last executing test programs: 3.090170049s ago: executing program 4 (id=2798): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000002040)=ANY=[@ANYBLOB='cruft,block=0x0000000000000400\x00session=0x0000000000000006,check=relaxed,utf8,cruftAuid=', @ANYRES64, @ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYRESDEC], 0x0, 0x648, &(0x7f00000019c0)="$eJzs3c1u29j5x/EfZfkl/gPBH20xCIJMcibpAA6aKpI8cSCki7IUJXMqiQJJFzZQYJBO7EEQOdMmKdB4M/WmL8D0BrqbTRe9iN5A76LLAkW7K9ANC5KiJVuSJTuyk+l8P4YjiucRz0MeRQ9o8UUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECWUy+XK5ZaXmdr20zm1AO/fUp7trRF3c0m7k7tV7KSX62s6Fo269p3Bs3vJf/c1o3s2Q2tJA8rOvi/9/7/0beLhfz1pyR0HjrrAl++Pnj2uNfbfTHnRN4BKswQ1HQ7Xuh7bbvpGi/0TW1jo3x/sxGahtdyw50wctvGCdxC5AdmzblrKrXaunFLO/5Wp1m3W24+8+H3q+Xyhvl4uT/89z8uhc6m12p5nWYakzQnMQ/Nlz/NQly7bcze097u+rQkk6DKLEHVaUHVcrVaqVSrlY0HtQcPy+XiyIzyCRqJmPubFl8z8/vwBt5QIan/f7OkllbU0Za2Zcb+OKorkK/2hPa+vP5/eN89td/h+p9X+WuD5utK6//N7NnNSfV/Qi5GJn3BuBZrwvzz/bzUax3omR6rp5529WLmV17pr+nY1lvzy/Bif5pSUfIUypentmw15cr05xjVtKENlfWJNtVQKKOGPLXkKtSOQkVy1U7HJJArW5F8BTJak6O7MqqopprWZeSqpB352lJHTdVl699xHO/pabrd10/JUXlQZZag6uQQ/ToZsDH1/2dfZGNJ/f8m01BtPzUOeFfE/f3/M7p1MdkAAAAAAICLYKV/fbfS7+7flxSr4bXc8ttOCwAAAAAAzFH6zf+N5GExmXpf1oT9//jycwMAAAAAAPNhpefYWZJW04P6rcGZULMcBLBwCSkCAAAAAIA3lH7/f3NJitNrr92Sdab9fwAAAAAA8DXwu6Fr7Bfza+zG+df6BUlhd9n6yz+XFSxah93t71r7dtJi7/djRo4AiBrXrav9C/WmD0uS0meOe8Ma3BjASn9Xsif/2Jt2rX8rOJHA0kL+54tpCWwU+8/0pT7IYj7o9/vkoKC0JetlteG13JLjtx5VZNtXC5G7Hf3y+dNfScHReu497e2WPv289yTN5TCZdbif5PHFsXQK03J5lV5vIT3nYtwaX1Ej7/L3nfaqlfZbztd/QfZ+Ybij2db/N7qdxdxezR5XD/IRSNd/JVn/SikdssHap1eHsAZZVE6u+biBGJuFilKSxZ0s5s7anewhz6+fxfcWpGppdAyC4Syqw1lM3xbWv0a2xZQskm2xXlrsL2lCFutny2JkRADgbdkbVKH0Iuaj19g/WXfP8yk3vbr/8KiX9HuIV3+MsxMOF5KCES9P7WUlrStrWcyS0g/W4vUxn+jlfl1ZmfSJXj53dcv6+vPgHkj9tEey+E8cx48qab9/OFFVv0pe8NXEfsNWdSHZhPdf7f88vQB+4rPdz3afV6vrG+WPyuUHVS2mq9F/oPYAAMaYfo+dqRHWR0d71U/+/mE2dazifevokIKSPtXn6umJ7uW3ELg1fqmrQ4ch3Bvda01i0zvoHI+t6N7Evbq0lg7FVo9i8128k3uAg9j1Cx4FAAAu1+0pdXiW+n8v3+9euz52v/t4LT95h+BJsZVL3hIAAHxzuIGxVqPfWkHgdT+p1GoVO9p0TeA7PzaBV2+6xutEbuBs2p2ma7qBH/mO3zLdQMte3Q1NuNXt+kFkGn5gun7obad3fjf9W7+HbtvuRJ4TdluuHbrG8TuR7USm7oWO6W79qOWFm26Qvjjsuo7X8Bw78vyOCf2twHFLxoSuOxTo1d1O5DW8ZLJjuoHXtoMd8xO/tdV2Td0NncDrRn62wLwvr9Pwg3a62JLiM9/oEACA/0UvXx88e9zr7b44ZeJQQ3PyYwPHBy+NW+DbXkcAAHAcVRoAAAAAAAAAAAAAAAAAAAAAgHffLOf/nWliUWOapKM5v7g603IszTuxSRNL/S0x3FQ4/wL/OjJnWfmcK0dNGtPp4SxdFCXNcSMomyjOf/Nekca9Ey5s4gd72RYdF6Nir7erSSetLh+NRXH+/x2Sied/mtAUx3F8+suXNfJenbHT5I3yYukNhuDyP4sAXK7/BgAA//9C9zbL") chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000010000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xfffffffffffffffe}, 0x18) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 3.002126589s ago: executing program 4 (id=2802): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.955554419s ago: executing program 4 (id=2804): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000"], 0xd4}}, 0x0) r1 = syz_io_uring_setup(0x7399, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001900017c82cb372c95cbed00021800000000ef000000000008000100ac1414"], 0x30}, 0x1, 0x0, 0x0, 0x4081}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, 0x0, 0x0}, 0x20) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x40, 0x6000, @fd_index=0x5, 0x4, 0x5, 0x2, 0x1, 0x1, {0x0, r7}}) io_uring_enter(r1, 0x4ac6, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x40, 0x7800, 0x9, 0x9c65, {{0x24, 0x4, 0x0, 0x7, 0x90, 0x66, 0x0, 0x3, 0x4, 0x0, @remote, @multicast1, {[@ra={0x94, 0x4, 0x1}, @noop, @timestamp_prespec={0x44, 0xc, 0x8b, 0x3, 0x6, [{@private=0xa010102, 0x5}]}, @rr={0x7, 0xf, 0x1b, [@local, @dev={0xac, 0x14, 0x14, 0x3f}, @remote]}, @cipso={0x86, 0x40, 0x0, [{0x1, 0x10, "3ce853482a246d3adac0f9b94e92"}, {0x7, 0xc, "1596ad43bcb4aaabcc9f"}, {0x0, 0x2}, {0x7, 0xd, "2be5253f48ae95b2dccab7"}, {0x0, 0x4, '@W'}, {0x7, 0xb, "4239355aaeda2b4e33"}]}, @lsrr={0x83, 0x13, 0xb2, [@multicast1, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x7, 0xa5, [@private=0xa010100]}]}}}}}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x8000, 0x1, 0xff, 0x9000, r6, 0x5, '\x00', r10, r9, 0x2, 0x3, 0x2, 0xd, @value=r9, @void, @void, @value}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@remote, 0x0, 0x33}, @in=@local, {0x0, 0x7}, {}, {0x4}, 0x0, 0x0, 0x2, 0x4}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r14}, 0x10) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020001040000000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) 2.85323995s ago: executing program 4 (id=2808): getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001200)={0x14, 0x4f, 0x501, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setaffinity(0x0, 0x3, &(0x7f0000000000)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r3 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r3, &(0x7f0000000300)={0x11, 0xd, 0x0, 0x1, 0x4, 0x6, @random="832210f5572e"}, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000003000000ff0000", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27) (async) unshare(0x62040200) (async, rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@barrier}, {@debug}, {@noload}, {@inlinecrypt}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x473, &(0x7f0000000640)="$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") (async) syz_emit_ethernet(0x46, 0x0, 0x0) 2.645843071s ago: executing program 4 (id=2811): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000000440)={[{@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x2f}}, {@dioread_lock}]}, 0x5, 0x504, &(0x7f0000001480)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x11, 0x3, 0x0) bind$packet(r4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) getegid() r6 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) get_robust_list(r1, 0x0, 0x0) r8 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) 2.588535071s ago: executing program 4 (id=2813): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01070000000000000000200000"], 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x0) 2.163355223s ago: executing program 0 (id=2820): socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x4, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@remote, 0x0, 0x33}, @in=@local, {0x0, 0x7}, {}, {0x4}, 0x0, 0x0, 0x2, 0x4}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) clock_gettime(0x0, &(0x7f0000006480)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000024170380300000802c000180250001"], 0x17d4}}, 0x4001044) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0/../file0\x00'}) symlink(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00') gettid() syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket(0x1d, 0x2, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000500), 0x1, 0x0) syz_emit_ethernet(0xf9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdaa, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast2}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) fadvise64(0xffffffffffffffff, 0xffff, 0x7, 0x1) 2.069892183s ago: executing program 0 (id=2822): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x8000}, {0x0, 0x0, 0x800}], 0x2, 0x0) semctl$GETZCNT(r0, 0x0, 0xf, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r3, &(0x7f0000000040), 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r3, &(0x7f0000000540)=0xffffffff, 0x5) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0200ffff0000", 0x6}]) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r8 = eventfd(0x6) r9 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x8000000000000000, 0x4080) io_submit(r6, 0x3, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000080)="cdb0f12c44d5e2982e6892ef5ac12e5d1302e1fe95bbe1a7e4954a5703", 0x1d, 0x5, 0x0, 0x3}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x2, r1, &(0x7f00000002c0)="77c13a7ae74ab11633a050289cf52ad837ecf8433d95fb53989158ea0c7727b0906dc0c1f47966a1c139e3212f067cb6d3762edab0798345d685a4475c72d1cb666a8601d9d8ef0fe4e629d6f905a9a9c36194d1c27a427baae63482c04c45b0820f894643803bf65e37d94c686d5b17f667465e8b", 0x75, 0x100, 0x0, 0x2, r8}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0xeb5c, r2, &(0x7f0000000380)="24d4f5a10a50658c7e3dc9c56ba50c3a5d0f7d7343852d65e88b02f27eba1b39c03623f3f25df937331c65ceee50c026804d26044e10668df5", 0x39, 0x2000000000, 0x0, 0x1, r9}]) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaa69e305301c3da3e60555"], 0x0) 1.712367954s ago: executing program 3 (id=2828): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, r1}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 1.606603124s ago: executing program 3 (id=2830): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000002040)=ANY=[@ANYBLOB='cruft,block=0x0000000000000400\x00session=0x0000000000000006,check=relaxed,utf8,cruftAuid=', @ANYRES64, @ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYRESDEC], 0x0, 0x648, &(0x7f00000019c0)="$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") chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000010000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) getdents64(r0, 0x0, 0x0) 1.511915065s ago: executing program 3 (id=2832): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x1b, 0x88, 0x4000069}, 0x2c) 1.468931395s ago: executing program 1 (id=2834): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 1.444494695s ago: executing program 3 (id=2835): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x10000000}, 0x3}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xff}, {}, {0x0, 0x4}, {0x2000}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xfffffffc}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, {}, {0x0, 0x0, 0x0, 0x0, 0xa}, {0xb}, {}, {0x0, 0x0, 0x0, 0x3, 0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x3d}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x6e, 0x0, 0x0, 0x800}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x1, 0xc75}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xb8e5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0xe131}, {0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1, 0x0, 0x1}, {0x0, 0xfffffffd, 0x0, 0x20000}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c54}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) 1.423244395s ago: executing program 1 (id=2836): bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000564906c4a3d0e72fea4f000000000000271da19430d0fb2ac94c7a964000e10900000000000000e2912471e54084b3"], 0x50) futex(0x0, 0x3, 0x1, 0x0, 0xfffffffffffffffe, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)=""/180, 0xb4}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendto(r0, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) sendmmsg$sock(r0, &(0x7f0000001480)=[{{&(0x7f0000000680)=@pptp={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x80, &(0x7f0000000740)=[{&(0x7f00000004c0)="ba8f78d6b39de63bb5110b08f7084b", 0xf}, {&(0x7f0000000700)="37ec95613be0cd111b99a398a7523e1fe95ca4a4430a0afcaab960009582b2d3cb46ee478a46058459950d2c1342fd567ffd40fe", 0x34}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000800)="481bee3a30a427c7f433005036006501638676639e65f215c69e05de1f3acb2968a0d835acb1dbd6a8ea0ef570ddf443efd35306eb89d4d038e085e8a8acd4e02a4c0a0b356338e80eb59298e485e6dc42831b12807ee4a8dda3267a46fc903cd07c9da1b1637befba1e37ed750214116cb2bf6efb65cd6db7ef184d8f9a297e96f8994be506c5a9c301e915ff080e2de20d2d29d7202d3e23c6409e8ed5fd6ba817cbc7c2afe6f0fb98ca0b38fd88842add2f903a6b3324b00dffc1d04558f4d98d", 0xc2}, {&(0x7f0000000900)="408b87", 0x3}, {&(0x7f0000000940)="2ebbb71bc940c5a10631e8d119e3ea0e7d5db3ac74100da878bcb27f167e860e4175d90a405856010b377a6eb71e26abf661581297599a68a56109bdf32108ff25c60331a6cb9497a016bf7f507c", 0x4e}, {&(0x7f00000009c0)="16ffeda3d140f71a32a239d3cc5acc207e830389bbcb8c77011b35449b295161fad50333b1028556dd4b", 0x2a}, {&(0x7f0000000a00)="3cf7af0a424130a695d7685b82937a6a6ee4d3ed47abcffdf6a20348d7fa20871e78e98856a8993fac83333a4c166be311fa556b7cb22f83b9c85322b3e252890a0d5d426a52f12470667e1a96f81ffa9ad41e00844f648a193268b0a00ec9848c97527a3567d9003fa87609b15c8b87806481dbfde6692eb0a11faf14afdd761b3ae486d7160adb652378dd3f20973b3be43d676a550f9ed2d9fb4afcae3f2df0c18fef5bd50419341e8dd759f1d1f0085fcc4430c6f9e781", 0xb9}, {&(0x7f0000000ac0)="ec10b8052ee13a6f380baf7e95507ab16900c53e1e4c345db29993e1ab61a9bcb06318f8cf61111473a392e6db4bf4c5ec023a684f0da0ebc5714b1302d110d196286258dd27a8e1f716029c065bac6dc6496ca2e02ce1d9f205894c94d0070d834a88ad6abf1bd452480f55735940693aecc1be8dfd98245380113a18e130e41622be56f2076b3260bfa102d6bf", 0x8e}], 0x6}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000780)="eb6d9fccf5aa06dd4f0a7238559de05ad985a017aabe6dda84ef0e521cee1e9c857d8267cd8f68c97eaf55ac0208580000000000002551e3467597381cccfbb11b773bd2066e8f5064edc7", 0x4b}], 0x1, &(0x7f0000000d80)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @mark={{0x14, 0x1, 0x24, 0xc4c}}], 0x48}}, {{&(0x7f0000000e40)=@l2tp6={0xa, 0x0, 0xd, @mcast2, 0x3, 0x4}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000ec0)="827af605c9a1140e088b3f4e478803d48900f38f709c05acbdb52ab96a74a206f2e50b99d11ee335e7c68cd4c6ab9f95d51ac2f6194f4d8e8ce3a30db91c8bad7b1b28dc3cdcc690e34c1a5abde8a7540140369371a4882d9cff76d63d582abdfcf84a47f0131597d81e75cce975ba6021ff4fb65f878aa97489e2b5d009e5948f34f7a4b2e4d9d11ba6f0f08429a514", 0x90}, {&(0x7f0000000f80)="1f910be441414f68cf0b71dbecaa34d1a07a1d69f3cb9f76c3e37e6d43516895d922514f34ac512941bf5e9dc10986ccc7c7bdc55b05", 0x36}, {&(0x7f0000000fc0)="d16dce3cef94af37e3a17836c1f0f69f87db00e9768895d3074b61bddb93dad42c57afcbb37140881bab317efc9040cdf737c4953b1a99c601e8be1c2b609816f3892043d5b240f0ed4a", 0x4a}, {&(0x7f0000001040)="f49bf853756a3d44c10ca20d05ed7f5d27b6f0f889c0d663a57e9e7a7d7f8df29729a5cc950db1aa49be54dcf59b415478e6dd7608292b99408c73ef3eaed7617a757cb29b0f4f35f956382f7800359b6348e3791d840c97effed49385e41da45c68fe7a5434d53574475e0cd3e1cb12ae76a3745d077eb8e2b409decbc60ab631c8ae46763010473916d82267cb981e38d384021a6491f5c27f4fdf", 0x9c}], 0x4}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000018c0)="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", 0xb1e}], 0x1}}], 0x5, 0x40004) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x7}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x20a, 0xffffffff, 0x3, 0x0}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0)={r1, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}}}, 0x84) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x1e3}, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000209c207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sync() sync() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1ff}, 0x18) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="64010000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000020d00040008"], 0x164}}, 0x0) 1.407291115s ago: executing program 3 (id=2837): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x11, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 1.334286136s ago: executing program 3 (id=2839): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 1.201525036s ago: executing program 2 (id=2843): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 1.152053686s ago: executing program 2 (id=2844): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r0}, 0x10) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x2, 0xee00, 0x0, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 1.134596476s ago: executing program 0 (id=2845): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x1b, 0x88, 0x4000069}, 0x2c) 1.031143266s ago: executing program 0 (id=2846): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x0, 0x168, 0x0, 0x0, 0xa, 0x338, 0x250, 0x250, 0x338, 0x250, 0x3, 0x0, {[{{@uncond, 0x0, 0x200, 0x240, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x5, 0x0, 0x1, 0x300, 0x6, 0x1000, 0x0, 0xa8, 0x80}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x4, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x1, 0x1}, {0x0, 0x4, 0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x4744, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f00000000c0)=0x6, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0x8000, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r3 = socket$netlink(0x10, 0x3, 0x15) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000470000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080), 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r3) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c040}, 0x8080) syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000500), &(0x7f0000000900)}, 0x20) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 927.107317ms ago: executing program 0 (id=2847): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) write$P9_RLERRORu(r1, 0x0, 0x12) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000280)={[{@orlov}, {@nodelalloc}, {@errors_remount}, {@grpquota}, {@auto_da_alloc}, {@dioread_nolock}, {@quota}]}, 0xff, 0x493, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$vcsn(&(0x7f0000000400), 0x1, 0x42040) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x20, r0, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}}, 0x0) 922.493587ms ago: executing program 1 (id=2848): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getcwd(0x0, 0x0) 747.924178ms ago: executing program 1 (id=2849): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) r1 = syz_io_uring_setup(0x7399, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001900017c82cb372c95cbed00021800000000ef000000000008000100ac1414"], 0x30}, 0x1, 0x0, 0x0, 0x4081}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, 0x0, 0x0}, 