14394] Buffer I/O error on dev loop0, logical block 159, lost async page write [ 885.637690][T14394] syz.0.15090: attempt to access beyond end of device [ 885.637690][T14394] loop0: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 885.651285][T14394] Buffer I/O error on dev loop0, logical block 160, lost async page write [ 885.669013][T14394] syz.0.15090: attempt to access beyond end of device [ 885.669013][T14394] loop0: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 885.682655][T14394] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 885.741171][T14394] syz.0.15090: attempt to access beyond end of device [ 885.741171][T14394] loop0: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 885.754794][T14394] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 885.765181][T14394] syz.0.15090: attempt to access beyond end of device [ 885.765181][T14394] loop0: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 885.778736][T14394] Buffer I/O error on dev loop0, logical block 133, lost async page write [ 885.801116][T14390] syz.7.15089 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 885.815445][T14390] CPU: 1 UID: 0 PID: 14390 Comm: syz.7.15089 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(voluntary) [ 885.815471][T14390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 885.815524][T14390] Call Trace: [ 885.815531][T14390] [ 885.815647][T14390] __dump_stack+0x1d/0x30 [ 885.815674][T14390] dump_stack_lvl+0xe8/0x140 [ 885.815696][T14390] dump_stack+0x15/0x1b [ 885.815714][T14390] dump_header+0x81/0x220 [ 885.815750][T14390] oom_kill_process+0x334/0x3f0 [ 885.815821][T14390] out_of_memory+0x979/0xb80 [ 885.815875][T14390] try_charge_memcg+0x5e6/0x9e0 [ 885.815921][T14390] obj_cgroup_charge_pages+0xa6/0x150 [ 885.815948][T14390] __memcg_kmem_charge_page+0x9f/0x170 [ 885.815974][T14390] __alloc_frozen_pages_noprof+0x188/0x360 [ 885.816013][T14390] alloc_pages_mpol+0xb3/0x250 [ 885.816118][T14390] alloc_pages_noprof+0x90/0x130 [ 885.816206][T14390] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 885.816254][T14390] __kvmalloc_node_noprof+0x30f/0x4e0 [ 885.816348][T14390] ? ip_set_alloc+0x1f/0x30 [ 885.816390][T14390] ? ip_set_alloc+0x1f/0x30 [ 885.816429][T14390] ? __kmalloc_cache_noprof+0x189/0x320 [ 885.816456][T14390] ip_set_alloc+0x1f/0x30 [ 885.816486][T14390] hash_netiface_create+0x282/0x740 [ 885.816725][T14390] ? __pfx_hash_netiface_create+0x10/0x10 [ 885.816759][T14390] ip_set_create+0x3c9/0x960 [ 885.816800][T14390] ? __nla_parse+0x40/0x60 [ 885.816843][T14390] nfnetlink_rcv_msg+0x4c6/0x590 [ 885.816947][T14390] ? selinux_capable+0x1f9/0x270 [ 885.816980][T14390] netlink_rcv_skb+0x120/0x220 [ 885.817063][T14390] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 885.817099][T14390] nfnetlink_rcv+0x16b/0x1690 [ 885.817122][T14390] ? __kfree_skb+0x109/0x150 [ 885.817197][T14390] ? nlmon_xmit+0x4f/0x60 [ 885.817218][T14390] ? consume_skb+0x49/0x150 [ 885.817249][T14390] ? nlmon_xmit+0x4f/0x60 [ 885.817271][T14390] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 885.817313][T14390] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 885.817411][T14390] ? __dev_queue_xmit+0x182/0x1fb0 [ 885.817441][T14390] ? ref_tracker_free+0x37d/0x3e0 [ 885.817502][T14390] ? __netlink_deliver_tap+0x4dc/0x500 [ 885.817542][T14390] netlink_unicast+0x5a8/0x680 [ 885.817660][T14390] netlink_sendmsg+0x58b/0x6b0 [ 885.817683][T14390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 885.817705][T14390] __sock_sendmsg+0x145/0x180 [ 885.817798][T14390] ____sys_sendmsg+0x31e/0x4e0 [ 885.817834][T14390] ___sys_sendmsg+0x17b/0x1d0 [ 885.817956][T14390] __x64_sys_sendmsg+0xd4/0x160 [ 885.818042][T14390] x64_sys_call+0x2999/0x2fb0 [ 885.818088][T14390] do_syscall_64+0xd2/0x200 [ 885.818107][T14390] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 885.818219][T14390] ? clear_bhb_loop+0x40/0x90 [ 885.818245][T14390] ? clear_bhb_loop+0x40/0x90 [ 885.818267][T14390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.818290][T14390] RIP: 0033:0x7f073febe929 [ 885.818305][T14390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 885.818320][T14390] RSP: 002b:00007f073e527038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 885.818338][T14390] RAX: ffffffffffffffda RBX: 00007f07400e5fa0 RCX: 00007f073febe929 [ 885.818376][T14390] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000a [ 885.818391][T14390] RBP: 00007f073ff40b39 R08: 0000000000000000 R09: 0000000000000000 [ 885.818403][T14390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 885.818479][T14390] R13: 0000000000000000 R14: 00007f07400e5fa0 R15: 00007ffcbac913c8 [ 885.818496][T14390] [ 885.825152][T14394] syz.0.15090: attempt to access beyond end of device [ 885.825152][T14394] loop0: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 885.831165][T14390] memory: usage 307200kB, limit 307200kB, failcnt 973 [ 885.841352][T14394] Buffer I/O error on dev loop0, logical block 150, lost async page write [ 885.844454][T14390] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 885.849789][T14394] Buffer I/O error on dev loop0, logical block 151, lost async page write [ 885.851691][T14390] kmem: usage 307148kB, limit 9007199254740988kB, failcnt 0 [ 886.217429][T14390] Memory cgroup stats for /syz7: [ 886.217865][T14390] cache 0 [ 886.225775][T14390] rss 4096 [ 886.228833][T14390] shmem 0 [ 886.231797][T14390] mapped_file 0 [ 886.235249][T14390] dirty 0 [ 886.238469][T14390] writeback 0 [ 886.241778][T14390] workingset_refault_anon 1396 [ 886.246544][T14390] workingset_refault_file 1068 [ 886.251556][T14390] swap 180224 [ 886.254831][T14390] swapcached 12288 [ 886.258666][T14390] pgpgin 820323 [ 886.262138][T14390] pgpgout 820310 [ 886.265679][T14390] pgfault 1047546 [ 886.269337][T14390] pgmajfault 338 [ 886.272870][T14390] inactive_anon 12288 [ 886.276837][T14390] active_anon 0 [ 886.280330][T14390] inactive_file 40960 [ 886.284309][T14390] active_file 0 [ 886.287895][T14390] unevictable 0 [ 886.291356][T14390] hierarchical_memory_limit 314572800 [ 886.296829][T14390] hierarchical_memsw_limit 9223372036854771712 [ 886.303048][T14390] total_cache 0 [ 886.306504][T14390] total_rss 4096 [ 886.310147][T14390] total_shmem 0 [ 886.313595][T14390] total_mapped_file 0 [ 886.317563][T14390] total_dirty 0 [ 886.321181][T14390] total_writeback 0 [ 886.324985][T14390] total_workingset_refault_anon 1396 [ 886.330266][T14390] total_workingset_refault_file 1068 [ 886.335545][T14390] total_swap 180224 [ 886.339406][T14390] total_swapcached 12288 [ 886.343639][T14390] total_pgpgin 820323 [ 886.347698][T14390] total_pgpgout 820310 [ 886.351847][T14390] total_pgfault 1047546 [ 886.355992][T14390] total_pgmajfault 338 [ 886.360082][T14390] total_inactive_anon 12288 [ 886.364586][T14390] total_active_anon 0 [ 886.368592][T14390] total_inactive_file 40960 [ 886.373128][T14390] total_active_file 0 [ 886.377113][T14390] total_unevictable 0 [ 886.381169][T14390] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.15089,pid=14389,uid=0 [ 886.396031][T14390] Memory cgroup out of memory: Killed process 14389 (syz.7.15089) total-vm:93624kB, anon-rss:940kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 886.441745][T14428] loop0: detected capacity change from 0 to 1024 [ 886.473908][T14431] validate_nla: 19 callbacks suppressed [ 886.473923][T14431] netlink: 'syz.3.15102': attribute type 1 has an invalid length. [ 886.493073][T14433] loop6: detected capacity change from 0 to 512 [ 886.500701][T14428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 886.510076][T14431] 8021q: adding VLAN 0 to HW filter on device bond7 [ 886.525817][T14431] macvlan2: entered promiscuous mode [ 886.531193][T14431] macvlan2: entered allmulticast mode [ 886.537358][T14431] bond7: entered promiscuous mode [ 886.542587][T14431] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 886.550802][T14431] bond7: left promiscuous mode [ 886.569480][T14433] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 886.597488][T14428] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.15101: Allocating blocks 385-513 which overlap fs metadata [ 886.638036][T14433] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.15103: invalid block [ 886.655531][T14442] EXT4-fs (loop0): pa ffff888106e1e000: logic 16, phys. 129, len 24 [ 886.663559][T14442] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 886.675360][T14433] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.15103: invalid indirect mapped block 4294967295 (level 1) [ 886.703893][T14433] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.15103: invalid indirect mapped block 4294967295 (level 1) [ 886.719334][T14433] EXT4-fs (loop6): 2 truncates cleaned up [ 886.725719][T11336] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.736114][T14433] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 886.803653][T14446] loop7: detected capacity change from 0 to 512 [ 886.849924][T14433] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.6.15103: path /244/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 886.880940][T14446] EXT4-fs (loop7): too many log groups per flexible block group [ 886.889430][T14446] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 886.890187][T14450] loop0: detected capacity change from 0 to 128 [ 886.899275][T14446] EXT4-fs (loop7): mount failed [ 886.928254][T14450] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 886.931373][T10979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.950873][T14450] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 887.043306][T11336] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 887.055478][T14453] loop6: detected capacity change from 0 to 128 [ 887.081620][T14453] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 887.153191][T14453] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 887.299647][T10979] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 887.349765][T14462] loop6: detected capacity change from 0 to 128 [ 887.382089][T14455] netlink: 24 bytes leftover after parsing attributes in process `syz.7.15108'. [ 887.413308][T14455] netlink: 'syz.7.15108': attribute type 9 has an invalid length. [ 887.421154][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 887.421168][ T29] audit: type=1326 audit(1752269613.448:49637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.3.15112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03865e929 code=0x7ffc0000 [ 887.421223][ T29] audit: type=1326 audit(1752269613.448:49638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.3.15112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fd03865e929 code=0x7ffc0000 [ 887.421249][ T29] audit: type=1326 audit(1752269613.448:49639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.3.15112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03865e929 code=0x7ffc0000 [ 887.421275][ T29] audit: type=1326 audit(1752269613.448:49640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.3.15112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd03865e929 code=0x7ffc0000 [ 887.427416][T14455] netlink: 'syz.7.15108': attribute type 6 has an invalid length. [ 887.451133][ T29] audit: type=1326 audit(1752269613.448:49641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.3.15112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd03865e963 code=0x7ffc0000 [ 887.474654][T14455] netlink: 'syz.7.15108': attribute type 7 has an invalid length. [ 887.498365][ T29] audit: type=1326 audit(1752269613.448:49642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.3.15112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd03865d3df code=0x7ffc0000 [ 887.521950][T14455] netlink: 'syz.7.15108': attribute type 8 has an invalid length. [ 887.592779][ T29] audit: type=1326 audit(1752269613.448:49643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.3.15112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd03865e9b7 code=0x7ffc0000 [ 887.635744][T14470] netlink: 'syz.6.15113': attribute type 1 has an invalid length. [ 887.677214][T14470] 8021q: adding VLAN 0 to HW filter on device bond10 [ 887.707552][T14479] netlink: 'syz.3.15116': attribute type 1 has an invalid length. [ 887.728577][T14481] macvlan2: entered promiscuous mode [ 887.733939][T14481] macvlan2: entered allmulticast mode [ 887.751613][ T29] audit: type=1326 audit(1752269613.598:49644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.3.15112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd03865d290 