last executing test programs: 49.065181476s ago: executing program 2 (id=1486): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000c8500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x10) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r2, 0x0) ioperm(0x0, 0x5, 0x6) r4 = memfd_create(&(0x7f0000000280)='%\x00', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, r4, 0x0) r5 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0xa, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000180)=""/160, 0xa0}], 0x1, 0x1ef, 0x1000) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[{@delalloc}, {@nogrpid}, {@nobarrier}, {@dioread_lock}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@nobh}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 48.770007464s ago: executing program 2 (id=1492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x8090) 48.744836555s ago: executing program 2 (id=1493): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000600), &(0x7f0000001380)=@udp=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, 0x0) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x67000000) sendmmsg$unix(r0, &(0x7f0000001040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 48.683833944s ago: executing program 2 (id=1494): r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$eJzs3V9rG9n9x/HPyLIte3+E5dcSQsifk6QLDk2VkbxxMCl01dHInlbSiBm52FBY0o29hMjZNkmh8c3WN/0D2yfQu970og+i0Ot9Fr0pLSztXaE3KnNmJEvRv3ijOLvN+2V2NTrznTnfmaPoy9iaIwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADle1XVLjupBc2fXTOZVo7AxZX26t0XdTBduzuxXcpL/VCjoQtp04Zsnq88n/7uuS+mzSyokDwUdvXP+3XvfyOd6209J6MvQaXf49PnRo/udzv6Tl4hd0Kl3/yYp11taycZkTNCW3wziMGhUtnwTxKHZ3Nhwb2/XYlML6n68F7f9hvEiP9cOI7Pm3TSlzc114xf3wp3mVrVS93uNd79Tdt0N84PldKAlFWNvO6jXg+aWjUlWJzF3zWc/TgP8SsOYg4ed/fVZR5IElV4mqDwrqOyWy6VSuVzauLN5567r5kca3ITj9mkkYu4vWnzNzOeNG5iDXFL//+pIdRXU1I52Zcb+eKoqUqjGhPWZXv1/77Y/td/B+t+r8hek72WrL8rW/yvpsyuT6v+EXIyM3WDcGmdC++l+Fm1GRk/1XEd6pPvqqKN9PZnDvo3M1bns5Qx+tuSrqUCxQgVqqGJbTNZitKkNbcjVh9pWTbGMagpUl69Ye4rVlm9fUZ4i+aqorVCRjNbk6aaMStrUptZl5KuoPYXaUVNbqqqif3e73QM9tOd9fUqO6gWVJgQsDwaVp+xpUv3/yafp6zSr/y71/22Vvg6W04fPp8UAXwHd7Pp/UG72ZldfX0YAAAAAAGDeHPvbd8f+7f6ypK5qQd1333RaAAAAAABgjhx1l3VJTnL9L+myHK7/AQAAAAD4X+PYe+wcSav2Q/3OyZ1QL/NLgIUzSBEAAAAAALwie+f/lSWpayetuCrnVNf/AAAAAADga+A3A3Ps53tz7HZ7f9bPSYpby86f/7msaNE5bu1+yzmsJGsqh1nMyCcA2rWLzrlsol77sCTJPvP8S07WWzYJZn/ewS8OZs3170QvJLC0MLiDCQk4Sc8b+eyZPtO1dJNr2TzzD45ysmvSXlZrQd0vemH9XkmVyrlc299t//zxw19IUf84Dx529osffdJ5YHM5TpqOD5OdfjqUTm78yTjJ5Zmdb8HeczHuiFdU63X522Zj1bH9ur3jX1DlMDfY0bQBOOnzV7qejtn11TR29ag/435y/IXk+EtFO2RDRx8tOidZlF488nEDMSGLgs3iRhpzY+2Gyn9Ll/ujkHMK316QysXRMRjKojyYxexz4fxr5FwMZGEfemsGzsV6ksVfkh1NyGL9dFmMjAgAvCkHuiz7LnRZdhLzfhUqZHW3Vx56b2pfqu7Mru4fDFf3Z7/vdu0GC1I++9vE1F4KSt7R1xxbh5bSQ8pfHPOO7mZ1paAJ7+juK1S3pK8/nXwHUpb2SBb/6Xa790q239+9UFX/MNTdSL9xvbyQnMLbzw5/aifAT3y8//H+43J5fcN933XvlLVoDyN7WBC1BwAwYvZ37MyMcN7XtTTi2oN/vJcuDVW8/+9/pKCoj/SJOnqgW72vELg6fq+rAx9DuJVetWrgqtWcf/ee/V664diSbk28qrO1dCC23I9dVG+T4Up9Erv+mkcBAICzdX1GHR5f/wtD9f+W1tKItYtjr7uHa3l2ddy/pJ8UW5qd/AfzPhsAALwd/OgLZ7X9ayeKgtaHpc3NUqW97Zso9H5ooqC65Zug2fYjb7vS3PJNKwrboRfWTSvSclD1YxPvtFph1Da1MDKtMA527Te/m+yr32O/UWm2Ay9u1f1K7BsvbLYrXttUg9gzrZ3v14N424/sxnHL94Ja4FXaQdg0cbgTeX7RmNj3BwKDqt9sB7UgWWyaVhQ0KtGe+VFY32n4purHXhS02mG6w15fQbMWRg2722K+O+7zAgAAvHWePj96dL/T2X/y4sJKcmmethxrQszowpKePk+uypOWfLaKOYIAAPiKOSngp9io8BoTAgAAAAAAAAAAAAAAAAAAAAAAI2bf0nfKhcVxNwtK/Zafncta9Eud3GI4sh9H807sNAu5027VuyXi6NHnU4JX+i290z8Yc3xmB/j3/5PesS1KW/Lz72tlyuC+joXvHqRndGJMsnLsquX+WOTn/88hWXj8xwmrut1ud/rmy8PncGnaAQ4v5CU9WXqFITj79yIAZ+u/AQAA//9b5DOa") ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'syztnl1\x00', &(0x7f0000000b40)={'tunl0\x00', 0x0, 0x40, 0x7800, 0x2d, 0xfffffff9, {{0x45, 0x4, 0x3, 0x1, 0x114, 0x66, 0x0, 0x7, 0x29, 0x0, @empty, @remote, {[@cipso={0x86, 0x32, 0xffffffffffffffff, [{0x1, 0x11, "dc13ffd702fa373493794d281e684f"}, {0x5, 0x10, "40e3829487b966ab1d2279d22555"}, {0x6, 0x2}, {0x6, 0x2}, {0x5, 0x7, "351ad544c8"}]}, @timestamp_addr={0x44, 0x4c, 0xd6, 0x1, 0x5, [{@remote, 0x9}, {@private=0xa010102, 0x6}, {@multicast1, 0x7fffffff}, {@multicast2, 0x10001}, {@empty, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x4}, {@private=0xa010100, 0x7}, {@multicast2, 0x40}]}, @timestamp_addr={0x44, 0x3c, 0x12, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x2}, {@private=0xa010102, 0x91}, {@remote, 0x1}, {@local, 0xb074}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x10}, {@rand_addr=0x64010101, 0xb57f}, {@local, 0x1}]}, @timestamp={0x44, 0xc, 0x92, 0x0, 0x0, [0x6, 0x400]}, @lsrr={0x83, 0x7, 0xd4, [@remote]}, @timestamp_prespec={0x44, 0x1c, 0x36, 0x3, 0x9, [{@empty, 0x1}, {@remote, 0x565}, {@broadcast, 0x6}]}, @ssrr={0x89, 0x13, 0x2d, [@local, @private=0xa010101, @local, @empty]}, @noop]}}}}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000100000000000000fe80000000000000ff0300000000000000000000000000000000000000d00000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r0], 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) close_range(r4, r5, 0x0) ioctl$GIO_FONT(r5, 0x4b60, &(0x7f0000000880)=""/132) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00cd0c00a4bb0800f2ffffff1d00ffffd075ff3f7f4627cb5ff0fde05ef9dd803025ec962b39e654af2c5db71d535e23174f290bdc613bd926e93e68ad19e667fe88125075b2f38ea10079b1a8d49e917d62dbe2b86cb09abc201449109d7b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='task_newtask\x00', r9}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, &(0x7f0000001100), 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r11, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") openat$cgroup_procs(r10, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) 48.592131504s ago: executing program 2 (id=1495): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x7, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000800000000000f2c90000f9ffffffffffffff1cb58b0000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x2, 0xffffffff, 0x6, 0x6, 0x4, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) symlink(&(0x7f0000000780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r4 = memfd_create(&(0x7f0000000380)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xb6\xe2\v', 0x0) write$binfmt_script(r4, &(0x7f0000000600)={'#! ', './file0/../file0'}, 0x14) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r5, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") r6 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) truncate(&(0x7f0000000280)='./bus\x00', 0x2) 48.196045842s ago: executing program 2 (id=1501): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf001}, {0xffffffff}]}) 48.144607742s ago: executing program 32 (id=1501): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf001}, {0xffffffff}]}) 29.306427057s ago: executing program 5 (id=1792): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x80080a, &(0x7f00000003c0), 0x2, 0x79a, &(0x7f0000000c40)="$eJzs3c9rXNUeAPDvnSRNmva95sGD176NWWmhdNLW2CoIRlyIYKGga9swmYaYSaZkJqUJWVhEEETQ4kLQjWt/1J1b0bV/gxsRaamaFisuZOTOj2SaTCZJm8m0zecDNznnzrlzznfu3HPPzD3MDWDPGk7/ZCKORMQHScSh+vokIvqqqd6IsVq5u8tLuXRJolJ57bekWubO8lIumrZJHahnDkfEd+9EHMusr7e0sDg9Xijk5+r5kfLMpZHSwuLxqZnxyfxkfvb0ydHRU2eeOXN652L944fFgzc/fPmpr8b+evt/19//PomxOFh/rDmOnTIcw/XXpC99Ce/x0k5X1mVJtxvAfUkPzZ7aUR5H4lD0VFMAwOMsPf9XAIA9JnH+B4A9pvE9wJ3lpVxj6e43Ervr1osRMVCLv3F9s/ZIb/2a3UD1OujgnSR661dEU0/sUP3DEfHpN298kS7RoeuQAK28dTUiLgwNr+//k3VzFrbrxBbKDK/J6/9g93ybjn+ebTX+y6yMf2Jl/LOqv8Wxez+GI/Y159cf/5kbLTd8YQcqr4//nq/NbUsDbRr/rUxaG+qp5/6VZtKB31Qhn/Zt/46Io9HXf3GqkD/Zpo6jt/++vdFjzeO/36+9+Xlaf/p/tUTmRm//vdtMjJfHHyTmZreuRvy/d3Vu3911/f9AdW7X2v2frjvX7ombBsivPPfuJxsVS+NP420s6+PvrMpnEU9G6/gbkrbzE0fS3X+i9rd1HV//9PHgRvU37/90SetvfBbYDen+H2wf/1DSPF+ztLP1bx5/6/f/vuT1arrReVwZL5fnTkbsS15dv/7U6raNfKN8Gn8t0rXxZ9q+/9NPghe2GGPvzV+/vP/4OyuNf2Jb+3/7iet3p3s2qn9r+3+0mjpaX7OV/m+rDXyQ1w4AAAAAAAAAAAAAAAAAAAAAAAAAtioTEQcjyWRX0plMNlu7h/d/YzBTKJbKxy4W52cnonqv7KHoyzR+6vJQLZ80fv90qCl/ak3+6Yj4T0R81L+/ms/mioWJbgcPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHUHNrj/f+qX/m63DgDomIFNS9zO35OtVCqVDrYHAOi8zc//AMDjps35f/9utgMA2D0+/wPA3uP8DwB7j/M/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHXbu7Nl0qfy5vJRL8xOXF+ani5ePT+RL09mZ+Vw2V5y7lJ0sFicL+WyuOLPZ8xWKxUujMTt/ZaScL5VHSguL52eK87Pl81Mz45P58/m+XYkKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALantLA4PV4o5Ocei8R7EfEQNKMTiSQeimZ0JfHz8R8PtytzbZO38dhDEcUjluh2zwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwaPgnAAD//3V8JcM=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) 29.232768567s ago: executing program 5 (id=1793): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x17}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r3, 0x4, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2400c090}, 0x20000800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@discard}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r4 = creat(&(0x7f0000000080)='./file1\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) fcntl$setstatus(r4, 0x4, 0x6000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r6, 0x0, 0x7fffe, 0x7000000) io_submit(r5, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x7f000}]) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=f', @ANYBLOB=',w\x00', @ANYRESHEX=r7, @ANYBLOB]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) write$P9_RLOCK(r6, &(0x7f0000000380)={0x8, 0x35, 0x1, 0x2}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) close(r1) 29.113082146s ago: executing program 5 (id=1794): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 29.112817426s ago: executing program 5 (id=1795): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000a80), &(0x7f0000000280)='%pi6 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf38, @void, @value}, 0x94) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1f, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x3a) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x22402, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000080)=0x14) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"/643], 0x1, 0x120b, &(0x7f0000002300)="$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") close(r3) r4 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x4, 0x2, 0x3, 0x0, 0x4dcc, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xe76, 0x2, @perf_config_ext={0x7, 0x100000000}, 0x1080, 0xb, 0xfffffffd, 0x0, 0xc, 0xe444, 0x6, 0x0, 0x7ff, 0x0, 0xeb7}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000180)='+#}*\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = dup2(r6, r6) connect$pppl2tp(r7, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x26) sendmsg$netlink(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000009940)=ANY=[], 0x290}, {&(0x7f0000000140)=ANY=[@ANYBLOB="bc0800600c90297f0000000000000000ac080080a508000038a9d0720cc84514dccdfb1fd2efd73cdcda4463c756f9a639539313b2a2567370b4516a4ae84340116ab0964ca1fad1866f5a0dc87b47f9fb0802c74f68f804fb7670225dc1d6f5ee38f4fc8455668647558e8e6789622a6510c6fcc33c480b8453e6dda9a288d486a66f0494a24352be9c703050188ff8488c5212178aea5f5bb413ce42928cd3f1369243dd93cdbd811493eb646df8799855577411b6d91dc1c67d41a00ee5c9cda43c0bc5b5ee6c8d8cc000b073bc2fb1e27661678696573d23758e21a861dfe1c261b9ab378eca2d43331ccc5fdc5cadc974cb9ef6215faf9d71047cf558eefff1ece60e4b044e40923df6f3c15ed64b84ce8b1e9cf07e5d58031a9827f0589181e9027ee1d11d9a3d62d879e4358ad0b52d8899a34db7bf4d0429498c3a86faead2ee642ff59ac436737bc4185bc1b230c22c8e2be516e5bb2075810415f6d57ad9d419e7da1ccf9663564ed97655b06fcef467eb23593b8041553837253e7bd5f28ece82cf202f90d6d3e2fbd6eec550fd18ce0317f65af14ff56955e436aaa75e938b2e968bc1638bedfd352a3f0dd0c2a9d6d96e6f546993190334e145d2420f23b40dd79a80531364157648fb77a03ccb032a919e6d26318e00fffd1f87dbfee5121846508e86881d75fc2f5607379b3918cbeb15ec4e7f217ac85a140b0d607f1483ef959c2b28ff446ff1fcb810b47aaac1e4cc6b9215fbceabd517efc1a776dac240f1b97d2bdaf3b1e22481aa757fc2d7afd62ad539586fc92990261af89c5e01506ae8775622f3d8ae9537f107fb1b4cbc48108f800a8cba72d2576c8830152ea95cf0238146e8a030832d40603fc1489913c6a009701f93ee5222ac8ea0e43e28ff3380e309ab31de5f910fe9a53124f640d480fa21bc263be75875e64abac9d49d65b4ff1871b14ee03ead6faefb833392023286e9aed32a197801cc46fe3d5fb6c4e2f7faa2655f4655983fd25ffd185ced6631bc079e4bcea2e6a4d16d467c4f3bdd5782a690f745acd9ed156ffd77a105a254cab001cf218d9a7b78cde5896c2a803ae48e7241f36962817136eea0b15c196cc80d2a38bfa1f41c792f982d72592b92c66e8bdb86fa66220ffc71197e152e0b4c825491c3e7e26321b651a2dd195df105b74c25d6599ae597927f600008597bd3174cc6ad8724d715471f9afddb4e8574cceb90bd5625f8a7cd05ac07b4f33e1a6ed9f8c1051643df219365345029798355541ebf085035284331f6e74c37aa2d95e6b8d84a64fe4ed527beba7648fcbe3a17e7ee181aa174769fe0ba588529801d86a8235a18818996d5a003286588d4c32429db8846f6333222969b3606372f32c8a4db1c48270d552f1d47ecc43a13b8dd8c101e9ffe73d4843cd7418bd3c0d78bc6a1ed0b6c794405893804918f5200da41dcf14f4452523b54ddd5bd993d1870b713367985367e0d882104707e813f5625af5fddc01fa4c0379a988bb993c56cab6261f84b352742c2a7049e4c8048b2ab98fb821c7ceca1668f2b997f6cce126031e4b919fa1a8215fc2b3059bf4209487ebe3b9e82d62bec068ff04a541fa102807ffe9bd2690ef76584e0ce32cc51fd7a6b7a9606b6d069900a8a81e84d7ee444d901ed9329949cde5fa3599d06447befca5160199a916fcf49f6528978ace93e5aa04bb6a21ffcd0dddacc12214d09d564ba5843d12fe867a332d6a867b2774b8716e7da725a21c91c1a0fe361102736ea06ee59324b6ff1c8e6e6f73af4c5e48605eab83ca822a18b40a44471266b044e5cb967fd77978b6a8b7b3d262af3badebd96428fb2f219bfccb83ba378b60dac754be533976a7688352d86208b24c79604ae2d6620107378ef0d6023bdb2573c4f0eba329ee4c84a5969fc8218d4393377fbe961750e910f657d0edf0f06ca93662b50e8ba33721698f867ea7ac8e973dbb5cd1b049d453122b7b9e0fb27fde6a20d050000000000000051865d14e45ccf9c4d5759ad83eefc8f393472553edebf987f128a95a438da7770e9ccf20213a266a738358f4b1ecf6a1e74086a4064524719bc4f26b1c41cf53beb1a0e0feca79979d6376339901db52bfc86717f9cbc3f2b0c68426e01c647a5c919e9719ae854c380f106e53ac4a4200e21e2ddff287a60b4c1c1ca194ac61dd0e54f3d9e7bc0f1f35f3e624f067b00d5f1c965254e2820f7fcea034753d356d383a11550df563bc249e664ac9b4367947782b2a3f852fe4cb0e5ecea5f9f62a9c952c0bbd7e959d9ac69d6c3f4c58977c94e25b652e44fa8a3967e96233c43199daa5d71db38e2951a37bd0f2a27c733fb598d529e36d1ebb67d258b5e89f631d734da072a91abe011750332f61067784b88efbee8d81c6d685e4c95a33af8f8b9b3022887c1d4929ab97a314bb03eb2243dd3243b1f3c68238ac07788e93eff25b028b4b4ab91924ec18ce9947a8a82ae504940c86dc4110603aae1ca4a81895069c0a846a2125b634de94409b3c2fb02ef55f0c050dc8c4e1dccf7603c7e4bdf1c8054ed4056f4c6e30ed4efaf817513b77f26051ff3c79bc7f0da9b8d92e8af632486ef6a422fda5dfb2b7d3ed9442cb6ed8442a83d21ba84da29912248524db42bd5458393a290220c57eeaefb1c11c6ca58464274d417d294ca7dd3831fba590117d012b107e4460e35a4d0b28ffed042c7e7636e101c3ac3e2d7c02c7561617a9ec51726de4cda3ad7e29ad904ec0ad3becf74eb15dc938dd76c29876362acfdfe50f73e9a7b476d526037a12448a26d359a9e59cdf98434421bbf8cf37f3f42706a6d41f3210485e7746f8b4b976a33b5c1483bbee3d51ea1cef04926d005aaf6c3b669544b3a75ff20a90a190963f3564d7f7d89cc4c1adb471d5629a23b25e43bdf1f46abc2263637c48fc5649c6ca705b25c4b2fb2fd1de3db561beeeaeee260953ca9f3984d625a374ad214bbcb67f5f0308ad4a477e49c18272e08ada7f36a7c6de241c8a5bc07914ac2b3a6d18e516c3854635b3b561e0c7ee16c4f6446193836d3137a219a467ea874e91f7e4f40f00aadf1e88e6208faa436301421221e2326b7f680e65f263e55a4f8140572f0c463000000859bc155eddb3d8fad8c6d091527a2c2ca21a5e53f9d1b48e56599262c75da201821a0999947afdbaaa04307e32f567ac4f31883188c0fb5f27c7995646263fb3d738a72b74ed8e92f3261dc344d23054562337d908cc94f7629832c9c875565fe5724f28f102fff374972bf81cdd0ddcacf36238b6184"], 0x8bc}, {0x0, 0x184}], 0x3}, 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2901090, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1004410, &(0x7f0000000180), 0x84, 0x46e, &(0x7f0000000900)="$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") chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 28.964361136s ago: executing program 5 (id=1798): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe(&(0x7f0000000500)) (fail_nth: 11) 28.400275583s ago: executing program 5 (id=1808): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000a40)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@grpquota}, {@noblock_validity}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x2e}}, {@resgid}, {@sysvgroups}, {@norecovery}, {@usrquota}]}, 0x1, 0x4d2, &(0x7f00000002c0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x46c, &(0x7f0000000f00)="$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") syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000280), 0x0, 0x0, 0x0) ftruncate(r0, 0x9) 28.303639583s ago: executing program 33 (id=1808): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000a40)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@grpquota}, {@noblock_validity}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x2e}}, {@resgid}, {@sysvgroups}, {@norecovery}, {@usrquota}]}, 0x1, 0x4d2, &(0x7f00000002c0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x46c, &(0x7f0000000f00)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2hVQWamhNhBCtHvBoSLwb/wvjSS9GvWjiVe+GhBguoF7WzM4MLMtu2aXbLrCfTzLd55l5us/znZln95l5djeAvjWW/Uki/hcRv0fESJ69ucBY/nDtyvmZv6+cn0miWn3rr6RW7uqV8zNl0fL/tuSZarXIb2hS74V3I6YrlbkzRX5i6dQHE4tnz70wf2r6xNyJudNTR44cPLB7+PDUoa7EmcV1defHC7t2HH3n4hszxy6+91OSRh53NMTRLWP53m3q6W5X1mNb69LJYP2WPb/cSDc7E+ilgYjIDtdQrf+PxEBsur5tJF77rKeNA9ZUtVqtrvCqvFwF7mNJ9LoFQG+Ub/TZ9W+5rNPQ465w+eX8AiiL+1qx5FsGI80Te4Yarm+7aSwiji3/81W2xBrdhwAAqPddNv55vtn4L42H88Rw9uf/xRzKaEQ8EBHbIuLBiNgeEQ9F1Mo+EhGPdlh/4wzJreOf9NIdB9eGbPz3UjG3dfP4Ly2LjA4Uua21+IeS4/OVuf3FPtkXQxuOzydzkyvU8f2rv33Ralv9+C9bsvrLsWDRjkuDDTfoZqeXplcTc73Ln0bsHGwWfxLlNE4SETsiYucd1jH/7GDLbbePfwWtn7Zt1a8jnsmP/3I0xF9KWs5PTr54eOrQxMaozO2fKM+KW/3864U3W9W/qvi7IDv+m5ue/9fjH002RiyePXeyNl+72HkdF/74vOU1TYfn/9Gtxfk/nLxdWzFcbPhoemnpzGTEcPL6reunbjxbmS/LZ/Hv29u8/2+LG3visYjYFRG7I+Lx7KKwaPsTEfFkROxdIf4fX3nq/c7jX5+50iz+2dsd/6g//p0nBk7+8O3t498YEa2O/8Faal+xpp3Xv3YbuJp9BwAAAPeK/DPwSTp+PZ2m4+P5Z/i3x+a0srC49NzxhQ9Pz+aflR+NobS80zVSdz90srg3XOanGvIHivvGXw5squXHZxYqs70OHvrclhb9P/PnQK9bB6y5LsyjAfco/R/6l/4P/SnR/6Gv6f/Qv5r1/09alh7/Zk0bA6wr7//Qv9ro/8v5Q+tRAXBv8v4P/Uv/h77U8rvx6aq+8r/uiX+L3zO8W9pz/ycivSuacf8nBtv+MYsOEtWRvP9nazY0LdPrVyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDu+C8AAP//F0nluw==") syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000280), 0x0, 0x0, 0x0) ftruncate(r0, 0x9) 4.882003439s ago: executing program 0 (id=2126): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x100000800005, 0x68022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa911, 0x0, @perf_config_ext={0x100005, 0xfffffffffffffffe}, 0x484b500c48235b64, 0x0, 0x0, 0x8, 0x3, 0x3, 0x204, 0x0, 0x6, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x2e3, 0x9, 0x6, 0x4}]}) sendfile(r5, 0xffffffffffffffff, 0x0, 0x100) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000700)={0x3, 'vlan0\x00', {0x7fffffff}, 0xfe00}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xb1, 