last executing test programs: 32.521510331s ago: executing program 3 (id=522): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000280013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 32.455602931s ago: executing program 3 (id=525): add_key$keyring(0x0, &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x800}, 0x18) r1 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f00000000c0)=[{r5, 0x1009}], 0x1, 0x8000007) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f0000000240)="04ec1a7a", 0x4, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) shutdown(r7, 0x1) ioctl$EVIOCGABS20(r1, 0x40044591, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x51, 0x3, 0x4, {0xdc5, 0x7fff}, {0x0, 0x40}, @cond=[{0x8fff, 0x17, 0x1, 0x100, 0x5, 0x2}, {0x5, 0x8, 0x5, 0x3, 0x9, 0x9}]}) acct(0x0) socket$inet6_sctp(0xa, 0x801, 0x84) 31.503628008s ago: executing program 3 (id=539): setxattr$security_capability(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000c40)=@v2={0x2000000, [{0x3000, 0x6e}, {0x9}]}, 0x14, 0x1) 31.472111448s ago: executing program 3 (id=542): r0 = socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[]) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f000000000000000000000000000039d1c723"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[], 0x40}}, 0x0) 30.534806215s ago: executing program 3 (id=552): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 30.508594035s ago: executing program 3 (id=554): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c000000110001000000000000b483fc06000000", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040014) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xcb2}}, './file0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000900)=@nat={'nat\x00', 0x1b, 0x5, 0x508, 0x0, 0x0, 0xffffffff, 0xf0, 0x208, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, &(0x7f0000000400), {[{{@ipv6={@local, @mcast1, [0xff, 0x0, 0xffffff00, 0xffffffff], [0x0, 0x0, 0xff], 'vlan1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x6c, 0x0, 0x1, 0x4}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@remote, @gre_key=0x3, @gre_key=0x200}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x7fff, 0x3, 0x4}}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x6, @ipv6=@mcast2, @ipv6=@private1, @gre_key=0x7a, @icmp_id=0x68}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, [0xff000000, 0xffffff00], [0xff000000, 0xff, 0x0, 0xff000000], 'veth1\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x33, 0x81, 0x0, 0x4}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x18, @ipv6=@mcast2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x3, 0x2}}}, @common=@icmp6={{0x28}, {0x0, "32a3"}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv6=@rand_addr=' \x01\x00', @gre_key=0x2, @icmp_id=0x67}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000900)=@nat={'nat\x00', 0x1b, 0x5, 0x508, 0x0, 0x0, 0xffffffff, 0xf0, 0x208, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, &(0x7f0000000400), {[{{@ipv6={@local, @mcast1, [0xff, 0x0, 0xffffff00, 0xffffffff], [0x0, 0x0, 0xff], 'vlan1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x6c, 0x0, 0x1, 0x4}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@remote, @gre_key=0x3, @gre_key=0x200}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x7fff, 0x3, 0x4}}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x6, @ipv6=@mcast2, @ipv6=@private1, @gre_key=0x7a, @icmp_id=0x68}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, [0xff000000, 0xffffff00], [0xff000000, 0xff, 0x0, 0xff000000], 'veth1\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x33, 0x81, 0x0, 0x4}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x18, @ipv6=@mcast2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x3, 0x2}}}, @common=@icmp6={{0x28}, {0x0, "32a3"}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv6=@rand_addr=' \x01\x00', @gre_key=0x2, @icmp_id=0x67}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(r0, &(0x7f0000000240)='./file0\x00', 0x42) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000500", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000500", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = dup(r2) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x7f, 0x50, 0x1c, @remote, @private0, 0x7, 0x8000, 0x8000, 0x3}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002080)=@getsadinfo={0x1380, 0x23, 0x0, 0x70bd2d, 0x25dfdbfe, 0x0, [@tmpl={0x144, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d2, 0x33}, 0xa, @in=@multicast1, 0x3501, 0x4, 0x3, 0x23, 0x6, 0x1}, {{@in6=@mcast2, 0x4d6, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3504, 0x2, 0x0, 0x7, 0x6, 0x9, 0xffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x33}, 0x2, @in6=@empty, 0x3506, 