code=0x7ffc0000 [ 887.775472][ T29] audit: type=1326 audit(1752269613.598:49645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.3.15112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd03865d58a code=0x7ffc0000 [ 887.776541][T14481] bond10: entered promiscuous mode [ 887.798981][ T29] audit: type=1326 audit(1752269613.598:49646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14466 comm="syz.3.15112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03865e929 code=0x7ffc0000 [ 887.867986][T14481] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 888.052394][T14481] bond10: left promiscuous mode [ 888.086712][T14479] 8021q: adding VLAN 0 to HW filter on device bond8 [ 888.110362][T14489] loop7: detected capacity change from 0 to 512 [ 888.124114][T14487] macvlan2: entered promiscuous mode [ 888.129505][T14487] macvlan2: entered allmulticast mode [ 888.154470][T14487] bond8: entered promiscuous mode [ 888.160253][T14487] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 888.168637][T14487] bond8: left promiscuous mode [ 888.293116][T14482] syz.0.15115 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 888.307329][T14482] CPU: 1 UID: 0 PID: 14482 Comm: syz.0.15115 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(voluntary) [ 888.307427][T14482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 888.307442][T14482] Call Trace: [ 888.307448][T14482] [ 888.307455][T14482] __dump_stack+0x1d/0x30 [ 888.307474][T14482] dump_stack_lvl+0xe8/0x140 [ 888.307573][T14482] dump_stack+0x15/0x1b [ 888.307592][T14482] dump_header+0x81/0x220 [ 888.307622][T14482] oom_kill_process+0x334/0x3f0 [ 888.307657][T14482] out_of_memory+0x979/0xb80 [ 888.307734][T14482] try_charge_memcg+0x5e6/0x9e0 [ 888.307773][T14482] obj_cgroup_charge_pages+0xa6/0x150 [ 888.307813][T14482] __memcg_kmem_charge_page+0x9f/0x170 [ 888.307855][T14482] __alloc_frozen_pages_noprof+0x188/0x360 [ 888.307894][T14482] alloc_pages_mpol+0xb3/0x250 [ 888.307928][T14482] alloc_pages_noprof+0x90/0x130 [ 888.308012][T14482] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 888.308053][T14482] __kvmalloc_node_noprof+0x30f/0x4e0 [ 888.308170][T14482] ? ip_set_alloc+0x1f/0x30 [ 888.308266][T14482] ? ip_set_alloc+0x1f/0x30 [ 888.308293][T14482] ? __kmalloc_cache_noprof+0x189/0x320 [ 888.308328][T14482] ip_set_alloc+0x1f/0x30 [ 888.308360][T14482] hash_netiface_create+0x282/0x740 [ 888.308390][T14482] ? __pfx_hash_netiface_create+0x10/0x10 [ 888.308417][T14482] ip_set_create+0x3c9/0x960 [ 888.308518][T14482] ? __nla_parse+0x40/0x60 [ 888.308609][T14482] nfnetlink_rcv_msg+0x4c6/0x590 [ 888.308666][T14482] ? selinux_capable+0x1f9/0x270 [ 888.308693][T14482] netlink_rcv_skb+0x120/0x220 [ 888.308733][T14482] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 888.308805][T14482] nfnetlink_rcv+0x16b/0x1690 [ 888.308829][T14482] ? __kfree_skb+0x109/0x150 [ 888.308860][T14482] ? nlmon_xmit+0x4f/0x60 [ 888.308884][T14482] ? consume_skb+0x49/0x150 [ 888.308985][T14482] ? nlmon_xmit+0x4f/0x60 [ 888.309009][T14482] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 888.309043][T14482] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 888.309073][T14482] ? __dev_queue_xmit+0x182/0x1fb0 [ 888.309106][T14482] ? ref_tracker_free+0x37d/0x3e0 [ 888.309146][T14482] ? __netlink_deliver_tap+0x4dc/0x500 [ 888.309264][T14482] netlink_unicast+0x5a8/0x680 [ 888.309296][T14482] netlink_sendmsg+0x58b/0x6b0 [ 888.309319][T14482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 888.309383][T14482] __sock_sendmsg+0x145/0x180 [ 888.309407][T14482] ____sys_sendmsg+0x31e/0x4e0 [ 888.309467][T14482] ___sys_sendmsg+0x17b/0x1d0 [ 888.309509][T14482] __x64_sys_sendmsg+0xd4/0x160 [ 888.309622][T14482] x64_sys_call+0x2999/0x2fb0 [ 888.309648][T14482] do_syscall_64+0xd2/0x200 [ 888.309738][T14482] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 888.309764][T14482] ? clear_bhb_loop+0x40/0x90 [ 888.309783][T14482] ? clear_bhb_loop+0x40/0x90 [ 888.309825][T14482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.309847][T14482] RIP: 0033:0x7fb3d4d3e929 [ 888.309865][T14482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 888.309954][T14482] RSP: 002b:00007fb3d33a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 888.309976][T14482] RAX: ffffffffffffffda RBX: 00007fb3d4f65fa0 RCX: 00007fb3d4d3e929 [ 888.310026][T14482] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000009 [ 888.310057][T14482] RBP: 00007fb3d4dc0b39 R08: 0000000000000000 R09: 0000000000000000 [ 888.310070][T14482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 888.310084][T14482] R13: 0000000000000000 R14: 00007fb3d4f65fa0 R15: 00007fff113614e8 [ 888.310106][T14482] [ 888.330020][T14502] loop6: detected capacity change from 0 to 128 [ 888.332812][T14482] memory: usage 307200kB, limit 307200kB, failcnt 1074 [ 888.389745][T14489] EXT4-fs (loop7): too many log groups per flexible block group [ 888.392089][T14482] memory+swap: usage 307572kB, limit 9007199254740988kB, failcnt 0 [ 888.392105][T14482] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 888.392117][T14482] Memory cgroup stats for /syz0: [ 888.407855][T14482] cache 0 [ 888.409346][T14489] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 888.413560][T14482] rss 0 [ 888.413582][T14482] shmem 0 [ 888.413589][T14482] mapped_file 0 [ 888.413597][T14482] dirty 0 [ 888.413604][T14482] writeback 0 [ 888.413612][T14482] workingset_refault_anon 11901 [ 888.413621][T14482] workingset_refault_file 926 [ 888.413631][T14482] swap 380928 [ 888.413694][T14482] swapcached 0 [ 888.428406][T14502] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 888.433264][T14482] pgpgin 1514197 [ 888.433274][T14482] pgpgout 1514197 [ 888.433282][T14482] pgfault 1445925 [ 888.439947][T14502] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 888.443567][T14482] pgmajfault 1933 [ 888.443578][T14482] inactive_anon 0 [ 888.547977][T14489] EXT4-fs (loop7): mount failed [ 888.550492][T14482] active_anon 0 [ 888.550507][T14482] inactive_file 0 [ 888.550515][T14482] active_file 0 [ 888.631926][T14508] 9pnet_fd: Insufficient options for proto=fd [ 888.637433][T14482] unevictable 0 [ 888.637444][T14482] hierarchical_memory_limit 314572800 [ 888.637453][T14482] hierarchical_memsw_limit 9223372036854771712 [ 888.637463][T14482] total_cache 0 [ 888.819566][T14482] total_rss 0 [ 888.822888][T14482] total_shmem 0 [ 888.826339][T14482] total_mapped_file 0 [ 888.830502][T14482] total_dirty 0 [ 888.834055][T14482] total_writeback 0 [ 888.837874][T14482] total_workingset_refault_anon 11901 [ 888.843294][T14482] total_workingset_refault_file 926 [ 888.848623][T14482] total_swap 380928 [ 888.852496][T14482] total_swapcached 0 [ 888.856383][T14482] total_pgpgin 1514197 [ 888.860528][T14482] total_pgpgout 1514197 [ 888.864676][T14482] total_pgfault 1445925 [ 888.868899][T14482] total_pgmajfault 1933 [ 888.873052][T14482] total_inactive_anon 0 [ 888.877269][T14482] total_active_anon 0 [ 888.881330][T14482] total_inactive_file 0 [ 888.885480][T14482] total_active_file 0 [ 888.889482][T14482] total_unevictable 0 [ 888.893514][T14482] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.15115,pid=14480,uid=0 [ 888.908328][T14482] Memory cgroup out of memory: Killed process 14480 (syz.0.15115) total-vm:93624kB, anon-rss:940kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 888.992147][T10979] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 888.997937][T14512] xt_CT: No such helper "pptp" [ 889.021772][T14515] IPv4: Oversized IP packet from 127.202.26.0 [ 889.074204][T14519] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 889.121798][T14524] loop7: detected capacity change from 0 to 512 [ 889.141044][T14524] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.15127: bg 0: block 248: padding at end of block bitmap is not set [ 889.216316][T14524] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.15127: Failed to acquire dquot type 1 [ 889.228331][T14524] EXT4-fs (loop7): 1 truncate cleaned up [ 889.234348][T14524] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 889.247057][T14524] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 889.318288][T14531] loop0: detected capacity change from 0 to 1024 [ 889.341278][T11876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.358988][T14536] syzkaller1: entered promiscuous mode [ 889.359842][T14531] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 889.364473][T14536] syzkaller1: entered allmulticast mode [ 889.387203][T14540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15128'. [ 889.412403][T14527] netlink: 'syz.1.15128': attribute type 9 has an invalid length. [ 889.420315][T14527] netlink: 'syz.1.15128': attribute type 6 has an invalid length. [ 889.428258][T14527] netlink: 'syz.1.15128': attribute type 7 has an invalid length. [ 889.544681][T11336] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.576090][T14554] loop0: detected capacity change from 0 to 128 [ 889.656701][T14556] xt_CT: No such helper "pptp" [ 889.674708][T14559] IPv4: Oversized IP packet from 127.202.26.0 [ 889.721940][T14563] 8021q: adding VLAN 0 to HW filter on device bond9 [ 889.739666][T14562] 8021q: adding VLAN 0 to HW filter on device bond13 [ 889.752720][T14563] macvlan2: entered promiscuous mode [ 889.758155][T14563] macvlan2: entered allmulticast mode [ 889.764694][T14563] bond9: entered promiscuous mode [ 889.770926][T14563] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 889.779246][T14563] bond9: left promiscuous mode [ 889.808819][T14562] macvlan2: entered promiscuous mode [ 889.814133][T14562] macvlan2: entered allmulticast mode [ 889.826398][T14562] bond13: entered promiscuous mode [ 889.862681][T14562] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 889.876124][T14562] bond13: left promiscuous mode [ 889.895677][T14584] syzkaller1: entered promiscuous mode [ 889.901218][T14584] syzkaller1: entered allmulticast mode [ 889.913851][T14576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15142'. [ 889.950409][T14588] loop0: detected capacity change from 0 to 1024 [ 889.969660][T14588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 890.062740][T11336] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 890.076114][T14601] IPv4: Oversized IP packet from 127.202.26.0 [ 890.114833][T14603] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 890.252580][T14616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 890.273702][T14616] macvlan2: entered promiscuous mode [ 890.279212][T14616] macvlan2: entered allmulticast mode [ 890.319189][T14616] bond1: entered promiscuous mode [ 890.339430][T14616] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 890.369158][T14616] bond1: left promiscuous mode [ 890.419208][T14626] syzkaller1: entered promiscuous mode [ 890.424764][T14626] syzkaller1: entered allmulticast mode [ 890.495296][T14620] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15156'. [ 890.505420][T14630] loop6: detected capacity change from 0 to 512 [ 890.545872][T14630] EXT4-fs (loop6): too many log groups per flexible block group [ 890.554246][T14630] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 890.562056][T14633] 8021q: adding VLAN 0 to HW filter on device bond2 [ 890.567328][T14630] EXT4-fs (loop6): mount failed [ 890.602912][T14633] macvlan2: entered promiscuous mode [ 890.608255][T14633] macvlan2: entered allmulticast mode [ 890.614783][T14633] bond2: entered promiscuous mode [ 890.620419][T14633] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 890.645595][T14633] bond2: left promiscuous mode [ 890.669139][T14644] loop6: detected capacity change from 0 to 128 [ 890.687420][T14647] loop7: detected capacity change from 0 to 128 [ 890.697843][T14644] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 890.741965][T14644] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 890.766304][T14647] bio_check_eod: 47 callbacks suppressed [ 890.766319][T14647] syz.7.15163: attempt to access beyond end of device [ 890.766319][T14647] loop7: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 890.840854][T14647] syz.7.15163: attempt to access beyond end of device [ 890.840854][T14647] loop7: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 890.854468][T14647] buffer_io_error: 44 callbacks suppressed [ 890.854479][T14647] Buffer I/O error on dev