0x0, 0x7ffc1ff8}]}) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r7) 3.988191976s ago: executing program 0 (id=2143): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) syz_usb_connect$cdc_ecm(0x0, 0x77, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000003000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@ldst={0x2, 0x0, 0x1, 0x1, 0xb, 0x16, 0x1}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @generic={0x1, 0x4, 0x6, 0x1, 0x1}, @generic={0xfd, 0x4, 0x2, 0x5, 0x7}, @exit]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/sync_on_suspend', 0x28080, 0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x13100, 0x2, 0x19d}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$inet(0x2, 0x3, 0x5) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r7 = socket$inet(0x2, 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) getsockopt$inet_buf(r7, 0x0, 0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) poll(0x0, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r8, &(0x7f0000000340)=ANY=[], 0xff2e) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) writev(r8, &(0x7f0000000440)=[{&(0x7f00000002c0)='/', 0x1}], 0x1) 3.175463782s ago: executing program 4 (id=2156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={r9, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={r9, 0xcd81, 0x800}, 0x8) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) splice(r3, 0x0, r6, 0x0, 0x25a5, 0x0) 2.56216969s ago: executing program 1 (id=2164): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x56, &(0x7f00000016c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x20, 0x2b, 0x0, @private2, @local, {[@hopopts={0x3c, 0x1, '\x00', [@generic={0x8}, @calipso={0x7, 0x8, {0x1, 0x0, 0x4, 0x6}}]}], {0x0, 0x0, 0x8}}}}}}, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) wait4(0x0, 0x0, 0x0, 0x0) shmdt(r3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000001040)={0x0, 0x0, 0x20, 0xffffffffeffffffc, 0x3}, &(0x7f0000001080)=0x18) syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") open(&(0x7f0000000780)='./bus\x00', 0x1c583e, 0x20) socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000008c0)=';', 0x1) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) r7 = dup2(0xffffffffffffffff, r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000fc0)='jbd2_shrink_scan_exit\x00', r7}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44804}, 0x40000) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x80, 0x6, 0x301, 0x0, 0x1, 0xfe, 0x0}) 2.342656409s ago: executing program 4 (id=2167): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/route\x00') read$eventfd(r1, &(0x7f0000000200), 0x8) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = gettid() ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x4, 0x0}, 0x8) signalfd4(r2, &(0x7f0000000580)={[0x8]}, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x21, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000500000000000000ff", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000770000001848000003000000000000000000000085000000c500000085100000fc5cac8cd45af9cf080000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xa1, &(0x7f0000000480)=""/161, 0x40f00, 0x16, '\x00', r5, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xf, 0x7, 0x9}, 0x10, r6, r3, 0x0, &(0x7f00000005c0)=[r3, r2, r1, r2, r1, r1], 0x0, 0x10, 0x2d, @void, @value}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) llistxattr(0x0, 0x0, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') write(0xffffffffffffffff, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r9 = dup3(r8, 0xffffffffffffffff, 0x0) fchdir(r9) r10 = inotify_init1(0x0) inotify_add_watch(r10, &(0x7f0000000040)='.\x00', 0x140002d2) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xee01) tee(r2, r7, 0xfffffffffffffc01, 0x0) 2.268313699s ago: executing program 1 (id=2168): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) close_range(r1, r2, 0x0) 2.266155269s ago: executing program 1 (id=2170): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x44}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') close_range(r2, 0xffffffffffffffff, 0x0) 2.175785758s ago: executing program 1 (id=2171): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/route\x00') read$eventfd(r1, &(0x7f0000000200), 0x8) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = gettid() ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x4, 0x0}, 0x8) r7 = signalfd4(r2, &(0x7f0000000580)={[0x8]}, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x21, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000500000000000000ff", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000770000001848000003000000000000000000000085000000c500000085100000fc5cac8cd45af9cf080000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xa1, &(0x7f0000000480)=""/161, 0x40f00, 0x16, '\x00', r5, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xf, 0x7, 0x9}, 0x10, r6, r3, 0x0, &(0x7f00000005c0)=[r3, r2, r1, r2, r1, r7, r1], 0x0, 0x10, 0x2d, @void, @value}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) llistxattr(0x0, 0x0, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r10 = memfd_create(&(0x7f0000000340)='D\xa3\xd5Wj\x00\x00x0\xc1\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xc9\rDa\x16\xbd\x1a\xb2w\b', 0x0) write(r10, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8", 0x3d) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r10, 0x0) r11 = dup3(r9, r10, 0x0) fchdir(r11) r12 = inotify_init1(0x0) inotify_add_watch(r12, &(0x7f0000000040)='.\x00', 0x140002d2) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xee01) tee(r2, r8, 0xfffffffffffffc01, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000700)=ANY=[@ANYBLOB="aa0180c200000088a82e0081001600080045003e960068000000069078ac1414bbac1414aa00004e220000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6cc200009078000004020000"], 0x0) 2.169404078s ago: executing program 6 (id=2172): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'ip6gre0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x7, 0x20040001}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000680), 0x5, 0xda180) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x703de17c3895e358, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x360, 0x11, 0x148, 0x360, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x66d) 2.030925018s ago: executing program 3 (id=2174): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010006080800418e00000004", 0x56}], 0x1) 1.779695397s ago: executing program 3 (id=2175): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000009, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$bt_BT_SECURITY(r0, 0x111, 0x3, 0x0, 0x20000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000080000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="168065374cbc0000000000000004000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newsa={0x138, 0x10, 0x113, 0x0, 0x25dfdbfb, {{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xee00}, {@in=@private=0x200000, 0x0, 0x2b}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x400000000}, {0x0, 0x80}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x8880) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="44001500100009060000cccf4907000000000000", @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRESOCT=r1, @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x5811}, 0x0) 1.594935306s ago: executing program 3 (id=2176): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r1 = dup2(r0, r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001500)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r1, 0x1276, 0x0) 1.228398695s ago: executing program 3 (id=2177): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={r9, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={r9, 0xcd81, 0x800}, 0x8) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) splice(r3, 0x0, r6, 0x0, 0x25a5, 0x0) 1.228057725s ago: executing program 4 (id=2178): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x56, &(0x7f00000016c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x20, 0x2b, 0x0, @private2, @local, {[@hopopts={0x3c, 0x1, '\x00', [@generic={0x8}, @calipso={0x7, 0x8, {0x1, 0x0, 0x4, 0x6}}]}], {0x0, 0x0, 0x8}}}}}}, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) wait4(0x0, 0x0, 0x0, 0x0) shmdt(r3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000001040)={0x0, 0x0, 0x20, 0xffffffffeffffffc, 0x3}, &(0x7f0000001080)=0x18) syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$eJzs3U9rI2UcB/Bf2vTv2qbquroL4oNeFCFue/DkpcguiAWl2gUVhFmbamialCYUIuLWkyfBlyHq0ZsgvoFevHgWBJFePO5BHGmT1aZJu7ptU5HP5zIPzzzfeWYyzMCE+TF7L32+sb7WLK9lrRgpFKK4ORbFuylSjMRodOzEc7d+/OnJN956+9XFpaUbyyndXHxz/sWU0uxT373z0ddPf9+6dOub2W8nYnfu3b3fFn7evbJ7de+Pr6LaTNVmqjdaKUu3G41WdrtWSavV5no5pddrlaxZSdV6s7LVs36t1tjcbKesvjozvblVaTZTVm+n9Uo7tQqptdVO2ftZtZ7K5XKamQ5OY+XLu3meR+T5WIxHnuf5VEzHpXgoZmI2SjEXD8cj8WhcjsfiSjweT8TVg1EXvd8AAAAAAAAAAAAAAAAAAADw/3Kf+v+C+n8AAAAAAAAAAAAAAAAAAAA4f0fr/4sRvv8PAAAAAAAAAAAAAAAAAAAAQ3af7/8fqf9/Xv0/AAAAAAAAAAAAAAAAAAAAnIfJzmI5pcmIjU+3V7ZXOstO/+JaVKMWlbgepfg9Dqr/Ozrtm68s3bieDszFCxt3uvk72yujvfn5sVLMFQbm5zv51JufiOnD+YUoxeXB8y8MzE/Gs8/s5z/p5MtRih/ei0bUYjWi0D36g/zH8ym9/NrSVG/+2v64Y42e82kBAACAs1ROf+l/ft/pDhq4vrOq+3yeuiMLJ/w/cOT5vBjXihd11NzTbH+4ntVqla0HbIwfv53x0225r1GIiCwO98xO/7K8P/mZTfGgjdGhTjp28phTnNMo/gd+zDNo/PrFoZ7JGO7sI91LIqvt3z//WSp28vxcd2zgxThxUur4e0ZhCPclhuPvk37RewIAAAAAAAAAAMC/MfDtv6mI6Hsf8IO+nnuvh/fG+7d8/OyfDeEIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mQHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFcBAAD///ME0UM=") open(&(0x7f0000000780)='./bus\x00', 0x1c583e, 0x20) socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000008c0)=';', 0x1) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) r7 = dup2(0xffffffffffffffff, r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000fc0)='jbd2_shrink_scan_exit\x00', r7}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44804}, 0x40000) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x80, 0x6, 0x301, 0x0, 0x1, 0xfe, 0x0}) 1.136387994s ago: executing program 1 (id=2179): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0xff, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) getpid() r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) setresuid(0x0, 0x0, 0xee00) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x15, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@ldst={0x3, 0x0, 0x0, 0xa, 0x3, 0xc, 0x1}, @generic={0x7, 0x1, 0x4, 0x7, 0x8}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) 1.080423744s ago: executing program 0 (id=2180): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.080068594s ago: executing program 6 (id=2181): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x44}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') close_range(r2, 0xffffffffffffffff, 0x0) 1.028286874s ago: executing program 0 (id=2182): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) close_range(r1, r2, 0x0) 1.027856524s ago: executing program 0 (id=2183): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/route\x00') read$eventfd(r0, &(0x7f0000000200), 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = gettid() ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x4, 0x0}, 0x8) r6 = signalfd4(r1, &(0x7f0000000580)={[0x8]}, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x21, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000500000000000000ffffff7f18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000770000001848000003000000000000000000000085000000c500000085100000fc5cac8cd45af9cf080000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xa1, &(0x7f0000000480)=""/161, 0x40f00, 0x16, '\x00', r4, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xf, 0x7, 0x9}, 0x10, r5, r2, 0x0, &(0x7f00000005c0)=[r2, r1, r0, r1, r0, r6, r0], 0x0, 0x10, 0x2d, @void, @value}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) llistxattr(0x0, 0x0, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r9 = memfd_create(&(0x7f0000000340)='D\xa3\xd5Wj\x00\x00x0\xc1\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xc9\rDa\x16\xbd\x1a\xb2w\b', 0x0) write(r9, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r9, 0x0) r10 = dup3(r8, r9, 0x0) fchdir(r10) r11 = inotify_init1(0x0) inotify_add_watch(r11, &(0x7f0000000040)='.\x00', 0x140002d2) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xee01) tee(r1, r7, 0xfffffffffffffc01, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000700)=ANY=[@ANYBLOB="aa0180c200000088a82e0081001600080045003e960068000000069078ac1414bbac1414aa00004e220000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6cc200009078000004020000"], 0x0) 878.566433ms ago: executing program 4 (id=2184): r0 = open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x10, 0x20010, r0, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = dup(r2) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 811.578413ms ago: executing program 4 (id=2185): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010006080800418e00000004fc", 0x57}], 0x1) 763.863643ms ago: executing program 4 (id=2186): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/route\x00') read$eventfd(r0, &(0x7f0000000200), 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = gettid() ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x4, 0x0}, 0x8) r6 = signalfd4(r1, &(0x7f0000000580)={[0x8]}, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x21, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000500000000000000ffffff7f18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000770000001848000003000000000000000000000085000000c500000085100000fc5cac8cd45af9cf080000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xa1, &(0x7f0000000480)=""/161, 0x40f00, 0x16, '\x00', r4, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xf, 0x7, 0x9}, 0x10, r5, r2, 0x0, &(0x7f00000005c0)=[r2, r1, r0, r1, r0, r6, r0], 0x0, 0x10, 0x2d, @void, @value}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) llistxattr(0x0, 0x0, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r9 = memfd_create(&(0x7f0000000340)='D\xa3\xd5Wj\x00\x00x0\xc1\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xc9\rDa\x16\xbd\x1a\xb2w\b', 0x0) write(r9, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r9, 0x0) r10 = dup3(r8, r9, 0x0) fchdir(r10) r11 = inotify_init1(0x0) inotify_add_watch(r11, &(0x7f0000000040)='.\x00', 0x140002d2) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xee01) tee(r1, r7, 0xfffffffffffffc01, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000700)=ANY=[@ANYBLOB="aa0180c200000088a82e0081001600080045003e960068000000069078ac1414bbac1414aa00004e220000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6cc200009078000004020000"], 0x0) 704.037673ms ago: executing program 6 (id=2187): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r1 = dup2(r0, r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001500)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r1, 0x1276, 0x0) 509.064342ms ago: executing program 6 (id=2188): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r1 = dup2(r0, r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001500)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r1, 0x1276, 0x0) 397.242911ms ago: executing program 3 (id=2189): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0x3d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 241.455331ms ago: executing program 3 (id=2190): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) syz_usb_connect$cdc_ecm(0x0, 0x77, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@ldst={0x2, 0x0, 0x1, 0x1, 0xb, 0x16, 0x1}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @generic={0x1, 0x4, 0x6, 0x1, 0x1}, @generic={0xfd, 0x4, 0x2, 0x5, 0x7}, @exit]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/sync_on_suspend', 0x28080, 0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x13100, 0x2, 0x19d}, &(0x7f0000000240)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$inet(0x2, 0x3, 0x5) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r6 = socket$inet(0x2, 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) getsockopt$inet_buf(r6, 0x0, 0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r7, &(0x7f0000000340)=ANY=[], 0xff2e) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 200.567011ms ago: executing program 1 (id=2191): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x100000800005, 0x68022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa911, 0x0, @perf_config_ext={0x100005, 0xfffffffffffffffe}, 0x484b500c48235b64, 0x0, 0x0, 0x8, 0x3, 0x3, 0x204, 0x0, 0x6, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x2e3, 0x9, 0x6, 0x4}]}) sendfile(0xffffffffffffffff, r5, 0x0, 0x100) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000700)={0x3, 'vlan0\x00', {0x7fffffff}, 0xfe00}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xb1, 0x0, 0x7ffc1ff8}]}) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r7) 200.33103ms ago: executing program 6 (id=2192): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 172.84799ms ago: executing program 0 (id=2193): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'ip6gre0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x7, 0x20040001}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000680), 0x5, 0xda180) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x703de17c3895e358, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x360, 0x11, 0x148, 0x360, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x66d) 0s ago: executing program 6 (id=2194): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) syz_usb_connect$cdc_ecm(0x0, 0x77, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@ldst={0x2, 0x0, 0x1, 0x1, 0xb, 0x16, 0x1}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @generic={0x1, 0x4, 0x6, 0x1, 0x1}, @generic={0xfd, 0x4, 0x2, 0x5, 0x7}, @exit]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/sync_on_suspend', 0x28080, 0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x13100, 0x2, 0x19d}, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$inet(0x2, 0x3, 0x5) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r6 = socket$inet(0x2, 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) getsockopt$inet_buf(r6, 0x0, 0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r7, &(0x7f0000000340)=ANY=[], 0xff2e) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kernel console output (not intermixed with test programs): 278fdfcda9 code=0x7ffc0000 [ 134.578852][ T29] audit: type=1326 audit(3476467540.975:19634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8019 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278fdfcda9 code=0x7ffc0000 [ 