0x20) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x40, 0x6000, @fd_index=0x5, 0x4, 0x5, 0x2, 0x1, 0x1, {0x0, r7}}) io_uring_enter(r1, 0x4ac6, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x40, 0x7800, 0x9, 0x9c65, {{0x24, 0x4, 0x0, 0x7, 0x90, 0x66, 0x0, 0x3, 0x4, 0x0, @remote, @multicast1, {[@ra={0x94, 0x4, 0x1}, @noop, @timestamp_prespec={0x44, 0xc, 0x8b, 0x3, 0x6, [{@private=0xa010102, 0x5}]}, @rr={0x7, 0xf, 0x1b, [@local, @dev={0xac, 0x14, 0x14, 0x3f}, @remote]}, @cipso={0x86, 0x40, 0x0, [{0x1, 0x10, "3ce853482a246d3adac0f9b94e92"}, {0x7, 0xc, "1596ad43bcb4aaabcc9f"}, {0x0, 0x2}, {0x7, 0xd, "2be5253f48ae95b2dccab7"}, {0x0, 0x4, '@W'}, {0x7, 0xb, "4239355aaeda2b4e33"}]}, @lsrr={0x83, 0x13, 0xb2, [@multicast1, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x7, 0xa5, [@private=0xa010100]}]}}}}}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x8000, 0x1, 0xff, 0x9000, r6, 0x5, '\x00', r10, r9, 0x2, 0x3, 0x2, 0xd, @value=r9, @void, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@remote, 0x0, 0x33}, @in=@local, {0x0, 0x7}, {}, {0x4}, 0x0, 0x0, 0x2, 0x4}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r13}, 0x10) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020001040000000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) 509.631869ms ago: executing program 1 (id=2850): socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x4, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@remote, 0x0, 0x33}, @in=@local, {0x0, 0x7}, {}, {0x4}, 0x0, 0x0, 0x2, 0x4}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) clock_gettime(0x0, &(0x7f0000006480)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000024170380300000802c000180250001"], 0x17d4}}, 0x4001044) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0/../file0\x00'}) symlink(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00') gettid() syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket(0x1d, 0x2, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000500), 0x1, 0x0) syz_emit_ethernet(0xf9, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0) fadvise64(0xffffffffffffffff, 0xffff, 0x7, 0x1) 430.948859ms ago: executing program 1 (id=2851): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x183442, 0x100) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="f024", 0x2, 0x4048055, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r8, 0x0, 0x8ec0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) dup3(r6, r7, 0x0) fcntl$setpipe(r8, 0x407, 0x100000) dup2(r7, r8) sendmsg$key(r8, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000440)=ANY=[], 0x118}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00'}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 282.051369ms ago: executing program 2 (id=2852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)={0x40, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x20, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3ae2db5809e0415d35db11dd78cd0f01"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x2800a000}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r4 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x1) preadv2(r4, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYRESDEC=r3, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 216.19915ms ago: executing program 2 (id=2853): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) fsopen(&(0x7f0000000180)='efivarfs\x00', 0x0) 206.594089ms ago: executing program 2 (id=2854): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) cachestat(0xffffffffffffffff, &(0x7f0000000d80)={0x749, 0x100000000}, &(0x7f0000000dc0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010020, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000002c0)={0x0, @empty, @initdev}, &(0x7f0000000400)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000d40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000500)={0x294, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x204, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'mpol'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$\\,}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '!%#](\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}]}, @ETHTOOL_A_BITSET_VALUE={0x9f, 0x4, "4d1ad43c05f4e0bbcb856bd0952dc3e97ec37ccbbfbd67f06cd72272d7559ec71c67fb560d820d9138201a7e147055d583355fb7e8bd1aa0308d4323419b689fa9b22faa769c1cef45cdd87974ce73bed5d2f902b32ea4bcf3731a85df085617999c79e9b0cd79a7a36dab13ad726fbf8c119e67564e275b4efa727abbbb71730d5a2bfcafe31a8391b3a63fa763d75d343f41592149bfa4a41f7b"}, @ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'mpol'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'bind'}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.:[\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\xab^/{+^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x647}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x26, 0x5, "61a8a3a6b8b0fb4eb7fbd4c654471707a3b2e6f94c30153fb4916366ab82421d2a67"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x10}, 0x4080) socket$unix(0x1, 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30, 0x2d, 0x30, 0x3a, 0x4e]}}}}]}) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) 31.73261ms ago: executing program 0 (id=2855): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x1b, 0x88, 0x4000069}, 0x2c) 0s ago: executing program 2 (id=2856): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = dup2(r0, r0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180)=0x1000000, r1, 0x0, 0x1, 0x4}}, 0x20) kernel console output (not intermixed with test programs): 9/13/2024 [ 116.880659][ T8541] Call Trace: [ 116.883956][ T8541] [ 116.886896][ T8541] dump_stack_lvl+0xf2/0x150 [ 116.891602][ T8541] dump_stack+0x15/0x1a [ 116.895799][ T8541] should_fail_ex+0x223/0x230 [ 116.900499][ T8541] should_failslab+0x8f/0xb0 [ 116.905262][ T8541] kmem_cache_alloc_noprof+0x52/0x320 [ 116.910777][ T8541] ? getname_flags+0x81/0x3b0 [ 116.915484][ T8541] getname_flags+0x81/0x3b0 [ 116.920031][ T8541] __x64_sys_rename+0x40/0x70 [ 116.924826][ T8541] x64_sys_call+0x2b1c/0x2dc0 [ 116.929528][ T8541] do_syscall_64+0xc9/0x1c0 [ 116.934050][ T8541] ? clear_bhb_loop+0x55/0xb0 [ 116.938761][ T8541] ? clear_bhb_loop+0x55/0xb0 [ 116.943511][ T8541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.949491][ T8541] RIP: 0033:0x7f9ce4d9fed9 [ 116.953967][ T8541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.973590][ T8541] RSP: 002b:00007f9ce3417058 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 116.982014][ T8541] RAX: ffffffffffffffda RBX: 00007f9ce4f65fa0 RCX: 00007f9ce4d9fed9 [ 116.989997][ T8541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.998085][ T8541] RBP: 00007f9ce34170a0 R08: 0000000000000000 R09: 0000000000000000 [ 117.006064][ T8541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.014129][ T8541] R13: 0000000000000000 R14: 00007f9ce4f65fa0 R15: 00007ffe1f0bfb08 [ 117.022115][ T8541] [ 117.029158][ T8539] loop4: detected capacity change from 0 to 1024 [ 117.035988][ T8539] EXT4-fs: Ignoring removed nobh option [ 117.041576][ T8539] EXT4-fs: Ignoring removed orlov option [ 117.062584][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.080878][ T8537] syz_tun: entered promiscuous mode [ 117.103754][ T8539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.109024][ T8537] syz_tun: left promiscuous mode [ 117.188093][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.245119][ T8547] pim6reg: entered allmulticast mode [ 117.288911][ T8547] tmpfs: Bad value for 'mpol' [ 117.322785][ T8547] pim6reg: left allmulticast mode [ 117.500048][ T8579] pim6reg: entered allmulticast mode [ 117.508108][ T8579] tmpfs: Bad value for 'mpol' [ 117.514105][ T8579] pim6reg: left allmulticast mode [ 117.761626][ T8607] loop2: detected capacity change from 0 to 164 [ 117.783294][ T8607] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 117.816713][ T8607] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 117.833354][ T8607] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 117.850154][ T8609] msdos: Unknown parameter '18446744073709551615Oþø¥þ›ŸG5”û©s+01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ¨ÐÊ3†…ƒPq{ÚP [ 117.850154][ T8609] n'º|$@OOݱµ’-®+·el' [ 118.208012][ T8622] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 118.400689][ T8633] loop2: detected capacity change from 0 to 164 [ 118.427582][ T8633] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 118.444606][ T8633] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 118.453376][ T8633] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 118.503146][ T8639] loop2: detected capacity change from 0 to 164 [ 118.534793][ T8639] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 118.549983][ T8639] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 118.568433][ T8639] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 118.686125][ T8647] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 118.797344][ T8653] pim6reg: entered allmulticast mode [ 118.815131][ T8653] tmpfs: Bad value for 'mpol' [ 118.827300][ T8653] pim6reg: left allmulticast mode [ 118.868238][ T8657] bond1: entered promiscuous mode [ 118.874044][ T8657] bond1: entered allmulticast mode [ 118.893126][ T8657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.917407][ T8657] bond1 (unregistering): Released all slaves [ 118.983663][ T8662] 9pnet_fd: Insufficient options for proto=fd [ 119.085116][ T8671] loop3: detected capacity change from 0 to 512 [ 119.095603][ T8671] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.123563][ T8673] pim6reg: entered allmulticast mode [ 119.131431][ T8671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.147362][ T8673] tmpfs: Bad value for 'mpol' [ 119.152299][ T8673] pim6reg: left allmulticast mode [ 119.158326][ T8671] ext4 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.184545][ T8671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2034'. [ 119.210177][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.280222][ T8680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2036'. [ 119.303139][ T8682] FAULT_INJECTION: forcing a failure. [ 119.303139][ T8682] name failslab, interval 1, probability 0, space 0, times 0 [ 119.316072][ T8682] CPU: 0 UID: 0 PID: 8682 Comm: syz.2.2038 Not tainted 6.13.0-rc2-syzkaller #0 [ 119.325040][ T8682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 119.335183][ T8682] Call Trace: [ 119.338481][ T8682] [ 119.341479][ T8682] dump_stack_lvl+0xf2/0x150 [ 119.346125][ T8682] dump_stack+0x15/0x1a [ 119.350397][ T8682] should_fail_ex+0x223/0x230 [ 119.355163][ T8682] should_failslab+0x8f/0xb0 [ 119.359781][ T8682] kmem_cache_alloc_node_noprof+0x59/0x320 [ 119.365868][ T8682] ? __alloc_skb+0x10b/0x310 [ 119.370520][ T8682] ? avc_has_perm_noaudit+0x1cc/0x210 [ 119.375942][ T8682] __alloc_skb+0x10b/0x310 [ 119.380576][ T8682] alloc_skb_with_frags+0x80/0x450 [ 119.385787][ T8682] ? selinux_file_open+0x34a/0x3b0 [ 119.391022][ T8682] ? should_fail_ex+0xd7/0x230 [ 119.395824][ T8682] sock_alloc_send_pskb+0x435/0x4f0 [ 119.401095][ T8682] tun_get_user+0xa33/0x25b0 [ 119.405966][ T8682] ? _parse_integer+0x27/0x30 [ 119.410905][ T8682] ? ref_tracker_alloc+0x1f5/0x2f0 [ 119.416138][ T8682] tun_chr_write_iter+0x188/0x240 [ 119.421300][ T8682] vfs_write+0x77f/0x920 [ 119.425719][ T8682] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 119.431312][ T8682] ksys_write+0xe8/0x1b0 [ 119.435692][ T8682] __x64_sys_write+0x42/0x50 [ 119.440320][ T8682] x64_sys_call+0x287e/0x2dc0 [ 119.445052][ T8682] do_syscall_64+0xc9/0x1c0 [ 119.449581][ T8682] ? clear_bhb_loop+0x55/0xb0 [ 119.454280][ T8682] ? clear_bhb_loop+0x55/0xb0 [ 119.459024][ T8682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.464969][ T8682] RIP: 0033:0x7f7115d2fed9 [ 119.469402][ T8682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.489040][ T8682] RSP: 002b:00007f71143a7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.497695][ T8682] RAX: ffffffffffffffda RBX: 00007f7115ef5fa0 RCX: 00007f7115d2fed9 [ 119.505694][ T8682] RDX: 000000000000fdef RSI: 0000000020000240 RDI: 0000000000000003 [ 119.513692][ T8682] RBP: 00007f71143a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 119.521695][ T8682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.529764][ T8682] R13: 0000000000000000 R14: 00007f7115ef5fa0 R15: 00007ffe2cef03a8 [ 119.537856][ T8682] [ 119.579116][ T8684] pim6reg: entered allmulticast mode [ 119.590225][ T8684] tmpfs: Bad value for 'mpol' [ 119.595832][ T8684] pim6reg: left allmulticast mode [ 119.634519][ T8686] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2040'. [ 119.771809][ T8693] loop2: detected capacity change from 0 to 256 [ 119.793199][ T8693] FAT-fs (loop2): Directory bread(block 64) failed [ 119.799749][ T8693] FAT-fs (loop2): Directory bread(block 65) failed [ 119.806701][ T8693] FAT-fs (loop2): Directory bread(block 66) failed [ 119.822522][ T8693] FAT-fs (loop2): Directory bread(block 67) failed [ 119.829090][ T8693] FAT-fs (loop2): Directory bread(block 68) failed [ 119.852726][ T8693] FAT-fs (loop2): Directory bread(block 69) failed [ 119.859393][ T8693] FAT-fs (loop2): Directory bread(block 70) failed [ 119.874471][ T8693] FAT-fs (loop2): Directory bread(block 71) failed [ 119.881121][ T8693] FAT-fs (loop2): Directory bread(block 72) failed [ 119.907266][ T8693] FAT-fs (loop2): Directory bread(block 73) failed [ 119.956086][ T8697] syz_tun: entered promiscuous mode [ 119.973408][ T8697] syz_tun: left promiscuous mode [ 120.022406][ T8699] loop2: detected capacity change from 0 to 164 [ 120.031290][ T8699] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 120.043661][ T8699] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 120.052008][ T8699] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 120.098765][ T8701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2046'. [ 120.153157][ T8707] macsec0: entered promiscuous mode [ 120.173398][ T8706] macsec0: left promiscuous mode [ 120.180868][ T8709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2049'. [ 120.246684][ T8711] loop2: detected capacity change from 0 to 1764 [ 120.265811][ T8711] ISOFS: unable to read i-node block [ 120.271146][ T8711] isofs_fill_super: get root inode failed [ 120.279416][ T8713] pim6reg: entered allmulticast mode [ 120.297869][ T8713] tmpfs: Bad value for 'mpol' [ 120.311893][ T8713] pim6reg: left allmulticast mode [ 120.616096][ T8727] bond1: entered promiscuous mode [ 120.621233][ T8727] bond1: entered allmulticast mode [ 120.649728][ T8727] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.691132][ T8731] loop4: detected capacity change from 0 to 512 [ 120.705912][ T8727] bond1 (unregistering): Released all slaves [ 120.726557][ T8731] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.747716][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2057'. [ 120.784306][ T8731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.797940][ T8731] ext4 filesystem being mounted at /440/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.829218][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2060'. [ 120.851360][ T8731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2059'. [ 120.900365][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.943544][ T8743] FAULT_INJECTION: forcing a failure. [ 120.943544][ T8743] name failslab, interval 1, probability 0, space 0, times 0 [ 120.956292][ T8743] CPU: 0 UID: 0 PID: 8743 Comm: syz.4.2063 Not tainted 6.13.0-rc2-syzkaller #0 [ 120.965347][ T8743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 120.975510][ T8743] Call Trace: [ 120.978852][ T8743] [ 120.981799][ T8743] dump_stack_lvl+0xf2/0x150 [ 120.986437][ T8743] dump_stack+0x15/0x1a [ 120.990709][ T8743] should_fail_ex+0x223/0x230 [ 120.995415][ T8743] ? tee_tg_check+0x122/0x290 [ 121.000123][ T8743] should_failslab+0x8f/0xb0 [ 121.004751][ T8743] __kmalloc_cache_noprof+0x4e/0x320 [ 121.010182][ T8743] ? _raw_spin_unlock_irqrestore+0x19/0x60 [ 121.016024][ T8743] tee_tg_check+0x122/0x290 [ 121.020657][ T8743] xt_check_target+0x266/0x480 [ 121.025476][ T8743] ? strcmp+0x21/0x50 [ 121.029483][ T8743] ? strcmp+0x42/0x50 [ 121.033487][ T8743] ? xt_find_target+0x1bd/0x1e0 [ 121.038485][ T8743] translate_table+0xc1e/0xf70 [ 121.043328][ T8743] do_ipt_set_ctl+0x7bd/0x8b0 [ 121.048023][ T8743] ? sysvec_call_function_single+0xe/0x80 [ 121.053840][ T8743] nf_setsockopt+0x195/0x1b0 [ 121.058603][ T8743] ip_setsockopt+0xea/0x100 [ 121.063179][ T8743] tcp_setsockopt+0x93/0xb0 [ 121.067714][ T8743] sock_common_setsockopt+0x64/0x80 [ 121.073020][ T8743] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 121.078956][ T8743] __sys_setsockopt+0x187/0x200 [ 121.083835][ T8743] __x64_sys_setsockopt+0x66/0x80 [ 121.088892][ T8743] x64_sys_call+0x282e/0x2dc0 [ 121.093631][ T8743] do_syscall_64+0xc9/0x1c0 [ 121.098205][ T8743] ? clear_bhb_loop+0x55/0xb0 [ 121.102989][ T8743] ? clear_bhb_loop+0x55/0xb0 [ 121.107816][ T8743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.113920][ T8743] RIP: 0033:0x7fb57177fed9 [ 121.118356][ T8743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.137996][ T8743] RSP: 002b:00007fb56fdf7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 121.146469][ T8743] RAX: ffffffffffffffda RBX: 00007fb571945fa0 RCX: 00007fb57177fed9 [ 121.154914][ T8743] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000005 [ 121.162923][ T8743] RBP: 00007fb56fdf70a0 R08: 00000000000002a0 R09: 0000000000000000 [ 121.170997][ T8743] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 121.179159][ T8743] R13: 0000000000000000 R14: 00007fb571945fa0 R15: 00007ffc8d8496b8 [ 121.187160][ T8743] [ 121.344225][ T8752] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 121.440387][ T1036] IPVS: starting estimator thread 0... [ 121.446299][ T8758] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 121.513968][ T8765] loop4: detected capacity change from 0 to 164 [ 121.518625][ T8766] pim6reg: entered allmulticast mode [ 121.535008][ T8766] tmpfs: Bad value for 'mpol' [ 121.539942][ T8766] pim6reg: left allmulticast mode [ 121.550674][ T8765] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 121.559474][ T8762] IPVS: using max 2160 ests per chain, 108000 per kthread [ 121.593354][ T8765] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 121.610771][ T8765] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 121.729180][ T8774] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 121.788411][ T29] kauditd_printk_skb: 425 callbacks suppressed [ 121.788428][ T29] audit: type=1326 audit(1733756153.347:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8777 comm="syz.4.