0x4, 0x1, 0x1c, 0x3, 0x1, 0x6}, {{@in6=@mcast1, 0x4d4, 0x33}, 0xa, @in=@remote, 0x3501, 0x3, 0x3, 0x0, 0x6, 0x544f, 0x8}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x33}, 0xa, @in6=@loopback, 0x3507, 0x1, 0x3, 0x9, 0x321d, 0x7, 0xf8f}]}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @user_kmaddress={0x2c, 0x13, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x2}}, @offload={0xc, 0x1c, {r7, 0x1}}, @user_kmaddress={0x2c, 0x13, {@in=@dev={0xac, 0x14, 0x14, 0x24}, @in6=@loopback, 0x0, 0xa}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @tmpl={0x104, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x4d3, 0xa0}, 0x2, @in6=@loopback, 0x3506, 0x2, 0x2, 0x4, 0x3f03ce15, 0x8, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x4d6, 0x2b}, 0xa, @in=@rand_addr=0x64010101, 0x34ff, 0x3, 0x0, 0x8, 0x101, 0x10000, 0x401}, {{@in=@dev={0xac, 0x14, 0x14, 0x37}, 0x4d2, 0xff}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3505, 0x6, 0x0, 0xf5, 0x80, 0x1, 0xd4}, {{@in6=@mcast1, 0x4d8}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x3501, 0x1, 0x3, 0xe, 0x2, 0x8000, 0x3}]}, @etimer_thresh={0x8, 0xc, 0x6}, @algo_comp={0x5c, 0x3, {{'lzs\x00'}, 0xa0, "dc1aec47baa26b5a2de82ab2ed1ebfb2ce64f084"}}, @algo_auth_trunc={0x104c, 0x14, {{'rmd320-generic\x00'}, 0x8000, 0x60, "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"}}]}, 0x1380}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$P9_RLERRORu(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000160a0000000000000000000000000000090001007379c80c7a30000016000900020073797a30000000002c010000180a0000000b000000000000000000000900010073797a30000000000c00054000000000000000001400000010000100"/159], 0xa0}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000160a0000000000000000000000000000090001007379c80c7a30000016000900020073797a30000000002c010000180a0000000b000000000000000000000900010073797a30000000000c00054000000000000000001400000010000100"/159], 0xa0}}, 0x0) r8 = socket(0x2, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000ac0)={'syztnl1\x00', 0x0, 0x20, 0x8000, 0xfe61, 0x6, {{0x6, 0x4, 0x2, 0x19, 0x18, 0x65, 0x0, 0xf, 0x29, 0x0, @multicast2, @local, {[@rr={0x7, 0x3, 0x79}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000ac0)={'syztnl1\x00', 0x0, 0x20, 0x8000, 0xfe61, 0x6, {{0x6, 0x4, 0x2, 0x19, 0x18, 0x65, 0x0, 0xf, 0x29, 0x0, @multicast2, @local, {[@rr={0x7, 0x3, 0x79}]}}}}}) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 15.412508607s ago: executing program 32 (id=554): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c000000110001000000000000b483fc06000000", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040014) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xcb2}}, './file0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000900)=@nat={'nat\x00', 0x1b, 0x5, 0x508, 0x0, 0x0, 0xffffffff, 0xf0, 0x208, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, &(0x7f0000000400), {[{{@ipv6={@local, @mcast1, [0xff, 0x0, 0xffffff00, 0xffffffff], [0x0, 0x0, 0xff], 'vlan1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x6c, 0x0, 0x1, 0x4}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@remote, @gre_key=0x3, @gre_key=0x200}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x7fff, 0x3, 0x4}}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x6, @ipv6=@mcast2, @ipv6=@private1, @gre_key=0x7a, @icmp_id=0x68}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, [0xff000000, 0xffffff00], [0xff000000, 0xff, 0x0, 0xff000000], 'veth1\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x33, 0x81, 0x0, 0x4}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x18, @ipv6=@mcast2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x3, 0x2}}}, @common=@icmp6={{0x28}, {0x0, "32a3"}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv6=@rand_addr=' \x01\x00', @gre_key=0x2, @icmp_id=0x67}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000900)=@nat={'nat\x00', 0x1b, 0x5, 0x508, 0x0, 0x0, 0xffffffff, 0xf0, 0x208, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, &(0x7f0000000400), {[{{@ipv6={@local, @mcast1, [0xff, 0x0, 0xffffff00, 0xffffffff], [0x0, 0x0, 0xff], 'vlan1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x6c, 0x0, 0x1, 0x4}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@remote, @gre_key=0x3, @gre_key=0x200}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x7fff, 0x3, 0x4}}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x6, @ipv6=@mcast2, @ipv6=@private1, @gre_key=0x7a, @icmp_id=0x68}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, [0xff000000, 0xffffff00], [0xff000000, 0xff, 0x0, 0xff000000], 'veth1\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x33, 0x81, 0x0, 0x4}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x18, @ipv6=@mcast2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x3, 