134.602353][ T29] audit: type=1326 audit(3476467540.975:19635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8019 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f278fdfcda9 code=0x7ffc0000 [ 134.625858][ T29] audit: type=1326 audit(3476467540.986:19636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8019 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278fdfcda9 code=0x7ffc0000 [ 134.649341][ T29] audit: type=1326 audit(3476467540.996:19637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8019 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f278fdfcda9 code=0x7ffc0000 [ 134.672803][ T29] audit: type=1326 audit(3476467540.996:19638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8019 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278fdfcda9 code=0x7ffc0000 [ 134.699968][ T8027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.752360][ T792] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 134.767489][ T792] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 898 with error 28 [ 134.767759][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.779823][ T792] EXT4-fs (loop3): This should not happen!! Data will be lost [ 134.779823][ T792] [ 134.779837][ T792] EXT4-fs (loop3): Total free blocks count 0 [ 134.779847][ T792] EXT4-fs (loop3): Free/Dirty block details [ 134.779856][ T792] EXT4-fs (loop3): free_blocks=2415919104 [ 134.779882][ T792] EXT4-fs (loop3): dirty_blocks=928 [ 134.779891][ T792] EXT4-fs (loop3): Block reservation details [ 134.779900][ T792] EXT4-fs (loop3): i_reserved_data_blocks=58 [ 134.783944][ T792] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 134.910281][ T8033] sch_tbf: burst 0 is lower than device bond_slave_1 mtu (1514) ! [ 134.924869][ T8033] netlink: '+u[@': attribute type 10 has an invalid length. [ 134.941803][ T8035] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1625'. [ 135.710699][ T8044] loop3: detected capacity change from 0 to 512 [ 135.728818][ T8044] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 135.736946][ T8044] EXT4-fs (loop3): orphan cleanup on readonly fs [ 135.743770][ T8044] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 135.759074][ T8044] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 135.768845][ T8044] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1630: bg 0: block 40: padding at end of block bitmap is not set [ 135.783951][ T8044] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 135.794978][ T8044] EXT4-fs (loop3): 1 truncate cleaned up [ 135.800966][ T8044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.816928][ T8044] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #16: comm syz.3.1630: corrupted xattr block 31: invalid header [ 135.830517][ T8044] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 135.841274][ T8044] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #16: comm syz.3.1630: corrupted xattr block 31: invalid header [ 135.855703][ T8044] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 135.864674][ T8044] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.1630: bad symlink. [ 135.889418][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.936456][ T8059] loop3: detected capacity change from 0 to 2048 [ 135.958663][ T8059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.987467][ T8064] loop1: detected capacity change from 0 to 2048 [ 136.015699][ T8064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.040427][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.162208][ T8071] loop5: detected capacity change from 0 to 2048 [ 136.173339][ T8068] loop1: detected capacity change from 0 to 8192 [ 136.194259][ T8068] vfat: Unknown parameter 'kfree' [ 136.209242][ T8071] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.254067][ T8071] EXT4-fs error (device loop5): ext4_find_extent:938: inode #2: comm syz.5.1638: pblk 31 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 136.384261][ T7641] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.463977][ T8094] FAULT_INJECTION: forcing a failure. [ 136.463977][ T8094] name failslab, interval 1, probability 0, space 0, times 0 [ 136.476689][ T8094] CPU: 0 UID: 0 PID: 8094 Comm: syz.5.1646 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 136.476712][ T8094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 136.476723][ T8094] Call Trace: [ 136.476729][ T8094] [ 136.476736][ T8094] dump_stack_lvl+0xf2/0x150 [ 136.476761][ T8094] dump_stack+0x15/0x1a [ 136.476780][ T8094] should_fail_ex+0x24a/0x260 [ 136.476847][ T8094] ? legacy_init_fs_context+0x31/0x70 [ 136.476872][ T8094] should_failslab+0x8f/0xb0 [ 136.476892][ T8094] __kmalloc_cache_noprof+0x4e/0x320 [ 136.476927][ T8094] legacy_init_fs_context+0x31/0x70 [ 136.476949][ T8094] alloc_fs_context+0x3fb/0x4e0 [ 136.476972][ T8094] fs_context_for_mount+0x21/0x30 [ 136.476994][ T8094] do_new_mount+0xf3/0x690 [ 136.477056][ T8094] path_mount+0x49b/0xb30 [ 136.477146][ T8094] __se_sys_mount+0x27f/0x2d0 [ 136.477165][ T8094] ? fput+0x1c4/0x200 [ 136.477192][ T8094] __x64_sys_mount+0x67/0x80 [ 136.477216][ T8094] x64_sys_call+0x2c84/0x2dc0 [ 136.477242][ T8094] do_syscall_64+0xc9/0x1c0 [ 136.477265][ T8094] ? clear_bhb_loop+0x55/0xb0 [ 136.477324][ T8094] ? clear_bhb_loop+0x55/0xb0 [ 136.477348][ T8094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.477371][ T8094] RIP: 0033:0x7f4de8d7cda9 [ 136.477384][ T8094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.477401][ T8094] RSP: 002b:00007f4de73e1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 136.477446][ T8094] RAX: ffffffffffffffda RBX: 00007f4de8f95fa0 RCX: 00007f4de8d7cda9 [ 136.477456][ T8094] RDX: 0000000020000100 RSI: 0000000020000500 RDI: 0000000000000000 [ 136.477465][ T8094] RBP: 00007f4de73e1090 R08: 0000000020000a40 R09: 0000000000000000 [ 136.477475][ T8094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.477484][ T8094] R13: 0000000000000000 R14: 00007f4de8f95fa0 R15: 00007ffc0c7d8e18 [ 136.477498][ T8094] [ 136.716775][ T8098] loop5: detected capacity change from 0 to 512 [ 136.726759][ T8096] loop0: detected capacity change from 0 to 2048 [ 136.747110][ T8098] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.759777][ T8098] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.762937][ T138] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 136.772326][ T8096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.788274][ T138] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 136.809265][ T138] EXT4-fs (loop3): This should not happen!! Data will be lost [ 136.809265][ T138] [ 136.814198][ T8098] 9pnet_fd: Insufficient options for proto=fd [ 136.818998][ T138] EXT4-fs (loop3): Total free blocks count 0 [ 136.831369][ T138] EXT4-fs (loop3): Free/Dirty block details [ 136.837331][ T138] EXT4-fs (loop3): free_blocks=2415919104 [ 136.843073][ T138] EXT4-fs (loop3): dirty_blocks=2128 [ 136.848352][ T138] EXT4-fs (loop3): Block reservation details [ 136.849091][ T8098] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #19: comm syz.5.1648: corrupted inode contents [ 136.854328][ T138] EXT4-fs (loop3): i_reserved_data_blocks=133 [ 136.866165][ T138] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 62 with error 28 [ 136.875611][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.886150][ T8098] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #19: comm syz.5.1648: mark_inode_dirty error [ 136.907151][ T8098] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #19: comm syz.5.1648: corrupted inode contents [ 136.919614][ T8098] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3006: inode #19: comm syz.5.1648: mark_inode_dirty error [ 136.932231][ T8098] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3009: inode #19: comm syz.5.1648: mark inode dirty (error -117) [ 136.947585][ T8098] EXT4-fs warning (device loop5): ext4_evict_inode:276: xattr delete (err -117) [ 137.007262][ T7641] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.017712][ T8108] geneve2: entered promiscuous mode [ 137.022964][ T8108] geneve2: entered allmulticast mode [ 137.089552][ T8116] netem: change failed [ 137.098919][ T8108] loop0: detected capacity change from 0 to 512 [ 137.105574][ T8108] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.112951][ T8108] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 137.122200][ T8108] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 137.134258][ T8108] System zones: 1-12 [ 137.139751][ T8108] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1651: corrupted in-inode xattr: e_value size too large [ 137.164909][ T8108] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1651: couldn't read orphan inode 15 (err -117) [ 137.217583][ T8108] wireguard0: entered promiscuous mode [ 137.223074][ T8108] wireguard0: entered allmulticast mode [ 137.244572][ T8128] 9pnet_fd: Insufficient options for proto=fd [ 137.250812][ T8126] FAULT_INJECTION: forcing a failure. [ 137.250812][ T8126] name failslab, interval 1, probability 0, space 0, times 0 [ 137.263492][ T8126] CPU: 1 UID: 0 PID: 8126 Comm: syz.4.1656 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 137.263552][ T8126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 137.263563][ T8126] Call Trace: [ 137.263568][ T8126] [ 137.263575][ T8126] dump_stack_lvl+0xf2/0x150 [ 137.263600][ T8126] dump_stack+0x15/0x1a [ 137.263618][ T8126] should_fail_ex+0x24a/0x260 [ 137.263653][ T8126] ? __hw_addr_add_ex+0x13d/0x360 [ 137.263673][ T8126] should_failslab+0x8f/0xb0 [ 137.263691][ T8126] __kmalloc_cache_noprof+0x4e/0x320 [ 137.263754][ T8126] __hw_addr_add_ex+0x13d/0x360 [ 137.263777][ T8126] dev_addr_init+0xb2/0x120 [ 137.263798][ T8126] alloc_netdev_mqs+0x1e1/0xa20 [ 137.263830][ T8126] ? __pfx_bond_setup+0x10/0x10 [ 137.263848][ T8126] rtnl_create_link+0x233/0x680 [ 137.263886][ T8126] rtnl_newlink_create+0x133/0x5d0 [ 137.263908][ T8126] rtnl_newlink+0xe9f/0x1250 [ 137.264048][ T8126] ? strncpy_from_kernel_nofault+0x87/0x140 [ 137.264084][ T8126] ? fixup_exception+0x7c0/0xca0 [ 137.264103][ T8126] ? memcg_list_lru_alloc+0xce/0x4e0 [ 137.264129][ T8126] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 137.264174][ T8126] ? __rcu_read_unlock+0x4e/0x70 [ 137.264193][ T8126] ? avc_has_perm_noaudit+0x1cc/0x210 [ 137.264217][ T8126] ? selinux_capable+0x1f2/0x260 [ 137.264244][ T8126] ? security_capable+0x81/0x90 [ 137.264271][ T8126] ? ns_capable+0x7d/0xb0 [ 137.264289][ T8126] ? __pfx_rtnl_newlink+0x10/0x10 [ 137.264317][ T8126] rtnetlink_rcv_msg+0x651/0x710 [ 137.264341][ T8126] ? ref_tracker_free+0x3a5/0x410 [ 137.264425][ T8126] ? __dev_queue_xmit+0x186/0x2090 [ 137.264452][ T8126] netlink_rcv_skb+0x12c/0x230 [ 137.264467][ T8126] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 137.264530][ T8126] rtnetlink_rcv+0x1c/0x30 [ 137.264552][ T8126] netlink_unicast+0x599/0x670 [ 137.264577][ T8126] netlink_sendmsg+0x5cc/0x6e0 [ 137.264596][ T8126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.264636][ T8126] __sock_sendmsg+0x140/0x180 [ 137.264657][ T8126] ____sys_sendmsg+0x312/0x410 [ 137.264699][ T8126] __sys_sendmsg+0x19d/0x230 [ 137.264739][ T8126] __x64_sys_sendmsg+0x46/0x50 [ 137.264766][ T8126] x64_sys_call+0x2734/0x2dc0 [ 137.264788][ T8126] do_syscall_64+0xc9/0x1c0 [ 137.264854][ T8126] ? clear_bhb_loop+0x55/0xb0 [ 137.264878][ T8126] ? clear_bhb_loop+0x55/0xb0 [ 137.264901][ T8126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.264924][ T8126] RIP: 0033:0x7f5eb805cda9 [ 137.264937][ T8126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.265027][ T8126] RSP: 002b:00007f5eb66c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.265066][ T8126] RAX: ffffffffffffffda RBX: 00007f5eb8275fa0 RCX: 00007f5eb805cda9 [ 137.265078][ T8126] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000003 [ 137.265089][ T8126] RBP: 00007f5eb66c7090 R08: 0000000000000000 R09: 0000000000000000 [ 137.265100][ T8126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 137.265111][ T8126] R13: 0000000000000000 R14: 00007f5eb8275fa0 R15: 00007ffc8fe5af18 [ 137.265128][ T8126] [ 137.580607][ T8132] SELinux: security policydb version 18 (MLS) not backwards compatible [ 137.589204][ T8132] SELinux: failed to load policy [ 137.616318][ T8134] loop4: detected capacity change from 0 to 2048 [ 137.753061][ T8141] loop4: detected capacity change from 0 to 2048 [ 137.760667][ T8141] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 137.772261][ T8143] loop0: detected capacity change from 0 to 2048 [ 137.788776][ T8143] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 137.951734][ T8153] xt_socket: unknown flags 0xc [ 137.960429][ T8156] 9pnet_fd: Insufficient options for proto=fd [ 138.039880][ T8163] loop5: detected capacity change from 0 to 2048 [ 138.392023][ T8172] loop1: detected capacity change from 0 to 2048 [ 138.398603][ T8172] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 138.442827][ T8176] netem: change failed [ 138.791343][ T8179] loop4: detected capacity change from 0 to 2048 [ 138.880443][ T8184] SELinux: security_context_str_to_sid (st) failed with errno=-22 [ 138.929802][ T8189] 9pnet_fd: Insufficient options for proto=fd [ 139.033331][ T8193] loop0: detected capacity change from 0 to 2048 [ 139.145574][ T8202] loop0: detected capacity change from 0 to 2048 [ 139.153332][ T8202] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 139.178929][ T29] kauditd_printk_skb: 1629 callbacks suppressed [ 139.178943][ T29] audit: type=1326 audit(3476467545.952:21267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8197 comm="syz.5.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4de8d73d67 code=0x7ffc0000 [ 139.208650][ T29] audit: type=1326 audit(3476467545.952:21268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8197 comm="syz.5.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4de8d18fa9 code=0x7ffc0000 [ 139.232119][ T29] audit: type=1326 audit(3476467545.952:21269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8197 comm="syz.5.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f4de8d7cda9 code=0x7ffc0000 [ 139.255645][ T29] audit: type=1326 audit(3476467545.963:21270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.4.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5eb8053d67 code=0x7ffc0000 [ 139.279043][ T29] audit: type=1326 audit(3476467545.963:21271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.4.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5eb7ff8fa9 code=0x7ffc0000 [ 139.302462][ T29] audit: type=1326 audit(3476467545.963:21272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8178 comm="syz.4.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb805cda9 code=0x7ffc0000 [ 139.327837][ T29] audit: type=1326 audit(3476467546.099:21273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8197 comm="syz.5.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4de8d73d67 code=0x7ffc0000 [ 139.351395][ T29] audit: type=1326 audit(3476467546.099:21274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8197 comm="syz.5.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4de8d18fa9 code=0x7ffc0000 [ 139.374829][ T29] audit: type=1326 audit(3476467546.099:21275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8197 comm="syz.5.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f4de8d7cda9 code=0x7ffc0000 [ 139.398887][ T29] audit: type=1326 audit(3476467546.099:21276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8197 comm="syz.5.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4de8d73d67 code=0x7ffc0000 [ 139.607493][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1694'. [ 139.640991][ T8222] loop1: detected capacity change from 0 to 2048 [ 139.698819][ T8228] 9pnet_fd: Insufficient options for proto=fd [ 139.726947][ T8230] netem: change failed [ 139.820210][ T8234] loop4: detected capacity change from 0 to 2048 [ 139.828696][ T8234] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 139.885480][ T8242] loop5: detected capacity change from 0 to 256 [ 139.899797][ T8238] loop3: detected capacity change from 0 to 2048 [ 139.915189][ T8243] FAULT_INJECTION: forcing a failure. [ 139.915189][ T8243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.928283][ T8243] CPU: 1 UID: 0 PID: 8243 Comm: syz.4.1701 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 139.928305][ T8243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 139.928315][ T8243] Call Trace: [ 139.928319][ T8243] [ 139.928330][ T8243] dump_stack_lvl+0xf2/0x150 [ 139.928364][ T8243] dump_stack+0x15/0x1a [ 139.928383][ T8243] should_fail_ex+0x24a/0x260 [ 139.928409][ T8243] should_fail+0xb/0x10 [ 139.928527][ T8243] should_fail_usercopy+0x1a/0x20 [ 139.928552][ T8243] _copy_from_user+0x1c/0xa0 [ 139.928569][ T8243] kstrtouint_from_user+0x76/0xe0 [ 139.928662][ T8243] ? 