loop7, logical block 156, lost async page write [ 890.922912][T10979] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 890.937986][T14647] syz.7.15163: attempt to access beyond end of device [ 890.937986][T14647] loop7: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 890.951527][T14647] Buffer I/O error on dev loop7, logical block 157, lost async page write [ 890.968886][T14647] syz.7.15163: attempt to access beyond end of device [ 890.968886][T14647] loop7: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 890.982687][T14647] Buffer I/O error on dev loop7, logical block 158, lost async page write [ 890.991659][T14647] syz.7.15163: attempt to access beyond end of device [ 890.991659][T14647] loop7: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 891.005153][T14647] Buffer I/O error on dev loop7, logical block 159, lost async page write [ 891.014655][T14647] syz.7.15163: attempt to access beyond end of device [ 891.014655][T14647] loop7: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 891.020550][T14663] syzkaller1: entered promiscuous mode [ 891.028195][T14647] Buffer I/O error on dev loop7, logical block 160, lost async page write [ 891.033640][T14663] syzkaller1: entered allmulticast mode [ 891.047085][T14665] loop6: detected capacity change from 0 to 512 [ 891.049681][T14647] syz.7.15163: attempt to access beyond end of device [ 891.049681][T14647] loop7: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 891.060983][T14665] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 891.067451][T14647] Buffer I/O error on dev loop7, logical block 161, lost async page write [ 891.076266][T14647] syz.7.15163: attempt to access beyond end of device [ 891.076266][T14647] loop7: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 891.086844][T14665] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.15169: invalid block [ 891.098115][T14647] Buffer I/O error on dev loop7, logical block 132, lost async page write [ 891.123096][T14647] syz.7.15163: attempt to access beyond end of device [ 891.123096][T14647] loop7: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 891.124550][T14665] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.15169: invalid indirect mapped block 4294967295 (level 1) [ 891.136645][T14647] Buffer I/O error on dev loop7, logical block 133, lost async page write [ 891.160077][T14647] syz.7.15163: attempt to access beyond end of device [ 891.160077][T14647] loop7: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 891.161330][T14665] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.15169: invalid indirect mapped block 4294967295 (level 1) [ 891.173563][T14647] Buffer I/O error on dev loop7, logical block 150, lost async page write [ 891.197100][T14647] Buffer I/O error on dev loop7, logical block 151, lost async page write [ 891.207176][T14665] EXT4-fs (loop6): 2 truncates cleaned up [ 891.214418][T14665] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 891.251712][T14665] EXT4-fs (loop6): shut down requested (2) [ 891.258087][T14665] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 891.267144][T14665] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 891.276020][T14665] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 891.287506][T14672] loop0: detected capacity change from 0 to 512 [ 891.294815][T14665] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 891.303886][T14672] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 891.322380][T14672] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.15173: invalid block [ 891.335947][T14672] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.15173: invalid indirect mapped block 4294967295 (level 1) [ 891.370708][T14672] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.15173: invalid indirect mapped block 4294967295 (level 1) [ 891.377138][T10979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.395293][T14668] netlink: 24 bytes leftover after parsing attributes in process `syz.7.15171'. [ 891.405119][T14672] EXT4-fs (loop0): 2 truncates cleaned up [ 891.446258][T14672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 891.461005][T14679] loop7: detected capacity change from 0 to 1024 [ 891.472536][T14672] EXT4-fs (loop0): shut down requested (2) [ 891.490307][T14672] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 891.502387][T14679] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 891.504199][T14672] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 891.525428][T14672] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 891.528175][T14691] validate_nla: 17 callbacks suppressed [ 891.528189][T14691] netlink: 'syz.6.15179': attribute type 1 has an invalid length. [ 891.554634][T14691] 8021q: adding VLAN 0 to HW filter on device bond11 [ 891.577098][T14691] macvlan2: entered promiscuous mode [ 891.582575][T14691] macvlan2: entered allmulticast mode [ 891.592567][T14691] bond11: entered promiscuous mode [ 891.599872][T14691] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 891.610013][T14691] bond11: left promiscuous mode [ 891.617808][T14693] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 891.647759][T14693] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 891.674549][T11336] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.684091][T11876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.719434][T14700] loop6: detected capacity change from 0 to 128 [ 891.739214][T14700] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 891.759268][T14703] IPv4: Oversized IP packet from 127.202.26.0 [ 891.772792][T14700] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 891.790510][T14705] loop0: detected capacity change from 0 to 512 [ 891.797611][T14705] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 891.812524][T14708] loop7: detected capacity change from 0 to 128 [ 891.849532][T14705] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.15181: corrupted xattr entries [ 891.862254][T14705] EXT4-fs (loop0): Remounting filesystem read-only [ 891.869028][T14705] EXT4-fs (loop0): 1 truncate cleaned up [ 891.875294][T14705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 891.983690][T14713] netlink: 'syz.1.15187': attribute type 1 has an invalid length. [ 892.038618][T14714] loop7: detected capacity change from 0 to 512 [ 892.056096][T10979] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 892.070721][T11336] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.086662][T14714] EXT4-fs (loop7): too many log groups per flexible block group [ 892.095282][T14714] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 892.105433][T14713] 8021q: adding VLAN 0 to HW filter on device bond3 [ 892.108367][T14714] EXT4-fs (loop7): mount failed [ 892.121225][T14716] macvlan2: entered promiscuous mode [ 892.126603][T14716] macvlan2: entered allmulticast mode [ 892.136809][T14716] bond3: entered promiscuous mode [ 892.142327][T14716] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 892.151223][T14716] bond3: left promiscuous mode [ 892.176405][T14727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15190'. [ 892.287251][T14732] loop7: detected capacity change from 0 to 1024 [ 892.338389][T14741] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 892.338919][T14732] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 892.372708][T14746] IPv4: Oversized IP packet from 127.202.26.0 [ 892.379347][T14748] loop0: detected capacity change from 0 to 128 [ 892.409318][T14748] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 892.463845][T14748] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 892.521664][T11876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.593173][T14762] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 892.610179][T14765] 9pnet_fd: Insufficient options for proto=fd [ 892.630100][T14758] loop7: detected capacity change from 0 to 512 [ 892.657222][T14767] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15206'. [ 892.673044][T11336] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 892.675801][T14758] EXT4-fs (loop7): too many log groups per flexible block group [ 892.687890][T14769] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 892.690439][T14758] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 892.706457][T14758] EXT4-fs (loop7): mount failed [ 892.715724][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 892.715735][ T29] audit: type=1326 audit(1752269618.748:49809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14771 comm="syz.3.15208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03865e929 code=0x7ffc0000 [ 892.745621][ T29] audit: type=1326 audit(1752269618.748:49810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14771 comm="syz.3.15208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03865e929 code=0x7ffc0000 [ 892.769747][ T29] audit: type=1326 audit(1752269618.748:49811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14771 comm="syz.3.15208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd03865d290 code=0x7ffc0000 [ 892.793500][ T29] audit: type=1326 audit(1752269618.748:49812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14771 comm="syz.3.15208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd038660157 code=0x7ffc0000 [ 892.817397][ T29] audit: type=1326 audit(1752269618.748:49813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14771 comm="syz.3.15208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd03865e929 code=0x7ffc0000 [ 892.841001][ T29] audit: type=1326 audit(1752269618.748:49814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14771 comm="syz.3.15208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd038660157 code=0x7ffc0000 [ 892.865366][ T29] audit: type=1326 audit(1752269618.748:49815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14771 comm="syz.3.15208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd03865d58a code=0x7ffc0000 [ 892.888912][ T29] audit: type=1326 audit(1752269618.748:49816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14771 comm="syz.3.15208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03865e929 code=0x7ffc0000 [ 892.912768][ T29] audit: type=1326 audit(1752269618.748:49817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14771 comm="syz.3.15208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03865e929 code=0x7ffc0000 [ 892.954598][T14786] IPv4: Oversized IP packet from 127.202.26.0 [ 892.977572][T14788] netlink: 'syz.3.15212': attribute type 1 has an invalid length. [ 892.993447][T14792] loop6: detected capacity change from 0 to 512 [ 893.000412][T14792] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 893.012037][T14788] 8021q: adding VLAN 0 to HW filter on device bond10 [ 893.039016][T14788] macvlan2: entered promiscuous mode [ 893.042347][T14800] netlink: 'syz.1.15218': attribute type 1 has an invalid length. [ 893.044304][T14788] macvlan2: entered allmulticast mode [ 893.064963][T14788] bond10: entered promiscuous mode [ 893.070566][T14788] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 893.080276][T14802] loop7: detected capacity change from 0 to 128 [ 893.080841][T14792] EXT4-fs error (device loop6): xattr_find_entry:333: inode #15: comm syz.6.15215: corrupted xattr entries [ 893.088880][T14802] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 893.099185][T14792] EXT4-fs (loop6): Remounting filesystem read-only [ 893.116578][T14792] EXT4-fs (loop6): 1 truncate cleaned up [ 893.123438][T14792] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 893.136830][T14788] bond10: left promiscuous mode [ 893.142312][T14802] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 893.174309][T14800] 8021q: adding VLAN 0 to HW filter on device bond4 [ 893.228083][T14805] macvlan2: entered promiscuous mode [ 893.233393][T14805] macvlan2: entered allmulticast mode [ 893.263238][T14805] bond4: entered promiscuous mode [ 893.277058][T14805] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 893.287938][T14815] netlink: 'syz.3.15221': attribute type 1 has an invalid length. [ 893.296752][T11876] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 893.306098][T14805] bond4: left promiscuous mode [ 893.336453][ T29] audit: type=1326 audit(1752269619.368:49818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14816 comm="syz.7.15222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073febe929 code=0x7ffc0000 [ 893.364608][T14815] 8021q: adding VLAN 0 to HW filter on device bond11 [ 893.391146][T14819] macvlan2: entered promiscuous mode [ 893.396469][T14819] macvlan2: entered allmulticast mode [ 893.403248][T14819] bond11: entered promiscuous mode [ 893.408740][T14819] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 893.427506][T14819] bond11: left promiscuous mode [ 893.464571][T10979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.520099][T14836] IPv4: Oversized IP packet from 127.202.26.0 [ 893.573462][T14839] loop7: detected capacity change from 0 to 1024 [ 893.618709][T14843] loop6: detected capacity change from 0 to 512 [ 893.631635][T14843] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 893.641624][T14839] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 893.668262][T14843] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.15231: invalid block [ 893.684800][T14843] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.15231: invalid indirect mapped block 4294967295 (level 1) [ 893.700038][T14843] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.15231: invalid indirect mapped block 4294967295 (level 1) [ 893.714447][T14829] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.15225: Allocating blocks 385-513 which overlap fs metadata [ 893.716296][T14843] EXT4-fs (loop6): 2 truncates cleaned up [ 893.737363][T14843] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 893.744202][T14829] EXT4-fs (loop7): pa ffff888106e77cb0: logic 16, phys. 129, len 24 [ 893.758156][T14829] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 893.779968][T14843] EXT4-fs (loop6): shut down requested (2) [ 893.811874][T10979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.833723][T11876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.850132][T14859] netlink: 'syz.6.15236': attribute type 1 has an invalid length. [ 893.864913][T14859] 8021q: adding VLAN 0 to HW filter on device bond12 [ 893.877336][T14859] macvlan2: entered promiscuous mode [ 893.882670][T14859] macvlan2: entered allmulticast mode [ 893.900150][T14859] bond12: entered promiscuous mode [ 893.905452][T14859] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 893.916713][T14859] bond12: left promiscuous mode [ 893.991856][T14867] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 894.031787][T14876] loop6: detected capacity change from 0 to 1024 [ 894.033018][T14880] netlink: 'syz.0.15241': attribute type 1 has an invalid length. [ 894.051492][T14876] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 894.066928][T14880] 8021q: adding VLAN 0 to HW filter on device bond14 [ 894.096293][T14880] macvlan2: entered promiscuous mode [ 894.101688][T14880] macvlan2: entered allmulticast mode [ 894.111501][T14880] bond14: entered promiscuous mode [ 894.116871][T14880] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 894.125494][T14880] bond14: left promiscuous mode [ 894.141430][T14886] loop7: detected capacity change from 0 to 512 [ 894.149232][T24687] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.179874][T10979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.190778][T14886] EXT4-fs (loop7): too many log groups per flexible block group [ 894.199227][T14886] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 894.207642][T14886] EXT4-fs (loop7): mount failed [ 894.230579][T24687] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.234949][T14894] netlink: 'syz.6.15243': attribute type 1 has an invalid length. [ 894.258300][T14856] chnl_net:caif_netlink_parms(): no params data found [ 894.282418][T14894] 8021q: adding VLAN 0 to HW filter on device bond13 [ 894.296084][T14898] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15246'. [ 894.338362][T14902] macvlan2: entered promiscuous mode [ 894.343694][T14902] macvlan2: entered allmulticast mode [ 894.377015][T14902] bond13: entered promiscuous mode [ 894.391697][T14902] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 894.442937][T14902] bond13: left promiscuous mode [ 894.462632][T24687] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.541753][T24687] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.624386][T14856] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.631676][T14856] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.657023][T14856] bridge_slave_0: entered allmulticast mode [ 894.680400][T14856] bridge_slave_0: entered promiscuous mode [ 894.700230][T14856] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.707356][T14856] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.732587][T14856] bridge_slave_1: entered allmulticast mode [ 894.748955][T14856] bridge_slave_1: entered promiscuous mode [ 894.826230][T24687] bridge_slave_1: left allmulticast mode [ 894.831934][T24687] bridge_slave_1: left promiscuous mode [ 894.837604][T24687] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.864051][T24687] bridge_slave_0: left allmulticast mode [ 894.869783][T24687] bridge_slave_0: left promiscuous mode [ 894.875445][T24687] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.011296][T24687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 895.021493][T24687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 895.031555][T24687] bond0 (unregistering): Released all slaves [ 895.040981][T24687] bond1 (unregistering): Released all slaves [ 895.050193][T24687] bond2 (unregistering): Released all slaves [ 895.058830][T24687] bond3 (unregistering): Released all slaves [ 895.067618][T24687] bond4 (unregistering): Released all slaves [ 895.076584][T24687] bond5 (unregistering): Released all slaves [ 895.085106][T24687] bond6 (unregistering): Released all slaves [ 895.093901][T24687] bond7 (unregistering): Released all slaves [ 895.102592][T24687] bond8 (unregistering): Released all slaves [ 895.111790][T24687] bond9 (unregistering): Released all slaves [ 895.120643][T24687] bond10 (unregistering): Released all slaves [ 895.129005][T24687] bond11 (unregistering): Released all slaves [ 895.139117][T14856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.152470][T14856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 895.175851][T14943] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15258'. [ 895.209078][T14856] team0: Port device team_slave_0 added [ 895.217143][T24687] tipc: Disabling bearer [ 895.222291][T24687] tipc: Left network mode [ 895.228576][T14856] team0: Port device team_slave_1 added [ 895.252083][T14938] loop0: detected capacity change from 0 to 512 [ 895.293311][T14951] 9pnet_fd: Insufficient options for proto=fd [ 895.303870][T14856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 895.310952][T14856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.337111][T14856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.356802][T14938] EXT4-fs (loop0): too many log groups per flexible block group [ 895.370533][T14938] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 895.378389][T14938] EXT4-fs (loop0): mount failed [ 895.397712][T24687] hsr_slave_0: left promiscuous mode [ 895.409089][T24687] hsr_slave_1: left promiscuous mode [ 895.414815][T24687] batman_adv: batadv0: Removing interface: team0 [ 895.433939][T24687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 895.441510][T24687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.471691][T24687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 895.479277][T24687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 895.509916][T24687] veth0_macvtap: left promiscuous mode [ 895.557270][T24687] veth1_vlan: left promiscuous mode [ 895.567450][T24687] veth0_vlan: left promiscuous mode [ 895.607308][T14955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15261'. [ 895.626323][T14955] netlink: 'syz.1.15261': attribute type 9 has an invalid length. [ 895.634339][T14955] netlink: 'syz.1.15261': attribute type 6 has an invalid length. [ 895.670028][T24687] team0 (unregistering): Port device team_slave_1 removed [ 895.687737][T24687] team0 (unregistering): Port device team_slave_0 removed [ 895.748690][T14856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.755643][T14856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.781725][T14856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.799354][T14968] syzkaller1: entered promiscuous mode [ 895.804833][T14968] syzkaller1: entered allmulticast mode [ 895.837545][T14856] hsr_slave_0: entered promiscuous mode [ 895.850181][T14856] hsr_slave_1: entered promiscuous mode [ 896.000489][T14989] 9pnet_fd: Insufficient options for proto=fd [ 896.021782][T14983] loop7: detected capacity change from 0 to 512 [ 896.080900][T14983] EXT4-fs (loop7): too many log groups per flexible block group [ 896.089203][T14983] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 896.104636][T14983] EXT4-fs (loop7): mount failed [ 896.175111][T15001] loop0: detected capacity change from 0 to 1024 [ 896.251296][T15001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 896.295905][T15006] loop7: detected capacity change from 0 to 512 [ 896.316211][T14856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 896.329904][T15008] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15277'. [ 896.331284][T14856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 896.350543][T14856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 896.366751][T15010] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 896.378932][T14856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 896.388654][T15006] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 896.403010][T14988] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.15273: Allocating blocks 385-513 which overlap fs metadata [ 896.416939][T15006] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.15276: invalid block [ 896.419609][T14988] EXT4-fs (loop0): pa ffff888106e1e0e0: logic 16, phys. 129, len 24 [ 896.436978][T14988] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 896.439469][T15022] 8021q: adding VLAN 0 to HW filter on device bond5 [ 896.455880][T15006] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.15276: invalid indirect mapped block 4294967295 (level 1) [ 896.471114][T15006] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.15276: invalid indirect mapped block 4294967295 (level 1) [ 896.488129][T15006] EXT4-fs (loop7): 2 truncates cleaned up [ 896.495568][T15006] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 896.519834][T14856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.530792][T14856] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.541427][T15027] loop6: detected capacity change from 0 to 128 [ 896.547769][T15022] macvlan2: entered promiscuous mode [ 896.553139][T15022] macvlan2: entered allmulticast mode [ 896.555510][T15027] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 896.562607][T15006] EXT4-fs error (device loop7): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.7.15276: path /156/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 896.573279][T15027] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 896.594039][T15022] bond5: entered promiscuous mode [ 896.609619][T11336] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.619737][T15022] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 896.655461][T15022] bond5: left promiscuous mode [ 896.661844][T11876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.695422][T10979] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 896.710532][T24691] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.717638][T24691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.731524][T24686] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.738604][T24686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.832391][T15053] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 896.840863][T15048] loop0: detected capacity change from 0 to 1024 [ 896.852192][T14856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.869291][T15048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 896.875732][T15060] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15290'. [ 896.909857][T15042] loop7: detected capacity change from 0 to 512 [ 896.961630][T15042] EXT4-fs (loop7): too many log groups per flexible block group [ 896.971320][T15042] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 896.985458][T15042] EXT4-fs (loop7): mount failed [ 897.008006][T14856] veth0_vlan: entered promiscuous mode [ 897.016041][T14856] veth1_vlan: entered