0x2}}}, @common=@icmp6={{0x28}, {0x0, "32a3"}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv6=@rand_addr=' \x01\x00', @gre_key=0x2, @icmp_id=0x67}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(r0, &(0x7f0000000240)='./file0\x00', 0x42) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000500", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000500", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = dup(r2) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x7f, 0x50, 0x1c, @remote, @private0, 0x7, 0x8000, 0x8000, 0x3}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002080)=@getsadinfo={0x1380, 0x23, 0x0, 0x70bd2d, 0x25dfdbfe, 0x0, [@tmpl={0x144, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d2, 0x33}, 0xa, @in=@multicast1, 0x3501, 0x4, 0x3, 0x23, 0x6, 0x1}, {{@in6=@mcast2, 0x4d6, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3504, 0x2, 0x0, 0x7, 0x6, 0x9, 0xffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x33}, 0x2, @in6=@empty, 0x3506, 0x4, 0x1, 0x1c, 0x3, 0x1, 0x6}, {{@in6=@mcast1, 0x4d4, 0x33}, 0xa, @in=@remote, 0x3501, 0x3, 0x3, 0x0, 0x6, 0x544f, 0x8}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x33}, 0xa, @in6=@loopback, 0x3507, 0x1, 0x3, 0x9, 0x321d, 0x7, 0xf8f}]}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @user_kmaddress={0x2c, 0x13, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x2}}, @offload={0xc, 0x1c, {r7, 0x1}}, @user_kmaddress={0x2c, 0x13, {@in=@dev={0xac, 0x14, 0x14, 0x24}, @in6=@loopback, 0x0, 0xa}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @tmpl={0x104, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x4d3, 0xa0}, 0x2, @in6=@loopback, 0x3506, 0x2, 0x2, 0x4, 0x3f03ce15, 0x8, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x4d6, 0x2b}, 0xa, @in=@rand_addr=0x64010101, 0x34ff, 0x3, 0x0, 0x8, 0x101, 0x10000, 0x401}, {{@in=@dev={0xac, 0x14, 0x14, 0x37}, 0x4d2, 0xff}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3505, 0x6, 0x0, 0xf5, 0x80, 0x1, 0xd4}, {{@in6=@mcast1, 0x4d8}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x3501, 0x1, 0x3, 0xe, 0x2, 0x8000, 0x3}]}, @etimer_thresh={0x8, 0xc, 0x6}, @algo_comp={0x5c, 0x3, {{'lzs\x00'}, 0xa0, "dc1aec47baa26b5a2de82ab2ed1ebfb2ce64f084"}}, @algo_auth_trunc={0x104c, 0x14, {{'rmd320-generic\x00'}, 0x8000, 0x60, "c8a73335c2576b7f5fa2eedb4172052734fc9759efdde1bc04065a95fe093854f10d05c419aa3186d192c8b5cd05bc8118cdd95bee8d6c5680a8fd005fa01935ae5963a42efe7e6f461c2a06e4d4f5bdb0a223bbe4b21f66c12675fcd001cecda52e81b653c1ff6651c07a51ad77426a8aa5e1eea48197f9c3edb827868fbec430fe0f735a2e5a3f0b164e645966c1642a6426480564d65773b5885d019b70a185ed441dff71260faf0f84413d79338082d55bc7a5b6d239c20f7bff6491406695f373379d1bddc5cf253dc8db14c20f1059a540b1735c580b66ab6081319fd975046565f8d96613597f72db729f024cc4aca77f603ce86c724a6802fbf18754717dd626f0f23360c7c56a5116ebb66586aa21ad52de3cc7478d87ba4a2bec0a418258ee9e5447045778ee0a3b054f79252dca31a3f30feb2610156bed510adf2c497d51e7c35215f955061f198a59de557aa212e71aca86d3ca20898f1cb61792f4d82e72e24d12fa3b796e583a12d82eb94523bb67da1dfdc62536580c71584784a9349e93799131bb93e2638fcc9db11ee07b849efceb419efbc97a9485e43dbd189fa6df6dcbe004767a568b2166d5aebf95cd13ff2f1ef8b8a56b014307e85f5e253c3081af13d5fc0e7f645605733d4770dc2977ee5e76b9d74adfdc7fcca759efb1be58677bdec0f8893d70dec0f5f24fe847275c90820dc538a7b7b529dbd56d3e69e27b3a564a058e51f5576d2b5206b3df725757f70ef2a8dcbef5c71f22675c37e83ca8ae9e9cb6554755cab0307bd94b086e354135151f18203cc1e0d0368bd1dc3a9e142fd41ebbb5fa63ddf20fc0df4146fff20e6c0a9c39228688af656953992a28c1a662fb9444eb14294dc70b549e511855d17878918f03e5337d5eceedeeacb0c57bf23b158d8a2520e097c10ae9f93a2ebbf2827cc57af715c20e7a020e43086ca5e09e6f5235866178fd51c6452ff15601477c2558c79557651357cc7950f09849661cae6bceadc94d02a6d32a449dcbfc839d3d29870383b1a29e36688204acdb133e0c4407e4f2f05e548716cc1c033bc194f9dff5cb0513f1c10e56d76b15c44b3e6c283a8a84a37b2410a3a48bb656ae97cfb78b4ae063f02191a5417c95bfe9066aebce4e6c60d4dab990f4a2530f1fcd562fbc5a301628553f5f61eda81da8b42164e5e868603072743d4e8406162ac6a51027783a04e201f440090b6a442557c001c0cca7360143a61ae1b7b07cf18de89f856d6c17ec1c5358f6ca07600d7ec70ab531b0642052ded815bdc631694446f4b9d3a372c85a141fe24f404ed57cdc5b1af49927aa294488e20d29f534fc5486e4295e8febdf9fd8406a6bc55a818efd8780da7b217a32e9771715cea2728e06b35356fdeb9520655bff30ad5f1369dbdaa5e4fe36419a22aa21ff7655a8c3f082c4fd92963ec153f6d0937e914db55fb4a48b9be005c13d74d023ba304d82741099e8aadfaca5c0b77988c4d512eed42bc891513f19987f03b8356d09c9e2eab876a85c119233200cd2634c985c3d34f0b24c80fe707d9befe4fb6d554f6bd78ec1bdd59e9a55f078a5ce0ca57bbbfc7e53cb40b8c2734b9700195cec0216b5c9e0ee0e92392be2c38f564c3347d53d69359ee8f03724c18e37ff1c7f259f03cb9601e6f0f12e187729ed9a4f24f9415797c6b233a79c5b1fd55dac5871b6fee