0xffffffff81000000 [ 139.928672][ T8243] ? selinux_file_permission+0x22a/0x360 [ 139.928690][ T8243] proc_fail_nth_write+0x4f/0x150 [ 139.928776][ T8243] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 139.928789][ T8243] vfs_write+0x27d/0x920 [ 139.928799][ T8243] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.928812][ T8243] ? __fget_files+0x17c/0x1c0 [ 139.928955][ T8243] ksys_write+0xe8/0x1b0 [ 139.928967][ T8243] __x64_sys_write+0x42/0x50 [ 139.928977][ T8243] x64_sys_call+0x287e/0x2dc0 [ 139.929050][ T8243] do_syscall_64+0xc9/0x1c0 [ 139.929065][ T8243] ? clear_bhb_loop+0x55/0xb0 [ 139.929152][ T8243] ? clear_bhb_loop+0x55/0xb0 [ 139.929202][ T8243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.929282][ T8243] RIP: 0033:0x7f5eb805b85f [ 139.929290][ T8243] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 139.929302][ T8243] RSP: 002b:00007f5eb66a6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 139.929313][ T8243] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5eb805b85f [ 139.929319][ T8243] RDX: 0000000000000001 RSI: 00007f5eb66a60a0 RDI: 0000000000000004 [ 139.929325][ T8243] RBP: 00007f5eb66a6090 R08: 0000000000000000 R09: 0000000000000000 [ 139.929331][ T8243] R10: 0000000020000040 R11: 0000000000000293 R12: 0000000000000001 [ 139.929338][ T8243] R13: 0000000000000001 R14: 00007f5eb8276080 R15: 00007ffc8fe5af18 [ 139.929459][ T8243] [ 140.140660][ T8244] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1700'. [ 140.158304][ T8238] loop3: p1 < > p2 < > p3 p4 [ 140.163036][ T8238] loop3: partition table partially beyond EOD, truncated [ 140.170250][ T8238] loop3: p1 start 2305 is beyond EOD, truncated [ 140.176572][ T8238] loop3: p2 start 4294902784 is beyond EOD, truncated [ 140.183361][ T8238] loop3: p3 start 3724543488 is beyond EOD, truncated [ 140.190161][ T8238] loop3: p4 size 8192 extends beyond EOD, truncated [ 140.251112][ T8257] FAULT_INJECTION: forcing a failure. [ 140.251112][ T8257] name failslab, interval 1, probability 0, space 0, times 0 [ 140.259265][ T8258] loop3: detected capacity change from 0 to 2048 [ 140.263799][ T8257] CPU: 0 UID: 0 PID: 8257 Comm: syz.4.1708 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 140.263821][ T8257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 140.263832][ T8257] Call Trace: [ 140.263838][ T8257] [ 140.263845][ T8257] dump_stack_lvl+0xf2/0x150 [ 140.263900][ T8257] dump_stack+0x15/0x1a [ 140.263919][ T8257] should_fail_ex+0x24a/0x260 [ 140.263947][ T8257] should_failslab+0x8f/0xb0 [ 140.263990][ T8257] kmem_cache_alloc_noprof+0x52/0x320 [ 140.264017][ T8257] ? security_file_alloc+0x32/0x100 [ 140.264046][ T8257] security_file_alloc+0x32/0x100 [ 140.264085][ T8257] init_file+0x5b/0x1a0 [ 140.264110][ T8257] alloc_empty_file+0xea/0x200 [ 140.264136][ T8257] alloc_file_pseudo+0xc3/0x140 [ 140.264213][ T8257] anon_inode_getfile+0xa3/0x120 [ 140.264240][ T8257] do_eventfd+0x10a/0x1b0 [ 140.264258][ T8257] __x64_sys_eventfd2+0x2d/0x40 [ 140.264275][ T8257] x64_sys_call+0x2d74/0x2dc0 [ 140.264306][ T8257] do_syscall_64+0xc9/0x1c0 [ 140.264329][ T8257] ? clear_bhb_loop+0x55/0xb0 [ 140.264353][ T8257] ? clear_bhb_loop+0x55/0xb0 [ 140.264375][ T8257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.264446][ T8257] RIP: 0033:0x7f5eb805cda9 [ 140.264459][ T8257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.264474][ T8257] RSP: 002b:00007f5eb66c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 140.264488][ T8257] RAX: ffffffffffffffda RBX: 00007f5eb8275fa0 RCX: 00007f5eb805cda9 [ 140.264523][ T8257] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.264534][ T8257] RBP: 00007f5eb66c7090 R08: 0000000000000000 R09: 0000000000000000 [ 140.264545][ T8257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.264555][ T8257] R13: 0000000000000000 R14: 00007f5eb8275fa0 R15: 00007ffc8fe5af18 [ 140.264620][ T8257] [ 140.318730][ T8253] 9pnet: Could not find request transport: fd0x0000000000000004 [ 140.493268][ T8268] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1711'. [ 140.655113][ T8292] loop4: detected capacity change from 0 to 128 [ 140.665056][ T8292] EXT4-fs: Ignoring removed nobh option [ 140.677765][ T8292] ext4 filesystem being mounted at /343/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 140.721120][ T8296] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1719'. [ 140.849316][ T8307] 9pnet_fd: Insufficient options for proto=fd [ 140.873437][ T8309] loop5: detected capacity change from 0 to 2048 [ 140.919451][ T8313] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 140.942635][ T8313] loop4: detected capacity change from 0 to 2048 [ 141.005514][ T8316] sch_tbf: burst 0 is lower than device bond_slave_1 mtu (1514) ! [ 141.017789][ T8316] netlink: '+u[@': attribute type 10 has an invalid length. [ 141.025316][ T8316] geneve1: entered promiscuous mode [ 141.037926][ T8316] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 141.330867][ T8335] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1733'. [ 141.345831][ T8335] loop0: detected capacity change from 0 to 512 [ 141.362077][ T8335] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 141.376510][ T8337] SELinux: failed to load policy [ 141.432618][ T8345] 9pnet_fd: Insufficient options for proto=fd [ 141.441714][ T8344] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1737'. [ 141.453386][ T8335] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #17: comm syz.0.1733: iget: bad i_size value: -6917529027641081756 [ 141.469550][ T8342] loop5: detected capacity change from 0 to 2048 [ 141.489127][ T8335] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1733: couldn't read orphan inode 17 (err -117) [ 141.562223][ T8353] loop3: detected capacity change from 0 to 512 [ 141.586628][ T8347] sch_tbf: burst 0 is lower than device bond_slave_1 mtu (1514) ! [ 141.595033][ T8353] ext4 filesystem being mounted at /359/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.622992][ T8359] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1742'. [ 141.639277][ T8355] FAULT_INJECTION: forcing a failure. [ 141.639277][ T8355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.652427][ T8355] CPU: 0 UID: 0 PID: 8355 Comm: syz.5.1741 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 141.652448][ T8355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 141.652457][ T8355] Call Trace: [ 141.652462][ T8355] [ 141.652467][ T8355] dump_stack_lvl+0xf2/0x150 [ 141.652489][ T8355] dump_stack+0x15/0x1a [ 141.652506][ T8355] should_fail_ex+0x24a/0x260 [ 141.652549][ T8355] should_fail+0xb/0x10 [ 141.652571][ T8355] should_fail_usercopy+0x1a/0x20 [ 141.652644][ T8355] _copy_from_user+0x1c/0xa0 [ 141.652665][ T8355] copy_msghdr_from_user+0x54/0x2a0 [ 141.652688][ T8355] ? __fget_files+0x17c/0x1c0 [ 141.652744][ T8355] __sys_sendmsg+0x13e/0x230 [ 141.652782][ T8355] __x64_sys_sendmsg+0x46/0x50 [ 141.652806][ T8355] x64_sys_call+0x2734/0x2dc0 [ 141.652875][ T8355] do_syscall_64+0xc9/0x1c0 [ 141.652897][ T8355] ? clear_bhb_loop+0x55/0xb0 [ 141.652920][ T8355] ? clear_bhb_loop+0x55/0xb0 [ 141.652997][ T8355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.653086][ T8355] RIP: 0033:0x7f4de8d7cda9 [ 141.653097][ T8355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.653111][ T8355] RSP: 002b:00007f4de73e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.653125][ T8355] RAX: ffffffffffffffda RBX: 00007f4de8f95fa0 RCX: 00007f4de8d7cda9 [ 141.653139][ T8355] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 141.653151][ T8355] RBP: 00007f4de73e1090 R08: 0000000000000000 R09: 0000000000000000 [ 141.653162][ T8355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.653253][ T8355] R13: 0000000000000000 R14: 00007f4de8f95fa0 R15: 00007ffc0c7d8e18 [ 141.653266][ T8355] [ 141.653603][ T8347] netlink: '+u[@': attribute type 10 has an invalid length. [ 141.740076][ T8361] 9pnet_fd: Insufficient options for proto=fd [ 141.765169][ T8359] xt_hashlimit: size too large, truncated to 1048576 [ 141.880323][ T8367] loop0: detected capacity change from 0 to 512 [ 141.924071][ T8367] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 141.933354][ T8367] EXT4-fs (loop0): orphan cleanup on readonly fs [ 141.940346][ T8367] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 141.962695][ T8367] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 141.987058][ T8367] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1744: bg 0: block 40: padding at end of block bitmap is not set [ 142.034685][ T8367] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 142.057980][ T8367] EXT4-fs (loop0): 1 truncate cleaned up [ 142.082317][ T8382] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 142.115314][ T8384] 9pnet_fd: Insufficient options for proto=fd [ 142.131502][ T8367] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #16: comm syz.0.1744: corrupted xattr block 31: invalid header [ 142.147050][ T8367] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 142.175084][ T8387] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #16: comm syz.0.1744: corrupted xattr block 31: invalid header [ 142.197374][ T8387] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 142.208747][ T8387] EXT4-fs error (device loop0): ext4_get_link:106: inode #16: comm syz.0.1744: bad symlink. [ 142.339848][ T8403] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1756'. [ 142.367222][ T8405] loop0: detected capacity change from 0 to 512 [ 142.384743][ T8405] ext4 filesystem being mounted at /355/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.398620][ T8405] 9pnet_fd: Insufficient options for proto=fd [ 142.423399][ T8405] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #19: comm syz.0.1757: corrupted inode contents [ 142.436457][ T8405] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #19: comm syz.0.1757: mark_inode_dirty error [ 142.448213][ T8405] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #19: comm syz.0.1757: corrupted inode contents [ 142.462229][ T8405] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3006: inode #19: comm syz.0.1757: mark_inode_dirty error [ 142.475431][ T8405] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3009: inode #19: comm syz.0.1757: mark inode dirty (error -117) [ 142.488141][ T8405] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 142.593219][ T8409] loop0: detected capacity change from 0 to 2048 [ 142.599859][ T8409] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.606400][ T8409] EXT4-fs: Ignoring removed i_version option [ 142.694318][ T8415] 9pnet_fd: Insufficient options for proto=fd [ 142.738479][ T8419] loop0: detected capacity change from 0 to 512 [ 142.745043][ T8423] netem: change failed [ 142.769127][ T8419] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 142.771554][ T8427] loop4: detected capacity change from 0 to 512 [ 142.777341][ T8419] EXT4-fs (loop0): orphan cleanup on readonly fs [ 142.783517][ T8427] EXT4-fs: Ignoring removed oldalloc option [ 142.794666][ T8419] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 142.810613][ T8419] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 142.817803][ T8419] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1762: bg 0: block 40: padding at end of block bitmap is not set [ 142.832871][ T8419] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 142.837692][ T8427] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 142.845279][ T8419] EXT4-fs (loop0): 1 truncate cleaned up [ 142.852168][ T8427] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1765: invalid indirect mapped block 8 (level 2) [ 142.861176][ T8419] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #16: comm syz.0.1762: corrupted xattr block 31: invalid header [ 142.868872][ T8427] EXT4-fs (loop4): Remounting filesystem read-only [ 142.881825][ T8419] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 142.889340][ T8427] EXT4-fs (loop4): 1 truncate cleaned up [ 142.901711][ T8419] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #16: comm syz.0.1762: corrupted xattr block 31: invalid header [ 142.903115][ T8427] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 142.916764][ T8419] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 142.931486][ T8419] EXT4-fs error (device loop0): ext4_get_link:106: inode #16: comm syz.0.1762: bad symlink. [ 143.064845][ T8436] netlink: 87 bytes leftover after parsing attributes in process `syz.0.1768'. [ 143.099065][ T8436] bond0: (slave bond_slave_0): Releasing backup interface [ 143.166011][ T8436] bond0: (slave bond_slave_1): Releasing backup interface [ 143.191370][ T8436] team0: Port device team_slave_0 removed [ 143.206496][ T8436] team0: Port device team_slave_1 removed [ 143.220730][ T8436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.228185][ T8436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.237439][ T8436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.244972][ T8436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.293370][ T8436] bond0: (slave geneve1): Releasing backup interface [ 143.560604][ T8463] 9pnet_fd: Insufficient options for proto=fd [ 143.626344][ T8467] loop5: detected capacity change from 0 to 1024 [ 143.885770][ T8473] loop3: detected capacity change from 0 to 512 [ 144.024950][ T8473] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 144.033078][ T8473] EXT4-fs (loop3): orphan cleanup on readonly fs [ 144.047918][ T8473] __quota_error: 739 callbacks suppressed [ 144.047938][ T8473] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 144.110043][ T8473] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 144.127028][ T8473] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 144.135067][ T8473] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1778: bg 0: block 40: padding at end of block bitmap is not set [ 144.150937][ T8473] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 144.163481][ T8473] EXT4-fs (loop3): 1 truncate cleaned up [ 144.171983][ T8473] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #16: comm syz.3.1778: corrupted xattr block 31: invalid header [ 144.186757][ T8473] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 144.196723][ T8473] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #16: comm syz.3.1778: corrupted xattr block 31: invalid header [ 144.204837][ T29] audit: type=1326 audit(3476467551.170:22014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8459 comm="syz.0.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1364d0cda9 code=0x7fc00000 [ 144.233420][ T29] audit: type=1400 audit(3476467551.202:22015): avc: denied { mount } for pid=8472 comm="syz.3.1778" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 144.258209][ T8473] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 144.267342][ T29] audit: type=1400 audit(3476467551.307:22016): avc: denied { create } for pid=8477 comm="syz.0.1779" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 144.289004][ T8473] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.1778: bad symlink. [ 144.299900][ T29] audit: type=1400 audit(3476467551.307:22017): avc: denied { write } for pid=8477 comm="syz.0.1779" name="file0" dev="tmpfs" ino=2001 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 144.322524][ T29] audit: type=1400 audit(3476467551.307:22018): avc: denied { open } for pid=8477 comm="syz.0.1779" path="/361/file0" dev="tmpfs" ino=2001 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 144.345422][ T29] audit: type=1400 audit(3476467551.307:22019): avc: denied { ioctl } for pid=8477 comm="syz.0.1779" path="/361/file0" dev="tmpfs" ino=2001 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 144.369861][ T29] audit: type=1400 audit(3476467551.328:22020): avc: denied { read } for pid=8472 comm="syz.3.1778" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 144.440981][ T29] audit: type=1400 audit(3476467551.485:22021): avc: denied { unlink } for pid=3297 comm="syz-executor" name="file0" dev="tmpfs" ino=2001 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 144.512327][ T29] audit: type=1400 audit(3476467551.559:22022): avc: denied { execute } for pid=8482 comm="syz.0.1781" path="/362/pids.current" dev="tmpfs" ino=2007 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 144.541118][ T8492] netem: change failed [ 145.263501][ T8497] FAULT_INJECTION: forcing a failure. [ 145.263501][ T8497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.276698][ T8497] CPU: 0 UID: 0 PID: 8497 Comm: syz.0.1785 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 145.276718][ T8497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 145.276778][ T8497] Call Trace: [ 145.276782][ T8497] [ 145.276787][ T8497] dump_stack_lvl+0xf2/0x150 [ 145.276890][ T8497] dump_stack+0x15/0x1a [ 145.276906][ T8497] should_fail_ex+0x24a/0x260 [ 145.276949][ T8497] should_fail+0xb/0x10 [ 145.276974][ T8497] should_fail_usercopy+0x1a/0x20 [ 145.277003][ T8497] _copy_from_user+0x1c/0xa0 [ 145.277059][ T8497] __sys_bpf+0x14e/0x7a0 [ 145.277110][ T8497] __x64_sys_bpf+0x43/0x50 [ 145.277127][ T8497] x64_sys_call+0x2914/0x2dc0 [ 145.277148][ T8497] do_syscall_64+0xc9/0x1c0 [ 145.277172][ T8497] ? clear_bhb_loop+0x55/0xb0 [ 145.277193][ T8497] ? clear_bhb_loop+0x55/0xb0 [ 145.277302][ T8497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.277317][ T8497] RIP: 0033:0x7f1364d0cda9 [ 145.277325][ T8497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.277335][ T8497] RSP: 002b:00007f1363377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 145.277350][ T8497] RAX: ffffffffffffffda RBX: 00007f1364f25fa0 RCX: 00007f1364d0cda9 [ 145.277356][ T8497] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 145.277363][ T8497] RBP: 00007f1363377090 R08: 0000000000000000 R09: 0000000000000000 [ 145.277369][ T8497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.277378][ T8497] R13: 0000000000000000 R14: 00007f1364f25fa0 R15: 00007ffe8c61c9b8 [ 145.277387][ T8497] [ 145.454526][ T8499] 9pnet_fd: Insufficient options for proto=fd [ 145.710810][ T8517] loop5: detected capacity change from 0 to 2048 [ 145.739910][ T8517] EXT4-fs error (device loop5): ext4_find_extent:938: inode #2: comm syz.5.1792: pblk 31 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 145.780922][ T8522] loop5: detected capacity change from 0 to 512 [ 145.808662][ T8522] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.832933][ T8522] 9pnet: Could not find request transport: f [ 145.941304][ T8530] loop5: detected capacity change from 0 to 8192 [ 145.951378][ T8530] vfat filesystem being mounted at /74/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 145.994332][ T7641] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 146.001956][ T7641] FAT-fs (loop5): Filesystem has been set read-only [ 146.009024][ T7641] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 146.073130][ T8536] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.074625][ T8539] FAULT_INJECTION: forcing a failure. [ 146.074625][ T8539] name fail_futex, interval 1, probability 0, space 0, times 1 [ 146.096261][ T8539] CPU: 1 UID: 0 PID: 8539 Comm: syz.1.1800 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 146.096280][ T8539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 146.096308][ T8539] Call Trace: [ 146.096312][ T8539] [ 146.096317][ T8539] dump_stack_lvl+0xf2/0x150 [ 146.096337][ T8539] dump_stack+0x15/0x1a [ 146.096353][ T8539] should_fail_ex+0x24a/0x260 [ 146.096376][ T8539] should_fail+0xb/0x10 [ 146.096469][ T8539] get_futex_key+0x4f4/0x740 [ 146.096487][ T8539] futex_wait_setup+0x4c/0x1f0 [ 146.096510][ T8539] futex_wait_requeue_pi+0x1bb/0x6d0 [ 146.096596][ T8539] ? __pfx_futex_wake_mark+0x10/0x10 [ 146.096626][ T8539] do_futex+0x146/0x370 [ 146.096682][ T8539] __se_sys_futex+0x25d/0x3a0 [ 146.096699][ T8539] ? fput+0x1c4/0x200 [ 146.096722][ T8539] __x64_sys_futex+0x78/0x90 [ 146.096740][ T8539] x64_sys_call+0x2d6a/0x2dc0 [ 146.096759][ T8539] do_syscall_64+0xc9/0x1c0 [ 146.096790][ T8539] ? clear_bhb_loop+0x55/0xb0 [ 146.096810][ T8539] ? clear_bhb_loop+0x55/0xb0 [ 146.096846][ T8539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.096865][ T8539] RIP: 0033:0x7f278fdfcda9 [ 146.096915][ T8539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.096929][ T8539] RSP: 002b:00007f278e467038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 146.096944][ T8539] RAX: ffffffffffffffda RBX: 00007f2790015fa0 RCX: 00007f278fdfcda9 [ 146.096953][ T8539] RDX: 0000000000000000 RSI: 000080000000000b RDI: 000000002000cffc [ 146.096962][ T8539] RBP: 00007f278e467090 R08: 0000000020048000 R09: 0000000000000300 [ 146.096971][ T8539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.097057][ T8539] R13: 0000000000000000 R14: 00007f2790015fa0 