promiscuous mode [ 897.024888][T11336] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.028297][T14856] veth0_macvtap: entered promiscuous mode [ 897.041310][T14856] veth1_macvtap: entered promiscuous mode [ 897.051161][T14856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 897.073079][T15075] loop7: detected capacity change from 0 to 128 [ 897.080422][T14856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 897.105640][T14856] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.114497][T14856] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.123334][T14856] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.132105][T14856] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.145172][T15075] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 897.235074][T15075] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 897.352571][T11876] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 897.428372][T15091] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 897.460373][T15096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15301'. [ 897.507617][T15100] loop7: detected capacity change from 0 to 1024 [ 897.528452][T15104] IPv4: Oversized IP packet from 127.202.26.0 [ 897.545507][T15100] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 897.597102][T15113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15297'. [ 897.599053][T15111] validate_nla: 3 callbacks suppressed [ 897.599066][T15111] netlink: 'syz.0.15305': attribute type 1 has an invalid length. [ 897.633343][T15089] netlink: 'syz.3.15297': attribute type 9 has an invalid length. [ 897.640086][T15111] 8021q: adding VLAN 0 to HW filter on device bond15 [ 897.641216][T15089] netlink: 'syz.3.15297': attribute type 6 has an invalid length. [ 897.656060][T15089] netlink: 'syz.3.15297': attribute type 7 has an invalid length. [ 897.663417][T15111] macvlan2: entered promiscuous mode [ 897.663895][T15089] netlink: 'syz.3.15297': attribute type 8 has an invalid length. [ 897.669205][T15111] macvlan2: entered allmulticast mode [ 897.697411][T11876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.732506][T15118] netlink: 'syz.1.15307': attribute type 1 has an invalid length. [ 897.747952][T15111] bond15: entered promiscuous mode [ 897.761567][T15111] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 897.781316][T15111] bond15: left promiscuous mode [ 897.788976][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 897.788989][ T29] audit: type=1326 audit(1752269623.828:49869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15122 comm="syz.7.15308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073febe929 code=0x7ffc0000 [ 897.827697][ T29] audit: type=1326 audit(1752269623.828:49870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15122 comm="syz.7.15308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073febe929 code=0x7ffc0000 [ 897.851449][ T29] audit: type=1326 audit(1752269623.858:49871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15122 comm="syz.7.15308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f073febe929 code=0x7ffc0000 [ 897.875201][ T29] audit: type=1326 audit(1752269623.858:49872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15122 comm="syz.7.15308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073febe929 code=0x7ffc0000 [ 897.898924][ T29] audit: type=1326 audit(1752269623.858:49873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15122 comm="syz.7.15308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073febe929 code=0x7ffc0000 [ 897.945851][T15118] 8021q: adding VLAN 0 to HW filter on device bond6 [ 897.965452][T15124] macvlan2: entered promiscuous mode [ 897.970839][T15124] macvlan2: entered allmulticast mode [ 897.997760][ T29] audit: type=1326 audit(1752269623.978:49874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15128 comm="syz.7.15310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073febe929 code=0x7ffc0000 [ 898.021455][ T29] audit: type=1326 audit(1752269623.978:49875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15128 comm="syz.7.15310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f073febe929 code=0x7ffc0000 [ 898.045345][ T29] audit: type=1326 audit(1752269623.978:49876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15128 comm="syz.7.15310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073febe929 code=0x7ffc0000 [ 898.069017][ T29] audit: type=1326 audit(1752269623.978:49877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15128 comm="syz.7.15310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073febe929 code=0x7ffc0000 [ 898.089525][T15124] bond6: entered promiscuous mode [ 898.092998][ T29] audit: type=1326 audit(1752269623.978:49878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15128 comm="syz.7.15310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f073febe929 code=0x7ffc0000 [ 898.103639][T15073] syz.6.15291 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 898.135807][T15073] CPU: 0 UID: 0 PID: 15073 Comm: syz.6.15291 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(voluntary) [ 898.135834][T15073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 898.135869][T15073] Call Trace: [ 898.135876][T15073] [ 898.135886][T15073] __dump_stack+0x1d/0x30 [ 898.135909][T15073] dump_stack_lvl+0xe8/0x140 [ 898.135932][T15073] dump_stack+0x15/0x1b [ 898.135951][T15073] dump_header+0x81/0x220 [ 898.135979][T15073] oom_kill_process+0x334/0x3f0 [ 898.136053][T15073] out_of_memory+0x979/0xb80 [ 898.136085][T15073] try_charge_memcg+0x5e6/0x9e0 [ 898.136126][T15073] obj_cgroup_charge_pages+0xa6/0x150 [ 898.136222][T15073] __memcg_kmem_charge_page+0x9f/0x170 [ 898.136273][T15073] __alloc_frozen_pages_noprof+0x188/0x360 [ 898.136383][T15073] alloc_pages_mpol+0xb3/0x250 [ 898.136416][T15073] alloc_pages_noprof+0x90/0x130 [ 898.136448][T15073] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 898.136543][T15073] __kvmalloc_node_noprof+0x30f/0x4e0 [ 898.136573][T15073] ? ip_set_alloc+0x1f/0x30 [ 898.136656][T15073] ? ip_set_alloc+0x1f/0x30 [ 898.136684][T15073] ? __kmalloc_cache_noprof+0x189/0x320 [ 898.136708][T15073] ip_set_alloc+0x1f/0x30 [ 898.136732][T15073] hash_netiface_create+0x282/0x740 [ 898.136810][T15073] ? __pfx_hash_netiface_create+0x10/0x10 [ 898.136842][T15073] ip_set_create+0x3c9/0x960 [ 898.136906][T15073] ? __nla_parse+0x40/0x60 [ 898.136943][T15073] nfnetlink_rcv_msg+0x4c6/0x590 [ 898.137061][T15073] ? selinux_capable+0x1f9/0x270 [ 898.137094][T15073] netlink_rcv_skb+0x120/0x220 [ 898.137146][T15073] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 898.137203][T15073] nfnetlink_rcv+0x16b/0x1690 [ 898.137229][T15073] ? __kfree_skb+0x109/0x150 [ 898.137322][T15073] ? nlmon_xmit+0x4f/0x60 [ 898.137412][T15073] ? consume_skb+0x49/0x150 [ 898.137442][T15073] ? nlmon_xmit+0x4f/0x60 [ 898.137526][T15073] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 898.137562][T15073] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 898.137628][T15073] ? __dev_queue_xmit+0x182/0x1fb0 [ 898.137666][T15073] ? ref_tracker_free+0x37d/0x3e0 [ 898.137713][T15073] ? __netlink_deliver_tap+0x4dc/0x500 [ 898.137793][T15073] netlink_unicast+0x5a8/0x680 [ 898.137820][T15073] netlink_sendmsg+0x58b/0x6b0 [ 898.137953][T15073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 898.137970][T15073] __sock_sendmsg+0x145/0x180 [ 898.137993][T15073] ____sys_sendmsg+0x31e/0x4e0 [ 898.138032][T15073] ___sys_sendmsg+0x17b/0x1d0 [ 898.138083][T15073] __x64_sys_sendmsg+0xd4/0x160 [ 898.138216][T15073] x64_sys_call+0x2999/0x2fb0 [ 898.138235][T15073] do_syscall_64+0xd2/0x200 [ 898.138251][T15073] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 898.138336][T15073] ? clear_bhb_loop+0x40/0x90 [ 898.138359][T15073] ? clear_bhb_loop+0x40/0x90 [ 898.138417][T15073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.138438][T15073] RIP: 0033:0x7f0ff293e929 [ 898.138455][T15073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 898.138516][T15073] RSP: 002b:00007f0ff0fa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 898.138535][T15073] RAX: ffffffffffffffda RBX: 00007f0ff2b65fa0 RCX: 00007f0ff293e929 [ 898.138546][T15073] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000a [ 898.138558][T15073] RBP: 00007f0ff29c0b39 R08: 0000000000000000 R09: 0000000000000000 [ 898.138616][T15073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 898.138630][T15073] R13: 0000000000000000 R14: 00007f0ff2b65fa0 R15: 00007ffcb57fd0f8 [ 898.138651][T15073] [ 898.483274][T15073] memory: usage 307200kB, limit 307200kB, failcnt 210 [ 898.488351][T15124] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 898.490206][T15073] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 898.504925][T15073] kmem: usage 307144kB, limit 9007199254740988kB, failcnt 0 [ 898.512251][T15073] Memory cgroup stats for /syz6: [ 898.534992][T15124] bond6: left promiscuous mode [ 898.545050][T15073] cache 0 [ 898.548071][T15073] rss 4096 [ 898.551094][T15073] shmem 0 [ 898.554080][T15073] mapped_file 0 [ 898.557564][T15073] dirty 0 [ 898.560608][T15073] writeback 0 [ 898.563893][T15073] workingset_refault_anon 7545 [ 898.568692][T15073] workingset_refault_file 0 [ 898.573295][T15073] swap 196608 [ 898.576580][T15073] swapcached 8192 [ 898.580230][T15073] pgpgin 978890 [ 898.583697][T15073] pgpgout 978876 [ 898.587255][T15073] pgfault 1190391 [ 898.590927][T15073] pgmajfault 1214 [ 898.594557][T15073] inactive_anon 8192 [ 898.598474][T15073] active_anon 0 [ 898.601932][T15073] inactive_file 49152 [ 898.605971][T15073] active_file 0 [ 898.609521][T15073] unevictable 0 [ 898.612979][T15073] hierarchical_memory_limit 314572800 [ 898.618417][T15073] hierarchical_memsw_limit 9223372036854771712 [ 898.624613][T15073] total_cache 0 [ 898.628097][T15073] total_rss 4096 [ 898.631639][T15073] total_shmem 0 [ 898.635120][T15073] total_mapped_file 0 [ 898.636456][T15140] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 898.639148][T15073] total_dirty 0 [ 898.639157][T15073] total_writeback 0 [ 898.639164][T15073] total_workingset_refault_anon 7545 [ 898.639173][T15073] total_workingset_refault_file 0 [ 898.639182][T15073] total_swap 196608 [ 898.668338][T15073] total_swapcached 8192 [ 898.672487][T15073] total_pgpgin 978890 [ 898.676473][T15073] total_pgpgout 978876 [ 898.680570][T15073] total_pgfault 1190391 [ 898.684728][T15073] total_pgmajfault 1214 [ 898.688927][T15073] total_inactive_anon 8192 [ 898.693391][T15073] total_active_anon 0 [ 898.697376][T15073] total_inactive_file 49152 [ 898.701898][T15073] total_active_file 0 [ 898.705884][T15073] total_unevictable 0 [ 898.709935][T15073] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.15291,pid=15072,uid=0 [ 898.724722][T15073] Memory cgroup out of memory: Killed process 15072 (syz.6.15291) total-vm:93624kB, anon-rss:1068kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 898.749504][T15148] loop7: detected capacity change from 0 to 128 [ 898.761529][T15147] macvlan2: entered promiscuous mode [ 898.766867][T15147] macvlan2: entered allmulticast mode [ 898.772699][T15147] bridge0: port 3(macvlan2) entered blocking state [ 898.779294][T15147] bridge0: port 3(macvlan2) entered disabled state [ 898.798712][T15144] IPv4: Oversized IP packet from 127.202.26.0 [ 898.816199][T15148] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 898.852805][T15148] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 898.863429][T15156] loop0: detected capacity change from 0 to 1024 [ 898.919430][T15156] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 898.980270][T15168] loop6: detected capacity change from 0 to 512 [ 898.996508][T15168] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 899.021921][T11336] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.048859][T11876] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 899.066958][T15168] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.15323: invalid block [ 899.088232][T15171] netlink: 'syz.0.15324': attribute type 1 has an invalid length. [ 899.112411][T15171] 8021q: adding VLAN 0 to HW filter on device bond16 [ 899.126922][T15168] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.15323: invalid indirect mapped block 4294967295 (level 1) [ 899.141985][T15176] loop7: detected capacity change from 0 to 128 [ 899.157912][T15178] macvlan2: entered promiscuous mode [ 899.163237][T15178] macvlan2: entered