2a3a3fe91fdc26eb1a4b48bf1c940409b0e77269b407ef1f1953ce43deb1191e3bbfe39490f69de9a3c92070ab7ff182cd433edbff57f1a9f8abb2330dcd8e4d2ef68f3793850de2a16c6e015c5faf977e33dfae35d83f0444dd2dafab6a67df50c099ef3ac7f112d0d198ad7deb95021d9e6eb51b3d6ea5d82760b62133c75d8ae7a34ef76821b84b09449ab150deacfaa6607b099a9ff3d100e24e0913c3200f5c53e420cc7550605a947acc177a662136439f9af3dfa7b2efb7da3753347465fb7bb614967b5c82dbf036257eee4043640c2e94bca1f85179f7519897691979a4cc73e309686af3754a7d0a18a84ec34f63159642f7c9d7d401761f53521b9919ca8b427e7a56689198304187377ca89d9a5413718a3266220a519da68c6ae07266442ee9974bbf8f64a6305f6c6c3941f1f8c27e77e9c606dfb4c50acb9ecd046fb48d3156169dfd9909f0c38f3d86c17131cbdc132eb530cfbdd694cde23d57328da8336c45bb0122c5c88b42dfed0872b192596f62943dcbcfc65e56ca478d7d181711832ea8e30d51fccef161abdadb0768a982c3c8327eaf16f068fafcd3cfd4572ec9fd0d08ea07196f1f0d78b91a543034a3c252abfd9942e35873f4bbd43e59f70f47403f2d19091495e0fd8b0f7d5fac96b6dfd9ac9cc4542a65bad9352551c6bd6f2e86337d256be6644e41a4a37bccb866baba4aaf73c791945aa0995ccaf55a7226b8ae6931df2b37485d2546b28737fa680e606851ace3d57b9986cde6d1adc337cae53ecee17d2fc4cf0179c67b027acbb14756f0208c15cc47a1011ba405ea889fabd2045910451b28379a2e52f3537c78c3101560a1a977c6ba810df2c73d6a0dffec41eaae7ec9bfc0e695874275a97954f176d1a98e8fc0ad03a82043033bc4ae674fc7e1240d76596c7008bb7bda5b160b1f7b0c10683b026e9c668c34303643cafec697d73ecc8205ac96231eda2aa88571713e7fde0298451c31578493fb497b84d7f576125370ef6bc89cd77ea0f54e5cc07220d8a0da06d58154d1b024746dfda301251c1b443ebfe1ca8e7000d43c80e89be5c09225c57ff11d28b14f2516b6fe2db2caae303450aaad0d61de82e5bc66439122b41339ed3dd3bac6684495d73ffd373987c82b8a98da0f3d2f2c8dd6380af6c48132f4733ee5f5e0163e517fa87f5f653f6d4754037dddce9a15cb255664b96ed5b37a1898a95bf504a914a75ced5a37021ace0298253d5f746f8d82de458ef12ff3ffc02cd302050e1f8540e34de2c081b96f82201a090a1b7973620b56ae287d2ae6add62f5979636516ce9eb882e1d96cce4abf8541750fe41a6fbcb8c52e615a2a4908dbde1ffce06110b4511b7840c42aae8b93ebb26fbb0fc9eba23cf38f7b87f0fee745ca8c02e20d4e221e0ba3b832b068552d143ec39b5e569dfdf8ebefab5d79eed7975a07fd9baff6049edaf665fa23c36fc4bee877fa1f62226e9eec9a3b5fe1ed4c8ef79bfa5247412c322172d673e4b39472f508fa0195a8006ead29f237f7f88560ac51f9bc9c49486924beb12b9590a03ab5a229013cd9f00e8c283cae8594967cf3479a409dbd06841c65f14093116a556cfab18b2268f3cddff1afa05b6cf844b33e6f0ffe0a4df299ca7ad2979eb35c551fb5dd091a2a7182c513881a92a8b5ed8dcc824061d66007593991299bc24c738a77703820499c5a7ab111fcff4f64ec25f50e3b7284ff47efb19b8e755764fe6742ca42d0ec25446c5ae18ecfa060c6fac7bb0fafa35cebeb90bc6ac1a0d087126d195e8a590e1244993c9c855357f9b251f62dccca7ae19c318098c9024fef797eda1fc4172720029741a8676b0e2a7d4fff958475df7e5852c827609e31dd445c7c832fe1f63906f43b55a4d808d0f2abfb26b1c354ad6d0bbcc677f9699d3d4a95925cdb6e2ea4afce4446efd5417c9056b407782032dcc2d9abf7632952afadddd1b07119ce09a3d50b5979aefb443abeb25be0cbf95a8a79af889c24d289666a06c28b80e71cf950c887a4e1add4c8352c6e5997b8e6d88165e93cbe7112e4313bbf3799da1ff1e2fd1ea06b511ad764da7f32645a5d12e64f5c63bee26ef43a8d2ca288ef180c849d837376fa4f5a90ad0362a584d68c64fa88eb29d439062e69381cde3399c1b005e42505f755b1159c3063c5dc6d042e8e01854762597f0acb5c2e14a53a951d6ea8c5e2b0f03dcff58804db51de8e2b2d6ac7161df458e22c8903f1677f474a1df1ec9123ea828e8a8ec39a38e96f496869d3ab943f4949f91f9da2f00ae6fa945dc2015738dd409a3137d1c428c8733e18f5d84d4b8c0279229654ba6e3cb4c6f8766ab55d01f51efde2929ca47d88989fcc7eb7e545d056c2ca9de5eb92826234f93876cc35f2b34f3bb03fa8388ef178c26a93d6d6050f2c6cd5bff5856e15fc562ff60b6371ee423353ffdb6084f457740d6602a5f9cdce4d0265fa0d7e5337a116ed517ef244cb2f4c4359eaa42350dfd896a02c53aad774f57a986ea6f7a34ec8a7a0bb56803f9824276d2aeb5bd820a8807ed5e945e5dcce309d7ef11ddd66717d6757ba8d404b760456c61382c61db459f3ca70a0d1bd5947acb01cfacddb8e10e5af6891dfd5ffdcf83bb20bbec273b390f3e108e39ce5eec2260bdebbc1cd5df6257716b39a7f3f219b7fb3969da17ac612ed04b15867d45b6a70da992720459d3b1186ff0214ad1d365425552a53af01c9851500f42ba980dfd33d60a8ad6163e06c821a1777faf1a858fa6bae9665c151d85f9ead6a54ef668cd5d15e13d7342d9a0c874cafb272cf31558915a8dfa3e945326f6c015d93b06bee7e066f5190b16855ae9a365ce063acf6ef6c739043cb75c4c04c16693cbab33bd8428dbd5ed558b1f46f3ddc5329c4802451bfdb8be1f705c7c9723419401809fc3371c367d3a068784a272b4373be4d718c58e071a1d4d73fc93a8e10db63a7064d0803a48477740387323fd401ba95d5e7bfb7270408a0beae0999aeb8419630b4b9d964b690217ca97942e2f0b40d63f33426dcf0e0c344d83fb9d44efa1879894ea1b8960875199cba36628687db91af3514ae8f67aa9ae07983f457445611f65e3e21805403e89b2d0518da383d010c4cdcbabde98c1fcd1782d1ec3cb6cc6cf5cf4301fc09876071832d529495dbb99b5f6336a6cc92dc071dff378629dbe3caf5d198f83314f1f8a5db2c490baaecce549761182b203c7011ef72d5e1f027e33fd6467eb4f0808bbe91bbac3bfe32d6548363e4751eda1f2361b13fb0d65457cb4f0dd039492bc95da49e347f8e0999846951917ea58aa02128b1d6f5ee9879ba5f63e6aff68c