R15: 00007ffd3a0be828 [ 146.097070][ T8539] [ 146.323931][ T8536] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.366618][ T8545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.374082][ T8545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.407290][ T8545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.445784][ T8536] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.735588][ T8536] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.839611][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1809'. [ 146.900502][ T8536] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.012546][ T8536] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.032778][ T8569] ip6gre0: entered promiscuous mode [ 147.043200][ T8569] vlan2: entered promiscuous mode [ 147.045118][ T8569] ip6gre0: left promiscuous mode [ 147.058430][ T8536] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.065176][ T8536] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.228571][ T8561] lo speed is unknown, defaulting to 1000 [ 147.448825][ T8561] chnl_net:caif_netlink_parms(): no params data found [ 147.505796][ T8561] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.512965][ T8561] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.520375][ T8561] bridge_slave_0: entered allmulticast mode [ 147.526800][ T8561] bridge_slave_0: entered promiscuous mode [ 147.534465][ T8561] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.541604][ T8561] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.550588][ T8561] bridge_slave_1: entered allmulticast mode [ 147.557003][ T8561] bridge_slave_1: entered promiscuous mode [ 147.580854][ T8561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.593511][ T8561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.613527][ T8561] team0: Port device team_slave_0 added [ 147.621252][ T8561] team0: Port device team_slave_1 added [ 147.638912][ T8561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.645941][ T8561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.671930][ T8561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.685592][ T8561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.692654][ T8561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.718631][ T8561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.760360][ T8561] hsr_slave_0: entered promiscuous mode [ 147.773026][ T8561] hsr_slave_1: entered promiscuous mode [ 147.785898][ T8561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.790839][ T8602] loop1: detected capacity change from 0 to 512 [ 147.804173][ T8561] Cannot create hsr debugfs directory [ 147.804555][ T8604] FAULT_INJECTION: forcing a failure. [ 147.804555][ T8604] name failslab, interval 1, probability 0, space 0, times 0 [ 147.822221][ T8604] CPU: 1 UID: 0 PID: 8604 Comm: syz.3.1819 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 147.822240][ T8604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 147.822327][ T8604] Call Trace: [ 147.822384][ T8604] [ 147.822390][ T8604] dump_stack_lvl+0xf2/0x150 [ 147.822415][ T8604] dump_stack+0x15/0x1a [ 147.822507][ T8604] should_fail_ex+0x24a/0x260 [ 147.822548][ T8604] should_failslab+0x8f/0xb0 [ 147.822570][ T8604] kmem_cache_alloc_noprof+0x52/0x320 [ 147.822620][ T8604] ? skb_clone+0x154/0x1f0 [ 147.822651][ T8604] skb_clone+0x154/0x1f0 [ 147.822706][ T8604] __netlink_deliver_tap+0x2bd/0x4f0 [ 147.822726][ T8604] netlink_unicast+0x64a/0x670 [ 147.822750][ T8604] netlink_sendmsg+0x5cc/0x6e0 [ 147.822768][ T8604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.822820][ T8604] __sock_sendmsg+0x140/0x180 [ 147.822840][ T8604] ____sys_sendmsg+0x312/0x410 [ 147.822891][ T8604] __sys_sendmsg+0x19d/0x230 [ 147.822926][ T8604] __x64_sys_sendmsg+0x46/0x50 [ 147.822953][ T8604] x64_sys_call+0x2734/0x2dc0 [ 147.823033][ T8604] do_syscall_64+0xc9/0x1c0 [ 147.823060][ T8604] ? clear_bhb_loop+0x55/0xb0 [ 147.823160][ T8604] ? clear_bhb_loop+0x55/0xb0 [ 147.823182][ T8604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.823251][ T8604] RIP: 0033:0x7f7b4b4bcda9 [ 147.823263][ T8604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.823278][ T8604] RSP: 002b:00007f7b49b21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.823352][ T8604] RAX: ffffffffffffffda RBX: 00007f7b4b6d5fa0 RCX: 00007f7b4b4bcda9 [ 147.823364][ T8604] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 147.823375][ T8604] RBP: 00007f7b49b21090 R08: 0000000000000000 R09: 0000000000000000 [ 147.823384][ T8604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.823393][ T8604] R13: 0000000000000000 R14: 00007f7b4b6d5fa0 R15: 00007ffe483f7ef8 [ 147.823406][ T8604] [ 148.061637][ T8602] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 148.077139][ T8602] EXT4-fs (loop1): orphan cleanup on readonly fs [ 148.084872][ T8602] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 148.100931][ T8602] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 148.108175][ T8602] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1818: bg 0: block 40: padding at end of block bitmap is not set [ 148.128701][ T8602] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 148.138695][ T8615] FAULT_INJECTION: forcing a failure. [ 148.138695][ T8615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.142826][ T8602] EXT4-fs (loop1): 1 truncate cleaned up [ 148.151748][ T8615] CPU: 1 UID: 0 PID: 8615 Comm: syz.3.1823 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 148.151771][ T8615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 148.151781][ T8615] Call Trace: [ 148.151786][ T8615] [ 148.151792][ T8615] dump_stack_lvl+0xf2/0x150 [ 148.151817][ T8615] dump_stack+0x15/0x1a [ 148.151904][ T8615] should_fail_ex+0x24a/0x260 [ 148.151932][ T8615] should_fail+0xb/0x10 [ 148.151956][ T8615] should_fail_usercopy+0x1a/0x20 [ 148.151984][ T8615] strncpy_from_user+0x25/0x210 [ 148.152080][ T8615] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 148.152108][ T8615] ? getname_flags+0x81/0x3b0 [ 148.152213][ T8615] getname_flags+0xb0/0x3b0 [ 148.152238][ T8615] user_path_at+0x26/0x120 [ 148.152254][ T8615] __se_sys_mount+0x24b/0x2d0 [ 148.152356][ T8615] ? fput+0x1c4/0x200 [ 148.152400][ T8615] __x64_sys_mount+0x67/0x80 [ 148.152422][ T8615] x64_sys_call+0x2c84/0x2dc0 [ 148.152500][ T8615] do_syscall_64+0xc9/0x1c0 [ 148.152524][ T8615] ? clear_bhb_loop+0x55/0xb0 [ 148.152548][ T8615] ? clear_bhb_loop+0x55/0xb0 [ 148.152571][ T8615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.152593][ T8615] RIP: 0033:0x7f7b4b4bcda9 [ 148.152607][ T8615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.152652][ T8615] RSP: 002b:00007f7b49b21038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 148.152669][ T8615] RAX: ffffffffffffffda RBX: 00007f7b4b6d5fa0 RCX: 00007f7b4b4bcda9 [ 148.152715][ T8615] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 148.152727][ T8615] RBP: 00007f7b49b21090 R08: 0000000020000180 R09: 0000000000000000 [ 148.152737][ T8615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.152748][ T8615] R13: 0000000000000000 R14: 00007f7b4b6d5fa0 R15: 00007ffe483f7ef8 [ 148.152764][ T8615] [ 148.165708][ T8561] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 148.189874][ T8602] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #16: comm syz.1.1818: corrupted xattr block 31: invalid header [ 148.316895][ T8626] netlink: 'syz.4.1824': attribute type 10 has an invalid length. [ 148.317458][ T8602] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 148.327753][ T8561] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 148.387885][ T8621] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #16: comm syz.1.1818: corrupted xattr block 31: invalid header [ 148.402713][ T8621] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 148.414281][ T8621] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.1818: bad symlink. [ 148.449017][ T8618] sch_tbf: burst 0 is lower than device bond_slave_1 mtu (1514) ! [ 148.460508][ T8561] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 148.488936][ T8561] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 148.542480][ T8561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.556876][ T8561] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.565743][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.572848][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.590052][ T5070] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.597115][ T5070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.678939][ T8561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.720260][ T8649] lo speed is unknown, defaulting to 1000 [ 148.732127][ T8561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.749589][ T8656] sch_tbf: burst 0 is lower than device bond_slave_1 mtu (1514) ! [ 148.766033][ T8656] netlink: '+u[@': attribute type 10 has an invalid length. [ 148.775867][ T8656] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 148.870832][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 148.870845][ T29] audit: type=1326 audit(3476467556.136:22170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8648 comm="syz.4.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb805cda9 code=0x7ffc0000 [ 148.901722][ T29] audit: type=1326 audit(3476467556.178:22171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8648 comm="syz.4.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb805cda9 code=0x7ffc0000 [ 148.962661][ T8561] veth0_vlan: entered promiscuous mode [ 148.980950][ T8561] veth1_vlan: entered promiscuous mode [ 148.996954][ T8561] veth0_macvtap: entered promiscuous mode [ 149.003972][ T8561] veth1_macvtap: entered promiscuous mode [ 149.015258][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.025796][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.035665][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.046169][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.059285][ T29] audit: type=1400 audit(3476467556.336:22172): avc: denied { create } for pid=8677 comm="syz.4.1837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.059504][ T8678] FAULT_INJECTION: forcing a failure. [ 149.059504][ T8678] name failslab, interval 1, probability 0, space 0, times 0 [ 149.080719][ T8561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.092237][ T8678] CPU: 0 UID: 0 PID: 8678 Comm: syz.4.1837 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 149.092327][ T8678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 149.092337][ T8678] Call Trace: [ 149.092343][ T8678] [ 149.092349][ T8678] dump_stack_lvl+0xf2/0x150 [ 149.092374][ T8678] dump_stack+0x15/0x1a [ 149.092392][ T8678] should_fail_ex+0x24a/0x260 [ 149.092420][ T8678] should_failslab+0x8f/0xb0 [ 149.092512][ T8678] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 149.092542][ T8678] ? sidtab_sid2str_get+0xb8/0x140 [ 149.092562][ T8678] kmemdup_noprof+0x2a/0x60 [ 149.092582][ T8678] sidtab_sid2str_get+0xb8/0x140 [ 149.092631][ T8678] security_sid_to_context_core+0x1eb/0x2f0 [ 149.092662][ T8678] security_sid_to_context+0x27/0x30 [ 149.092757][ T8678] avc_audit_post_callback+0x9d/0x530 [ 149.092781][ T8678] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 149.092803][ T8678] common_lsm_audit+0x95e/0x1020 [ 149.092854][ T8678] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 149.092942][ T8678] slow_avc_audit+0xf9/0x140 [ 149.093034][ T8678] avc_has_perm+0x129/0x160 [ 149.093057][ T8678] selinux_socket_sendmsg+0x185/0x1c0 [ 149.093112][ T8678] security_socket_sendmsg+0x47/0x80 [ 149.093138][ T8678] __sock_sendmsg+0x2d/0x180 [ 149.093159][ T8678] ____sys_sendmsg+0x312/0x410 [ 149.093188][ T8678] __sys_sendmsg+0x19d/0x230 [ 149.093240][ T8678] __x64_sys_sendmsg+0x46/0x50 [ 149.093267][ T8678] x64_sys_call+0x2734/0x2dc0 [ 149.093345][ T8678] do_syscall_64+0xc9/0x1c0 [ 149.093367][ T8678] ? clear_bhb_loop+0x55/0xb0 [ 149.093391][ T8678] ? clear_bhb_loop+0x55/0xb0 [ 149.093442][ T8678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.093465][ T8678] RIP: 0033:0x7f5eb805cda9 [ 149.093523][ T8678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.093539][ T8678] RSP: 002b:00007f5eb66c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.093556][ T8678] RAX: ffffffffffffffda RBX: 00007f5eb8275fa0 RCX: 00007f5eb805cda9 [ 149.093567][ T8678] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 149.093593][ T8678] RBP: 00007f5eb66c7090 R08: 0000000000000000 R09: 0000000000000000 [ 149.093604][ T8678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.093615][ T8678] R13: 0000000000000000 R14: 00007f5eb8275fa0 R15: 00007ffc8fe5af18 [ 149.093634][ T8678] [ 149.157287][ T29] audit: type=1400 audit(3476467556.336:22173): avc: denied { write } for pid=8677 comm="syz.4.1837" ssid=135 tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.161666][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.175113][ T29] audit: type=1400 audit(3476467556.441:22174): avc: denied { nlmsg_write } for pid=8677 comm="syz.4.1837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.176245][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.176257][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.176270][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.176287][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.426865][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.428558][ T8561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.448918][ T8684] loop3: detected capacity change from 0 to 512 [ 149.473154][ T8561] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.482146][ T8561] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.490836][ T8561] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.499546][ T8561] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.512298][ T8684] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 149.528480][ T29] audit: type=1400 audit(3476467556.829:22175): avc: denied { mounton } for pid=8561 comm="syz-executor" path="/root/syzkaller.tAWciC/syz-tmp" dev="sda1" ino=1952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 149.531101][ T8684] EXT4-fs (loop3): orphan cleanup on readonly fs [ 149.553186][ T29] audit: type=1400 audit(3476467556.829:22176): avc: denied { mount } for pid=8561 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 149.569233][ T8684] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 149.581608][ T29] audit: type=1400 audit(3476467556.829:22177): avc: denied { mount } for pid=8561 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 149.581679][ T29] audit: type=1400 audit(3476467556.829:22178): avc: denied { mounton } for pid=8561 comm="syz-executor" path="/root/syzkaller.tAWciC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 149.646199][ T8684] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 149.660804][ T8695] loop4: detected capacity change from 0 to 2048 [ 149.682438][ T8684] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 149.708867][ T8684] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1840: bg 0: block 40: padding at end of block bitmap is not set [ 149.749760][ T8684] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 149.765329][ T8684] EXT4-fs (loop3): 1 truncate cleaned up [ 149.793855][ T8684] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #16: comm syz.3.1840: corrupted xattr block 31: invalid header [ 149.819694][ T8684] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 149.830953][ T8684] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #16: comm syz.3.1840: corrupted xattr block 31: invalid header [ 149.845682][ T8684] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 149.846161][ T8720] FAULT_INJECTION: forcing a failure. [ 149.846161][ T8720] name failslab, interval 1, probability 0, space 0, times 0 [ 149.856970][ T8684] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.1840: bad symlink. [ 149.867442][ T8720] CPU: 1 UID: 0 PID: 8720 Comm: syz.1.1848 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 149.867466][ T8720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 149.867477][ T8720] Call Trace: [ 149.867482][ T8720] [ 149.867488][ T8720] dump_stack_lvl+0xf2/0x150 [ 149.867582][ T8720] dump_stack+0x15/0x1a [ 149.867600][ T8720] should_fail_ex+0x24a/0x260 [ 149.867626][ T8720] ? audit_log_d_path+0x96/0x250 [ 149.867654][ T8720] should_failslab+0x8f/0xb0 [ 149.867710][ T8720] __kmalloc_cache_noprof+0x4e/0x320 [ 149.867741][ T8720] audit_log_d_path+0x96/0x250 [ 149.867814][ T8720] ? __rcu_read_unlock+0x4e/0x70 [ 149.867908][ T8720] audit_log_d_path_exe+0x42/0x70 [ 149.867992][ T8720] audit_log_task+0x192/0x1c0 [ 149.868089][ T8720] audit_seccomp+0x68/0x130 [ 149.868112][ T8720] __seccomp_filter+0x6fa/0x1180 [ 149.868138][ T8720] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 149.868160][ T8720] ? vfs_write+0x644/0x920 [ 149.868178][ T8720] ? putname+0xcf/0xf0 [ 149.868257][ T8720] __secure_computing+0x9f/0x1c0 [ 149.868326][ T8720] syscall_trace_enter+0xd1/0x1f0 [ 149.868347][ T8720] ? fpregs_assert_state_consistent+0x83/0xa0 [ 149.868378][ T8720] do_syscall_64+0xaa/0x1c0 [ 149.868402][ T8720] ? clear_bhb_loop+0x55/0xb0 [ 149.868505][ T8720] ? clear_bhb_loop+0x55/0xb0 [ 149.868527][ T8720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.868550][ T8720] RIP: 0033:0x7f278fdfcda9 [ 149.868564][ T8720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.868625][ T8720] RSP: 002b:00007f278e467038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 149.868642][ T8720] RAX: ffffffffffffffda RBX: 00007f2790015fa0 RCX: 00007f278fdfcda9 [ 149.868654][ T8720] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 149.868665][ T8720] RBP: 00007f278e467090 R08: 0000000000000000 R09: 0000000000000000 [ 149.868675][ T8720] R10: 000000000000b9c4 R11: 0000000000000246 R12: 0000000000000001 [ 149.868687][ T8720] R13: 0000000000000000 R14: 00007f2790015fa0 R15: 00007ffd3a0be828 [ 149.868702][ T8720] [ 149.932273][ T8722] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1847'. [ 150.234079][ T8729] loop6: detected capacity change from 0 to 2048 [ 150.240772][ T8729] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 150.511468][ T8743] loop6: detected capacity change from 0 to 512 [ 150.521046][ T8743] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.557309][ T28] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 150.576768][ T8743] 9pnet_fd: Insufficient options for proto=fd [ 150.626148][ T28] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 992 with error 28 [ 150.638596][ T28] EXT4-fs (loop4): This should not happen!! Data will be lost [ 150.638596][ T28] [ 150.648277][ T28] EXT4-fs (loop4): Total free blocks count 0 [ 150.654287][ T28] EXT4-fs (loop4): Free/Dirty block details [ 150.660190][ T28] EXT4-fs (loop4): free_blocks=2415919104 [ 150.665938][ T28] EXT4-fs (loop4): dirty_blocks=1008 [ 150.671254][ T28] EXT4-fs (loop4): Block reservation details [ 150.677257][ T28] EXT4-fs (loop4): i_reserved_data_blocks=63 [ 150.684838][ T8743] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #19: comm syz.6.1855: corrupted inode contents [ 150.686918][ T28] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 150.698379][ T8743] EXT4-fs error (device loop6): ext4_dirty_inode:6042: inode #19: comm syz.6.1855: mark_inode_dirty error [ 150.709283][ T28] EXT4-fs (loop4): This should not happen!! Data will be lost [ 150.709283][ T28] [ 150.731373][ T8743] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #19: comm syz.6.1855: corrupted inode contents [ 150.754338][ T8743] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3006: inode #19: comm syz.6.1855: mark_inode_dirty error [ 150.760268][ T8748] loop4: detected capacity change from 0 to 512 [ 150.768506][ T8743] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3009: inode #19: comm syz.6.1855: mark inode dirty (error -117) [ 150.785513][ T8743] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -117) [ 150.816326][ T8748] ext4 filesystem being mounted at /365/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.903444][ T8756] loop4: detected capacity change from 0 to 512 [ 150.932434][ T8756] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 150.940673][ T8756] EXT4-fs (loop4): orphan cleanup on readonly fs [ 150.947705][ T8756] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 150.978965][ T8760] loop3: detected capacity change from 0 to 128 [ 150.990774][ T8760] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 151.017005][ T8756] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 151.030870][ T8756] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1860: bg 0: block 40: padding at end of block bitmap is not set [ 151.046122][ T8760] EXT4-fs error (device loop3): __ext4_find_entry:1652: inode #2: comm syz.3.1862: checksumming directory block 0 [ 151.047462][ T8756] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 151.075389][ T8756] EXT4-fs (loop4): 1 truncate cleaned up [ 151.115613][ T8756] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #16: comm syz.4.1860: corrupted xattr block 31: invalid header [ 151.152956][ T8756] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 151.170428][ T8778] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #16: comm syz.4.1860: corrupted xattr block 31: invalid header [ 151.191229][ T8774] sch_tbf: burst 0 is lower than device bond_slave_1 mtu (1514) ! [ 151.221949][ T8778] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 151.238471][ T8778] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.1860: bad symlink. [ 151.262703][ T8774] netlink: '+u[@': attribute type 10 has an invalid length. [ 151.273205][ T8774] geneve1: entered promiscuous mode [ 151.283007][ T8774] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 151.308793][ T8792] loop4: detected capacity change from 0 to 512 [ 151.383627][ T8799] loop4: detected capacity change from 0 to 512 [ 151.399272][ T8799] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 151.418710][ T8799] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 151.432036][ T8799] EXT4-fs error (device loop4): ext4_orphan_get:1389: comm syz.4.1875: inode #15: comm syz.4.1875: iget: illegal inode # [ 151.445452][ T8799] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1875: couldn't read orphan inode 15 (err -117) [ 151.625901][ T8815] loop4: detected capacity change from 0 to 2048 [ 152.034755][ T8823] tipc: Enabling of bearer rejected, already enabled [ 152.037969][ T8821] loop4: detected capacity change from 0 to 2048 [ 152.060816][ T8823] block device autoloading is deprecated and will be removed. [ 152.088522][ T8825] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 152.095048][ T8825] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 152.102561][ T8825] vhci_hcd vhci_hcd.0: Device attached [ 152.119853][ T8826] vhci_hcd: connection closed [ 152.120367][ T28] vhci_hcd: stop threads [ 152.123699][ T8829] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1886'. [ 152.125058][ T28] vhci_hcd: release socket [ 152.142808][ T28] vhci_hcd: disconnect device [ 152.158796][ T8821] EXT4-fs error (device loop4): ext4_find_extent:938: inode #2: comm syz.4.1882: pblk 31 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 152.330053][ T8840] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 152.336701][ T8840] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 152.344315][ T8840] vhci_hcd vhci_hcd.0: Device attached [ 152.371474][ T8841] vhci_hcd: connection closed [ 152.371705][ T28] vhci_hcd: stop threads [ 152.380682][ T28] vhci_hcd: release socket [ 152.385084][ T28] vhci_hcd: disconnect device [ 152.875797][ T8849] veth1_to_batadv: entered promiscuous mode [ 152.881775][ T8849] macsec1: entered promiscuous mode [ 153.130693][ T8851] loop6: detected capacity change from 0 to 2048 [ 153.332678][ T8860] loop6: detected capacity change from 0 to 512 [ 153.344866][ T8862] netem: change failed [ 153.363157][ T8864] netem: change failed [ 153.387791][ T8860] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 153.395940][ T8860] EXT4-fs (loop6): orphan cleanup on readonly fs [ 153.402536][ T8860] EXT4-fs warning (device loop6): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 153.418715][ T8860] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 153.483605][ T8869] loop1: detected capacity change from 0 to 512 [ 153.503414][ T8869] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 153.515281][ T8860] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1894: bg 0: block 40: padding at end of block bitmap is not set [ 153.534037][ T8860] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 153.543136][ T8869] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 153.544081][ T8860] EXT4-fs (loop6): 1 truncate cleaned up [ 153.554014][ T8869] EXT4-fs error (device loop1): ext4_orphan_get:1389: comm syz.1.1897: inode #15: comm syz.1.1897: iget: illegal inode # [ 153.571389][ T8869] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1897: couldn't read orphan inode 15 (err -117) [ 153.573589][ T8860] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #16: comm syz.6.1894: corrupted xattr block 31: invalid header [ 153.597304][ T8860] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 153.606870][ T8869] FAULT_INJECTION: forcing a failure. [ 153.606870][ T8869] name failslab, interval 1, probability 0, space 0, times 0 [ 153.609497][ T8860] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #16: comm syz.6.1894: corrupted xattr block 31: invalid header [ 153.619508][ T8869] CPU: 0 UID: 0 PID: 8869 Comm: syz.1.1897 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 153.619531][ T8869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 153.619561][ T8869] Call Trace: [ 153.619566][ T8869] [ 153.619574][ T8869] dump_stack_lvl+0xf2/0x150 [ 153.619598][ T8869] dump_stack+0x15/0x1a [ 153.619649][ T8869] should_fail_ex+0x24a/0x260 [ 153.619707][ T8869] should_failslab+0x8f/0xb0 [ 153.619728][ T8869] __kmalloc_noprof+0xab/0x3f0 [ 153.619755][ T8869] ? ext4_find_extent+0x172/0x7c0 [ 153.619785][ T8869] ext4_find_extent+0x172/0x7c0 [ 153.619825][ T8869] ? bsearch+0x98/0xc0 [ 153.619844][ T8869] ? __pfx_cmp_ex_search+0x10/0x10 [ 153.619914][ T8869] ? strncpy_from_kernel_nofault+0x87/0x140 [ 153.619985][ T8869] ext4_ext_map_blocks+0x11f/0x35c0 [ 153.620004][ T8869] ? exc_page_fault+0x4b6/0x650 [ 153.620023][ T8869] ? cmp_ex_search+0x56/0x70 [ 153.620121][ T8869] ? kernelmode_fixup_or_oops+0x58/0xb0 [ 153.620189][ T8869] ? down_read+0x171/0x4b0 [ 153.620211][ T8869] ext4_map_query_blocks+0x71/0x180 [ 153.620299][ T8869] ext4_map_blocks+0x23c/0xd20 [ 153.620320][ T8869] ? security_compute_sid+0xda7/0xe10 [ 153.620339][ T8869] ? security_compute_sid+0xda7/0xe10 [ 153.620356][ T8869] ? __traceiter_kfree+0x2b/0x50 [ 153.620374][ T8869] ext4_getblk+0x11f/0x530 [ 153.620474][ T8869] ext4_bread_batch+0x5b/0x360 [ 153.620541][ T8869] __ext4_find_entry+0xa71/0x1260 [ 153.620653][ T8869] ? may_create+0x2b2/0x300 [ 153.620673][ T8869] ext4_lookup+0xba/0x390 [ 153.620701][ T8869] ? __pfx_ext4_lookup+0x10/0x10 [ 153.620842][ T8869] path_openat+0xd40/0x1fb0 [ 153.620868][ T8869] do_filp_open+0x107/0x230 [ 153.620892][ T8869] do_sys_openat2+0xab/0x120 [ 153.620919][ T8869] __x64_sys_openat+0xf3/0x120 [ 153.620947][ T8869] x64_sys_call+0x2b30/0x2dc0 [ 153.621023][ T8869] do_syscall_64+0xc9/0x1c0 [ 153.621119][ T8869] ? clear_bhb_loop+0x55/0xb0 [ 153.621142][ T8869] ? clear_bhb_loop+0x55/0xb0 [ 153.621165][ T8869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.621191][ T8869] RIP: 0033:0x7f278fdfcda9 [ 153.621204][ T8869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.621220][ T8869] RSP: 002b:00007f278e467038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 153.621237][ T8869] RAX: ffffffffffffffda RBX: 00007f2790015fa0 RCX: 00007f278fdfcda9 [ 153.621248][ T8869] RDX: 000000000000275a RSI: 0000000020000140 RDI: ffffffffffffff9c [ 153.621291][ T8869] RBP: 00007f278e467090 R08: 0000000000000000 R09: 0000000000000000 [ 153.621301][ T8869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.621312][ T8869] R13: 0000000000000000 R14: 00007f2790015fa0 R15: 00007ffd3a0be828 [ 153.621390][ T8869] [ 153.845990][ T29] kauditd_printk_skb: 346 callbacks suppressed [ 153.846004][ T29] audit: type=1400 audit(3476467561.365:22523): avc: denied { write } for pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.854563][ T8860] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 153.860400][ T29] audit: type=1400 audit(3476467561.365:22524): avc: denied { remove_name } for pid=2982 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.869434][ T8860] EXT4-fs error (device loop6): ext4_get_link:106: inode #16: comm syz.6.1894: bad symlink. [ 153.876347][ T29] audit: type=1400 audit(3476467561.365:22525): avc: denied { rename } for pid=2982 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 153.995565][ T29] audit: type=1400 audit(3476467561.365:22526): avc: denied { add_name } for pid=2982 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.018170][ T29] audit: type=1400 audit(3476467561.365:22527): avc: denied { unlink } for pid=2982 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 154.040775][ T29] audit: type=1400 audit(3476467561.470:22528): avc: denied { create } for pid=2982 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 154.151234][ T8881] FAULT_INJECTION: forcing a failure. [ 154.151234][ T8881] name failslab, interval 1, probability 0, space 0, times 0 [ 154.163994][ T8881] CPU: 1 UID: 0 PID: 8881 Comm: syz.3.1901 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 154.164014][ T8881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 154.164068][ T8881] Call Trace: [ 154.164073][ T8881] [ 154.164078][ T8881] dump_stack_lvl+0xf2/0x150 [ 154.164100][ T8881] dump_stack+0x15/0x1a [ 154.164116][ T8881] should_fail_ex+0x24a/0x260 [ 154.164144][ T8881] should_failslab+0x8f/0xb0 [ 154.164226][ T8881] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 154.164254][ T8881] ? sock_alloc_inode+0x34/0xa0 [ 154.164275][ T8881] sock_alloc_inode+0x34/0xa0 [ 154.164293][ T8881] ? __pfx_sock_alloc_inode+0x10/0x10 [ 154.164390][ T8881] alloc_inode+0x3c/0x160 [ 154.164412][ T8881] new_inode_pseudo+0x15/0x20 [ 154.164432][ T8881] __sock_create+0x12b/0x5a0 [ 154.164453][ T8881] __sys_socketpair+0x1be/0x430 [ 154.164536][ T8881] __x64_sys_socketpair+0x52/0x60 [ 154.164559][ T8881] x64_sys_call+0x1cad/0x2dc0 [ 154.164582][ T8881] do_syscall_64+0xc9/0x1c0 [ 154.164604][ T8881] ? clear_bhb_loop+0x55/0xb0 [ 154.164646][ T8881] ? clear_bhb_loop+0x55/0xb0 [ 154.164666][ T8881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.164695][ T8881] RIP: 0033:0x7f7b4b4becfa [ 154.164708][ T8881] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.164724][ T8881] RSP: 002b:00007f7b49b20f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 154.164740][ T8881] RAX: ffffffffffffffda RBX: 00007f7b4b6d5f00 RCX: 00007f7b4b4becfa [ 154.164751][ T8881] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 154.164762][ T8881] RBP: 00007f7b49b21090 R08: 0000000000000000 R09: 0000000000000000 [ 154.164789][ T8881] R10: 00007f7b49b20f98 R11: 0000000000000246 R12: 0000000000000002 [ 154.164800][ T8881] R13: 0000000000000001 R14: 00007f7b4b6d5fa0 R15: 00007ffe483f7ef8 [ 154.164815][ T8881] [ 154.164822][ T8881] socket: no more sockets [ 154.421227][ T29] audit: type=1326 audit(3476467561.964:22529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8898 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278fdfcda9 code=0x7ffc0000 [ 154.444825][ T29] audit: type=1326 audit(3476467561.964:22530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8898 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278fdfcda9 code=0x7ffc0000 [ 154.523456][ T8904] netlink: 'syz.0.1907': attribute type 10 has an invalid length. [ 154.531307][ T8904] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1907'. [ 154.542524][ T8904] bond0: (slave geneve1): Releasing backup interface [ 154.551962][ T8904] team0: Port device geneve1 added [ 154.564346][ T8904] netlink: 'syz.0.1907': attribute type 10 has an invalid length. [ 154.572212][ T8904] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1907'. [ 155.066342][ T8932] loop6: detected capacity change from 0 to 2048 [ 155.084617][ T8932] EXT4-fs mount: 66 callbacks suppressed [ 155.084629][ T8932] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.114704][ T8938] loop4: detected capacity change from 0 to 2048 [ 155.131595][ T8938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.890873][ T11] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 155.930240][ T11] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1344 with error 28 [ 155.942812][ T11] EXT4-fs (loop6): This should not happen!! Data will be lost [ 155.942812][ T11] [ 155.952488][ T11] EXT4-fs (loop6): Total free blocks count 0 [ 155.958502][ T11] EXT4-fs (loop6): Free/Dirty block details [ 155.964382][ T11] EXT4-fs (loop6): free_blocks=2415919104 [ 155.970183][ T11] EXT4-fs (loop6): dirty_blocks=1360 [ 155.975478][ T11] EXT4-fs (loop6): Block reservation details [ 155.981487][ T11] EXT4-fs (loop6): i_reserved_data_blocks=85 [ 156.028783][ T11] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 156.053161][ T28] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 156.069117][ T28] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1504 with error 28 [ 156.081659][ T28] EXT4-fs (loop4): This should not happen!! Data will be lost [ 156.081659][ T28] [ 156.091282][ T28] EXT4-fs (loop4): Total free blocks count 0 [ 156.097295][ T28] EXT4-fs (loop4): Free/Dirty block details [ 156.103203][ T28] EXT4-fs (loop4): free_blocks=2415919104 [ 156.108911][ T28] EXT4-fs (loop4): dirty_blocks=1520 [ 156.114208][ T28] EXT4-fs (loop4): Block reservation details [ 156.120203][ T28] EXT4-fs (loop4): i_reserved_data_blocks=95 [ 156.137447][ T28] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 156.170867][ T8947] loop6: detected capacity change from 0 to 512 [ 156.178788][ T29] audit: type=1400 audit(3476467563.811:22531): avc: denied { watch_reads } for pid=8948 comm="syz.4.1919" path="/380" dev="tmpfs" ino=2106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 156.208025][ T8947] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.221031][ T8947] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.261054][ T8947] 9pnet_fd: Insufficient options for proto=fd [ 156.326797][ T8947] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #19: comm syz.6.1920: corrupted inode contents [ 156.339883][ T8947] EXT4-fs error (device loop6): ext4_dirty_inode:6042: inode #19: comm syz.6.1920: mark_inode_dirty error [ 156.351710][ T8947] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #19: comm syz.6.1920: corrupted inode contents [ 156.363879][ T8947] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3006: inode #19: comm syz.6.1920: mark_inode_dirty error [ 156.376264][ T8947] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3009: inode #19: comm syz.6.1920: mark inode dirty (error -117) [ 156.389187][ T8947] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -117) [ 156.434125][ T8561] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.474406][ T29] audit: type=1400 audit(3476467564.126:22532): avc: denied { cpu } for pid=8972 comm="syz.6.