allmulticast mode [ 899.178841][T15176] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 899.199089][T15178] bond16: entered promiscuous mode [ 899.201241][T15168] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.15323: invalid indirect mapped block 4294967295 (level 1) [ 899.205684][T15178] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 899.228164][T15176] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 899.239777][T15178] bond16: left promiscuous mode [ 899.247929][T15168] EXT4-fs (loop6): 2 truncates cleaned up [ 899.248807][T15184] xt_CT: No such helper "pptp" [ 899.254009][T15168] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 899.322576][T15187] IPv4: Oversized IP packet from 127.202.26.0 [ 899.356768][T11876] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 899.362211][T15168] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.6.15323: path /292/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 899.419439][T10979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.440145][T15194] loop0: detected capacity change from 0 to 512 [ 899.457997][T15194] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 899.472750][T15197] 8021q: adding VLAN 0 to HW filter on device bond8 [ 899.484452][T15197] macvlan2: entered promiscuous mode [ 899.489822][T15197] macvlan2: entered allmulticast mode [ 899.496149][T15197] bond8: entered promiscuous mode [ 899.500898][T15201] loop6: detected capacity change from 0 to 1024 [ 899.501383][T15197] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 899.510680][T15194] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.15336: corrupted xattr entries [ 899.535391][T15194] EXT4-fs (loop0): Remounting filesystem read-only [ 899.546438][T15194] EXT4-fs (loop0): 1 truncate cleaned up [ 899.547419][T15197] bond8: left promiscuous mode [ 899.655243][T15215] syzkaller1: entered promiscuous mode [ 899.660941][T15215] syzkaller1: entered allmulticast mode [ 899.690961][T15219] netlink: 'syz.6.15342': attribute type 2 has an invalid length. [ 899.699654][T15219] netlink: 'syz.6.15342': attribute type 9 has an invalid length. [ 899.709442][T15219] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.15342'. [ 899.737742][T15223] IPv4: Oversized IP packet from 127.202.26.0 [ 899.737865][T15222] IPv4: Oversized IP packet from 127.202.26.0 [ 899.803952][T15219] loop6: detected capacity change from 0 to 512 [ 899.812165][T15225] netlink: 'syz.0.15343': attribute type 1 has an invalid length. [ 899.833381][T15225] 8021q: adding VLAN 0 to HW filter on device bond17 [ 899.851970][T15219] EXT4-fs (loop6): too many log groups per flexible block group [ 899.862338][T15219] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 899.898366][T15239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15349'. [ 899.911668][T15219] EXT4-fs (loop6): mount failed [ 899.981684][T15251] loop0: detected capacity change from 0 to 128 [ 900.003328][T15253] loop6: detected capacity change from 0 to 512 [ 900.010828][T15253] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 900.022636][T15253] EXT4-fs error (device loop6): xattr_find_entry:333: inode #15: comm syz.6.15354: corrupted xattr entries [ 900.035474][T15253] EXT4-fs (loop6): Remounting filesystem read-only [ 900.042101][T15253] EXT4-fs (loop6): 1 truncate cleaned up [ 900.049882][T15251] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 900.140966][T15265] IPv4: Oversized IP packet from 127.202.26.0 [ 900.174814][T15268] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 900.177155][T15271] 8021q: adding VLAN 0 to HW filter on device bond14 [ 900.189341][T15272] loop0: detected capacity change from 0 to 128 [ 900.213301][T15272] bio_check_eod: 28 callbacks suppressed [ 900.213312][T15272] syz.0.15358: attempt to access beyond end of device [ 900.213312][T15272] loop0: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 900.227360][T15275] 8021q: adding VLAN 0 to HW filter on device bond9 [ 900.240877][T15272] syz.0.15358: attempt to access beyond end of device [ 900.240877][T15272] loop0: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 900.249800][T15275] macvlan2: entered promiscuous mode [ 900.254397][T15272] buffer_io_error: 26 callbacks suppressed [ 900.254410][T15272] Buffer I/O error on dev loop0, logical block 156, lost async page write [ 900.259643][T15275] macvlan2: entered allmulticast mode [ 900.260584][T15275] bond9: entered promiscuous mode [ 900.285396][T15275] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 900.293946][T15272] syz.0.15358: attempt to access beyond end of device [ 900.293946][T15272] loop0: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 900.307470][T15272] Buffer I/O error on dev loop0, logical block 157, lost async page write [ 900.316309][T15275] bond9: left promiscuous mode [ 900.323750][T15272] syz.0.15358: attempt to access beyond end of device [ 900.323750][T15272] loop0: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 900.337369][T15272] Buffer I/O error on dev loop0, logical block 158, lost async page write [ 900.346429][T15272] syz.0.15358: attempt to access beyond end of device [ 900.346429][T15272] loop0: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 900.360043][T15272] Buffer I/O error on dev loop0, logical block 159, lost async page write [ 900.373085][T15272] syz.0.15358: attempt to access beyond end of device [ 900.373085][T15272] loop0: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 900.386598][T15272] Buffer I/O error on dev loop0, logical block 160, lost async page write [ 900.395823][T15272] syz.0.15358: attempt to access beyond end of device [ 900.395823][T15272] loop0: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 900.409338][T15272] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 900.427599][T15272] syz.0.15358: attempt to access beyond end of device [ 900.427599][T15272] loop0: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 900.441236][T15272] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 900.494664][T15272] syz.0.15358: attempt to access beyond end of device [ 900.494664][T15272] loop0: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 900.508380][T15272] Buffer I/O error on dev loop0, logical block 133, lost async page write [ 900.518434][T15272] syz.0.15358: attempt to access beyond end of device [ 900.518434][T15272] loop0: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 900.532080][T15272] Buffer I/O error on dev loop0, logical block 150, lost async page write [ 900.542449][T15272] Buffer I/O error on dev loop0, logical block 151, lost async page write [ 900.662289][T15306] IPv4: Oversized IP packet from 127.202.26.0 [ 900.685565][T15307] 8021q: adding VLAN 0 to HW filter on device bond18 [ 900.754874][T15307] macvlan2: entered promiscuous mode [ 900.760329][T15307] macvlan2: entered allmulticast mode [ 900.766921][T15310] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 900.784151][T15307] bond18: entered promiscuous mode [ 900.808019][T15307] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 900.828542][T15307] bond18: left promiscuous mode [ 900.899560][T15325] 8021q: adding VLAN 0 to HW filter on device bond10 [ 900.942829][T15325] macvlan2: entered promiscuous mode [ 900.948302][T15325] macvlan2: entered allmulticast mode [ 900.977533][T15325] bond10: entered promiscuous mode [ 900.988825][T15325] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 901.040241][T15342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15386'. [ 901.057933][T15325] bond10: left promiscuous mode [ 901.098112][T15345] IPv4: Oversized IP packet from 127.202.26.0 [ 901.112787][T15346] loop0: detected capacity change from 0 to 1024 [ 901.145002][T15346] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.15385: Allocating blocks 385-513 which overlap fs metadata [ 901.176335][T15354] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 901.215247][T15336] EXT4-fs (loop0): pa ffff888106e1e000: logic 16, phys. 129, len 24 [ 901.223316][T15336] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 901.300846][T15360] 8021q: adding VLAN 0 to HW filter on device bond11 [ 901.351687][T15369] 8021q: adding VLAN 0 to HW filter on device bond12 [ 901.385521][T15369] macvlan2: entered promiscuous mode [ 901.390981][T15369] macvlan2: entered allmulticast mode [ 901.427272][T15369] bond12: entered promiscuous mode [ 901.436498][T15377] IPv4: Oversized IP packet from 127.202.26.0 [ 901.462502][T15369] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 901.499740][T15369] bond12: left promiscuous mode [ 901.659042][T15389] loop7: detected capacity change from 0 to 512 [ 901.672526][T15389] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 901.673582][T15385] loop0: detected capacity change from 0 to 512 [ 901.690803][T15389] EXT4-fs error (device loop7): xattr_find_entry:333: inode #15: comm syz.7.15401: corrupted xattr entries [ 901.716513][T15389] EXT4-fs (loop7): Remounting filesystem read-only [ 901.732369][T15389] EXT4-fs (loop7): 1 truncate cleaned up [ 901.733542][T15385] EXT4-fs (loop0): too many log groups per flexible block group [ 901.750885][T15385] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 901.761218][T15395] syzkaller1: entered promiscuous mode [ 901.766737][T15395] syzkaller1: entered allmulticast mode [ 901.775257][T15385] EXT4-fs (loop0): mount failed [ 901.959259][T15411] IPv4: Oversized IP packet from 127.202.26.0 [ 901.963175][T15416] 8021q: adding VLAN 0 to HW filter on device bond19 [ 901.994883][T15416] macvlan2: entered promiscuous mode [ 901.998970][T15420] loop6: detected capacity change from 0 to 128 [ 902.000227][T15416] macvlan2: entered allmulticast mode [ 902.013820][T15416] bond19: entered promiscuous mode [ 902.019125][T15416] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 902.031221][T15416] bond19: left promiscuous mode [ 902.107268][T15429] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.15415'. [ 902.161826][T15433] 9pnet_fd: Insufficient options for proto=fd [ 902.236561][T15429] loop7: detected capacity change from 0 to 512 [ 902.268569][T15437] loop0: detected capacity change from 0 to 512 [ 902.278946][T15443] syzkaller1: entered promiscuous mode [ 902.284456][T15443] syzkaller1: entered allmulticast mode [ 902.291897][T15429] EXT4-fs (loop7): too many log groups per flexible block group [ 902.300285][T15429] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 902.314702][T15437] EXT4-fs (loop0): too many log groups per flexible block group [ 902.317274][T15429] EXT4-fs (loop7): mount failed [ 902.322709][T15437] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 902.341379][T15447] loop6: detected capacity change from 0 to 512 [ 902.355606][T15437] EXT4-fs (loop0): mount failed [ 902.368105][T15447] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 902.388881][T15447] EXT4-fs error (device loop6): xattr_find_entry:333: inode #15: comm syz.6.15420: corrupted xattr entries [ 902.401356][T15447] EXT4-fs (loop6): Remounting filesystem read-only [ 902.421945][T15447] EXT4-fs (loop6): 1 truncate cleaned up [ 902.463016][T15455] 8021q: adding VLAN 0 to HW filter on device bond1 [ 902.496561][T15461] macvlan2: entered promiscuous mode [ 902.501958][T15461] macvlan2: entered allmulticast mode [ 902.539129][T15461] bond1: entered promiscuous mode [ 902.550493][T15467] 9pnet_fd: Insufficient options for proto=fd [ 902.558039][T15461] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 902.584728][T15461] bond1: left promiscuous mode [ 902.623440][T15475] validate_nla: 14 callbacks suppressed [ 902.623453][T15475] netlink: 'syz.0.15429': attribute type 1 has an invalid length. [ 902.642870][T15475] 8021q: adding VLAN 0 to HW filter on device bond20 [ 902.659746][T15475] macvlan2: entered promiscuous mode [ 902.665270][T15475] macvlan2: entered allmulticast mode [ 902.671549][T15475] bond20: entered promiscuous mode [ 902.677112][T15475] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 902.689591][T15475] bond20: left promiscuous mode [ 902.723402][T15482] loop6: detected capacity change from 0 to 128 [ 902.845028][T15489] loop7: detected capacity change from 0 to 128 [ 902.898909][T15489] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 902.959509][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 902.959523][ T29] audit: type=1326 audit(1752269628.998:50009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15499 