0c9478b4feb476eed3b83ff83f4ef908f1da9e7b095de4ae9f50727d944848d2d576b49a0419b6e94538af5dfc85fe3ada06b1d40e8173d5709b7e877e311ebadc967ff7c1c0363de3427c2936ea2272d456e68f8155b72fc02ac4071147709acd71cfa663031885a9ef32129937a0ce79ff3b14a8f40ede6a32f221d4ad269f0c491e41afc3547de7cbd22016bd61ef44cced9e2d2dccfbff389a74cd95deb7891444535ceb543f82dcbf56adf93740ab7985ae69b9b4485e324503f33242982761ba487d3180869da491be961d625ae56b152e917d8a020a1a822d606bc1be9c91e29316b8d67f23fba484303fa54a896d1e007cb285fd5b3a45d1a73008ebd79094d5b8b6525238cd75c528b6fc0ce5394f3bf0c706f49c329d88ba23ae26e544f452fb3dbf948a2b3269736c11cb16eeb6dc94004d38acad0c5fc664d015562d8a6021801dccb5e23d536ebdfa5948fd61e39ed80d4e4187d6e3ad4a6164a2b8689125674d66e6e73ecca7dfe58a346c2a013c93b7d26f1e95d23405d11a016cefef120cf733054723e2e519756648e088186a194ca32f9051ea95304a1c15b7537579cedcf2109db8022f6876484b7d7b98a96ee1b26db45d036a86946445b453cdeb7ac5f12508e02e90030f6a1b095df70f49ae8655d0a68db81d7dd3de02bdb9c46d2725616d4138fa0347d"}}]}, 0x1380}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$P9_RLERRORu(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000160a0000000000000000000000000000090001007379c80c7a30000016000900020073797a30000000002c010000180a0000000b000000000000000000000900010073797a30000000000c00054000000000000000001400000010000100"/159], 0xa0}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000160a0000000000000000000000000000090001007379c80c7a30000016000900020073797a30000000002c010000180a0000000b000000000000000000000900010073797a30000000000c00054000000000000000001400000010000100"/159], 0xa0}}, 0x0) r8 = socket(0x2, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000ac0)={'syztnl1\x00', 0x0, 0x20, 0x8000, 0xfe61, 0x6, {{0x6, 0x4, 0x2, 0x19, 0x18, 0x65, 0x0, 0xf, 0x29, 0x0, @multicast2, @local, {[@rr={0x7, 0x3, 0x79}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000ac0)={'syztnl1\x00', 0x0, 0x20, 0x8000, 0xfe61, 0x6, {{0x6, 0x4, 0x2, 0x19, 0x18, 0x65, 0x0, 0xf, 0x29, 0x0, @multicast2, @local, {[@rr={0x7, 0x3, 0x79}]}}}}}) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 4.539826314s ago: executing program 4 (id=869): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000340)={r1, 0x5}, &(0x7f00000003c0)=0x8) 4.528025904s ago: executing program 4 (id=871): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000000480)='!sel\x87U\xb9\x10\n\xe9[b\xd7\\P\xc1\xde.\x1dml(:\xb7o\xb2O\xcb]0y', 0x6e93ebbbcc0884f2, 0x184, &(0x7f0000000440)={0x2000000000001fff, 0x1, 0x56, 0x3}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair(0x1f, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newtaction={0xb4, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0xa0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0xffffffffffffffff}, 0x1, r4}}]}, {0x4, 0xa}, {0xc}, {0x4d}}}, @m_mpls={0x4c, 0x2, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x1, 0x5, 0x10, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r2, &(0x7f00000005c0)=""/192, 0xffffffff, 0x100000000000000, 0x0) 3.608132421s ago: executing program 4 (id=882): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000001c0)=0x3) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{}], 0x1, 0xffffffffffbffff8) syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, r0) tkill(r0, 0x13) 3.23988372s ago: executing program 1 (id=890): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @multicast1}, 0x2, 0x1, 0x3, 0x7}}, 0x26) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r8}, 0x10) sendmsg$inet(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000006c0)="9d72", 0x2}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @broadcast}}}], 0x20}, 0x4000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r9}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 2.959942559s ago: executing program 1 (id=892): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x83, 0x4bc, &(0x7f0000000a40)="$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") r1 = open(&(0x7f0000000540)='./file0/file0\x00', 0x4000, 0x0) r2 = io_uring_setup(0x30d8, &(0x7f0000000340)={0x0, 0xd126}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000001df96a5b08b3a3bd3005504f71c0e4b97e23b91f5c93a9fdbf2de346cc4590b59edb921980f978e30db5ba0d7251f6c3", @ANYRES64=r2, @ANYRES8=r1, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) r4 = socket(0x10, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x100}, @TCA_CODEL_LIMIT={0x8}]}}]}, 0x44}}, 0x0) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000001c0)={0x1, 0x1, 0xa6, 0x0, 0x1}, 0xc) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000", @ANYRES32=0x1], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, 0x0, &(0x7f00000002c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) finit_module(r10, 0x0, 0x1) 2.642324908s ago: executing program 2 (id=893): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dc52) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x69) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x2000000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000200)={r3}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r4, 0x1, r2, 0x6, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000280)={r4, 0x0, 0x5}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 2.021802346s ago: executing program 1 (id=898): r0 = syz_open_procfs(0x0, &(0x7f0000000400)='stack\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x6, 0x0}, 0x8) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa1000000000e0007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000a1290000f0ffffff85200000030000008520000005000000cdb0ffff00000000f0d206000100000018400000f8ffffff0000000000000000"], &(0x7f0000000300)='syzkaller\x00', 0xff, 0xd2, &(0x7f0000000480)=""/210, 0x1f00, 0x4, '\x00', 0x0, @fallback=0x32, r4, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x2, 0x2, 0x8}, 0x10, r5, r4, 0x0, &(0x7f00000005c0)=[0x1, r4], 0x0, 0x10, 0xfffffff7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRES64=r3], &(0x7f0000000880)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x64842, 0x0) pwritev2(r7, &(0x7f0000000240), 0x1f, 0x100000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x14, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff}, @ldst={0x1, 0x1, 0x4, 0x1, 0xc, 0xc, 0x4}, @call={0x85, 0x0, 0x0, 0xcc}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000240)='GPL\x00', 0x1397, 0x1000, &(0x7f00000008c0)=""/4096, 0x41100, 0x8, '\x00', r1, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x9, 0x6, 0x9}, 0x10, r5, r0, 0x6, &(0x7f0000000340)=[r0, r0, r0, r0, r7], &(0x7f0000000380)=[{0x5, 0x2, 0x0, 0x3}, {0x2, 0x2, 0x2, 0x4}, {0x0, 0x3, 0x0, 0x4}, {0x0, 0x1, 0x2, 0x8}, {0x4, 0x4, 0x8, 0xc}, {0x0, 0x5, 0x7, 0xa}], 0x10, 0x3ff, @void, @value}, 0x94) pread64(r0, &(0x7f000001a240)=""/102386, 0x18ff2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) 1.844727296s ago: executing program 1 (id=901): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ef, &(0x7f0000000380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 1.736208375s ago: executing program 2 (id=902): sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000021000100000000000000000002000000faff000000000000080018004e284e220500160000000000080017"], 0x34}}, 0x0) 1.586197075s ago: executing program 2 (id=903): add_key$keyring(0x0, &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x800}, 0x18) syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f00000000c0)=[{r4, 0x1009}], 0x1, 0x8000007) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000240)="04ec1a7a", 0x4, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) shutdown(r6, 0x1) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) 1.453470434s ago: executing program 1 (id=904): bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0xc}, {0x6, 0x8}]}) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)) timer_create(0x1, &(0x7f0000000080)={0x0, 0x1e, 0x1}, &(0x7f0000000180)) 884.150613ms ago: executing program 2 (id=906): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r1, 0x0, 0x100000}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 880.929962ms ago: executing program 2 (id=907): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) recvmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001140)=""/7, 0x7}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001240)=""/249, 0xf9}, {&(0x7f0000001340)=""/232, 0xe8}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/140, 0x8c}], 0x8, &(0x7f00000000c0)=""/46, 0x2e}, 0x8}], 0x1, 0x10122, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kmem_cache_free\x00', r1, 0x0, 0x8}, 0x18) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r2, 0x4, 0x7c00) dup3(r3, r2, 0x0) r4 = socket(0x2b, 0x1, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000020601"], 0x14}}, 0x0) 876.413453ms ago: executing program 5 (id=908): r0 = syz_open_procfs(0x0, &(0x7f0000000400)='stack\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x6, 0x0}, 0x8) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa1000000000e0007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000a1290000f0ffffff85200000030000008520000005000000cdb0ffff00000000f0d206000100000018400000f8ffffff0000000000000000"], &(0x7f0000000300)='syzkaller\x00', 0xff, 0xd2, &(0x7f0000000480)=""/210, 0x1f00, 0x4, '\x00', 0x0, @fallback=0x32, r4, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x2, 0x2, 0x8}, 0x10, r5, r4, 0x0, &(0x7f00000005c0)=[0x1, r4], 0x0, 0x10, 0xfffffff7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRES64=r3], &(0x7f0000000880)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x64842, 