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 156.521853][ T8976] loop6: detected capacity change from 0 to 2048 [ 156.549506][ T8976] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.063802][ T8986] sch_tbf: burst 0 is lower than device bond_slave_1 mtu (1514) ! [ 157.076426][ T8986] netlink: '+u[@': attribute type 10 has an invalid length. [ 157.326443][ T138] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 157.343286][ T138] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1504 with error 28 [ 157.355734][ T138] EXT4-fs (loop6): This should not happen!! Data will be lost [ 157.355734][ T138] [ 157.365396][ T138] EXT4-fs (loop6): Total free blocks count 0 [ 157.371517][ T138] EXT4-fs (loop6): Free/Dirty block details [ 157.377563][ T138] EXT4-fs (loop6): free_blocks=2415919104 [ 157.383273][ T138] EXT4-fs (loop6): dirty_blocks=1520 [ 157.388634][ T138] EXT4-fs (loop6): Block reservation details [ 157.394607][ T138] EXT4-fs (loop6): i_reserved_data_blocks=95 [ 157.408800][ T138] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 157.430609][ T9003] loop1: detected capacity change from 0 to 2048 [ 157.452483][ T9003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.480655][ T9003] EXT4-fs error (device loop1): ext4_find_extent:938: inode #2: comm syz.1.1939: pblk 31 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 157.562453][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.597277][ T9009] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 157.692239][ T9013] sch_tbf: burst 0 is lower than device bond_slave_1 mtu (1514) ! [ 157.704479][ T9013] netlink: '+u[@': attribute type 10 has an invalid length. [ 157.790489][ T9022] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 157.794547][ T9024] FAULT_INJECTION: forcing a failure. [ 157.794547][ T9024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.812689][ T9024] CPU: 0 UID: 0 PID: 9024 Comm: syz.6.1947 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 157.812711][ T9024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 157.812722][ T9024] Call Trace: [ 157.812726][ T9024] [ 157.812732][ T9024] dump_stack_lvl+0xf2/0x150 [ 157.812804][ T9024] dump_stack+0x15/0x1a [ 157.812820][ T9024] should_fail_ex+0x24a/0x260 [ 157.812847][ T9024] should_fail+0xb/0x10 [ 157.812900][ T9024] should_fail_usercopy+0x1a/0x20 [ 157.812927][ T9024] strncpy_from_user+0x25/0x210 [ 157.812946][ T9024] ? audit_log_end+0x1d0/0x1e0 [ 157.813033][ T9024] path_setxattrat+0xed/0x310 [ 157.813141][ T9024] __x64_sys_setxattr+0x6e/0x90 [ 157.813162][ T9024] x64_sys_call+0x2247/0x2dc0 [ 157.813184][ T9024] do_syscall_64+0xc9/0x1c0 [ 157.813209][ T9024] ? clear_bhb_loop+0x55/0xb0 [ 157.813232][ T9024] ? clear_bhb_loop+0x55/0xb0 [ 157.813259][ T9024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.813318][ T9024] RIP: 0033:0x7ffa3e70cda9 [ 157.813332][ T9024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.813348][ T9024] RSP: 002b:00007ffa3cd77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 157.813366][ T9024] RAX: ffffffffffffffda RBX: 00007ffa3e925fa0 RCX: 00007ffa3e70cda9 [ 157.813377][ T9024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.813388][ T9024] RBP: 00007ffa3cd77090 R08: 0000000000000001 R09: 0000000000000000 [ 157.813431][ T9024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.813441][ T9024] R13: 0000000000000000 R14: 00007ffa3e925fa0 R15: 00007ffdd1eae7f8 [ 157.813454][ T9024] [ 158.039972][ T9037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1952'. [ 158.216241][ T9046] 9pnet: Could not find request transport: fd0x0000000000000004 [ 158.307828][ T9051] loop1: detected capacity change from 0 to 128 [ 158.338456][ T9051] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 158.341630][ T9049] sch_tbf: burst 0 is lower than device bond_slave_1 mtu (1514) ! [ 158.353556][ T9051] vfat filesystem being mounted at /392/bus supports timestamps until 2107-12-31 (0x10391447e) [ 158.367903][ T9049] netlink: '+u[@': attribute type 10 has an invalid length. [ 158.377148][ T9051] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 158.384998][ T9051] FAT-fs (loop1): Filesystem has been set read-only [ 158.394614][ T9051] syz.1.1957: attempt to access beyond end of device [ 158.394614][ T9051] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 158.408904][ T9049] team0: Port device geneve1 removed [ 158.417280][ T9049] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 158.426203][ T9051] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 158.434137][ T9051] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 158.444282][ T9051] syz.1.1957: attempt to access beyond end of device [ 158.444282][ T9051] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 158.460062][ T9051] syz.1.1957: attempt to access beyond end of device [ 158.460062][ T9051] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 158.602199][ T9066] netem: change failed [ 158.636083][ T29] kauditd_printk_skb: 282 callbacks suppressed [ 158.636095][ T29] audit: type=1326 audit(3476467566.394:22815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9065 comm="syz.4.1964" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5eb805cda9 code=0x0 [ 158.687232][ T29] audit: type=1326 audit(3476467566.447:22816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9065 comm="syz.4.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb805cda9 code=0x7ffc0000 [ 158.710839][ T29] audit: type=1326 audit(3476467566.447:22817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9065 comm="syz.4.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5eb805cda9 code=0x7ffc0000 [ 158.734333][ T29] audit: type=1326 audit(3476467566.447:22818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9065 comm="syz.4.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb805cda9 code=0x7ffc0000 [ 158.757836][ T29] audit: type=1326 audit(3476467566.447:22819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9065 comm="syz.4.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f5eb805cda9 code=0x7ffc0000 [ 158.781273][ T29] audit: type=1326 audit(3476467566.447:22820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9065 comm="syz.4.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb805cda9 code=0x7ffc0000 [ 158.804782][ T29] audit: type=1326 audit(3476467566.447:22821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9065 comm="syz.4.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb805cda9 code=0x7ffc0000 [ 159.411382][ T29] audit: type=1400 audit(3476467567.203:22822): avc: denied { shutdown } for pid=9081 comm="syz.0.1967" lport=34411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 159.432349][ T9079] 9pnet: Could not find request transport: fd0x0000000000000004 [ 159.493266][ T9094] sch_tbf: burst 0 is lower than device bond_slave_1 mtu (1514) ! [ 159.508109][ T9094] netlink: 'syz.4.1969': attribute type 10 has an invalid length. [ 159.524513][ T9097] loop3: detected capacity change from 0 to 2048 [ 159.526783][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1971'. [ 159.586694][ T9097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.600042][ T29] audit: type=1326 audit(3476467567.402:22823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9091 comm="syz.0.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1364d0cda9 code=0x7ffc0000 [ 159.635757][ T29] audit: type=1326 audit(3476467567.434:22824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9091 comm="syz.0.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f1364d0cda9 code=0x7ffc0000 [ 159.676886][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.702352][ T9108] FAULT_INJECTION: forcing a failure. [ 159.702352][ T9108] name failslab, interval 1, probability 0, space 0, times 0 [ 159.715062][ T9108] CPU: 1 UID: 0 PID: 9108 Comm: syz.3.1975 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 159.715123][ T9108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 159.715178][ T9108] Call Trace: [ 159.715183][ T9108] [ 159.715190][ T9108] dump_stack_lvl+0xf2/0x150 [ 159.715215][ T9108] dump_stack+0x15/0x1a [ 159.715233][ T9108] should_fail_ex+0x24a/0x260 [ 159.715327][ T9108] ? tcf_action_init_1+0x121/0x490 [ 159.715351][ T9108] should_failslab+0x8f/0xb0 [ 159.715374][ T9108] __kmalloc_cache_noprof+0x4e/0x320 [ 159.715406][ T9108] tcf_action_init_1+0x121/0x490 [ 159.715502][ T9108] ? tc_action_load_ops+0x1a9/0x410 [ 159.715610][ T9108] tcf_action_init+0x1cc/0x610 [ 159.715697][ T9108] tc_ctl_action+0x292/0x840 [ 159.715745][ T9108] ? __pfx_tc_ctl_action+0x10/0x10 [ 159.715770][ T9108] rtnetlink_rcv_msg+0x6aa/0x710 [ 159.715797][ T9108] ? ref_tracker_free+0x3a5/0x410 [ 159.715902][ T9108] ? __dev_queue_xmit+0x186/0x2090 [ 159.716002][ T9108] netlink_rcv_skb+0x12c/0x230 [ 159.716096][ T9108] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 159.716131][ T9108] rtnetlink_rcv+0x1c/0x30 [ 159.716160][ T9108] netlink_unicast+0x599/0x670 [ 159.716189][ T9108] netlink_sendmsg+0x5cc/0x6e0 [ 159.716213][ T9108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.716257][ T9108] __sock_sendmsg+0x140/0x180 [ 159.716432][ T9108] ____sys_sendmsg+0x312/0x410 [ 159.716471][ T9108] __sys_sendmsg+0x19d/0x230 [ 159.716510][ T9108] __x64_sys_sendmsg+0x46/0x50 [ 159.716537][ T9108] x64_sys_call+0x2734/0x2dc0 [ 159.716560][ T9108] do_syscall_64+0xc9/0x1c0 [ 159.716664][ T9108] ? clear_bhb_loop+0x55/0xb0 [ 159.716696][ T9108] ? clear_bhb_loop+0x55/0xb0 [ 159.716721][ T9108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.716814][ T9108] RIP: 0033:0x7f7b4b4bcda9 [ 159.716828][ T9108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.716845][ T9108] RSP: 002b:00007f7b49b21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.716862][ T9108] RAX: ffffffffffffffda RBX: 00007f7b4b6d5fa0 RCX: 00007f7b4b4bcda9 [ 159.716873][ T9108] RDX: 0000000000000000 RSI: 00000000200037c0 RDI: 0000000000000006 [ 159.716884][ T9108] RBP: 00007f7b49b21090 R08: 0000000000000000 R09: 0000000000000000 [ 159.716896][ T9108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.716982][ T9108] R13: 0000000000000000 R14: 00007f7b4b6d5fa0 R15: 00007ffe483f7ef8 [ 159.717016][ T9108] [ 159.997072][ T9117] netem: change failed [ 160.022711][ T9121] 9pnet: Could not find request transport: fd0x0000000000000004 [ 160.037468][ T9124] FAULT_INJECTION: forcing a failure. [ 160.037468][ T9124] name failslab, interval 1, probability 0, space 0, times 0 [ 160.050113][ T9124] CPU: 0 UID: 0 PID: 9124 Comm: syz.1.1982 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 160.050135][ T9124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 160.050184][ T9124] Call Trace: [ 160.050189][ T9124] [ 160.050195][ T9124] dump_stack_lvl+0xf2/0x150 [ 160.050218][ T9124] dump_stack+0x15/0x1a [ 160.050303][ T9124] should_fail_ex+0x24a/0x260 [ 160.050331][ T9124] should_failslab+0x8f/0xb0 [ 160.050353][ T9124] __kmalloc_noprof+0xab/0x3f0 [ 160.050382][ T9124] ? iter_file_splice_write+0x102/0x980 [ 160.050482][ T9124] iter_file_splice_write+0x102/0x980 [ 160.050503][ T9124] ? copy_splice_read+0x57d/0x5b0 [ 160.050519][ T9124] ? __pfx_iter_file_splice_write+0x10/0x10 [ 160.050618][ T9124] direct_splice_actor+0x160/0x2c0 [ 160.050644][ T9124] splice_direct_to_actor+0x302/0x670 [ 160.050693][ T9124] ? __pfx_direct_splice_actor+0x10/0x10 [ 160.050716][ T9124] do_splice_direct+0xd7/0x150 [ 160.050733][ T9124] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 160.050797][ T9124] do_sendfile+0x398/0x660 [ 160.050825][ T9124] __x64_sys_sendfile64+0x110/0x150 [ 160.050907][ T9124] x64_sys_call+0xfbd/0x2dc0 [ 160.050967][ T9124] do_syscall_64+0xc9/0x1c0 [ 160.051027][ T9124] ? clear_bhb_loop+0x55/0xb0 [ 160.051048][ T9124] ? clear_bhb_loop+0x55/0xb0 [ 160.051104][ T9124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.051127][ T9124] RIP: 0033:0x7f278fdfcda9 [ 160.051140][ T9124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.051155][ T9124] RSP: 002b:00007f278e467038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 160.051236][ T9124] RAX: ffffffffffffffda RBX: 00007f2790015fa0 RCX: 00007f278fdfcda9 [ 160.051246][ T9124] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 160.051255][ T9124] RBP: 00007f278e467090 R08: 0000000000000000 R09: 0000000000000000 [ 160.051264][ T9124] R10: 0000000000023894 R11: 0000000000000246 R12: 0000000000000001 [ 160.051273][ T9124] R13: 0000000000000000 R14: 00007f2790015fa0 R15: 00007ffd3a0be828 [ 160.051287][ T9124] [ 160.059865][ T9129] sctp: [Deprecated]: syz.0.1983 (pid 9129) Use of int in max_burst socket option. [ 160.059865][ T9129] Use struct sctp_assoc_value instead [ 160.198712][ T9142] sch_tbf: burst 0 is lower than device bond_slave_1 mtu (1514) ! [ 160.292515][ T9143] netlink: 'syz.4.1984': attribute type 10 has an invalid length. [ 160.376624][ T9155] loop4: detected capacity change from 0 to 512 [ 160.385145][ T9155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.397902][ T9155] ext4 filesystem being mounted at /397/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.484729][ T9161] 9pnet_fd: Insufficient options for proto=fd [ 160.528958][ T9165] serio: Serial port ptm1 [ 160.598668][ T9165] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 160.855519][ T9189] 8021q: VLANs not supported on ipvlan0 [ 160.883138][ T9191] FAULT_INJECTION: forcing a failure. [ 160.883138][ T9191] name failslab, interval 1, probability 0, space 0, times 0 [ 160.895882][ T9191] CPU: 0 UID: 0 PID: 9191 Comm: syz.3.2001 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 160.895968][ T9191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 160.896025][ T9191] Call Trace: [ 160.896028][ T9191] [ 160.896032][ T9191] dump_stack_lvl+0xf2/0x150 [ 160.896047][ T9191] dump_stack+0x15/0x1a [ 160.896064][ T9191] should_fail_ex+0x24a/0x260 [ 160.896080][ T9191] should_failslab+0x8f/0xb0 [ 160.896094][ T9191] kmem_cache_alloc_noprof+0x52/0x320 [ 160.896110][ T9191] ? getname_kernel+0x3d/0x1e0 [ 160.896194][ T9191] ? selinux_capable+0x1f2/0x260 [ 160.896323][ T9191] getname_kernel+0x3d/0x1e0 [ 160.896338][ T9191] kern_path+0x21/0x120 [ 160.896354][ T9191] do_move_mount_old+0x5d/0xd0 [ 160.896381][ T9191] path_mount+0x536/0xb30 [ 160.896453][ T9191] __se_sys_mount+0x27f/0x2d0 [ 160.896466][ T9191] ? fput+0x1c4/0x200 [ 160.896482][ T9191] __x64_sys_mount+0x67/0x80 [ 160.896521][ T9191] x64_sys_call+0x2c84/0x2dc0 [ 160.896588][ T9191] do_syscall_64+0xc9/0x1c0 [ 160.896676][ T9191] ? clear_bhb_loop+0x55/0xb0 [ 160.896690][ T9191] ? clear_bhb_loop+0x55/0xb0 [ 160.896737][ T9191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.896751][ T9191] RIP: 0033:0x7f7b4b4bcda9 [ 160.896759][ T9191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.896769][ T9191] RSP: 002b:00007f7b49b21038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 160.896779][ T9191] RAX: ffffffffffffffda RBX: 00007f7b4b6d5fa0 RCX: 00007f7b4b4bcda9 [ 160.896785][ T9191] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000020000480 [ 160.896791][ T9191] RBP: 00007f7b49b21090 R08: 0000000000000000 R09: 0000000000000000 [ 160.896797][ T9191] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 160.896820][ T9191] R13: 0000000000000000 R14: 00007f7b4b6d5fa0 R15: 00007ffe483f7ef8 [ 160.896829][ T9191] [ 161.132827][ T9198] 9pnet_fd: Insufficient options for proto=fd [ 161.136872][ T9200] netem: change failed [ 161.201110][ T9195] loop6: detected capacity change from 0 to 8192 [ 161.208121][ T9195] vfat: Unknown parameter 'kfree' [ 161.568001][ T9219] loop7: detected capacity change from 16384 to 16383 [ 161.639465][ T9225] lo speed is unknown, defaulting to 1000 [ 161.688917][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.872425][ T9230] 9pnet_fd: Insufficient options for proto=fd [ 161.941334][ T9234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=9234 comm=syz.6.2018 [ 161.976549][ T9236] batadv_slave_1: entered promiscuous mode [ 162.169185][ T9235] batadv_slave_1: left promiscuous mode [ 162.199101][ T3373] IPVS: starting estimator thread 0... [ 162.281926][ T9258] IPVS: using max 2640 ests per chain, 132000 per kthread [ 162.473965][ T9268] FAULT_INJECTION: forcing a failure. [ 162.473965][ T9268] name failslab, interval 1, probability 0, space 0, times 0 [ 162.486978][ T9268] CPU: 0 UID: 0 PID: 9268 Comm: syz.6.2027 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 162.487001][ T9268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 162.487011][ T9268] Call Trace: [ 162.487017][ T9268] [ 162.487023][ T9268] dump_stack_lvl+0xf2/0x150 [ 162.487046][ T9268] dump_stack+0x15/0x1a [ 162.487069][ T9268] should_fail_ex+0x24a/0x260 [ 162.487096][ T9268] should_failslab+0x8f/0xb0 [ 162.487117][ T9268] kmem_cache_alloc_noprof+0x52/0x320 [ 162.487142][ T9268] ? mas_alloc_nodes+0x1e3/0x490 [ 162.487168][ T9268] mas_alloc_nodes+0x1e3/0x490 [ 162.487194][ T9268] mas_preallocate+0x44a/0x650 [ 162.487220][ T9268] __split_vma+0x244/0x6a0 [ 162.487248][ T9268] vms_gather_munmap_vmas+0x2a5/0x7a0 [ 162.487273][ T9268] mmap_region+0x464/0x1620 [ 162.487295][ T9268] ? __rcu_read_unlock+0x4e/0x70 [ 162.487311][ T9268] ? mntput_no_expire+0x70/0x3d0 [ 162.487329][ T9268] ? mntput+0x49/0x70 [ 162.487341][ T9268] ? terminate_walk+0x260/0x280 [ 162.487371][ T9268] do_mmap+0x98a/0xc30 [ 162.487400][ T9268] vm_mmap_pgoff+0x16d/0x2d0 [ 162.487423][ T9268] ksys_mmap_pgoff+0xd0/0x330 [ 162.487442][ T9268] ? fpregs_assert_state_consistent+0x83/0xa0 [ 162.487468][ T9268] x64_sys_call+0x1940/0x2dc0 [ 162.487486][ T9268] do_syscall_64+0xc9/0x1c0 [ 162.487508][ T9268] ? clear_bhb_loop+0x55/0xb0 [ 162.487533][ T9268] ? clear_bhb_loop+0x55/0xb0 [ 162.487556][ T9268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.487578][ T9268] RIP: 0033:0x7ffa3e70cda9 [ 162.487592][ T9268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.487609][ T9268] RSP: 002b:00007ffa3cd56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 162.487625][ T9268] RAX: ffffffffffffffda RBX: 00007ffa3e926080 RCX: 00007ffa3e70cda9 [ 162.487634][ T9268] RDX: 0000000000000002 RSI: 0000000000fbe000 RDI: 0000000020000000 [ 162.487644][ T9268] RBP: 00007ffa3cd56090 R08: ffffffffffffffff R09: 0000000000000000 [ 162.487653][ T9268] R10: 0000000000000031 R11: 0000000000000246 R12: 0000000000000001 [ 162.487662][ T9268] R13: 0000000000000001 R14: 00007ffa3e926080 R15: 00007ffdd1eae7f8 [ 162.487675][ T9268] [ 162.925824][ T9280] 8021q: VLANs not supported on ipvlan0 [ 162.975473][ T9286] FAULT_INJECTION: forcing a failure. [ 162.975473][ T9286] name failslab, interval 1, probability 0, space 0, times 0 [ 162.988155][ T9286] CPU: 0 UID: 0 PID: 9286 Comm: syz.4.2037 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 162.988177][ T9286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 162.988189][ T9286] Call Trace: [ 162.988220][ T9286] [ 162.988227][ T9286] dump_stack_lvl+0xf2/0x150 [ 162.988251][ T9286] dump_stack+0x15/0x1a [ 162.988270][ T9286] should_fail_ex+0x24a/0x260 [ 162.988297][ T9286] should_failslab+0x8f/0xb0 [ 162.988384][ T9286] kmem_cache_alloc_noprof+0x52/0x320 [ 162.988413][ T9286] ? audit_log_start+0x34c/0x6b0 [ 162.988493][ T9286] ? audit_log_end+0x1d0/0x1e0 [ 162.988521][ T9286] audit_log_start+0x34c/0x6b0 [ 162.988546][ T9286] ? kmem_cache_free+0xdc/0x2d0 [ 162.988603][ T9286] audit_seccomp+0x4b/0x130 [ 162.988626][ T9286] __seccomp_filter+0x6fa/0x1180 [ 162.988644][ T9286] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 162.988685][ T9286] ? vfs_write+0x644/0x920 [ 162.988702][ T9286] ? putname+0xcf/0xf0 [ 162.988727][ T9286] __secure_computing+0x9f/0x1c0 [ 162.988748][ T9286] syscall_trace_enter+0xd1/0x1f0 [ 162.988768][ T9286] ? fpregs_assert_state_consistent+0x83/0xa0 [ 162.988824][ T9286] do_syscall_64+0xaa/0x1c0 [ 162.988895][ T9286] ? clear_bhb_loop+0x55/0xb0 [ 162.988919][ T9286] ? clear_bhb_loop+0x55/0xb0 [ 162.988941][ T9286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.988963][ T9286] RIP: 0033:0x7f5eb805b7bc [ 162.989029][ T9286] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 162.989044][ T9286] RSP: 002b:00007f5eb66c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 162.989060][ T9286] RAX: ffffffffffffffda RBX: 00007f5eb8275fa0 RCX: 00007f5eb805b7bc [ 162.989072][ T9286] RDX: 000000000000000f RSI: 00007f5eb66c70a0 RDI: 0000000000000005 [ 162.989089][ T9286] RBP: 00007f5eb66c7090 R08: 0000000000000000 R09: 0000000000000000 [ 162.989100][ T9286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.989185][ T9286] R13: 0000000000000000 R14: 00007f5eb8275fa0 R15: 00007ffc8fe5af18 [ 162.989201][ T9286] [ 163.332193][ T9297] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2042'. [ 163.408306][ T29] kauditd_printk_skb: 797 callbacks suppressed [ 163.408319][ T29] audit: type=1326 audit(3476467571.403:23620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9291 comm="syz.0.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1364d03d67 code=0x7ffc0000 [ 163.441854][ T29] audit: type=1326 audit(3476467571.434:23621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9291 comm="syz.0.