comm="syz.6.15439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff293e929 code=0x7ffc0000 [ 903.047539][ T29] audit: type=1326 audit(1752269629.028:50010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15499 comm="syz.6.15439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0ff293d290 code=0x7ffc0000 [ 903.071644][ T29] audit: type=1326 audit(1752269629.028:50011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15499 comm="syz.6.15439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0ff2940157 code=0x7ffc0000 [ 903.095308][ T29] audit: type=1326 audit(1752269629.028:50012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15499 comm="syz.6.15439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ff293e929 code=0x7ffc0000 [ 903.119005][ T29] audit: type=1326 audit(1752269629.028:50013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15499 comm="syz.6.15439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0ff2940157 code=0x7ffc0000 [ 903.143002][ T29] audit: type=1326 audit(1752269629.028:50014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15499 comm="syz.6.15439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0ff293d58a code=0x7ffc0000 [ 903.166622][ T29] audit: type=1326 audit(1752269629.028:50015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15499 comm="syz.6.15439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff293e929 code=0x7ffc0000 [ 903.214756][ T29] audit: type=1326 audit(1752269629.248:50016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15512 comm="syz.7.15443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073febe929 code=0x7ffc0000 [ 903.257739][ T29] audit: type=1326 audit(1752269629.248:50017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15512 comm="syz.7.15443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073febe929 code=0x7ffc0000 [ 903.281498][ T29] audit: type=1326 audit(1752269629.248:50018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15512 comm="syz.7.15443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f073febe929 code=0x7ffc0000 [ 903.347972][T15520] netlink: 'syz.7.15448': attribute type 1 has an invalid length. [ 903.376310][T15520] 8021q: adding VLAN 0 to HW filter on device bond13 [ 903.439765][T15520] macvlan2: entered promiscuous mode [ 903.445212][T15520] macvlan2: entered allmulticast mode [ 903.510121][T15520] bond13: entered promiscuous mode [ 903.542507][T15520] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 903.569447][T15520] bond13: left promiscuous mode [ 903.738251][T15546] loop7: detected capacity change from 0 to 128 [ 903.814141][T15546] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 903.984877][T15561] loop7: detected capacity change from 0 to 512 [ 904.094881][T15561] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 904.116883][T15561] EXT4-fs error (device loop7): xattr_find_entry:333: inode #15: comm syz.7.15460: corrupted xattr entries [ 904.160073][T15561] EXT4-fs (loop7): Remounting filesystem read-only [ 904.167730][T15561] EXT4-fs (loop7): 1 truncate cleaned up [ 904.290031][T15522] syz.0.15449 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 904.304253][T15522] CPU: 1 UID: 0 PID: 15522 Comm: syz.0.15449 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(voluntary) [ 904.304375][T15522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 904.304434][T15522] Call Trace: [ 904.304441][T15522] [ 904.304448][T15522] __dump_stack+0x1d/0x30 [ 904.304469][T15522] dump_stack_lvl+0xe8/0x140 [ 904.304556][T15522] dump_stack+0x15/0x1b [ 904.304571][T15522] dump_header+0x81/0x220 [ 904.304606][T15522] oom_kill_process+0x334/0x3f0 [ 904.304640][T15522] out_of_memory+0x979/0xb80 [ 904.304745][T15522] try_charge_memcg+0x5e6/0x9e0 [ 904.304796][T15522] obj_cgroup_charge_pages+0xa6/0x150 [ 904.304853][T15522] __memcg_kmem_charge_page+0x9f/0x170 [ 904.304879][T15522] __alloc_frozen_pages_noprof+0x188/0x360 [ 904.304916][T15522] alloc_pages_mpol+0xb3/0x250 [ 904.305016][T15522] alloc_pages_noprof+0x90/0x130 [ 904.305148][T15522] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 904.305183][T15522] __kvmalloc_node_noprof+0x30f/0x4e0 [ 904.305207][T15522] ? ip_set_alloc+0x1f/0x30 [ 904.305238][T15522] ? ip_set_alloc+0x1f/0x30 [ 904.305299][T15522] ? hash_netiface_create+0x21b/0x740 [ 904.305327][T15522] ? __kmalloc_cache_noprof+0x189/0x320 [ 904.305383][T15522] ip_set_alloc+0x1f/0x30 [ 904.305412][T15522] hash_netiface_create+0x282/0x740 [ 904.305441][T15522] ? __pfx_hash_netiface_create+0x10/0x10 [ 904.305529][T15522] ip_set_create+0x3c9/0x960 [ 904.305596][T15522] ? __nla_parse+0x40/0x60 [ 904.305628][T15522] nfnetlink_rcv_msg+0x4c6/0x590 [ 904.305704][T15522] ? selinux_capable+0x1f9/0x270 [ 904.305736][T15522] netlink_rcv_skb+0x120/0x220 [ 904.305763][T15522] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 904.305863][T15522] nfnetlink_rcv+0x16b/0x1690 [ 904.305885][T15522] ? __kfree_skb+0x109/0x150 [ 904.305915][T15522] ? nlmon_xmit+0x4f/0x60 [ 904.305952][T15522] ? consume_skb+0x49/0x150 [ 904.305983][T15522] ? nlmon_xmit+0x4f/0x60 [ 904.306010][T15522] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 904.306044][T15522] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 904.306118][T15522] ? __dev_queue_xmit+0x182/0x1fb0 [ 904.306146][T15522] ? ref_tracker_free+0x37d/0x3e0 [ 904.306178][T15522] ? __netlink_deliver_tap+0x4dc/0x500 [ 904.306250][T15522] netlink_unicast+0x5a8/0x680 [ 904.306280][T15522] netlink_sendmsg+0x58b/0x6b0 [ 904.306298][T15522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 904.306315][T15522] __sock_sendmsg+0x145/0x180 [ 904.306426][T15522] ____sys_sendmsg+0x31e/0x4e0 [ 904.306464][T15522] ___sys_sendmsg+0x17b/0x1d0 [ 904.306515][T15522] __x64_sys_sendmsg+0xd4/0x160 [ 904.306708][T15522] x64_sys_call+0x2999/0x2fb0 [ 904.306730][T15522] do_syscall_64+0xd2/0x200 [ 904.306749][T15522] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 904.306830][T15522] ? clear_bhb_loop+0x40/0x90 [ 904.306849][T15522] ? clear_bhb_loop+0x40/0x90 [ 904.306868][T15522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.306887][T15522] RIP: 0033:0x7fb3d4d3e929 [ 904.306947][T15522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 904.306967][T15522] RSP: 002b:00007fb3d33a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 904.306989][T15522] RAX: ffffffffffffffda RBX: 00007fb3d4f65fa0 RCX: 00007fb3d4d3e929 [ 904.307003][T15522] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000a [ 904.307015][T15522] RBP: 00007fb3d4dc0b39 R08: 0000000000000000 R09: 0000000000000000 [ 904.307026][T15522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 904.307037][T15522] R13: 0000000000000000 R14: 00007fb3d4f65fa0 R15: 00007fff113614e8 [ 904.307053][T15522] [ 904.307124][T15522] memory: usage 307200kB, limit 307200kB, failcnt 1408 [ 904.666000][T15522] memory+swap: usage 307572kB, limit 9007199254740988kB, failcnt 0 [ 904.673994][T15522] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 904.681337][T15522] Memory cgroup stats for /syz0: [ 904.681795][T15522] cache 0 [ 904.689683][T15522] rss 0 [ 904.692440][T15522] shmem 0 [ 904.695476][T15522] mapped_file 0 [ 904.699055][T15522] dirty 0 [ 904.701986][T15522] writeback 0 [ 904.705293][T15522] workingset_refault_anon 11964 [ 904.710394][T15522] workingset_refault_file 1120 [ 904.715178][T15522] swap 380928 [ 904.718504][T15522] swapcached 0 [ 904.721901][T15522] pgpgin 1532910 [ 904.725438][T15522] pgpgout 1532910 [ 904.729082][T15522] pgfault 1468565 [ 904.732705][T15522] pgmajfault 1978 [ 904.736329][T15522] inactive_anon 0 [ 904.740001][T15522] active_anon 0 [ 904.743457][T15522] inactive_file 0 [ 904.747167][T15522] active_file 0 [ 904.750642][T15522] unevictable 0 [ 904.754165][T15522] hierarchical_memory_limit 314572800 [ 904.759557][T15522] hierarchical_memsw_limit 9223372036854771712 [ 904.765704][T15522] total_cache 0 [ 904.769235][T15522] total_rss 0 [ 904.772518][T15522] total_shmem 0 [ 904.775962][T15522] total_mapped_file 0 [ 904.779940][T15522] total_dirty 0 [ 904.783386][T15522] total_writeback 0 [ 904.787197][T15522] total_workingset_refault_anon 11964 [ 904.792673][T15522] total_workingset_refault_file 1120 [ 904.798034][T15522] total_swap 380928 [ 904.802229][T15522] total_swapcached 0 [ 904.806409][T15522] total_pgpgin 1532910 [ 904.810509][T15522] total_pgpgout 1532910 [ 904.814762][T15522] total_pgfault 1468565 [ 904.818929][T15522] total_pgmajfault 1978 [ 904.823085][T15522] total_inactive_anon 0 [ 904.827292][T15522] total_active_anon 0 [ 904.831280][T15522] total_inactive_file 0 [ 904.835430][T15522] total_active_file 0 [ 904.839434][T15522] total_unevictable 0 [ 904.843452][T15522] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.15449,pid=15521,uid=0 [ 904.858381][T15522] Memory cgroup out of memory: Killed process 15521 (syz.0.15449) total-vm:93624kB, anon-rss:940kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 904.984930][T15583] netlink: 'syz.6.15470': attribute type 1 has an invalid length. [ 905.018867][T15583] 8021q: adding VLAN 0 to HW filter on device bond15 [ 905.039883][T15583] macvlan2: entered promiscuous mode [ 905.045200][T15583] macvlan2: entered allmulticast mode [ 905.051566][T15583] bond15: entered promiscuous mode [ 905.056958][T15583] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 905.065518][T15583] bond15: left promiscuous mode [ 905.143255][T15591] netlink: 'syz.7.15472': attribute type 1 has an invalid length. [ 905.173256][T15591] 8021q: adding VLAN 0 to HW filter on device bond14 [ 905.200404][T15591] macvlan2: entered promiscuous mode [ 905.205742][T15591] macvlan2: entered allmulticast mode [ 905.226972][T15591] bond14: entered promiscuous mode [ 905.236257][T15591] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 905.240295][T15596] loop0: detected capacity change from 0 to 512 [ 905.251263][T15591] bond14: left promiscuous mode [ 905.256279][T15596] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 905.274250][T15596] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.15474: corrupted xattr entries [ 905.296810][T15596] EXT4-fs (loop0): Remounting filesystem read-only [ 905.350045][T15596] EXT4-fs (loop0): 1 truncate cleaned up [ 905.382892][T15609] loop6: detected capacity change from 0 to 1024 [ 905.392568][T15611] IPv4: Oversized IP packet from 127.202.26.0 [ 905.420257][T15609] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.15475: Allocating blocks 385-513 which overlap fs metadata [ 905.486527][T15620] EXT4-fs (loop6): pa ffff888106e77c40: logic 16, phys. 129, len 24 [ 905.494649][T15620] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 905.508274][T15619] syzkaller1: entered promiscuous mode [ 905.513784][T15619] syzkaller1: entered allmulticast mode [ 905.527583][T15617] loop7: detected capacity change from 0 to 128 [ 905.555390][T15617] bio_check_eod: 47 callbacks suppressed [ 905.555458][T15617] syz.7.15481: attempt to access beyond end of device [ 905.555458][T15617] loop7: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 905.575754][T15617] syz.7.15481: attempt to access beyond end of device [ 905.575754][T15617] loop7: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 905.589390][T15617] buffer_io_error: 44 callbacks suppressed [ 905.589404][T15617] Buffer I/O error on dev loop7, logical block 156, lost async page write [ 905.604850][T15617] syz.7.15481: attempt to access beyond end of device [ 905.604850][T15617] loop7: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 905.618390][T15617] Buffer I/O error on dev loop7, logical block 157, lost async page write [ 905.627010][T15617] syz.7.15481: attempt to access beyond end of device [ 905.627010][T15617] loop7: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 905.640630][T15617] Buffer I/O error on dev loop7, logical block 158, lost async page write [ 905.650921][T15617] syz.7.15481: attempt to access beyond end of device [ 905.650921][T15617] loop7: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 905.664433][T15617] Buffer I/O error on dev loop7, logical block 159, lost async page write [ 905.674670][T15617] syz.7.15481: attempt to access beyond end of device [ 905.674670][T15617] loop7: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 905.688387][T15617] Buffer I/O error on dev loop7, logical block 160, lost async page write [ 