0x0) pwritev2(r7, &(0x7f0000000240), 0x1f, 0x100000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x14, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff}, @ldst={0x1, 0x1, 0x4, 0x1, 0xc, 0xc, 0x4}, @call={0x85, 0x0, 0x0, 0xcc}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000240)='GPL\x00', 0x1397, 0x1000, &(0x7f00000008c0)=""/4096, 0x41100, 0x8, '\x00', r1, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x9, 0x6, 0x9}, 0x10, r5, r0, 0x6, &(0x7f0000000340)=[r0, r0, r0, r0, r7], &(0x7f0000000380)=[{0x5, 0x2, 0x0, 0x3}, {0x2, 0x2, 0x2, 0x4}, {0x0, 0x3, 0x0, 0x4}, {0x0, 0x1, 0x2, 0x8}, {0x4, 0x4, 0x8, 0xc}, {0x0, 0x5, 0x7, 0xa}], 0x10, 0x3ff, @void, @value}, 0x94) pread64(r0, &(0x7f000001a240)=""/102386, 0x18ff2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 773.664302ms ago: executing program 5 (id=912): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000180)=[@mss={0x2, 0x2}, @timestamp, @timestamp], 0x3) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x81) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54e, &(0x7f00000014c0)="$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") r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="980000001000011700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000700012800b0001006272696467650000600002800600270004"], 0x98}}, 0x0) 608.384501ms ago: executing program 5 (id=915): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x97, 0xd, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xba98575a95aeb70d) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000180)=r5) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}]}}) 604.178522ms ago: executing program 0 (id=916): ioperm(0x7, 0x4, 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x1, 0x0, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) semctl$GETVAL(0x0, 0x3, 0xc, 0x0) 580.273861ms ago: executing program 0 (id=917): sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44804}, 0x40000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 337.146311ms ago: executing program 0 (id=918): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000340)={r1, 0x5}, &(0x7f00000003c0)=0x8) 336.857401ms ago: executing program 0 (id=919): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r1, 0x0, 0x100000}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (fail_nth: 4) 336.651441ms ago: executing program 4 (id=920): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 322.803831ms ago: executing program 0 (id=921): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 306.80862ms ago: executing program 0 (id=922): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @multicast1}, 0x2, 0x1, 0x3, 0x7}}, 0x26) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r8}, 0x10) sendmsg$inet(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000006c0)="9d72", 0x2}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @broadcast}}}], 0x20}, 0x4000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r9}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 306.37055ms ago: executing program 4 (id=923): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x86042, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (fail_nth: 4) 276.998581ms ago: executing program 5 (id=924): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 48.13736ms ago: executing program 5 (id=925): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 47.83574ms ago: executing program 1 (id=926): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000000480)='!sel\x87U\xb9\x10\n\xe9[b\xd7\\P\xc1\xde.\x1dml(:\xb7o\xb2O\xcb]0y', 0x6e93ebbbcc0884f2, 0x184, &(0x7f0000000440)={0x2000000000001fff, 0x1, 0x56, 0x3}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair(0x1f, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newtaction={0xb4, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0xa0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0xffffffffffffffff}, 0x1, r4}}]}, {0x4, 0xa}, {0xc}, {0x4d}}}, @m_mpls={0x4c, 0x2, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x1, 0x5, 0x10, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r2, &(0x7f00000005c0)=""/192, 0xffffffff, 0x100000000000000, 0x0) 47.49758ms ago: executing program 4 (id=927): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) bind$netlink(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ipvlan0\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x80}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x9, 0xa, 0x4, 0x20, @local, @ipv4={'\x00', '\xff\xff', @local}, 0x7, 0x8000, 0x7776, 0x6}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4088840}, 0x40) unshare(0x2040400) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) unshare(0x2000000) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) 