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1364ca8fa9 code=0x7ffc0000 [ 163.465321][ T29] audit: type=1326 audit(3476467571.434:23622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9291 comm="syz.0.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1364d03d67 code=0x7ffc0000 [ 163.488825][ T29] audit: type=1326 audit(3476467571.434:23623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9291 comm="syz.0.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1364ca8fa9 code=0x7ffc0000 [ 163.512253][ T29] audit: type=1326 audit(3476467571.434:23624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9291 comm="syz.0.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f1364d0cda9 code=0x7ffc0000 [ 163.535887][ T29] audit: type=1326 audit(3476467571.518:23625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9291 comm="syz.0.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1364d03d67 code=0x7ffc0000 [ 163.559357][ T29] audit: type=1326 audit(3476467571.518:23626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9291 comm="syz.0.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1364ca8fa9 code=0x7ffc0000 [ 163.582780][ T29] audit: type=1326 audit(3476467571.518:23627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9291 comm="syz.0.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1364d03d67 code=0x7ffc0000 [ 163.606160][ T29] audit: type=1326 audit(3476467571.518:23628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9291 comm="syz.0.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1364ca8fa9 code=0x7ffc0000 [ 163.629578][ T29] audit: type=1326 audit(3476467571.518:23629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9291 comm="syz.0.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f1364d0cda9 code=0x7ffc0000 [ 163.703039][ T9312] FAULT_INJECTION: forcing a failure. [ 163.703039][ T9312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.716228][ T9312] CPU: 0 UID: 0 PID: 9312 Comm: syz.6.2048 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 163.716252][ T9312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 163.716261][ T9312] Call Trace: [ 163.716266][ T9312] [ 163.716271][ T9312] dump_stack_lvl+0xf2/0x150 [ 163.716295][ T9312] dump_stack+0x15/0x1a [ 163.716322][ T9312] should_fail_ex+0x24a/0x260 [ 163.716355][ T9312] should_fail+0xb/0x10 [ 163.716377][ T9312] should_fail_usercopy+0x1a/0x20 [ 163.716404][ T9312] _copy_from_user+0x1c/0xa0 [ 163.716424][ T9312] __se_sys_mount+0x115/0x2d0 [ 163.716499][ T9312] ? fput+0x1c4/0x200 [ 163.716527][ T9312] ? ksys_write+0x176/0x1b0 [ 163.716545][ T9312] __x64_sys_mount+0x67/0x80 [ 163.716567][ T9312] x64_sys_call+0x2c84/0x2dc0 [ 163.716590][ T9312] do_syscall_64+0xc9/0x1c0 [ 163.716649][ T9312] ? clear_bhb_loop+0x55/0xb0 [ 163.716673][ T9312] ? clear_bhb_loop+0x55/0xb0 [ 163.716761][ T9312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.716848][ T9312] RIP: 0033:0x7ffa3e70cda9 [ 163.716862][ T9312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.716878][ T9312] RSP: 002b:00007ffa3cd77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 163.716895][ T9312] RAX: ffffffffffffffda RBX: 00007ffa3e925fa0 RCX: 00007ffa3e70cda9 [ 163.716936][ T9312] RDX: 0000000020001080 RSI: 0000000020001040 RDI: 0000000000000000 [ 163.716947][ T9312] RBP: 00007ffa3cd77090 R08: 0000000020001300 R09: 0000000000000000 [ 163.717001][ T9312] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000001 [ 163.717011][ T9312] R13: 0000000000000000 R14: 00007ffa3e925fa0 R15: 00007ffdd1eae7f8 [ 163.717027][ T9312] [ 163.718606][ T9312] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 164.052464][ T9324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2054'. [ 164.061995][ T9325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2054'. [ 164.132140][ T9330] 9pnet_fd: Insufficient options for proto=fd [ 164.304534][ T9343] vlan2: entered promiscuous mode [ 164.830603][ T9375] 9pnet_fd: Insufficient options for proto=fd [ 164.941080][ C0] hrtimer: interrupt took 26932 ns [ 165.934556][ T9406] FAULT_INJECTION: forcing a failure. [ 165.934556][ T9406] name failslab, interval 1, probability 0, space 0, times 0 [ 165.947271][ T9406] CPU: 0 UID: 0 PID: 9406 Comm: syz.0.2089 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 165.947294][ T9406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 165.947305][ T9406] Call Trace: [ 165.947310][ T9406] [ 165.947317][ T9406] dump_stack_lvl+0xf2/0x150 [ 165.947413][ T9406] dump_stack+0x15/0x1a [ 165.947433][ T9406] should_fail_ex+0x24a/0x260 [ 165.947460][ T9406] should_failslab+0x8f/0xb0 [ 165.947483][ T9406] kmem_cache_alloc_noprof+0x52/0x320 [ 165.947558][ T9406] ? skb_clone+0x154/0x1f0 [ 165.947586][ T9406] ? mod_objcg_state+0x2ea/0x4f0 [ 165.947667][ T9406] skb_clone+0x154/0x1f0 [ 165.947695][ T9406] dev_queue_xmit_nit+0x14b/0x680 [ 165.947717][ T9406] ? cgroup_rstat_updated+0x9f/0x570 [ 165.947740][ T9406] ? __rcu_read_unlock+0x4e/0x70 [ 165.947836][ T9406] dev_hard_start_xmit+0xcc/0x3f0 [ 165.947862][ T9406] ? validate_xmit_skb+0x645/0x830 [ 165.947951][ T9406] __dev_queue_xmit+0x100a/0x2090 [ 165.947977][ T9406] ? __dev_queue_xmit+0x186/0x2090 [ 165.948121][ T9406] __netlink_deliver_tap+0x3be/0x4f0 [ 165.948142][ T9406] netlink_unicast+0x64a/0x670 [ 165.948173][ T9406] netlink_sendmsg+0x5cc/0x6e0 [ 165.948195][ T9406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.948215][ T9406] __sock_sendmsg+0x140/0x180 [ 165.948254][ T9406] ____sys_sendmsg+0x312/0x410 [ 165.948339][ T9406] __sys_sendmsg+0x19d/0x230 [ 165.948377][ T9406] __x64_sys_sendmsg+0x46/0x50 [ 165.948405][ T9406] x64_sys_call+0x2734/0x2dc0 [ 165.948506][ T9406] do_syscall_64+0xc9/0x1c0 [ 165.948530][ T9406] ? clear_bhb_loop+0x55/0xb0 [ 165.948554][ T9406] ? clear_bhb_loop+0x55/0xb0 [ 165.948578][ T9406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.948696][ T9406] RIP: 0033:0x7f1364d0cda9 [ 165.948709][ T9406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.948726][ T9406] RSP: 002b:00007f1363377038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.948744][ T9406] RAX: ffffffffffffffda RBX: 00007f1364f25fa0 RCX: 00007f1364d0cda9 [ 165.948755][ T9406] RDX: 0000000000000000 RSI: 0000000020001200 RDI: 0000000000000006 [ 165.948767][ T9406] RBP: 00007f1363377090 R08: 0000000000000000 R09: 0000000000000000 [ 165.948862][ T9406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.948873][ T9406] R13: 0000000000000000 R14: 00007f1364f25fa0 R15: 00007ffe8c61c9b8 [ 165.948890][ T9406] [ 166.872846][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2100'. [ 166.958447][ T9438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2101'. [ 167.845152][ T9451] 9pnet_fd: Insufficient options for proto=fd [ 168.312979][ T9454] netem: change failed [ 168.362501][ T29] kauditd_printk_skb: 600 callbacks suppressed [ 168.362515][ T29] audit: type=1326 audit(3476467576.600:24230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9453 comm="syz.6.2107" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa3e70cda9 code=0x0 [ 168.412718][ T29] audit: type=1326 audit(3476467576.652:24231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9453 comm="syz.6.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3e70cda9 code=0x7ffc0000 [ 168.436317][ T29] audit: type=1326 audit(3476467576.652:24232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9453 comm="syz.6.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa3e70cda9 code=0x7ffc0000 [ 168.459883][ T29] audit: type=1326 audit(3476467576.652:24233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9453 comm="syz.6.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3e70cda9 code=0x7ffc0000 [ 168.483352][ T29] audit: type=1326 audit(3476467576.652:24234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9453 comm="syz.6.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7ffa3e70cda9 code=0x7ffc0000 [ 168.506737][ T29] audit: type=1326 audit(3476467576.652:24235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9453 comm="syz.6.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3e70cda9 code=0x7ffc0000 [ 168.530245][ T29] audit: type=1326 audit(3476467576.652:24236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9453 comm="syz.6.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3e70cda9 code=0x7ffc0000 [ 168.856316][ T29] audit: type=1326 audit(3476467577.125:24237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9460 comm="syz.4.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb805cda9 code=0x7ffc0000 [ 168.879990][ T29] audit: type=1326 audit(3476467577.125:24238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9460 comm="syz.4.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb805cda9 code=0x7ffc0000 [ 169.141804][ T29] audit: type=1400 audit(3476467577.198:24239): avc: denied { write } for pid=9460 comm="syz.4.2111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.771649][ T9491] FAULT_INJECTION: forcing a failure. [ 169.771649][ T9491] name failslab, interval 1, probability 0, space 0, times 0 [ 169.784468][ T9491] CPU: 0 UID: 0 PID: 9491 Comm: syz.0.2121 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 169.784529][ T9491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 169.784539][ T9491] Call Trace: [ 169.784543][ T9491] [ 169.784550][ T9491] dump_stack_lvl+0xf2/0x150 [ 169.784573][ T9491] dump_stack+0x15/0x1a [ 169.784592][ T9491] should_fail_ex+0x24a/0x260 [ 169.784671][ T9491] should_failslab+0x8f/0xb0 [ 169.784695][ T9491] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 169.784727][ T9491] ? sidtab_sid2str_get+0xb8/0x140 [ 169.784747][ T9491] kmemdup_noprof+0x2a/0x60 [ 169.784800][ T9491] sidtab_sid2str_get+0xb8/0x140 [ 169.784820][ T9491] security_sid_to_context_core+0x1eb/0x2f0 [ 169.784917][ T9491] security_sid_to_context+0x27/0x30 [ 169.784992][ T9491] avc_audit_post_callback+0x9d/0x530 [ 169.785016][ T9491] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 169.785037][ T9491] common_lsm_audit+0x95e/0x1020 [ 169.785127][ T9491] slow_avc_audit+0xf9/0x140 [ 169.785150][ T9491] avc_has_perm+0x129/0x160 [ 169.785172][ T9491] file_has_perm+0x329/0x370 [ 169.785194][ T9491] selinux_file_permission+0x327/0x360 [ 169.785212][ T9491] security_file_permission+0x3d/0x80 [ 169.785319][ T9491] rw_verify_area+0x8a/0x150 [ 169.785338][ T9491] do_sendfile+0x35c/0x660 [ 169.785436][ T9491] __x64_sys_sendfile64+0x110/0x150 [ 169.785512][ T9491] x64_sys_call+0xfbd/0x2dc0 [ 169.785534][ T9491] do_syscall_64+0xc9/0x1c0 [ 169.785558][ T9491] ? clear_bhb_loop+0x55/0xb0 [ 169.785582][ T9491] ? clear_bhb_loop+0x55/0xb0 [ 169.785621][ T9491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.785674][ T9491] RIP: 0033:0x7f1364d0cda9 [ 169.785686][ T9491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.785703][ T9491] RSP: 002b:00007f1363377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 169.785721][ T9491] RAX: ffffffffffffffda RBX: 00007f1364f25fa0 RCX: 00007f1364d0cda9 [ 169.785733][ T9491] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 169.785744][ T9491] RBP: 00007f1363377090 R08: 0000000000000000 R09: 0000000000000000 [ 169.785755][ T9491] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 169.785764][ T9491] R13: 0000000000000000 R14: 00007f1364f25fa0 R15: 00007ffe8c61c9b8 [ 169.785855][ T9491] [ 170.176137][ T9509] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2125'. [ 170.200577][ T9509] netlink: 5044 bytes leftover after parsing attributes in process `syz.6.2125'. [ 170.239629][ T9514] FAULT_INJECTION: forcing a failure. [ 170.239629][ T9514] name failslab, interval 1, probability 0, space 0, times 0 [ 170.252850][ T9514] CPU: 0 UID: 0 PID: 9514 Comm: syz.4.2132 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 170.252871][ T9514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 170.252882][ T9514] Call Trace: [ 170.252888][ T9514] [ 170.252894][ T9514] dump_stack_lvl+0xf2/0x150 [ 170.252945][ T9514] dump_stack+0x15/0x1a [ 170.252965][ T9514] should_fail_ex+0x24a/0x260 [ 170.252992][ T9514] should_failslab+0x8f/0xb0 [ 170.253077][ T9514] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 170.253117][ T9514] ? audit_log_vformat+0x23a/0x490 [ 170.253198][ T9514] ? sidtab_sid2str_get+0xb8/0x140 [ 170.253294][ T9514] kmemdup_noprof+0x2a/0x60 [ 170.253381][ T9514] sidtab_sid2str_get+0xb8/0x140 [ 170.253399][ T9514] security_sid_to_context_core+0x1eb/0x2f0 [ 170.253430][ T9514] security_sid_to_context+0x27/0x30 [ 170.253466][ T9514] avc_audit_post_callback+0x10d/0x530 [ 170.253488][ T9514] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 170.253532][ T9514] common_lsm_audit+0x95e/0x1020 [ 170.253563][ T9514] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 170.253589][ T9514] slow_avc_audit+0xf9/0x140 [ 170.253639][ T9514] avc_has_perm+0x129/0x160 [ 170.253661][ T9514] selinux_socket_sendmsg+0x185/0x1c0 [ 170.253723][ T9514] security_socket_sendmsg+0x47/0x80 [ 170.253749][ T9514] __sock_sendmsg+0x2d/0x180 [ 170.253807][ T9514] ____sys_sendmsg+0x312/0x410 [ 170.253837][ T9514] __sys_sendmsg+0x19d/0x230 [ 170.253875][ T9514] __x64_sys_sendmsg+0x46/0x50 [ 170.253914][ T9514] x64_sys_call+0x2734/0x2dc0 [ 170.253935][ T9514] do_syscall_64+0xc9/0x1c0 [ 170.253991][ T9514] ? clear_bhb_loop+0x55/0xb0 [ 170.254016][ T9514] ? clear_bhb_loop+0x55/0xb0 [ 170.254079][ T9514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.254102][ T9514] RIP: 0033:0x7f5eb805cda9 [ 170.254116][ T9514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.254134][ T9514] RSP: 002b:00007f5eb66c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.254151][ T9514] RAX: ffffffffffffffda RBX: 00007f5eb8275fa0 RCX: 00007f5eb805cda9 [ 170.254162][ T9514] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 170.254203][ T9514] RBP: 00007f5eb66c7090 R08: 0000000000000000 R09: 0000000000000000 [ 170.254214][ T9514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.254225][ T9514] R13: 0000000000000000 R14: 00007f5eb8275fa0 R15: 00007ffc8fe5af18 [ 170.254240][ T9514] [ 170.605804][ T9521] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 170.635254][ T9521] SELinux: failed to load policy [ 170.670041][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2137'. [ 170.698947][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2134'. [ 171.051341][ T9552] 9pnet_fd: Insufficient options for proto=fd [ 172.735310][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2169'. [ 173.135796][ T29] kauditd_printk_skb: 1178 callbacks suppressed [ 173.135811][ T29] audit: type=1326 audit(3476467581.618:25418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9624 comm="syz.4.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5eb8053d67 code=0x7ffc0000 [ 173.456946][ T29] audit: type=1326 audit(3476467581.639:25419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9633 comm="syz.1.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f278fdf3d67 code=0x7ffc0000 [ 173.480863][ T29] audit: type=1326 audit(3476467581.639:25420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9633 comm="syz.1.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f278fd98fa9 code=0x7ffc0000 [ 173.504286][ T29] audit: type=1326 audit(3476467581.639:25421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9633 comm="syz.1.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f278fdfcda9 code=0x7ffc0000 [ 173.527961][ T29] audit: type=1326 audit(3476467581.639:25422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9624 comm="syz.4.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5eb7ff8fa9 code=0x7ffc0000 [ 173.551353][ T29] audit: type=1326 audit(3476467581.639:25423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9624 comm="syz.4.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5eb8053d67 code=0x7ffc0000 [ 173.574901][ T29] audit: type=1326 audit(3476467581.639:25424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9624 comm="syz.4.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5eb7ff8fa9 code=0x7ffc0000 [ 173.598407][ T29] audit: type=1326 audit(3476467581.639:25425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9624 comm="syz.4.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f5eb805cda9 code=0x7ffc0000 [ 173.622120][ T29] audit: type=1326 audit(3476467581.671:25426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9633 comm="syz.1.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f278fdf3d67 code=0x7ffc0000 [ 173.646017][ T29] audit: type=1326 audit(3476467581.671:25427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9633 comm="syz.1.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f278fd98fa9 code=0x7ffc0000 [ 174.814873][ T9687] netem: change failed [ 175.269648][ T3297] ================================================================== [ 175.277753][ T3297] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 175.285669][ T3297] [ 175.287986][ T3297] read-write to 0xffff888129f96240 of 8 bytes by task 9697 on cpu 0: [ 175.296042][ T3297] shmem_add_to_page_cache+0x3b9/0x4b0 [ 175.301506][ T3297] shmem_get_folio_gfp+0x4f6/0xd90 [ 175.306620][ T3297] shmem_write_begin+0xa2/0x180 [ 175.311481][ T3297] generic_perform_write+0x1a8/0x4a0 [ 175.316773][ T3297] shmem_file_write_iter+0xc2/0xe0 [ 175.321878][ T3297] __kernel_write_iter+0x247/0x4c0 [ 175.326983][ T3297] dump_user_range+0x3ac/0x550 [ 175.331744][ T3297] elf_core_dump+0x1bf4/0x1cf0 [ 175.336505][ T3297] do_coredump+0x171e/0x1c90 [ 175.341093][ T3297] get_signal+0xd4f/0x1000 [ 175.345512][ T3297] arch_do_signal_or_restart+0x95/0x4b0 [ 175.351056][ T3297] irqentry_exit_to_user_mode+0xa7/0x120 [ 175.356691][ T3297] irqentry_exit+0x12/0x50 [ 175.361110][ T3297] asm_exc_page_fault+0x26/0x30 [ 175.365967][ T3297] [ 175.368283][ T3297] read to 0xffff888129f96240 of 8 bytes by task 3297 on cpu 1: [ 175.375822][ T3297] shmem_getattr+0x69/0x200 [ 175.380330][ T3297] vfs_statx_path+0x171/0x2d0 [ 175.385006][ T3297] vfs_statx+0xe1/0x170 [ 175.389168][ T3297] __se_sys_newfstatat+0xdc/0x300 [ 175.394192][ T3297] __x64_sys_newfstatat+0x55/0x70 [ 175.399223][ T3297] x64_sys_call+0x236d/0x2dc0 [ 175.403902][ T3297] do_syscall_64+0xc9/0x1c0 [ 175.408409][ T3297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.414304][ T3297] [ 175.416616][ T3297] value changed: 0x00000000000005fd -> 0x00000000000005fe [ 175.423716][ T3297] [ 175.426034][ T3297] Reported by Kernel Concurrency Sanitizer on: [ 175.432176][ T3297] CPU: 1 UID: 0 PID: 3297 Comm: syz-executor Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 175.442672][ T3297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 175.452729][ T3297] ==================================================================