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57177fed9 code=0x7ffc0000 [ 121.818529][ T29] audit: type=1326 audit(1733756153.347:6177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8777 comm="syz.4.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57177fed9 code=0x7ffc0000 [ 121.849357][ T8778] program syz.4.2078 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.863902][ T29] audit: type=1326 audit(1733756153.407:6178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8777 comm="syz.4.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb57177fed9 code=0x7ffc0000 [ 121.888109][ T29] audit: type=1326 audit(1733756153.407:6179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8777 comm="syz.4.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57177fed9 code=0x7ffc0000 [ 121.911844][ T29] audit: type=1326 audit(1733756153.407:6180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8777 comm="syz.4.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57177fed9 code=0x7ffc0000 [ 121.935427][ T29] audit: type=1326 audit(1733756153.407:6181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8777 comm="syz.4.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb57177fed9 code=0x7ffc0000 [ 121.958979][ T29] audit: type=1326 audit(1733756153.407:6182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8777 comm="syz.4.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57177fed9 code=0x7ffc0000 [ 121.982496][ T29] audit: type=1326 audit(1733756153.407:6183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8777 comm="syz.4.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57177fed9 code=0x7ffc0000 [ 122.005960][ T29] audit: type=1326 audit(1733756153.407:6184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8777 comm="syz.4.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb57177fed9 code=0x7ffc0000 [ 122.029391][ T29] audit: type=1326 audit(1733756153.407:6185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8777 comm="syz.4.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57177fed9 code=0x7ffc0000 [ 122.099177][ T8783] pim6reg: entered allmulticast mode [ 122.120708][ T8783] tmpfs: Bad value for 'mpol' [ 122.132505][ T8783] pim6reg: left allmulticast mode [ 122.330221][ T8787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2082'. [ 122.356966][ T8789] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 122.569705][ T8801] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2088'. [ 122.602740][ T8803] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 122.817737][ T8815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2095'. [ 122.958181][ T8819] pim6reg: entered allmulticast mode [ 122.969440][ T8819] tmpfs: Bad value for 'mpol' [ 122.984336][ T8819] pim6reg: left allmulticast mode [ 123.115180][ T8830] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 123.297130][ T8841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2107'. [ 123.463244][ T8851] bond1: entered promiscuous mode [ 123.468333][ T8851] bond1: entered allmulticast mode [ 123.502538][ T8851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.524300][ T8851] bond1 (unregistering): Released all slaves [ 123.592118][ T8858] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 123.640442][ T8860] loop3: detected capacity change from 0 to 512 [ 123.672565][ T8860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.687490][ T8860] ext4 filesystem being mounted at /429/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.693190][ T8866] program syz.0.2118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.714805][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2116'. [ 123.738210][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.791701][ T8868] @: renamed from vlan0 (while UP) [ 123.888173][ T8869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2120'. [ 123.960350][ T8876] siw: device registration error -23 [ 124.033892][ T8879] loop3: detected capacity change from 0 to 164 [ 124.059100][ T8879] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 124.079135][ T8879] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 124.093373][ T8883] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 124.201604][ T8879] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 124.307901][ T8888] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2124'. [ 124.451446][ T8889] loop3: detected capacity change from 0 to 256 [ 124.526543][ T8889] vfat: Unknown parameter 'uni_xu{j' [ 124.662287][ T8891] pim6reg: entered allmulticast mode [ 124.670864][ T8891] tmpfs: Bad value for 'mpol' [ 124.677065][ T8891] pim6reg: left allmulticast mode [ 125.047555][ T8901] siw: device registration error -23 [ 125.126402][ T8905] pim6reg: entered allmulticast mode [ 125.145845][ T8905] tmpfs: Bad value for 'mpol' [ 125.157870][ T8905] pim6reg: left allmulticast mode [ 125.197613][ T8907] pim6reg: entered allmulticast mode [ 125.205646][ T8907] tmpfs: Bad value for 'mpol' [ 125.210544][ T8907] pim6reg: left allmulticast mode [ 125.326348][ T8915] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 125.376436][ T8918] loop3: detected capacity change from 0 to 256 [ 125.416989][ T8918] FAT-fs (loop3): Directory bread(block 64) failed [ 125.430212][ T8918] FAT-fs (loop3): Directory bread(block 65) failed [ 125.448558][ T8918] FAT-fs (loop3): Directory bread(block 66) failed [ 125.468045][ T8918] FAT-fs (loop3): Directory bread(block 67) failed [ 125.482636][ T8918] FAT-fs (loop3): Directory bread(block 68) failed [ 125.489378][ T8918] FAT-fs (loop3): Directory bread(block 69) failed [ 125.496960][ T8918] FAT-fs (loop3): Directory bread(block 70) failed [ 125.503984][ T8918] FAT-fs (loop3): Directory bread(block 71) failed [ 125.513367][ T8918] FAT-fs (loop3): Directory bread(block 72) failed [ 125.522549][ T8918] FAT-fs (loop3): Directory bread(block 73) failed [ 125.666474][ T8932] pim6reg: entered allmulticast mode [ 125.685447][ T8932] tmpfs: Bad value for 'mpol' [ 125.692612][ T8932] pim6reg: left allmulticast mode [ 125.781635][ T8936] loop3: detected capacity change from 0 to 512 [ 125.798815][ T8936] EXT4-fs (loop3): orphan cleanup on readonly fs [ 125.812853][ T8936] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 125.816257][ T8938] pim6reg: entered allmulticast mode [ 125.862664][ T8936] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 125.883876][ T8938] tmpfs: Bad value for 'mpol' [ 125.892708][ T8936] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.2149: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 125.932431][ T8938] pim6reg: left allmulticast mode [ 125.955238][ T8936] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.2149: couldn't read orphan inode 13 (err -117) [ 125.982904][ T8936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.005188][ T8936] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 126.014980][ T8936] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 2 [ 126.033602][ T8936] EXT4-fs error (device loop3): ext4_lookup:1817: inode #2: comm syz.3.2149: deleted inode referenced: 12 [ 126.103715][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.287384][ T8960] pim6reg: entered allmulticast mode [ 126.323401][ T8960] tmpfs: Bad value for 'mpol' [ 126.328424][ T8960] pim6reg: left allmulticast mode [ 126.355234][ T8964] pim6reg: entered allmulticast mode [ 126.362550][ T8964] tmpfs: Bad value for 'mpol' [ 126.367663][ T8964] pim6reg: left allmulticast mode [ 126.714859][ T8982] loop3: detected capacity change from 0 to 256 [ 126.735948][ T8987] pim6reg: entered allmulticast mode [ 126.739889][ T8989] syz.2.2173[8989] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.741389][ T8989] syz.2.2173[8989] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.758259][ T8987] tmpfs: Bad value for 'mpol' [ 126.758457][ T8989] syz.2.2173[8989] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.776475][ T8987] pim6reg: left allmulticast mode [ 126.803297][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 126.803312][ T29] audit: type=1400 audit(1733756158.367:6358): avc: denied { append } for pid=8988 comm="syz.2.2173" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 126.833228][ T8982] FAT-fs (loop3): Directory bread(block 64) failed [ 126.839820][ T8982] FAT-fs (loop3): Directory bread(block 65) failed [ 126.860941][ T8982] FAT-fs (loop3): Directory bread(block 66) failed [ 126.867739][ T8982] FAT-fs (loop3): Directory bread(block 67) failed [ 126.877504][ T8989] loop2: detected capacity change from 0 to 512 [ 126.889797][ T8982] FAT-fs (loop3): Directory bread(block 68) failed [ 126.896754][ T8989] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 126.901976][ T8995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2176'. [ 126.907292][ T8982] FAT-fs (loop3): Directory bread(block 69) failed [ 126.907330][ T8982] FAT-fs (loop3): Directory bread(block 70) failed [ 126.907408][ T8982] FAT-fs (loop3): Directory bread(block 71) failed [ 126.907440][ T8982] FAT-fs (loop3): Directory bread(block 72) failed [ 126.907461][ T8982] FAT-fs (loop3): Directory bread(block 73) failed [ 126.975281][ T8989] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 126.997867][ T8989] EXT4-fs (loop2): 1 truncate cleaned up [ 127.028110][ T8989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.042704][ T9004] loop3: detected capacity change from 0 to 164 [ 127.054418][ T9004] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 127.085552][ T9004] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 127.088378][ T9009] loop1: detected capacity change from 0 to 512 [ 127.101909][ T9004] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 127.114599][ T9009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.134155][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.148360][ T9009] ext4 filesystem being mounted at /391/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.171353][ T9016] FAULT_INJECTION: forcing a failure. [ 127.171353][ T9016] name failslab, interval 1, probability 0, space 0, times 0 [ 127.184169][ T9016] CPU: 0 UID: 0 PID: 9016 Comm: syz.2.2182 Not tainted 6.13.0-rc2-syzkaller #0 [ 127.193141][ T9016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 127.203283][ T9016] Call Trace: [ 127.203533][ T9017] @: renamed from bond0 (while UP) [ 127.206569][ T9016] [ 127.206581][ T9016] dump_stack_lvl+0xf2/0x150 [ 127.219449][ T9016] dump_stack+0x15/0x1a [ 127.223637][ T9016] should_fail_ex+0x223/0x230 [ 127.228337][ T9016] should_failslab+0x8f/0xb0 [ 127.233005][ T9016] __kmalloc_node_noprof+0xad/0x410 [ 127.238219][ T9016] ? blk_mq_alloc_tag_set+0x309/0x610 [ 127.243620][ T9016] blk_mq_alloc_tag_set+0x309/0x610 [ 127.248861][ T9016] ? __pfx_resume_store+0x10/0x10 [ 127.253960][ T9016] loop_add+0x260/0x590 [ 127.258211][ T9016] ? __pfx_resume_store+0x10/0x10 [ 127.263301][ T9016] loop_probe+0x83/0x90 [ 127.267474][ T9016] ? __pfx_loop_probe+0x10/0x10 [ 127.272406][ T9016] blk_request_module+0x120/0x140 [ 127.277484][ T9016] blkdev_get_no_open+0x43/0xe0 [ 127.282400][ T9016] bdev_file_open_by_dev+0x99/0x220 [ 127.287676][ T9016] ? __pfx_resume_store+0x10/0x10 [ 127.292752][ T9016] swsusp_check+0x3f/0x240 [ 127.297191][ T9016] software_resume+0x43/0x2e0 [ 127.301891][ T9016] resume_store+0x34e/0x3a0 [ 127.306416][ T9016] kobj_attr_store+0x47/0x70 [ 127.311104][ T9016] ? __pfx_kobj_attr_store+0x10/0x10 [ 127.316492][ T9016] sysfs_kf_write+0xae/0xd0 [ 127.321073][ T9016] ? __pfx_sysfs_kf_write+0x10/0x10 [ 127.326287][ T9016] kernfs_fop_write_iter+0x1c8/0x2c0 [ 127.331626][ T9016] vfs_write+0x77f/0x920 [ 127.335942][ T9016] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 127.341786][ T9016] ksys_write+0xe8/0x1b0 [ 127.346108][ T9016] __x64_sys_write+0x42/0x50 [ 127.350794][ T9016] x64_sys_call+0x287e/0x2dc0 [ 127.355518][ T9016] do_syscall_64+0xc9/0x1c0 [ 127.360035][ T9016] ? clear_bhb_loop+0x55/0xb0 [ 127.364771][ T9016] ? clear_bhb_loop+0x55/0xb0 [ 127.369468][ T9016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.375486][ T9016] RIP: 0033:0x7f7115d2fed9 [ 127.379920][ T9016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.399634][ T9016] RSP: 002b:00007f71143a7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 127.408228][ T9016] RAX: ffffffffffffffda RBX: 00007f7115ef5fa0 RCX: 00007f7115d2fed9 [ 127.416256][ T9016] RDX: 0000000000000012 RSI: 0000000020000000 RDI: 0000000000000006 [ 127.424355][ T9016] RBP: 00007f71143a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 127.432350][ T9016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.440473][ T9016] R13: 0000000000000000 R14: 00007f7115ef5fa0 R15: 00007ffe2cef03a8 [ 127.448544][ T9016] [ 127.464449][ T9020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9020 comm=syz.0.2183 [ 127.509757][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.540861][ T9026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2188'. [ 127.604889][ T9034] loop3: detected capacity change from 0 to 164 [ 127.612662][ T9034] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 127.623143][ T29] audit: type=1326 audit(1733756159.187:6359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9029 comm="syz.0.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce4d9fed9 code=0x7ffc0000 [ 127.647444][ T29] audit: type=1326 audit(1733756159.187:6360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9029 comm="syz.0.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce4d9fed9 code=0x7ffc0000 [ 127.667170][ T9033] loop1: detected capacity change from 0 to 256 [ 127.695951][ T9037] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2190'. [ 127.706530][ T29] audit: type=1326 audit(1733756159.227:6361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9029 comm="syz.0.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ce4d9fed9 code=0x7ffc0000 [ 127.710759][ T9036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2192'. [ 127.730701][ T29] audit: type=1326 audit(1733756159.227:6362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9029 comm="syz.0.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce4d9fed9 code=0x7ffc0000 [ 127.763083][ T29] audit: type=1326 audit(1733756159.227:6363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9029 comm="syz.0.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce4d9fed9 code=0x7ffc0000 [ 127.787257][ T29] audit: type=1326 audit(1733756159.247:6364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9029 comm="syz.0.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ce4d9fed9 code=0x7ffc0000 [ 127.811419][ T29] audit: type=1326 audit(1733756159.247:6365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9029 comm="syz.0.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce4d9fed9 code=0x7ffc0000 [ 127.835626][ T29] audit: type=1326 audit(1733756159.247:6366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9029 comm="syz.0.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce4d9fed9 code=0x7ffc0000 [ 127.859852][ T29] audit: type=1326 audit(1733756159.247:6367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9029 comm="syz.0.