905.699067][T15617] syz.7.15481: attempt to access beyond end of device [ 905.699067][T15617] loop7: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 905.712660][T15617] Buffer I/O error on dev loop7, logical block 161, lost async page write [ 905.738245][T15617] syz.7.15481: attempt to access beyond end of device [ 905.738245][T15617] loop7: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 905.751772][T15617] Buffer I/O error on dev loop7, logical block 132, lost async page write [ 905.767303][T15627] loop0: detected capacity change from 0 to 1024 [ 905.776454][T15630] netlink: 'syz.6.15483': attribute type 1 has an invalid length. [ 905.809912][T15630] 8021q: adding VLAN 0 to HW filter on device bond16 [ 905.821845][T15617] syz.7.15481: attempt to access beyond end of device [ 905.821845][T15617] loop7: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 905.826077][T15630] macvlan2: entered promiscuous mode [ 905.835367][T15617] Buffer I/O error on dev loop7, logical block 133, lost async page write [ 905.843016][T15617] syz.7.15481: attempt to access beyond end of device [ 905.843016][T15617] loop7: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 905.849335][T15630] macvlan2: entered allmulticast mode [ 905.868441][T15617] Buffer I/O error on dev loop7, logical block 150, lost async page write [ 905.878021][T15630] bond16: entered promiscuous mode [ 905.883523][T15630] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 905.901111][T15617] Buffer I/O error on dev loop7, logical block 151, lost async page write [ 905.909955][T15630] bond16: left promiscuous mode [ 905.922766][T15642] netlink: 'syz.0.15487': attribute type 1 has an invalid length. [ 905.947995][T15642] 8021q: adding VLAN 0 to HW filter on device bond21 [ 905.980240][T15642] macvlan2: entered promiscuous mode [ 905.985561][T15642] macvlan2: entered allmulticast mode [ 906.005280][T15642] bond21: entered promiscuous mode [ 906.010821][T15642] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 906.019064][T15642] bond21: left promiscuous mode [ 906.056892][T15650] loop7: detected capacity change from 0 to 128 [ 906.153108][T15650] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 906.453494][T15666] loop7: detected capacity change from 0 to 1024 [ 906.504940][T15666] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.15493: Allocating blocks 385-513 which overlap fs metadata [ 906.522004][T15671] netlink: 'syz.6.15495': attribute type 1 has an invalid length. [ 906.563012][T15663] EXT4-fs (loop7): pa ffff888106e77c40: logic 16, phys. 129, len 24 [ 906.565775][T15671] 8021q: adding VLAN 0 to HW filter on device bond17 [ 906.571053][T15663] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 906.637753][T13923] ================================================================== [ 906.645866][T13923] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 906.649455][T15625] syz.1.15484 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 906.655675][T13923] [ 906.655681][T13923] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 906.669837][T15625] CPU: 0 UID: 0 PID: 15625 Comm: syz.1.15484 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(voluntary) [ 906.669868][T15625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 906.669881][T15625] Call Trace: [ 906.669889][T15625] [ 906.669897][T15625] __dump_stack+0x1d/0x30 [ 906.669950][T15625] dump_stack_lvl+0xe8/0x140 [ 906.669970][T15625] dump_stack+0x15/0x1b [ 906.670010][T15625] dump_header+0x81/0x220 [ 906.670043][T15625] oom_kill_process+0x334/0x3f0 [ 906.670073][T15625] out_of_memory+0x979/0xb80 [ 906.670117][T15625] try_charge_memcg+0x5e6/0x9e0 [ 906.670158][T15625] obj_cgroup_charge_pages+0xa6/0x150 [ 906.670239][T15625] __memcg_kmem_charge_page+0x9f/0x170 [ 906.670268][T15625] __alloc_frozen_pages_noprof+0x188/0x360 [ 906.670308][T15625] alloc_pages_mpol+0xb3/0x250 [ 906.670396][T15625] alloc_pages_noprof+0x90/0x130 [ 906.670426][T15625] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 906.670465][T15625] __kvmalloc_node_noprof+0x30f/0x4e0 [ 906.670514][T15625] ? ip_set_alloc+0x1f/0x30 [ 906.670540][T15625] ? ip_set_alloc+0x1f/0x30 [ 906.670610][T15625] ? __kmalloc_cache_noprof+0x189/0x320 [ 906.670638][T15625] ip_set_alloc+0x1f/0x30 [ 906.670665][T15625] hash_netiface_create+0x282/0x740 [ 906.670697][T15625] ? __pfx_hash_netiface_create+0x10/0x10 [ 906.670745][T15625] ip_set_create+0x3c9/0x960 [ 906.670785][T15625] ? __nla_parse+0x40/0x60 [ 906.670873][T15625] nfnetlink_rcv_msg+0x4c6/0x590 [ 906.670974][T15625] ? selinux_capable+0x1f9/0x270 [ 906.671004][T15625] netlink_rcv_skb+0x120/0x220 [ 906.671053][T15625] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 906.671085][T15625] nfnetlink_rcv+0x16b/0x1690 [ 906.671167][T15625] ? __kfree_skb+0x109/0x150 [ 906.671196][T15625] ? nlmon_xmit+0x4f/0x60 [ 906.671216][T15625] ? consume_skb+0x49/0x150 [ 906.671307][T15625] ? nlmon_xmit+0x4f/0x60 [ 906.671327][T15625] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 906.671367][T15625] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 906.671458][T15625] ? __dev_queue_xmit+0x182/0x1fb0 [ 906.671491][T15625] ? ref_tracker_free+0x37d/0x3e0 [ 906.671525][T15625] ? __netlink_deliver_tap+0x4dc/0x500 [ 906.671619][T15625] netlink_unicast+0x5a8/0x680 [ 906.671650][T15625] netlink_sendmsg+0x58b/0x6b0 [ 906.671671][T15625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 906.671691][T15625] __sock_sendmsg+0x145/0x180 [ 906.671760][T15625] ____sys_sendmsg+0x31e/0x4e0 [ 906.671830][T15625] ___sys_sendmsg+0x17b/0x1d0 [ 906.671874][T15625] __x64_sys_sendmsg+0xd4/0x160 [ 906.671999][T15625] x64_sys_call+0x2999/0x2fb0 [ 906.672020][T15625] do_syscall_64+0xd2/0x200 [ 906.672038][T15625] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 906.672064][T15625] ? clear_bhb_loop+0x40/0x90 [ 906.672091][T15625] ? clear_bhb_loop+0x40/0x90 [ 906.672157][T15625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.672213][T15625] RIP: 0033:0x7f0b525ae929 [ 906.672229][T15625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 906.672247][T15625] RSP: 002b:00007f0b50c17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 906.672274][T15625] RAX: ffffffffffffffda RBX: 00007f0b527d5fa0 RCX: 00007f0b525ae929 [ 906.672287][T15625] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000a [ 906.672306][T15625] RBP: 00007f0b52630b39 R08: 0000000000000000 R09: 0000000000000000 [ 906.672318][T15625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 906.672331][T15625] R13: 0000000000000000 R14: 00007f0b527d5fa0 R15: 00007fff54779498 [ 906.672349][T15625] [ 906.672356][T15625] memory: usage 307200kB, limit 307200kB, failcnt 404 [ 906.680146][T13923] tick_do_update_jiffies64+0x113/0x1c0 [ 906.680171][T13923] tick_nohz_handler+0x7f/0x2d0 [ 906.680192][T13923] __hrtimer_run_queues+0x20f/0x5a0 [ 906.692988][T15625] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 906.702791][T13923] hrtimer_interrupt+0x21a/0x460 [ 906.702818][T13923] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 906.706079][T15625] kmem: usage 307148kB, limit 9007199254740988kB, failcnt 0 [ 906.708990][T13923] sysvec_apic_timer_interrupt+0x6f/0x80 [ 906.709017][T13923] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 906.713319][T15625] Memory cgroup stats for /syz1 [ 906.717883][T13923] kcsan_setup_watchpoint+0x415/0x430 [ 906.722051][T15625] : [ 906.726341][T13923] mas_state_walk+0xd4/0x650 [ 907.100783][T13923] mas_find+0x3a9/0x610 [ 907.104945][T13923] walk_pud_range+0xfb5/0x1340 [ 907.109702][T13923] walk_pgd_range+0x55c/0x14e0 [ 907.114464][T13923] __walk_page_range+0xdd/0x340 [ 907.119315][T13923] walk_page_range_mm+0x352/0x4a0 [ 907.124334][T13923] walk_page_range+0x56/0x70 [ 907.128922][T13923] try_to_inc_max_seq+0x79d/0xa60 [ 907.133942][T13923] try_to_shrink_lruvec+0x72b/0x7e0 [ 907.139139][T13923] shrink_lruvec+0x22e/0x1b40 [ 907.143802][T13923] shrink_node+0x686/0x2120 [ 907.148303][T13923] do_try_to_free_pages+0x3f6/0xcd0 [ 907.153491][T13923] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 907.159377][T13923] try_charge_memcg+0x358/0x9e0 [ 907.164254][T13923] charge_memcg+0x51/0xc0 [ 907.168584][T13923] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 907.174564][T13923] __read_swap_cache_async+0x1df/0x350 [ 907.180019][T13923] swap_cluster_readahead+0x277/0x3e0 [ 907.185390][T13923] swapin_readahead+0xde/0x6f0 [ 907.190327][T13923] do_swap_page+0x301/0x2430 [ 907.194908][T13923] handle_mm_fault+0x9a5/0x2be0 [ 907.199804][T13923] do_user_addr_fault+0x636/0x1090 [ 907.204920][T13923] exc_page_fault+0x62/0xa0 [ 907.209421][T13923] asm_exc_page_fault+0x26/0x30 [ 907.214266][T13923] [ 907.216579][T13923] read to 0xffffffff868099c0 of 8 bytes by task 13923 on cpu 1: [ 907.224198][T13923] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 907.230439][T13923] count_shadow_nodes+0x6a/0x230 [ 907.235406][T13923] do_shrink_slab+0x63/0x680 [ 907.239995][T13923] shrink_slab+0x448/0x760 [ 907.244434][T13923] shrink_node+0x6c3/0x2120 [ 907.248934][T13923] do_try_to_free_pages+0x3f6/0xcd0 [ 907.254122][T13923] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 907.260006][T13923] try_charge_memcg+0x358/0x9e0 [ 907.264858][T13923] charge_memcg+0x51/0xc0 [ 907.269188][T13923] __mem_cgroup_charge+0x28/0xb0 [ 907.274126][T13923] filemap_add_folio+0x4e/0x1b0 [ 907.278980][T13923] __filemap_get_folio+0x31e/0x6b0 [ 907.284090][T13923] filemap_fault+0x41d/0xb40 [ 907.288679][T13923] __do_fault+0xb9/0x200 [ 907.292913][T13923] handle_mm_fault+0xf78/0x2be0 [ 907.297754][T13923] do_user_addr_fault+0x636/0x1090 [ 907.302865][T13923] exc_page_fault+0x62/0xa0 [ 907.307384][T13923] asm_exc_page_fault+0x26/0x30 [ 907.312230][T13923] [ 907.314541][T13923] value changed: 0x000000010000ecc7 -> 0x000000010000ecc8 [ 907.321637][T13923] [ 907.323946][T13923] Reported by Kernel Concurrency Sanitizer on: [ 907.330083][T13923] CPU: 1 UID: 0 PID: 13923 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(voluntary) [ 907.342746][T13923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 907.352792][T13923] ================================================================== [ 907.376066][T15625] cache 0 [ 907.379113][T15625] rss 4096 [ 907.382208][T15625] shmem 0 [ 907.385268][T15625] mapped_file 0 [ 907.388769][T15625] dirty 0 [ 907.391753][T15625] writeback 4096 [ 907.395472][T15625] workingset_refault_anon 12223 [ 907.400426][T15625] workingset_refault_file 816 [ 907.405090][T15625] swap 192512 [ 907.408418][T15625] swapcached 4096 [ 907.412036][T15625] pgpgin 1408067 [ 907.415558][T15625] pgpgout 1408054 [ 907.419237][T15625] pgfault 1392364 [ 907.422893][T15625] pgmajfault 1647 [ 907.426509][T15625] inactive_anon 4096 [ 907.430396][T15625] active_anon 0 [ 907.433830][T15625] inactive_file 49152 [ 907.437852][T15625] active_file 0 [ 907.441296][T15625] unevictable 0 [ 907.444756][T15625] hierarchical_memory_limit 314572800 [ 907.450156][T15625] hierarchical_memsw_limit 9223372036854771712 [ 907.456371][T15625] total_cache 0 [ 907.459900][T15625] total_rss 4096 [ 907.463452][T15625] total_shmem 0 [ 907.466911][T15625] total_mapped_file 0 [ 907.470989][T15625] total_dirty 0 [ 907.474450][T15625] total_writeback 4096 [ 907.478644][T15625] total_workingset_refault_anon 12223 [ 907.484078][T15625] total_workingset_refault_file 816 [ 907.489296][T15625] total_swap 192512 [ 907.493102][T15625] total_swapcached 4096 [ 907.497261][T15625] total_pgpgin 1408067 [ 907.501350][T15625] total_pgpgout 1408054 [ 907.505501][T15625] total_pgfault 1392373 [ 907.509712][T15625] total_pgmajfault 1647 [ 907.513894][T15625] total_inactive_anon 4096 [ 907.518312][T15625] total_active_anon 0 [ 907.522338][T15625] total_inactive_file 49152 [ 907.526888][T15625] total_active_file 0 [ 907.530925][T15625] total_unevictable 0 [ 907.534891][T15625] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.15484,pid=15624,uid=0 [ 907.549747][T15625] Memory cgroup out of memory: Killed process 15624 (syz.1.15484) total-vm:93624kB, anon-rss:1068kB, file-rss:22248kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 907.573904][T15671] macvlan2: entered promiscuous mode [ 907.579583][T15671] macvlan2: entered allmulticast mode [ 907.592794][T15671] bond17: entered promiscuous mode [ 907.600956][T15671] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 907.630674][T15671] bond17: left promiscuous mode