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ce4d9fed9 code=0x7ffc0000 [ 127.866336][ T9045] syz.4.2195[9045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.888939][ T9045] syz.4.2195[9045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.900725][ T9045] syz.4.2195[9045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.919291][ T9045] FAULT_INJECTION: forcing a failure. [ 127.919291][ T9045] name failslab, interval 1, probability 0, space 0, times 0 [ 127.943916][ T9045] CPU: 1 UID: 0 PID: 9045 Comm: syz.4.2195 Not tainted 6.13.0-rc2-syzkaller #0 [ 127.951687][ T9033] FAT-fs (loop1): Directory bread(block 64) failed [ 127.952866][ T9045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 127.952885][ T9045] Call Trace: [ 127.959622][ T9033] FAT-fs (loop1): Directory bread(block 65) failed [ 127.969491][ T9045] [ 127.969504][ T9045] dump_stack_lvl+0xf2/0x150 [ 127.973077][ T9033] FAT-fs (loop1): Directory bread(block 66) failed [ 127.979400][ T9045] dump_stack+0x15/0x1a [ 127.983963][ T9033] FAT-fs (loop1): Directory bread(block 67) failed [ 127.986918][ T9045] should_fail_ex+0x223/0x230 [ 127.993600][ T9033] FAT-fs (loop1): Directory bread(block 68) failed [ 127.997560][ T9045] should_failslab+0x8f/0xb0 [ 128.005147][ T9033] FAT-fs (loop1): Directory bread(block 69) failed [ 128.008751][ T9045] kmem_cache_alloc_noprof+0x52/0x320 [ 128.016497][ T9033] FAT-fs (loop1): Directory bread(block 70) failed [ 128.019881][ T9045] ? vm_area_alloc+0xac/0x130 [ 128.028531][ T9033] FAT-fs (loop1): Directory bread(block 71) failed [ 128.031748][ T9045] vm_area_alloc+0xac/0x130 [ 128.038564][ T9033] FAT-fs (loop1): Directory bread(block 72) failed [ 128.042912][ T9045] __mmap_region+0x6b5/0x13f0 [ 128.042982][ T9045] mmap_region+0x164/0x1e0 [ 128.050254][ T9033] FAT-fs (loop1): Directory bread(block 73) failed [ 128.053936][ T9045] do_mmap+0x718/0xb60 [ 128.053982][ T9045] vm_mmap_pgoff+0x133/0x290 [ 128.085228][ T9045] ksys_mmap_pgoff+0xd0/0x330 [ 128.089948][ T9045] ? syscall_trace_enter+0x104/0x1f0 [ 128.095260][ T9045] ? fpregs_assert_state_consistent+0x83/0xa0 [ 128.101437][ T9045] x64_sys_call+0x1940/0x2dc0 [ 128.106186][ T9045] do_syscall_64+0xc9/0x1c0 [ 128.110731][ T9045] ? clear_bhb_loop+0x55/0xb0 [ 128.115449][ T9045] ? clear_bhb_loop+0x55/0xb0 [ 128.120220][ T9045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.126214][ T9045] RIP: 0033:0x7fb57177ff13 [ 128.130672][ T9045] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 128.150381][ T9045] RSP: 002b:00007fb56fdf6e38 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 128.158832][ T9045] RAX: ffffffffffffffda RBX: 000000000000043d RCX: 00007fb57177ff13 [ 128.166818][ T9045] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 128.174840][ T9045] RBP: 0000000020000582 R08: 00000000ffffffff R09: 0000000000000000 [ 128.182822][ T9045] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000006 [ 128.190929][ T9045] R13: 00007fb56fdf6f10 R14: 00007fb56fdf6ed0 R15: 0000000020000480 [ 128.198935][ T9045] [ 128.258942][ T9052] loop4: detected capacity change from 0 to 512 [ 128.264119][ T9057] loop2: detected capacity change from 0 to 512 [ 128.280644][ T9052] EXT4-fs: Ignoring removed bh option [ 128.286193][ T9052] EXT4-fs: Ignoring removed oldalloc option [ 128.298600][ T9057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.311465][ T9057] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.344813][ T9052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.369605][ T9052] ext4 filesystem being mounted at /458/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.419968][ T9052] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #12: comm syz.4.2197: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 128.474315][ T9069] bond0: entered promiscuous mode [ 128.479389][ T9069] bond0: entered allmulticast mode [ 128.492522][ T9075] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2197'. [ 128.514110][ T9069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.532515][ T9] IPVS: starting estimator thread 0... [ 128.540562][ T9069] bond0 (unregistering): Released all slaves [ 128.627540][ T9087] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2209'. [ 128.643124][ T9079] IPVS: using max 2400 ests per chain, 120000 per kthread [ 128.649015][ T9082] loop2: detected capacity change from 0 to 256 [ 128.659303][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2210'. [ 128.678593][ T9092] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2211'. [ 128.699932][ T9082] FAT-fs (loop2): Directory bread(block 64) failed [ 128.712399][ T9082] FAT-fs (loop2): Directory bread(block 65) failed [ 128.724704][ T9082] FAT-fs (loop2): Directory bread(block 66) failed [ 128.746112][ T9082] FAT-fs (loop2): Directory bread(block 67) failed [ 128.754906][ T9082] FAT-fs (loop2): Directory bread(block 68) failed [ 128.761517][ T9082] FAT-fs (loop2): Directory bread(block 69) failed [ 128.770156][ T9082] FAT-fs (loop2): Directory bread(block 70) failed [ 128.778650][ T9082] FAT-fs (loop2): Directory bread(block 71) failed [ 128.787691][ T9082] FAT-fs (loop2): Directory bread(block 72) failed [ 128.789990][ T9105] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 128.796503][ T9082] FAT-fs (loop2): Directory bread(block 73) failed [ 128.816026][ T9099] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 128.843660][ T9107] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 128.880914][ T9113] loop4: detected capacity change from 0 to 512 [ 128.903655][ T9119] FAULT_INJECTION: forcing a failure. [ 128.903655][ T9119] name failslab, interval 1, probability 0, space 0, times 0 [ 128.916427][ T9119] CPU: 0 UID: 0 PID: 9119 Comm: syz.3.2223 Not tainted 6.13.0-rc2-syzkaller #0 [ 128.925482][ T9119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 128.935596][ T9119] Call Trace: [ 128.938891][ T9119] [ 128.941936][ T9119] dump_stack_lvl+0xf2/0x150 [ 128.946575][ T9119] dump_stack+0x15/0x1a [ 128.950838][ T9119] should_fail_ex+0x223/0x230 [ 128.955618][ T9119] should_failslab+0x8f/0xb0 [ 128.960289][ T9119] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 128.966666][ T9119] ? sidtab_sid2str_get+0xb8/0x140 [ 128.971803][ T9119] kmemdup_noprof+0x2a/0x60 [ 128.976447][ T9119] sidtab_sid2str_get+0xb8/0x140 [ 128.981411][ T9119] security_sid_to_context_core+0x1eb/0x2f0 [ 128.987345][ T9119] security_sid_to_context+0x27/0x30 [ 128.992785][ T9119] selinux_lsmprop_to_secctx+0x2c/0x40 [ 128.998287][ T9119] security_lsmprop_to_secctx+0x4a/0x90 [ 129.003879][ T9119] audit_log_task_context+0x93/0x1c0 [ 129.009195][ T9119] audit_log_task+0xf9/0x1c0 [ 129.013963][ T9119] audit_seccomp+0x68/0x130 [ 129.018540][ T9119] __seccomp_filter+0x6fa/0x1180 [ 129.023577][ T9119] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 129.029288][ T9119] ? vfs_write+0x596/0x920 [ 129.033771][ T9119] __secure_computing+0x9f/0x1c0 [ 129.038729][ T9119] syscall_trace_enter+0xd1/0x1f0 [ 129.043776][ T9119] ? fpregs_assert_state_consistent+0x83/0xa0 [ 129.049931][ T9119] do_syscall_64+0xaa/0x1c0 [ 129.054513][ T9119] ? clear_bhb_loop+0x55/0xb0 [ 129.059202][ T9119] ? clear_bhb_loop+0x55/0xb0 [ 129.063889][ T9119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.069915][ T9119] RIP: 0033:0x7f25a4a1fed9 [ 129.074398][ T9119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.094145][ T9119] RSP: 002b:00007f25a3097058 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 129.102571][ T9119] RAX: ffffffffffffffda RBX: 00007f25a4be5fa0 RCX: 00007f25a4a1fed9 [ 129.110698][ T9119] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 129.118675][ T9119] RBP: 00007f25a30970a0 R08: 0000000000000000 R09: 0000000000000000 [ 129.126803][ T9119] R10: 0001000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 129.134805][ T9119] R13: 0000000000000000 R14: 00007f25a4be5fa0 R15: 00007ffd3e5d0e58 [ 129.142839][ T9119] [ 129.156809][ T9122] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2222'. [ 129.173043][ T9113] EXT4-fs mount: 2 callbacks suppressed [ 129.173062][ T9113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.194334][ T9124] syz_tun: entered promiscuous mode [ 129.203440][ T9113] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.230000][ T9124] syz_tun: left promiscuous mode [ 129.239488][ T9130] FAULT_INJECTION: forcing a failure. [ 129.239488][ T9130] name failslab, interval 1, probability 0, space 0, times 0 [ 129.252326][ T9130] CPU: 0 UID: 0 PID: 9130 Comm: syz.2.2226 Not tainted 6.13.0-rc2-syzkaller #0 [ 129.261301][ T9130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 129.271387][ T9130] Call Trace: [ 129.274693][ T9130] [ 129.277729][ T9130] dump_stack_lvl+0xf2/0x150 [ 129.282460][ T9130] dump_stack+0x15/0x1a [ 129.286704][ T9130] should_fail_ex+0x223/0x230 [ 129.291873][ T9130] should_failslab+0x8f/0xb0 [ 129.296530][ T9130] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 129.302886][ T9130] ? match_strdup+0x37/0x40 [ 129.307527][ T9130] kmemdup_nul+0x30/0x80 [ 129.311932][ T9130] match_strdup+0x37/0x40 [ 129.316287][ T9130] p9_client_create+0x25c/0xaf0 [ 129.321189][ T9130] v9fs_session_init+0xf9/0xda0 [ 129.326149][ T9130] ? should_fail_ex+0xd7/0x230 [ 129.331029][ T9130] ? v9fs_mount+0x53/0x570 [ 129.335459][ T9130] ? should_failslab+0x8f/0xb0 [ 129.340252][ T9130] ? __kmalloc_cache_noprof+0x186/0x320 [ 129.345978][ T9130] v9fs_mount+0x69/0x570 [ 129.350235][ T9130] ? __pfx_v9fs_mount+0x10/0x10 [ 129.355109][ T9130] legacy_get_tree+0x77/0xd0 [ 129.359739][ T9130] vfs_get_tree+0x56/0x1e0 [ 129.364200][ T9130] do_new_mount+0x227/0x690 [ 129.368756][ T9130] path_mount+0x49b/0xb30 [ 129.373111][ T9130] __se_sys_mount+0x27c/0x2d0 [ 129.377888][ T9130] __x64_sys_mount+0x67/0x80 [ 129.382503][ T9130] x64_sys_call+0x2c84/0x2dc0 [ 129.387263][ T9130] do_syscall_64+0xc9/0x1c0 [ 129.391891][ T9130] ? clear_bhb_loop+0x55/0xb0 [ 129.396581][ T9130] ? clear_bhb_loop+0x55/0xb0 [ 129.401271][ T9130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.407207][ T9130] RIP: 0033:0x7f7115d2fed9 [ 129.411815][ T9130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.431447][ T9130] RSP: 002b:00007f71143a7058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 129.440002][ T9130] RAX: ffffffffffffffda RBX: 00007f7115ef5fa0 RCX: 00007f7115d2fed9 [ 129.447989][ T9130] RDX: 00000000200002c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 129.455969][ T9130] RBP: 00007f71143a70a0 R08: 0000000020000400 R09: 0000000000000000 [ 129.463951][ T9130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 129.472005][ T9130] R13: 0000000000000000 R14: 00007f7115ef5fa0 R15: 00007ffe2cef03a8 [ 129.480012][ T9130] [ 129.514743][ T9132] pim6reg: entered allmulticast mode [ 129.529055][ T9132] tmpfs: Bad value for 'mpol' [ 129.547380][ T9114] Process accounting resumed [ 129.551070][ T9132] pim6reg: left allmulticast mode [ 129.562177][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.639344][ T9143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2231'. [ 129.650688][ T9145] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 129.845250][ T9158] IPVS: Unknown mcast interface: batadv0 [ 129.894789][ T9162] loop2: detected capacity change from 0 to 512 [ 129.913853][ T9162] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 129.931330][ T9162] EXT4-fs (loop2): 1 truncate cleaned up [ 129.931694][ T9162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.964844][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.992731][ T9176] loop3: detected capacity change from 0 to 512 [ 130.019087][ T9176] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.033413][ T9178] tmpfs: Bad value for 'mpol' [ 130.048011][ T9176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.048085][ T9176] ext4 filesystem being mounted at /469/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.053088][ T9181] loop2: detected capacity change from 0 to 512 [ 130.084508][ T9181] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.101234][ T9181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.101371][ T9181] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.108372][ T9185] loop4: detected capacity change from 0 to 1764 [ 130.132844][ T9185] ISOFS: unable to read i-node block [ 130.132861][ T9185] isofs_fill_super: get root inode failed [ 130.196902][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.207616][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.224706][ T9194] tmpfs: Bad value for 'mpol' [ 130.285668][ T9196] bond0: entered promiscuous mode [ 130.291767][ T9196] bond0: entered allmulticast mode [ 130.305178][ T9196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.316618][ T9196] bond0 (unregistering): Released all slaves [ 130.344009][ T9211] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 130.362880][ T9214] pim6reg: entered allmulticast mode [ 130.379232][ T9214] tmpfs: Bad value for 'mpol' [ 130.386613][ T9216] loop4: detected capacity change from 0 to 1764 [ 130.392771][ T9214] pim6reg: left allmulticast mode [ 130.408709][ T9216] ISOFS: unable to read i-node block [ 130.414087][ T9216] isofs_fill_super: get root inode failed [ 130.415782][ T9218] pim6reg: entered allmulticast mode [ 130.434069][ T9218] tmpfs: Bad value for 'mpol' [ 130.440210][ T9218] pim6reg: left allmulticast mode [ 130.561780][ T9230] tmpfs: Bad value for 'mpol' [ 130.569257][ T9223] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 130.597500][ T9233] loop3: detected capacity change from 0 to 164 [ 130.597544][ T9234] siw: device registration error -23 [ 130.620731][ T9233] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 130.717088][ T9242] loop4: detected capacity change from 0 to 1764 [ 130.725408][ T9242] ISOFS: unable to read i-node block [ 130.730972][ T9242] isofs_fill_super: get root inode failed [ 130.747665][ T9245] pim6reg: entered allmulticast mode [ 130.780151][ T9245] tmpfs: Bad value for 'mpol' [ 130.801532][ T9245] pim6reg: left allmulticast mode [ 130.816194][ T9253] loop4: detected capacity change from 0 to 164 [ 130.827144][ T9253] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 130.839690][ T9253] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 130.849998][ T9253] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 130.920620][ T9255] pim6reg: entered allmulticast mode [ 130.960419][ T9261] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 130.991909][ T9266] tmpfs: Bad value for 'mpol' [ 130.998942][ T9255] pim6reg: left allmulticast mode [ 131.109954][ T9272] batadv_slave_1: entered promiscuous mode [ 131.125997][ T9276] loop4: detected capacity change from 0 to 512 [ 131.150723][ T9276] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.188006][ T9276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.217980][ T9276] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.300517][ T9290] loop2: detected capacity change from 0 to 164 [ 131.317819][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.328759][ T9290] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 131.361042][ T9290] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 131.371381][ T9290] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 131.443555][ T9300] siw: device registration error -23 [ 131.513314][ T9304] bond1: entered promiscuous mode [ 131.518440][ T9304] bond1: entered allmulticast mode [ 131.537885][ T9304] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.554208][ T9304] bond1 (unregistering): Released all slaves [ 131.566363][ T9309] pim6reg: entered allmulticast mode [ 131.584819][ T9309] tmpfs: Bad value for 'mpol' [ 131.602129][ T9309] pim6reg: left allmulticast mode [ 131.663683][ T9313] tmpfs: Bad value for 'mpol' [ 131.708244][ T9319] loop4: detected capacity change from 0 to 164 [ 131.736883][ T9323] pim6reg: entered allmulticast mode [ 131.744767][ T9319] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 131.757646][ T9323] tmpfs: Bad value for 'mpol' [ 131.766997][ T9323] pim6reg: left allmulticast mode [ 131.777321][ T9319] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 131.802594][ T9319] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 131.900560][ T9336] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 131.908860][ T9338] loop2: detected capacity change from 0 to 512 [ 131.918272][ T9338] EXT4-fs: Ignoring removed orlov option [ 131.943148][ T9338] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.953767][ T9342] loop4: detected capacity change from 0 to 512 [ 131.962950][ T9338] EXT4-fs (loop2): orphan cleanup on readonly fs [ 131.971755][ T9338] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2310: bg 0: block 248: padding at end of block bitmap is not set [ 131.978994][ T9342] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 131.986601][ T9338] __quota_error: 146 callbacks suppressed [ 131.986642][ T9338] Quota error (device loop2): write_blk: dquota write failed [ 131.986662][ T9338] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 131.986732][ T9338] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.2310: Failed to acquire dquot type 1 [ 132.046306][ T9342] EXT4-fs: error: could not find journal device path [ 132.061797][ T9345] pim6reg: entered allmulticast mode [ 132.078384][ T9345] tmpfs: Bad value for 'mpol' [ 132.083364][ T9345] pim6reg: left allmulticast mode [ 132.088970][ T9338] EXT4-fs (loop2): 1 truncate cleaned up [ 132.117452][ T9338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.159366][ T9338] EXT4-fs: Ignoring removed orlov option [ 132.165394][ T9338] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.176238][ T9338] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 132.192785][ T9338] EXT4-fs error (device loop2): __ext4_remount:6749: comm syz.2.2310: Abort forced by user [ 132.203582][ T9338] EXT4-fs (loop2): Remounting filesystem read-only [ 132.210388][ T9338] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 132.221598][ T9338] ext4 filesystem being remounted at /440/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.240614][ T29] audit: type=1326 audit(1733756163.797:6513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.2.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7115d2fed9 code=0x7ffc0000 [ 132.240737][ T9360] FAULT_INJECTION: forcing a failure. [ 132.240737][ T9360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.265133][ T9338] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.277876][ T9360] CPU: 1 UID: 0 PID: 9360 Comm: syz.0.2313 Not tainted 6.13.0-rc2-syzkaller #0 [ 132.290719][ T29] audit: type=1326 audit(1733756163.827:6514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.2.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7115d2fed9 code=0x7ffc0000 [ 132.294145][ T9360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 132.294163][ T9360] Call Trace: [ 132.294172][ T9360] [ 132.294182][ T9360] dump_stack_lvl+0xf2/0x150 [ 132.294228][ T9360] dump_stack+0x15/0x1a [ 132.317622][ T29] audit: type=1326 audit(1733756163.827:6515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.2.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7115d2fed9 code=0x7ffc0000 [ 132.327781][ T9360] should_fail_ex+0x223/0x230 [ 132.327817][ T9360] should_fail+0xb/0x10 [ 132.331086][ T29] audit: type=1326 audit(1733756163.827:6516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.2.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7115d2fed9 code=0x7ffc0000 [ 132.334012][ T9360] should_fail_usercopy+0x1a/0x20 [ 132.338608][ T29] audit: type=1326 audit(1733756163.827:6517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.2.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f7115d2fed9 code=0x7ffc0000 [ 132.342751][ T9360] _copy_to_user+0x20/0xa0 [ 132.366185][ T29] audit: type=1326 audit(1733756163.827:6518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.2.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7115d2fed9 code=0x7ffc0000 [ 132.370785][ T9360] simple_read_from_buffer+0xa0/0x110 [ 132.375100][ T29] audit: type=1326 audit(1733756163.827:6519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.2.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7115d2fed9 code=0x7ffc0000 [ 132.398572][ T9360] proc_fail_nth_read+0xf9/0x140 [ 132.398620][ T9360] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.403698][ T29] audit: type=1326 audit(1733756163.827:6520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.2.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7115d2fed9 code=0x7ffc0000 [ 132.426908][ T9360] vfs_read+0x1a2/0x700 [ 132.426950][ T9360] ? __rcu_read_unlock+0x4e/0x70 [ 132.526591][ T9360] ? __fget_files+0x17c/0x1c0 [ 132.531320][ T9360] ksys_read+0xe8/0x1b0 [ 132.535511][ T9360] __x64_sys_read+0x42/0x50 [ 132.540196][ T9360] x64_sys_call+0x2874/0x2dc0 [ 132.544888][ T9360] do_syscall_64+0xc9/0x1c0 [ 132.549401][ T9360] ? clear_bhb_loop+0x55/0xb0 [ 132.554112][ T9360] ? clear_bhb_loop+0x55/0xb0 [ 132.558803][ T9360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.564742][ T9360] RIP: 0033:0x7f9ce4d9e8ec [ 132.569291][ T9360] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 132.588992][ T9360] RSP: 002b:00007f9ce33f6050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 132.597418][ T9360] RAX: ffffffffffffffda RBX: 00007f9ce4f66080 RCX: 00007f9ce4d9e8ec [ 132.605405][ T9360] RDX: 000000000000000f RSI: 00007f9ce33f60b0 RDI: 0000000000000008 [ 132.613594][ T9360] RBP: 00007f9ce33f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 132.621725][ T9360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.629751][ T9360] R13: 0000000000000001 R14: 00007f9ce4f66080 R15: 00007ffe1f0bfb08 [ 132.637828][ T9360] [ 132.646193][ T9338] syz.2.2310 (9338) used greatest stack depth: 9192 bytes left [ 132.664766][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.763447][ T9397] __nla_validate_parse: 12 callbacks suppressed [ 132.763471][ T9397] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2316'. [ 132.858774][ T9413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2318'. [ 132.999226][ T9450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2321'. [ 133.012689][ T9452] pim6reg: entered allmulticast mode [ 133.021435][ T9452] tmpfs: Bad value for 'mpol' [ 133.026754][ T9452] pim6reg: left allmulticast mode [ 133.375037][ T9468] loop1: detected capacity change from 0 to 512 [ 133.383015][ T9468] EXT4-fs: inline encryption not supported [ 133.414900][ T9468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.428510][ T9468] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.466241][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2330'. [ 133.499556][ T9468] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2329: bg 0: block 367: padding at end of block bitmap is not set [ 133.539645][ T9477] loop2: detected capacity change from 0 to 512 [ 133.546771][ T9477] EXT4-fs: Ignoring removed i_version option [ 133.562841][ T9477] ext4: Bad value for 'mb_optimize_scan' [ 133.704172][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.877981][ T9483] loop1: detected capacity change from 0 to 256 [ 133.919821][ T9483] FAT-fs (loop1): Directory bread(block 64) failed [ 133.929049][ T9483] FAT-fs (loop1): Directory bread(block 65) failed [ 133.946022][ T9488] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 133.978168][ T9483] FAT-fs (loop1): Directory bread(block 66) failed [ 133.984828][ T9483] FAT-fs (loop1): Directory bread(block 67) failed [ 133.991604][ T9483] FAT-fs (loop1): Directory bread(block 68) failed [ 133.999089][ T9483] FAT-fs (loop1): Directory bread(block 69) failed [ 134.013814][ T9492] pim6reg: entered allmulticast mode [ 134.022094][ T9492] tmpfs: Bad value for 'mpol' [ 134.026267][ T9483] FAT-fs (loop1): Directory bread(block 70) failed [ 134.027687][ T9492] pim6reg: left allmulticast mode [ 134.035340][ T9483] FAT-fs (loop1): Directory bread(block 71) failed [ 134.045234][ T9483] FAT-fs (loop1): Directory bread(block 72) failed [ 134.051931][ T9483] FAT-fs (loop1): Directory bread(block 73) failed [ 134.156110][ T9502] tmpfs: Bad value for 'mpol' [ 134.165389][ T9504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2341'. [ 134.317912][ T9518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2349'. [ 134.486461][ T9522] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2350'. [ 134.495637][ T9522] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2350'. [ 134.689347][ T9531] loop4: detected capacity change from 0 to 256 [ 134.690952][ T9530] pim6reg: entered allmulticast mode [ 134.718875][ T9530] tmpfs: Bad value for 'mpol' [ 134.725524][ T9530] pim6reg: left allmulticast mode [ 134.737432][ T9531] FAT-fs (loop4): Directory bread(block 64) failed [ 134.744840][ T9531] FAT-fs (loop4): Directory bread(block 65) failed [ 134.751431][ T9531] FAT-fs (loop4): Directory bread(block 66) failed [ 134.759383][ T9531] FAT-fs (loop4): Directory bread(block 67) failed [ 134.772713][ T9531] FAT-fs (loop4): Directory bread(block 68) failed [ 134.779272][ T9531] FAT-fs (loop4): Directory bread(block 69) failed [ 134.786835][ T9531] FAT-fs (loop4): Directory bread(block 70) failed [ 134.793712][ T9531] FAT-fs (loop4): Directory bread(block 71) failed [ 134.800368][ T9531] FAT-fs (loop4): Directory bread(block 72) failed [ 134.807820][ T9531] FAT-fs (loop4): Directory bread(block 73) failed [ 134.917206][ T9539] FAULT_INJECTION: forcing a failure. [ 134.917206][ T9539] name failslab, interval 1, probability 0, space 0, times 0 [ 134.929944][ T9539] CPU: 1 UID: 0 PID: 9539 Comm: syz.4.2357 Not tainted 6.13.0-rc2-syzkaller #0 [ 134.938908][ T9539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 134.949048][ T9539] Call Trace: [ 134.952376][ T9539] [ 134.955323][ T9539] dump_stack_lvl+0xf2/0x150 [ 134.960000][ T9539] dump_stack+0x15/0x1a [ 134.964195][ T9539] should_fail_ex+0x223/0x230 [ 134.968926][ T9539] should_failslab+0x8f/0xb0 [ 134.973555][ T9539] kmem_cache_alloc_noprof+0x52/0x320 [ 134.978972][ T9539] ? prepare_creds+0x37/0x480 [ 134.983724][ T9539] prepare_creds+0x37/0x480 [ 134.988271][ T9539] __sys_setresuid+0x45d/0x700 [ 134.993074][ T9539] __x64_sys_setresuid+0x3f/0x50 [ 134.998051][ T9539] x64_sys_call+0x2888/0x2dc0 [ 135.002822][ T9539] do_syscall_64+0xc9/0x1c0 [ 135.007362][ T9539] ? clear_bhb_loop+0x55/0xb0 [ 135.012061][ T9539] ? clear_bhb_loop+0x55/0xb0 [ 135.016790][ T9539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.022778][ T9539] RIP: 0033:0x7fb57177fed9 [ 135.027220][ T9539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.046982][ T9539] RSP: 002b:00007fb56fdf7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 135.055498][ T9539] RAX: ffffffffffffffda RBX: 00007fb571945fa0 RCX: 00007fb57177fed9 [ 135.063525][ T9539] RDX: 0000000000000000 RSI: 00000000000000ff RDI: 0000000000000000 [ 135.071561][ T9539] RBP: 00007fb56fdf70a0 R08: 0000000000000000 R09: 0000000000000000 [ 135.079641][ T9539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.087641][ T9539] R13: 0000000000000000 R14: 00007fb571945fa0 R15: 00007ffc8d8496b8 [ 135.095718][ T9539] [ 135.221495][ T9547] siw: device registration error -23 [ 135.230825][ T9549] program syz.3.2362 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.365348][ T9558] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2360'. [ 135.388526][ T9554] syz_tun: entered promiscuous mode [ 135.401987][ T9554] syz_tun: left promiscuous mode [ 135.484197][ T9562] tmpfs: Bad value for 'mpol' [ 135.511354][ T9564] bond1: entered promiscuous mode [ 135.516511][ T9564] bond1: entered allmulticast mode [ 135.537014][ T9564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.549852][ T9564] bond1 (unregistering): Released all slaves [ 135.569088][ T9566] loop3: detected capacity change from 0 to 256 [ 135.603728][ T9566] FAT-fs (loop3): Directory bread(block 64) failed [ 135.630027][ T9566] FAT-fs (loop3): Directory bread(block 65) failed [ 135.648872][ T9566] FAT-fs (loop3): Directory bread(block 66) failed [ 135.672100][ T9566] FAT-fs (loop3): Directory bread(block 67) failed [ 135.686814][ T9566] FAT-fs (loop3): Directory bread(block 68) failed [ 135.706955][ T9566] FAT-fs (loop3): Directory bread(block 69) failed [ 135.724296][ T9566] FAT-fs (loop3): Directory bread(block 70) failed [ 135.729258][ T9572] bond1: entered promiscuous mode [ 135.735959][ T9572] bond1: entered allmulticast mode [ 135.744454][ T9572] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.746601][ T9566] FAT-fs (loop3): Directory bread(block 71) failed [ 135.762486][ T9566] FAT-fs (loop3): Directory bread(block 72) failed [ 135.769185][ T9566] FAT-fs (loop3): Directory bread(block 73) failed [ 135.784720][ T9572] bond1 (unregistering): Released all slaves [ 135.893681][ T9588] SET target dimension over the limit! [ 135.900161][ T9590] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 136.190491][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2381'. [ 136.205621][ T9602] loop2: detected capacity change from 0 to 1764 [ 136.221009][ T9602] ISOFS: unable to read i-node block [ 136.227112][ T9602] isofs_fill_super: get root inode failed [ 136.354484][ T9615] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 136.491884][ T9629] loop2: detected capacity change from 0 to 164 [ 136.508068][ T9629] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 136.520114][ T9631] bond1: entered promiscuous mode [ 136.525898][ T9631] bond1: entered allmulticast mode [ 136.528125][ T9629] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 136.531696][ T9631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.550682][ T9631] bond1 (unregistering): Released all slaves [ 136.552043][ T9629] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 136.764079][ T9643] netlink: 'syz.4.2396': attribute type 4 has an invalid length. [ 136.840036][ T9645] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 136.930318][ T9653] loop1: detected capacity change from 0 to 164 [ 136.976668][ T9653] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 137.019494][ T9653] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 137.028878][ T9653] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 137.074934][ T9665] bond1: entered promiscuous mode [ 137.080033][ T9665] bond1: entered allmulticast mode [ 137.086406][ T9665] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.096707][ T9665] bond1 (unregistering): Released all slaves [ 137.212702][ T9670] loop1: detected capacity change from 0 to 164 [ 137.235709][ T9670] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 137.260118][ T9670] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 137.269166][ T9670] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 137.416927][ T9680] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 137.486129][ T9686] loop2: detected capacity change from 0 to 512 [ 137.494322][ T9686] EXT4-fs: Ignoring removed orlov option [ 137.502134][ T9686] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.2419: casefold flag without casefold feature [ 137.516096][ T9686] EXT4-fs (loop2): Remounting filesystem read-only [ 137.523485][ T9686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.537146][ T9686] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 137.567548][ T9686] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.720299][ T9695] bond1: entered promiscuous mode [ 137.725552][ T9695] bond1: entered allmulticast mode [ 137.733146][ T9695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.757371][ T9695] bond1 (unregistering): Released all slaves [ 137.834548][ T9705] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 137.884582][ T9713] __nla_validate_parse: 4 callbacks suppressed [ 137.884598][ T9713] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2428'. [ 137.953778][ T9723] pim6reg: entered allmulticast mode [ 137.962053][ T9723] tmpfs: Bad value for 'mpol' [ 137.967314][ T9723] pim6reg: left allmulticast mode [ 137.979185][ T9725] loop3: detected capacity change from 0 to 164 [ 137.987275][ T9725] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 138.003409][ T9725] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 138.010275][ T9727] bond1: entered promiscuous mode [ 138.011846][ T9725] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 138.016515][ T9727] bond1: entered allmulticast mode [ 138.017187][ T9727] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.057720][ T9727] bond1 (unregistering): Released all slaves [ 138.086127][ T9732] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 138.096458][ T9730] loop4: detected capacity change from 0 to 1764 [ 138.104218][ T9734] loop3: detected capacity change from 0 to 512 [ 138.111385][ T9730] ISOFS: unable to read i-node block [ 138.116440][ T9734] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 138.117658][ T9730] isofs_fill_super: get root inode failed [ 138.138877][ T9734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.151501][ T9734] ext4 filesystem being mounted at /494/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.190897][ T9734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2439'. [ 138.191523][ T9740] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 138.228130][ T9742] loop4: detected capacity change from 0 to 512 [ 138.229107][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.234897][ T9742] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.266616][ T9742] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 138.275823][ T9742] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 138.288751][ T9742] EXT4-fs (loop4): 1 truncate cleaned up [ 138.295434][ T9742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.310872][ T9742] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 4: comm +}[@: lblock 0 mapped to illegal pblock 4 (length 1) [ 138.339491][ T9742] EXT4-fs (loop4): Remounting filesystem read-only [ 138.347871][ T9742] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 138.384696][ T9752] pim6reg: entered allmulticast mode [ 138.393161][ T9755] loop2: detected capacity change from 0 to 164 [ 138.395653][ T9752] tmpfs: Bad value for 'mpol' [ 138.405694][ T9753] pim6reg: entered allmulticast mode [ 138.411411][ T9752] pim6reg: left allmulticast mode [ 138.411446][ T9755] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 138.426801][ T9753] tmpfs: Bad value for 'mpol' [ 138.431844][ T9753] pim6reg: left allmulticast mode [ 138.437860][ T9755] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 138.446275][ T9755] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 138.475679][ T9759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2449'. [ 138.511654][ T9763] bond1: entered promiscuous mode [ 138.516851][ T9763] bond1: entered allmulticast mode [ 138.522394][ T9763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.537667][ T9763] bond1 (unregistering): Released all slaves [ 138.547705][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.556869][ T9761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2450'. [ 138.618216][ T9771] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 138.627567][ T9773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2455'. [ 138.708894][ T9782] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 138.715468][ T9782] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 138.723263][ T9782] vhci_hcd vhci_hcd.0: Device attached [ 138.737903][ T9782] loop2: detected capacity change from 0 to 512 [ 138.747413][ T9782] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #17: comm syz.2.2457: iget: bogus i_mode (0) [ 138.761474][ T9782] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.2457: couldn't read orphan inode 17 (err -117) [ 138.781659][ T9782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.873181][ T9783] vhci_hcd: connection closed [ 138.881007][ T9403] vhci_hcd: stop threads [ 138.890234][ T9403] vhci_hcd: release socket [ 138.894707][ T9403] vhci_hcd: disconnect device [ 138.902488][ T3374] vhci_hcd: vhci_device speed not set [ 139.266238][ T9792] pim6reg: entered allmulticast mode [ 139.274276][ T9792] tmpfs: Bad value for 'mpol' [ 139.279292][ T9792] pim6reg: left allmulticast mode [ 139.350914][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2461'. [ 139.413779][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.471692][ T9801] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2465'. [ 139.533800][ T9808] loop3: detected capacity change from 0 to 164 [ 139.557449][ T9808] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 139.574523][ T9808] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 139.584022][ T9808] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 139.594196][ T9814] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 139.668386][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 139.668434][ T29] audit: type=1326 audit(1733756171.227:6666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9815 comm="syz.3.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a4a1fed9 code=0x7ffc0000 [ 139.698931][ T29] audit: type=1326 audit(1733756171.227:6667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9815 comm="syz.3.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a4a1fed9 code=0x7ffc0000 [ 139.723856][ T9816] program syz.3.2472 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.744527][ T29] audit: type=1326 audit(1733756171.287:6668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9815 comm="syz.3.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25a4a1e840 code=0x7ffc0000 [ 139.768936][ T29] audit: type=1326 audit(1733756171.287:6669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9815 comm="syz.3.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a4a1fed9 code=0x7ffc0000 [ 139.793047][ T29] audit: type=1326 audit(1733756171.287:6670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9815 comm="syz.3.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a4a1fed9 code=0x7ffc0000 [ 139.817345][ T29] audit: type=1326 audit(1733756171.287:6671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9815 comm="syz.3.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25a4a1fed9 code=0x7ffc0000 [ 139.841599][ T29] audit: type=1326 audit(1733756171.297:6672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9815 comm="syz.3.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a4a1fed9 code=0x7ffc0000 [ 139.865809][ T29] audit: type=1326 audit(1733756171.297:6673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9815 comm="syz.3.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a4a1fed9 code=0x7ffc0000 [ 140.030056][ T9831] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2477'. [ 140.052740][ T9833] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 140.076305][ T9835] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 140.103805][ T9833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2478'. [ 140.243807][ T9849] pim6reg: entered allmulticast mode [ 140.251328][ T9849] tmpfs: Bad value for 'mpol' [ 140.256216][ T9849] pim6reg: left allmulticast mode [ 140.316082][ T9852] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 140.396393][ T9857] syz_tun: entered promiscuous mode [ 140.403582][ T9857] syz_tun: left promiscuous mode [ 140.483922][ T9859] loop3: detected capacity change from 0 to 164 [ 140.498282][ T9859] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 140.512057][ T9859] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 140.523300][ T9859] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 140.537183][ T9861] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2489'. [ 140.569915][ T9865] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 140.775887][ T29] audit: type=1326 audit(1733756172.337:6674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9882 comm="syz.3.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a4a1fed9 code=0x7ffc0000 [ 140.800147][ T29] audit: type=1326 audit(1733756172.337:6675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9882 comm="syz.3.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a4a1fed9 code=0x7ffc0000 [ 140.831746][ T9883] FAULT_INJECTION: forcing a failure. [ 140.831746][ T9883] name failslab, interval 1, probability 0, space 0, times 0 [ 140.845096][ T9883] CPU: 1 UID: 0 PID: 9883 Comm: syz.3.2499 Not tainted 6.13.0-rc2-syzkaller #0 [ 140.854093][ T9883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 140.864242][ T9883] Call Trace: [ 140.867543][ T9883] [ 140.870533][ T9883] dump_stack_lvl+0xf2/0x150 [ 140.875165][ T9883] dump_stack+0x15/0x1a [ 140.879360][ T9883] should_fail_ex+0x223/0x230 [ 140.884106][ T9883] should_failslab+0x8f/0xb0 [ 140.888801][ T9883] kmem_cache_alloc_noprof+0x52/0x320 [ 140.894256][ T9883] ? audit_log_start+0x34c/0x6b0 [ 140.899238][ T9883] audit_log_start+0x34c/0x6b0 [ 140.904033][ T9883] audit_seccomp+0x4b/0x130 [ 140.908658][ T9883] __seccomp_filter+0x6fa/0x1180 [ 140.913639][ T9883] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 140.919382][ T9883] ? vfs_write+0x596/0x920 [ 140.923829][ T9883] ? putname+0xcf/0xf0 [ 140.927996][ T9883] __secure_computing+0x9f/0x1c0 [ 140.932980][ T9883] syscall_trace_enter+0xd1/0x1f0 [ 140.938057][ T9883] ? fpregs_assert_state_consistent+0x83/0xa0 [ 140.944172][ T9883] do_syscall_64+0xaa/0x1c0 [ 140.948746][ T9883] ? clear_bhb_loop+0x55/0xb0 [ 140.953490][ T9883] ? clear_bhb_loop+0x55/0xb0 [ 140.958563][ T9883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.964529][ T9883] RIP: 0033:0x7f25a4a1fed9 [ 140.969010][ T9883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.988919][ T9883] RSP: 002b:00007f25a3097058 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 140.997471][ T9883] RAX: ffffffffffffffda RBX: 00007f25a4be5fa0 RCX: 00007f25a4a1fed9 [ 141.005476][ T9883] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 00000000200004c0 [ 141.013509][ T9883] RBP: 00007f25a30970a0 R08: 0000000000000000 R09: 0000000000000000 [ 141.021590][ T9883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.029591][ T9883] R13: 0000000000000000 R14: 00007f25a4be5fa0 R15: 00007ffd3e5d0e58 [ 141.037603][ T9883] [ 141.140174][ T9895] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 141.273110][ T9904] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 141.280509][ T35] IPVS: starting estimator thread 0... [ 141.372508][ T9905] IPVS: using max 2160 ests per chain, 108000 per kthread [ 141.471032][ T9399] IPVS: stop unused estimator thread 0... [ 141.561885][ T9909] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 141.671073][ T9915] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 141.744750][ T9921] loop4: detected capacity change from 0 to 164 [ 141.754558][ T9921] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 141.768262][ T9921] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 141.781938][ T9921] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 141.831867][ T9925] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 142.014522][ T9942] FAULT_INJECTION: forcing a failure. [ 142.014522][ T9942] name failslab, interval 1, probability 0, space 0, times 0 [ 142.027532][ T9942] CPU: 0 UID: 0 PID: 9942 Comm: syz.1.2520 Not tainted 6.13.0-rc2-syzkaller #0 [ 142.036517][ T9942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 142.046691][ T9942] Call Trace: [ 142.049992][ T9942] [ 142.053004][ T9942] dump_stack_lvl+0xf2/0x150 [ 142.057694][ T9942] dump_stack+0x15/0x1a [ 142.061893][ T9942] should_fail_ex+0x223/0x230 [ 142.063783][ T9943] SELinux: policydb version 0 does not match my version range 15-33 [ 142.066699][ T9942] should_failslab+0x8f/0xb0 [ 142.081193][ T9942] kmem_cache_alloc_node_noprof+0x59/0x320 [ 142.087213][ T9942] ? __alloc_skb+0x10b/0x310 [ 142.092126][ T9942] __alloc_skb+0x10b/0x310 [ 142.096621][ T9942] netlink_alloc_large_skb+0xad/0xe0 [ 142.102038][ T9942] netlink_sendmsg+0x3b4/0x6e0 [ 142.106854][ T9942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.112330][ T9942] __sock_sendmsg+0x140/0x180 [ 142.112482][ T9943] SELinux: failed to load policy [ 142.117040][ T9942] sock_write_iter+0x15e/0x1a0 [ 142.117083][ T9942] vfs_write+0x77f/0x920 [ 142.131270][ T9942] ? __pfx_sock_write_iter+0x10/0x10 [ 142.136870][ T9942] ksys_write+0xe8/0x1b0 [ 142.141154][ T9942] __x64_sys_write+0x42/0x50 [ 142.146399][ T9942] x64_sys_call+0x287e/0x2dc0 [ 142.151354][ T9942] do_syscall_64+0xc9/0x1c0 [ 142.156086][ T9942] ? clear_bhb_loop+0x55/0xb0 [ 142.160920][ T9942] ? clear_bhb_loop+0x55/0xb0 [ 142.165770][ T9942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.171711][ T9942] RIP: 0033:0x7f1b37f7fed9 [ 142.176181][ T9942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.196353][ T9942] RSP: 002b:00007f1b365f7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 142.204855][ T9942] RAX: ffffffffffffffda RBX: 00007f1b38145fa0 RCX: 00007f1b37f7fed9 [ 142.212905][ T9942] RDX: 0000000000000024 RSI: 0000000020000000 RDI: 0000000000000003 [ 142.220896][ T9942] RBP: 00007f1b365f70a0 R08: 0000000000000000 R09: 0000000000000000 [ 142.228935][ T9942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.237008][ T9942] R13: 0000000000000000 R14: 00007f1b38145fa0 R15: 00007ffe79d23d38 [ 142.245189][ T9942] [ 142.287565][ T9945] loop3: detected capacity change from 0 to 1764 [ 142.320857][ T9945] ISOFS: unable to read i-node block [ 142.326307][ T9945] isofs_fill_super: get root inode failed [ 142.463558][ T9958] Cannot find map_set index 0 as target [ 142.490824][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888113cb6c00: rx timeout, send abort [ 142.494649][ T9959] loop1: detected capacity change from 0 to 164 [ 142.500079][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888113cb6c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 142.637841][ T9959] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 142.701404][ T9959] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 142.766919][ T9959] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 142.798221][ T9980] syz_tun: entered promiscuous mode [ 142.808375][ T9980] syz_tun: left promiscuous mode [ 142.855520][ T9982] pim6reg: entered allmulticast mode [ 142.864493][ T9982] tmpfs: Bad value for 'mpol' [ 142.869550][ T9982] pim6reg: left allmulticast mode [ 142.929550][ T9992] __nla_validate_parse: 9 callbacks suppressed [ 142.929569][ T9992] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2543'. [ 142.970968][ T9997] loop2: detected capacity change from 0 to 512 [ 142.988011][T10000] pim6reg: entered allmulticast mode [ 142.996491][ T9997] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.010778][T10000] tmpfs: Bad value for 'mpol' [ 143.016726][T10000] pim6reg: left allmulticast mode [ 143.026408][ T9997] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 143.034601][ T9997] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 143.043751][ T9997] EXT4-fs (loop2): 1 truncate cleaned up [ 143.049862][ T9997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.064276][ T9997] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 4: comm +}[@: lblock 0 mapped to illegal pblock 4 (length 1) [ 143.079531][T10008] FAULT_INJECTION: forcing a failure. [ 143.079531][T10008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.084804][ T9997] EXT4-fs (loop2): Remounting filesystem read-only [ 143.092724][T10008] CPU: 0 UID: 0 PID: 10008 Comm: syz.3.2547 Not tainted 6.13.0-rc2-syzkaller #0 [ 143.092760][T10008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 143.092775][T10008] Call Trace: [ 143.092782][T10008] [ 143.092838][T10008] dump_stack_lvl+0xf2/0x150 [ 143.092882][T10008] dump_stack+0x15/0x1a [ 143.092921][T10008] should_fail_ex+0x223/0x230 [ 143.093014][T10008] should_fail+0xb/0x10 [ 143.093041][T10008] should_fail_usercopy+0x1a/0x20 [ 143.093101][T10008] _copy_from_user+0x1e/0xb0 [ 143.093134][T10008] copy_from_sockptr_offset+0x6b/0xb0 [ 143.093186][T10008] do_ip6t_set_ctl+0x6a4/0x8c0 [ 143.093266][T10008] ? kstrtouint+0x77/0xc0 [ 143.093288][T10008] ? __rcu_read_unlock+0x4e/0x70 [ 143.093328][T10008] nf_setsockopt+0x195/0x1b0 [ 143.178258][T10008] ipv6_setsockopt+0x10f/0x130 [ 143.183073][T10008] udpv6_setsockopt+0x95/0xb0 [ 143.187869][T10008] sock_common_setsockopt+0x64/0x80 [ 143.193193][T10008] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 143.199157][T10008] __sys_setsockopt+0x187/0x200 [ 143.204036][T10008] __x64_sys_setsockopt+0x66/0x80 [ 143.209140][T10008] x64_sys_call+0x282e/0x2dc0 [ 143.213831][T10008] do_syscall_64+0xc9/0x1c0 [ 143.218409][T10008] ? clear_bhb_loop+0x55/0xb0 [ 143.223099][T10008] ? clear_bhb_loop+0x55/0xb0 [ 143.227826][T10008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.233763][T10008] RIP: 0033:0x7f25a4a1fed9 [ 143.238249][T10008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.257872][T10008] RSP: 002b:00007f25a3055058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 143.266302][T10008] RAX: ffffffffffffffda RBX: 00007f25a4be6160 RCX: 00007f25a4a1fed9 [ 143.274362][T10008] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000a [ 143.282348][T10008] RBP: 00007f25a30550a0 R08: 0000000000000608 R09: 0000000000000000 [ 143.290330][T10008] R10: 0000000020000600 R11: 0000000000000246 R12: 0000000000000001 [ 143.298468][T10008] R13: 0000000000000000 R14: 00007f25a4be6160 R15: 00007ffd3e5d0e58 [ 143.306461][T10008] [ 143.384146][T10017] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2552'. [ 143.554392][T10026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2555'. [ 143.616032][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2558'. [ 143.660511][T10037] loop4: detected capacity change from 0 to 164 [ 143.685141][T10040] loop3: detected capacity change from 0 to 164 [ 143.694649][T10037] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 143.709207][T10040] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 143.719310][T10037] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 143.732667][T10037] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 143.740704][T10040] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 143.761183][T10040] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 143.798775][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.865362][T10049] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2564'. [ 143.935220][T10051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2566'. [ 143.946464][T10059] loop3: detected capacity change from 0 to 512 [ 143.970144][T10059] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.004426][T10059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.036669][T10059] ext4 filesystem being mounted at /529/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.093197][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2572'. [ 144.101760][T10059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2569'. [ 144.119449][T10073] loop4: detected capacity change from 0 to 512 [ 144.137566][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.142644][T10073] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.155689][T10073] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 144.164028][T10073] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 144.172881][T10073] EXT4-fs (loop4): 1 truncate cleaned up [ 144.179168][T10073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.195119][T10073] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 4: comm +}[@: lblock 0 mapped to illegal pblock 4 (length 1) [ 144.210841][T10073] EXT4-fs (loop4): Remounting filesystem read-only [ 144.231898][T10078] loop3: detected capacity change from 0 to 164 [ 144.249277][T10078] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 144.267710][T10078] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 144.278365][T10078] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 144.438182][T10095] loop2: detected capacity change from 0 to 256 [ 144.446082][T10095] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.493749][T10097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2579'. [ 144.524155][T10099] loop3: detected capacity change from 0 to 1764 [ 144.553464][T10099] ISOFS: unable to read i-node block [ 144.558853][T10099] isofs_fill_super: get root inode failed [ 144.618324][T10106] loop3: detected capacity change from 0 to 512 [ 144.626803][T10106] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.637429][T10106] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 144.653215][T10106] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 144.672064][T10106] EXT4-fs (loop3): 1 truncate cleaned up [ 144.703118][T10110] net_ratelimit: 6 callbacks suppressed [ 144.703138][T10110] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 144.717447][T10106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.753424][T10106] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 4: comm +}[@: lblock 0 mapped to illegal pblock 4 (length 1) [ 144.768671][T10106] EXT4-fs (loop3): Remounting filesystem read-only [ 144.782671][T10112] siw: device registration error -23 [ 144.817391][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2589'. [ 144.883828][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 144.883846][ T29] audit: type=1326 audit(1733756176.447:6761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.1.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b37f7fed9 code=0x7ffc0000 [ 144.892032][T10119] futex_wake_op: syz.1.2591 tries to shift op by -1; fix this program [ 144.914009][ T29] audit: type=1326 audit(1733756176.447:6762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.1.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b37f7fed9 code=0x7ffc0000 [ 144.946407][ T29] audit: type=1326 audit(1733756176.447:6763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.1.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f1b37f7fed9 code=0x7ffc0000 [ 144.970903][ T29] audit: type=1326 audit(1733756176.447:6764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.1.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b37f7fed9 code=0x7ffc0000 [ 144.995134][ T29] audit: type=1326 audit(1733756176.447:6765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.1.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1b37f7fed9 code=0x7ffc0000 [ 145.019433][ T29] audit: type=1326 audit(1733756176.447:6766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.1.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b37f7fed9 code=0x7ffc0000 [ 145.043758][ T29] audit: type=1326 audit(1733756176.447:6767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.1.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b37f7fed9 code=0x7ffc0000 [ 145.068037][ T29] audit: type=1326 audit(1733756176.447:6768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.1.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b37f7fed9 code=0x7ffc0000 [ 145.092258][ T29] audit: type=1326 audit(1733756176.447:6769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.1.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1b37f7fed9 code=0x7ffc0000 [ 145.116326][ T29] audit: type=1326 audit(1733756176.447:6770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.1.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b37f7fed9 code=0x7ffc0000 [ 145.141605][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.175493][T10122] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 145.210370][T10124] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 145.451947][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.511683][T10141] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 145.548548][T10143] pim6reg: entered allmulticast mode [ 145.556434][T10143] tmpfs: Bad value for 'mpol' [ 145.561361][T10143] pim6reg: left allmulticast mode [ 145.765488][T10153] program syz.0.2604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.796171][T10155] loop3: detected capacity change from 0 to 512 [ 145.803873][T10155] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 145.814553][T10155] EXT4-fs (loop3): 1 truncate cleaned up [ 145.820466][T10155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.841766][T10160] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 145.898485][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888117e74200: rx timeout, send abort [ 145.906971][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888117e74200: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 145.946159][T10155] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.010656][T10169] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 146.113751][T10180] loop3: detected capacity change from 0 to 1764 [ 146.121830][T10180] ISOFS: unable to read i-node block [ 146.127203][T10180] isofs_fill_super: get root inode failed [ 146.157621][T10185] siw: device registration error -23 [ 146.306651][T10199] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 146.464187][T10214] siw: device registration error -23 [ 146.527954][T10218] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 146.545095][T10220] loop2: detected capacity change from 0 to 512 [ 146.563284][T10220] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.587763][T10220] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 146.612548][T10220] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 146.632921][T10220] EXT4-fs (loop2): 1 truncate cleaned up [ 146.641292][T10220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.668917][T10220] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 4: comm +}[@: lblock 0 mapped to illegal pblock 4 (length 1) [ 146.684599][T10220] EXT4-fs (loop2): Remounting filesystem read-only [ 146.711275][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.765070][T10234] bond1: entered promiscuous mode [ 146.770244][T10234] bond1: entered allmulticast mode [ 146.776236][T10234] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.786789][T10234] bond1 (unregistering): Released all slaves [ 146.811577][T10239] syz_tun: entered promiscuous mode [ 146.817969][T10239] syz_tun: left promiscuous mode [ 146.920121][T10243] siw: device registration error -23 [ 147.003389][T10250] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 147.174758][T10255] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 147.194308][T10257] loop2: detected capacity change from 0 to 512 [ 147.212149][T10257] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.229247][T10257] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 147.238073][T10257] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 147.249891][T10257] EXT4-fs (loop2): 1 truncate cleaned up [ 147.250332][T10257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.251506][T10257] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 4: comm +}[@: lblock 0 mapped to illegal pblock 4 (length 1) [ 147.251683][T10257] EXT4-fs (loop2): Remounting filesystem read-only [ 147.274876][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.296303][T10263] netlink: 'syz.2.2648': attribute type 3 has an invalid length. [ 147.429851][T10271] siw: device registration error -23 [ 147.454600][T10273] 0ªX¹¦À: renamed from caif0 [ 147.456536][T10273] 0ªX¹¦À: entered allmulticast mode [ 147.618499][T10289] loop3: detected capacity change from 0 to 512 [ 147.643478][T10289] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.645381][T10292] siw: device registration error -23 [ 147.684864][T10289] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 147.693717][T10289] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 147.702882][T10289] EXT4-fs (loop3): 1 truncate cleaned up [ 147.708986][T10289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.724544][T10297] syz_tun: entered promiscuous mode [ 147.734654][T10297] syz_tun: left promiscuous mode [ 147.761517][T10289] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 4: comm +}[@: lblock 0 mapped to illegal pblock 4 (length 1) [ 147.802555][T10289] EXT4-fs (loop3): Remounting filesystem read-only [ 147.830397][T10289] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 148.029973][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.072603][T10324] siw: device registration error -23 [ 148.077949][T10322] futex_wake_op: syz.1.2675 tries to shift op by -1; fix this program [ 148.179693][T10332] __nla_validate_parse: 12 callbacks suppressed [ 148.179709][T10332] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2680'. [ 148.214955][T10335] pim6reg: entered allmulticast mode [ 148.234445][T10337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2681'. [ 148.245473][T10335] tmpfs: Bad value for 'mpol' [ 148.250508][T10335] pim6reg: left allmulticast mode [ 148.262164][T10337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2681'. [ 148.371016][T10343] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2684'. [ 148.405590][T10346] loop3: detected capacity change from 0 to 512 [ 148.416695][T10346] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.434201][T10346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.447350][T10346] ext4 filesystem being mounted at /559/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.466473][T10346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2685'. [ 148.488709][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.533439][T10341] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2683'. [ 148.548760][T10356] futex_wake_op: syz.3.2689 tries to shift op by -1; fix this program [ 148.582644][T10364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2692'. [ 148.607662][T10364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2692'. [ 148.629056][T10368] pim6reg: entered allmulticast mode [ 148.637756][T10368] tmpfs: Bad value for 'mpol' [ 148.643057][T10368] pim6reg: left allmulticast mode [ 148.646913][T10370] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2695'. [ 148.684360][T10374] loop1: detected capacity change from 0 to 164 [ 148.693585][T10374] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 148.706651][T10374] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 148.716643][T10374] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 148.737365][T10378] pim6reg: entered allmulticast mode [ 148.756239][T10378] tmpfs: Bad value for 'mpol' [ 148.761738][T10378] pim6reg: left allmulticast mode [ 148.774132][T10382] loop1: detected capacity change from 0 to 512 [ 148.802189][T10382] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.821266][T10384] loop2: detected capacity change from 0 to 512 [ 148.827022][T10386] pim6reg: entered allmulticast mode [ 148.839281][T10386] tmpfs: Bad value for 'mpol' [ 148.848275][T10386] pim6reg: left allmulticast mode [ 148.855381][T10382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.868715][T10382] ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.880603][T10384] usb usb9: usbfs: process 10384 (syz.2.2702) did not claim interface 0 before use [ 148.911432][T10382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2700'. [ 148.945694][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.976848][T10401] pim6reg: entered allmulticast mode [ 148.994331][T10401] tmpfs: Bad value for 'mpol' [ 149.007361][T10401] pim6reg: left allmulticast mode [ 149.083444][T10415] pim6reg: entered allmulticast mode [ 149.091813][T10415] tmpfs: Bad value for 'mpol' [ 149.099544][T10415] pim6reg: left allmulticast mode [ 149.200801][T10423] loop3: detected capacity change from 0 to 512 [ 149.210340][T10423] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.232739][T10423] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 149.241153][T10423] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 149.251612][T10423] EXT4-fs (loop3): 1 truncate cleaned up [ 149.258860][T10423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.262267][T10423] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 4: comm +}[@: lblock 0 mapped to illegal pblock 4 (length 1) [ 149.265472][T10423] EXT4-fs (loop3): Remounting filesystem read-only [ 149.313922][T10423] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 149.504901][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.627332][T10455] pim6reg: entered allmulticast mode [ 149.635512][T10455] tmpfs: Bad value for 'mpol' [ 149.640519][T10455] pim6reg: left allmulticast mode [ 149.658766][T10457] loop4: detected capacity change from 0 to 512 [ 149.665549][T10457] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.674428][T10457] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 149.682642][T10457] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 149.691154][T10457] EXT4-fs (loop4): 1 truncate cleaned up [ 149.698952][T10457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.718466][T10457] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 4: comm +}[@: lblock 0 mapped to illegal pblock 4 (length 1) [ 149.732857][T10457] EXT4-fs (loop4): Remounting filesystem read-only [ 149.740353][T10457] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 149.924858][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.940768][T10483] loop3: detected capacity change from 0 to 512 [ 149.947848][T10483] EXT4-fs: Ignoring removed orlov option [ 149.956336][T10483] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.2741: casefold flag without casefold feature [ 149.972285][T10483] EXT4-fs (loop3): Remounting filesystem read-only [ 149.990545][T10483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.005176][T10483] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 150.010032][T10489] net_ratelimit: 6 callbacks suppressed [ 150.010052][T10489] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 150.012491][T10483] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.117919][T10494] loop2: detected capacity change from 0 to 164 [ 150.127232][T10494] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 150.154886][T10494] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 150.181763][T10494] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 150.196896][T10501] syz_tun: entered promiscuous mode [ 150.203701][T10501] syz_tun: left promiscuous mode [ 150.296431][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 150.296446][ T29] audit: type=1326 audit(1733756181.857:7092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.2.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7115d2fed9 code=0x7ffc0000 [ 150.326388][ T29] audit: type=1326 audit(1733756181.857:7093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.2.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7115d2fed9 code=0x7ffc0000 [ 150.352930][ T29] audit: type=1326 audit(1733756181.867:7094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.2.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7115d2fed9 code=0x7ffc0000 [ 150.376616][ T29] audit: type=1326 audit(1733756181.867:7095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.2.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7115d2fed9 code=0x7ffc0000 [ 150.400242][ T29] audit: type=1326 audit(1733756181.867:7096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.2.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7115d2fed9 code=0x7ffc0000 [ 150.424811][ T29] audit: type=1326 audit(1733756181.867:7097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.2.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7115d2fed9 code=0x7ffc0000 [ 150.448308][ T29] audit: type=1326 audit(1733756181.867:7098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.2.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7115d2fed9 code=0x7ffc0000 [ 150.471855][ T29] audit: type=1326 audit(1733756181.867:7099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.2.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7115d2fed9 code=0x7ffc0000 [ 150.495410][ T29] audit: type=1326 audit(1733756181.867:7100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.2.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7115d2fed9 code=0x7ffc0000 [ 150.519119][ T29] audit: type=1326 audit(1733756181.867:7101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.2.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7115d2fed9 code=0x7ffc0000 [ 150.564555][T10520] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 150.591331][T10522] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 150.629564][T10528] loop2: detected capacity change from 0 to 164 [ 150.644715][T10528] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 150.661973][T10530] pim6reg: entered allmulticast mode [ 150.664206][T10528] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 150.678989][T10530] tmpfs: Bad value for 'mpol' [ 150.687394][T10530] pim6reg: left allmulticast mode [ 150.694065][T10528] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 150.700783][T10534] siw: device registration error -23 [ 150.733974][T10536] loop4: detected capacity change from 0 to 512 [ 150.755991][T10536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.781322][T10536] ext4 filesystem being mounted at /575/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.800961][T10536] FAULT_INJECTION: forcing a failure. [ 150.800961][T10536] name failslab, interval 1, probability 0, space 0, times 0 [ 150.813750][T10536] CPU: 0 UID: 0 PID: 10536 Comm: syz.4.2764 Not tainted 6.13.0-rc2-syzkaller #0 [ 150.822852][T10536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 150.832931][T10536] Call Trace: [ 150.836230][T10536] [ 150.839187][T10536] dump_stack_lvl+0xf2/0x150 [ 150.843907][T10536] dump_stack+0x15/0x1a [ 150.848168][T10536] should_fail_ex+0x223/0x230 [ 150.852969][T10536] should_failslab+0x8f/0xb0 [ 150.857623][T10536] kmem_cache_alloc_noprof+0x52/0x320 [ 150.860097][T10545] loop3: detected capacity change from 0 to 512 [ 150.863089][T10536] ? mb_cache_entry_create+0xf1/0x5a0 [ 150.863121][T10536] mb_cache_entry_create+0xf1/0x5a0 [ 150.880003][T10536] ext4_xattr_get+0x281/0x580 [ 150.884789][T10536] ext4_xattr_security_get+0x32/0x40 [ 150.890104][T10536] vfs_getxattr_alloc+0x2b6/0x3b0 [ 150.895193][T10536] cap_inode_getsecurity+0xab/0x500 [ 150.900511][T10536] security_inode_getsecurity+0x92/0xe0 [ 150.906166][T10536] vfs_getxattr+0x17f/0x220 [ 150.910705][T10536] do_getxattr+0x10c/0x270 [ 150.915283][T10536] filename_getxattr+0xad/0x150 [ 150.920232][T10536] path_getxattrat+0x160/0x290 [ 150.925096][T10536] __x64_sys_lgetxattr+0x5f/0x70 [ 150.930131][T10536] x64_sys_call+0x2720/0x2dc0 [ 150.934883][T10536] do_syscall_64+0xc9/0x1c0 [ 150.939536][T10536] ? clear_bhb_loop+0x55/0xb0 [ 150.944237][T10536] ? clear_bhb_loop+0x55/0xb0 [ 150.948968][T10536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.954953][T10536] RIP: 0033:0x7fb57177fed9 [ 150.959378][T10536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.979424][T10536] RSP: 002b:00007fb56fdf7058 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 150.987864][T10536] RAX: ffffffffffffffda RBX: 00007fb571945fa0 RCX: 00007fb57177fed9 [ 150.995848][T10536] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000020000000 [ 151.004211][T10536] RBP: 00007fb56fdf70a0 R08: 0000000000000000 R09: 0000000000000000 [ 151.012364][T10536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.020376][T10536] R13: 0000000000000000 R14: 00007fb571945fa0 R15: 00007ffc8d8496b8 [ 151.028496][T10536] [ 151.045502][T10545] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 151.052193][T10550] loop2: detected capacity change from 0 to 1764 [ 151.056370][T10545] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.077474][T10550] ISOFS: unable to read i-node block [ 151.082870][T10550] isofs_fill_super: get root inode failed [ 151.114206][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.416578][T10569] siw: device registration error -23 [ 151.574455][T10574] program syz.2.2776 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.696885][T10579] pim6reg: entered allmulticast mode [ 151.725118][T10579] tmpfs: Bad value for 'mpol' [ 151.734410][T10582] syz_tun: entered promiscuous mode [ 151.740719][ T3298] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 151.753133][T10582] syz_tun: left promiscuous mode [ 151.762643][T10579] pim6reg: left allmulticast mode [ 151.779298][T10584] syz_tun: entered promiscuous mode [ 151.816134][T10584] syz_tun: left promiscuous mode [ 151.824543][T10588] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 151.857432][T10592] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 151.925683][T10602] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 151.944579][T10608] FAULT_INJECTION: forcing a failure. [ 151.944579][T10608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.957822][T10608] CPU: 1 UID: 0 PID: 10608 Comm: syz.0.2791 Not tainted 6.13.0-rc2-syzkaller #0 [ 151.966879][T10608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 151.976971][T10608] Call Trace: [ 151.980271][T10608] [ 151.983231][T10608] dump_stack_lvl+0xf2/0x150 [ 151.987900][T10608] dump_stack+0x15/0x1a [ 151.992081][T10608] should_fail_ex+0x223/0x230 [ 151.996777][T10608] should_fail+0xb/0x10 [ 152.000991][T10608] should_fail_usercopy+0x1a/0x20 [ 152.006031][T10608] _copy_to_user+0x20/0xa0 [ 152.010514][T10608] simple_read_from_buffer+0xa0/0x110 [ 152.015910][T10608] proc_fail_nth_read+0xf9/0x140 [ 152.020866][T10608] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 152.026457][T10608] vfs_read+0x1a2/0x700 [ 152.030706][T10608] ? __rcu_read_unlock+0x4e/0x70 [ 152.035676][T10608] ? __fget_files+0x17c/0x1c0 [ 152.040437][T10608] ksys_read+0xe8/0x1b0 [ 152.044657][T10608] __x64_sys_read+0x42/0x50 [ 152.049185][T10608] x64_sys_call+0x2874/0x2dc0 [ 152.053880][T10608] do_syscall_64+0xc9/0x1c0 [ 152.058425][T10608] ? clear_bhb_loop+0x55/0xb0 [ 152.063123][T10608] ? clear_bhb_loop+0x55/0xb0 [ 152.067811][T10608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.073837][T10608] RIP: 0033:0x7f9ce4d9e8ec [ 152.078260][T10608] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 152.098052][T10608] RSP: 002b:00007f9ce3417050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 152.106549][T10608] RAX: ffffffffffffffda RBX: 00007f9ce4f65fa0 RCX: 00007f9ce4d9e8ec [ 152.114535][T10608] RDX: 000000000000000f RSI: 00007f9ce34170b0 RDI: 0000000000000006 [ 152.122607][T10608] RBP: 00007f9ce34170a0 R08: 0000000000000000 R09: 0000000000000000 [ 152.130603][T10608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.138592][T10608] R13: 0000000000000000 R14: 00007f9ce4f65fa0 R15: 00007ffe1f0bfb08 [ 152.146598][T10608] [ 152.155942][T10611] loop2: detected capacity change from 0 to 164 [ 152.166990][T10611] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 152.210500][T10614] pim6reg: entered allmulticast mode [ 152.224314][T10614] tmpfs: Bad value for 'mpol' [ 152.229651][T10614] pim6reg: left allmulticast mode [ 152.261159][T10621] wireguard0: entered promiscuous mode [ 152.267417][T10621] wireguard0: entered allmulticast mode [ 152.296205][T10625] syz_tun: entered promiscuous mode [ 152.303089][T10625] syz_tun: left promiscuous mode [ 152.331617][T10630] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 152.338730][T10632] loop4: detected capacity change from 0 to 164 [ 152.347950][T10632] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 152.367365][T10632] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 152.379603][T10632] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 152.405142][T10637] siw: device registration error -23 [ 152.460618][T10642] pim6reg: entered allmulticast mode [ 152.469054][T10642] tmpfs: Bad value for 'mpol' [ 152.478022][T10642] pim6reg: left allmulticast mode [ 152.493500][T10647] loop3: detected capacity change from 0 to 1764 [ 152.503361][T10647] ISOFS: unable to read i-node block [ 152.508697][T10647] isofs_fill_super: get root inode failed [ 152.568152][T10649] pim6reg: entered allmulticast mode [ 152.580437][T10649] tmpfs: Bad value for 'mpol' [ 152.586084][T10649] pim6reg: left allmulticast mode [ 152.726535][T10662] loop4: detected capacity change from 0 to 512 [ 152.754629][T10662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.767315][T10662] ext4 filesystem being mounted at /587/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.800053][T10662] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 152.818153][T10668] loop1: detected capacity change from 0 to 764 [ 152.823107][ T3304] EXT4-fs error (device loop4): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /587/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 152.864865][T10668] 9pnet_fd: Insufficient options for proto=fd [ 152.968100][T10676] loop1: detected capacity change from 0 to 1764 [ 152.983876][T10676] ISOFS: unable to read i-node block [ 152.989221][T10676] isofs_fill_super: get root inode failed [ 153.054501][T10678] loop2: detected capacity change from 0 to 512 [ 153.063533][T10678] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.078797][T10678] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 153.087424][T10678] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 153.098305][T10678] EXT4-fs (loop2): 1 truncate cleaned up [ 153.105731][T10678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.122091][T10678] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 4: comm +}[@: lblock 0 mapped to illegal pblock 4 (length 1) [ 153.137610][T10678] EXT4-fs (loop2): Remounting filesystem read-only [ 153.146253][T10678] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 153.291001][T10687] loop1: detected capacity change from 0 to 512 [ 153.344563][T10687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.358335][T10687] ext4 filesystem being mounted at /495/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.369603][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.380470][T10687] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 153.391516][T10687] FAULT_INJECTION: forcing a failure. [ 153.391516][T10687] name failslab, interval 1, probability 0, space 0, times 0 [ 153.391547][T10687] CPU: 1 UID: 0 PID: 10687 Comm: syz.1.2821 Not tainted 6.13.0-rc2-syzkaller #0 [ 153.391609][T10687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 153.391622][T10687] Call Trace: [ 153.391628][T10687] [ 153.391635][T10687] dump_stack_lvl+0xf2/0x150 [ 153.391722][T10687] dump_stack+0x15/0x1a [ 153.391771][T10687] should_fail_ex+0x223/0x230 [ 153.391886][T10687] should_failslab+0x8f/0xb0 [ 153.391919][T10687] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 153.392020][T10687] ? __d_alloc+0x3d/0x340 [ 153.392042][T10687] ? __d_lookup+0x342/0x370 [ 153.392079][T10687] __d_alloc+0x3d/0x340 [ 153.392155][T10687] d_alloc+0x2e/0x100 [ 153.392222][T10687] lookup_one_qstr_excl+0x97/0x1a0 [ 153.392247][T10687] filename_create+0x14d/0x2b0 [ 153.392281][T10687] kern_path_create+0x37/0x120 [ 153.392328][T10687] unix_bind+0x1c0/0x870 [ 153.392369][T10687] __sys_bind+0x10c/0x190 [ 153.392462][T10687] __x64_sys_bind+0x41/0x50 [ 153.392499][T10687] x64_sys_call+0x20ab/0x2dc0 [ 153.392527][T10687] do_syscall_64+0xc9/0x1c0 [ 153.392549][T10687] ? clear_bhb_loop+0x55/0xb0 [ 153.392649][T10687] ? clear_bhb_loop+0x55/0xb0 [ 153.392672][T10687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.392741][T10687] RIP: 0033:0x7f1b37f7fed9 [ 153.392769][T10687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.392795][T10687] RSP: 002b:00007f1b365f7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 153.392823][T10687] RAX: ffffffffffffffda RBX: 00007f1b38145fa0 RCX: 00007f1b37f7fed9 [ 153.392836][T10687] RDX: 000000000000006e RSI: 0000000020003000 RDI: 0000000000000005 [ 153.392927][T10687] RBP: 00007f1b365f70a0 R08: 0000000000000000 R09: 0000000000000000 [ 153.392957][T10687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.392973][T10687] R13: 0000000000000000 R14: 00007f1b38145fa0 R15: 00007ffe79d23d38 [ 153.392992][T10687] [ 153.430159][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.627160][T10697] __nla_validate_parse: 20 callbacks suppressed [ 153.627181][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2825'. [ 153.680609][T10699] bond1: entered promiscuous mode [ 153.686438][T10699] bond1: entered allmulticast mode [ 153.691836][T10699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.703426][T10699] bond1 (unregistering): Released all slaves [ 153.720516][T10704] syz_tun: entered promiscuous mode [ 153.727638][T10704] syz_tun: left promiscuous mode [ 153.740830][T10706] bond0: entered promiscuous mode [ 153.745933][T10706] bond0: entered allmulticast mode [ 153.751228][T10706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.761211][T10706] bond0 (unregistering): Released all slaves [ 153.819390][T10709] loop2: detected capacity change from 0 to 1764 [ 153.825940][T10711] loop3: detected capacity change from 0 to 164 [ 153.835970][T10711] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 153.845989][T10709] ISOFS: unable to read i-node block [ 153.851461][T10709] isofs_fill_super: get root inode failed [ 153.866390][T10711] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 153.904422][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2831'. [ 153.919288][T10715] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 153.955253][T10719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2834'. [ 154.119630][T10737] loop2: detected capacity change from 0 to 1764 [ 154.143199][T10737] ISOFS: unable to read i-node block [ 154.148539][T10737] isofs_fill_super: get root inode failed [ 154.224545][T10742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2843'. [ 154.319264][T10739] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2836'. [ 154.348105][T10754] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 154.403334][T10757] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 154.443125][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2846'. [ 154.454634][T10740] chnl_net:caif_netlink_parms(): no params data found [ 154.634105][T10740] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.641308][T10740] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.648698][T10740] bridge_slave_0: entered allmulticast mode [ 154.655910][T10740] bridge_slave_0: entered promiscuous mode [ 154.662708][T10740] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.669840][T10740] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.682929][T10740] bridge_slave_1: entered allmulticast mode [ 154.689544][T10740] bridge_slave_1: entered promiscuous mode [ 154.696710][T10772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2849'. [ 154.718599][T10740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.729558][T10740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.750694][T10740] team0: Port device team_slave_0 added [ 154.758439][T10740] team0: Port device team_slave_1 added [ 154.791291][T10740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.798311][T10740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.825114][T10740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.836465][T10740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.844323][T10740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.871535][T10740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.916223][T10740] hsr_slave_0: entered promiscuous mode [ 154.925232][T10740] hsr_slave_1: entered promiscuous mode [ 154.934493][T10740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.950371][T10740] Cannot create hsr debugfs directory [ 155.024970][T10740] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.055285][T10740] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.114925][T10740] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.185166][T10740] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.224014][T10787] pim6reg: entered allmulticast mode [ 155.231584][T10787] tmpfs: Bad value for 'mpol' [ 155.237498][T10787] pim6reg: left allmulticast mode [ 155.388857][T10740] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 155.415725][T10740] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 155.415754][T10789] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 155.415870][T10740] ================================================================== [ 155.415915][T10740] BUG: KCSAN: data-race in data_push_tail / ip4_addr_string [ 155.415967][T10740] [ 155.415977][T10740] write to 0xffffffff88bd2b50 of 1 bytes by task 10789 on cpu 1: [ 155.416000][T10740] ip4_addr_string+0xb5/0x140 [ 155.416042][T10740] ip_addr_string+0x1be/0x5d0 [ 155.416089][T10740] pointer+0x647/0xd20 [ 155.416120][T10740] vsnprintf+0x861/0xe30 [ 155.416146][T10740] vscnprintf+0x42/0x90 [ 155.416172][T10740] printk_sprint+0x30/0x2d0 [ 155.416200][T10740] vprintk_store+0x589/0x870 [ 155.416226][T10740] vprintk_emit+0x15e/0x680 [ 155.416253][T10740] vprintk_default+0x26/0x30 [ 155.416282][T10740] vprintk+0x75/0x80 [ 155.416300][T10740] _printk+0x7a/0xa0 [ 155.416322][T10740] ip_vs_scheduler_err+0x186/0x190 [ 155.416354][T10740] ip_vs_wlc_schedule+0xa0/0x1d0 [ 155.416390][T10740] ip_vs_schedule+0x931/0xeb0 [ 155.416424][T10740] udp_conn_schedule+0x248/0x3b0 [ 155.416453][T10740] ip_vs_in_hook+0x5d2/0x1210 [ 155.416487][T10740] nf_hook_slow+0x86/0x1b0 [ 155.416523][T10740] __ip_local_out+0x2d6/0x300 [ 155.416546][T10740] ip_send_skb+0x30/0x140 [ 155.416571][T10740] udp_send_skb+0x6a6/0x9f0 [ 155.416591][T10740] udp_sendmsg+0x1257/0x12f0 [ 155.416612][T10740] inet_sendmsg+0xaf/0xd0 [ 155.416651][T10740] __sock_sendmsg+0x102/0x180 [ 155.416682][T10740] ____sys_sendmsg+0x312/0x410 [ 155.416706][T10740] __sys_sendmmsg+0x227/0x4b0 [ 155.416730][T10740] __x64_sys_sendmmsg+0x57/0x70 [ 155.416755][T10740] x64_sys_call+0x29aa/0x2dc0 [ 155.416778][T10740] do_syscall_64+0xc9/0x1c0 [ 155.416798][T10740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.416835][T10740] [ 155.416843][T10740] read to 0xffffffff88bd2b50 of 8 bytes by task 10740 on cpu 0: [ 155.416861][T10740] data_push_tail+0x102/0x430 [ 155.416887][T10740] data_alloc+0xbe/0x2c0 [ 155.416909][T10740] prb_reserve+0x85e/0xb60 [ 155.416932][T10740] vprintk_store+0x558/0x870 [ 155.416959][T10740] vprintk_emit+0x15e/0x680 [ 155.416986][T10740] dev_vprintk_emit+0x1df/0x210 [ 155.417017][T10740] dev_printk_emit+0x82/0xb0 [ 155.417047][T10740] __netdev_printk+0x352/0x3e0 [ 155.417071][T10740] netdev_info+0x99/0xc0 [ 155.417102][T10740] dev_change_name+0x5a5/0x610 [ 155.417129][T10740] do_setlink+0x524/0x22c0 [ 155.417155][T10740] rtnl_newlink+0xdbe/0x1220 [ 155.417178][T10740] rtnetlink_rcv_msg+0x651/0x710 [ 155.417202][T10740] netlink_rcv_skb+0x12c/0x230 [ 155.417227][T10740] rtnetlink_rcv+0x1c/0x30 [ 155.417249][T10740] netlink_unicast+0x599/0x670 [ 155.417270][T10740] netlink_sendmsg+0x5cc/0x6e0 [ 155.417297][T10740] __sock_sendmsg+0x140/0x180 [ 155.417327][T10740] __sys_sendto+0x1a8/0x230 [ 155.417347][T10740] __x64_sys_sendto+0x78/0x90 [ 155.417367][T10740] x64_sys_call+0x29fa/0x2dc0 [ 155.417390][T10740] do_syscall_64+0xc9/0x1c0 [ 155.417411][T10740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.417447][T10740] [ 155.417452][T10740] value changed: 0x00000000ffffed26 -> 0x206f6e202d20303a [ 155.417466][T10740] [ 155.417472][T10740] Reported by Kernel Concurrency Sanitizer on: [ 155.417482][T10740] CPU: 0 UID: 0 PID: 10740 Comm: syz-executor Not tainted 6.13.0-rc2-syzkaller #0 [ 155.417515][T10740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 155.417530][T10740] ================================================================== [ 155.758369][T10740] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 155.767401][T10740] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 155.801978][T10740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.815927][T10740] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.825495][ T9401] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.832614][ T9401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.844867][ T9401] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.852118][ T9401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.880117][T10740] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.890764][T10740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.920884][ T29] kauditd_printk_skb: 892 callbacks suppressed [ 155.920901][ T29] audit: type=1400 audit(1733756187.477:7994): avc: denied { sys_module } for pid=10740 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 155.981867][T10740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.057719][T10740] veth0_vlan: entered promiscuous mode [ 156.065926][T10740] veth1_vlan: entered promiscuous mode [ 156.081525][T10740] veth0_macvtap: entered promiscuous mode [ 156.090792][T10740] veth1_macvtap: entered promiscuous mode [ 156.102158][T10740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.114791][T10740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.124744][T10740] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.133553][T10740] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.142297][T10740] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.151131][T10740] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.176921][ T29] audit: type=1400 audit(1733756187.737:7995): avc: denied { mounton } for pid=10740 comm="syz-executor" path="/root/syzkaller.EY9XsZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1