33.19611ms ago: executing program 5 (id=928): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0004000300000008000012010000000000f300", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) 0s ago: executing program 2 (id=929): prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='+}[p\xb3') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (fail_nth: 2) kernel console output (not intermixed with test programs): 0000000 ro without journal. Quota mode: writeback. [ 69.053306][ T4724] smc: net device bond0 applied user defined pnetid SYZ0 [ 69.060749][ T4724] smc: net device bond0 erased user defined pnetid SYZ0 [ 69.085498][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.101599][ T4735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.431'. [ 69.128024][ T4739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.432'. [ 69.128466][ T4737] FAULT_INJECTION: forcing a failure. [ 69.128466][ T4737] name failslab, interval 1, probability 0, space 0, times 0 [ 69.149723][ T4737] CPU: 1 UID: 0 PID: 4737 Comm: syz.1.430 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 69.149743][ T4737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 69.149752][ T4737] Call Trace: [ 69.149757][ T4737] [ 69.149763][ T4737] dump_stack_lvl+0xf2/0x150 [ 69.149863][ T4737] dump_stack+0x15/0x1a [ 69.149881][ T4737] should_fail_ex+0x24a/0x260 [ 69.149932][ T4737] should_failslab+0x8f/0xb0 [ 69.149954][ T4737] kmem_cache_alloc_node_noprof+0x59/0x320 [ 69.149982][ T4737] ? __alloc_skb+0x10b/0x310 [ 69.150049][ T4737] __alloc_skb+0x10b/0x310 [ 69.150069][ T4737] netlink_ack+0xef/0x4f0 [ 69.150097][ T4737] netlink_rcv_skb+0x19c/0x230 [ 69.150122][ T4737] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 69.150228][ T4737] xfrm_netlink_rcv+0x47/0x60 [ 69.150254][ T4737] netlink_unicast+0x599/0x670 [ 69.150354][ T4737] netlink_sendmsg+0x5cc/0x6e0 [ 69.150401][ T4737] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.150430][ T4737] __sock_sendmsg+0x140/0x180 [ 69.150446][ T4737] ____sys_sendmsg+0x312/0x410 [ 69.150543][ T4737] __sys_sendmsg+0x19d/0x230 [ 69.150622][ T4737] __x64_sys_sendmsg+0x46/0x50 [ 69.150648][ T4737] x64_sys_call+0x2734/0x2dc0 [ 69.150737][ T4737] do_syscall_64+0xc9/0x1c0 [ 69.150757][ T4737] ? clear_bhb_loop+0x55/0xb0 [ 69.150851][ T4737] ? clear_bhb_loop+0x55/0xb0 [ 69.150874][ T4737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.150897][ T4737] RIP: 0033:0x7f7bed85cda9 [ 69.150910][ T4737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.150924][ T4737] RSP: 002b:00007f7bebec1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.150953][ T4737] RAX: ffffffffffffffda RBX: 00007f7beda75fa0 RCX: 00007f7bed85cda9 [ 69.150963][ T4737] RDX: 0000000000000084 RSI: 0000000020000980 RDI: 0000000000000006 [ 69.150973][ T4737] RBP: 00007f7bebec1090 R08: 0000000000000000 R09: 0000000000000000 [ 69.150983][ T4737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.151028][ T4737] R13: 0000000000000000 R14: 00007f7beda75fa0 R15: 00007ffd4f14fe38 [ 69.151043][ T4737] [ 69.380260][ T4741] netlink: 16 bytes leftover after parsing attributes in process `syz.1.433'. [ 69.479905][ T4743] netlink: 16 bytes leftover after parsing attributes in process `syz.3.434'. [ 69.490534][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.565583][ T4753] loop4: detected capacity change from 0 to 2048 [ 69.621561][ T4753] loop4: p1 < > p4 [ 69.626092][ T4753] loop4: p4 size 8388608 extends beyond EOD, truncated [ 69.644204][ T4753] IPv6: NLM_F_CREATE should be specified when creating new route [ 69.675230][ T4755] loop4: detected capacity change from 0 to 512 [ 69.683827][ T4755] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.437: corrupted xattr block 255: invalid header [ 69.697698][ T4755] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 69.706507][ T4755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.719426][ T4755] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.437: corrupted xattr block 255: invalid header [ 69.732890][ T4755] SELinux: (dev loop4, type ext4) getxattr errno 117 [ 69.740102][ T4755] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.189272][ T4786] netlink: 16 bytes leftover after parsing attributes in process `syz.4.450'. [ 70.203902][ T4788] FAULT_INJECTION: forcing a failure. [ 70.203902][ T4788] name failslab, interval 1, probability 0, space 0, times 0 [ 70.216638][ T4788] CPU: 0 UID: 0 PID: 4788 Comm: syz.2.451 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 70.216716][ T4788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 70.216730][ T4788] Call Trace: [ 70.216737][ T4788] [ 70.216746][ T4788] dump_stack_lvl+0xf2/0x150 [ 70.216778][ T4788] dump_stack+0x15/0x1a [ 70.216803][ T4788] should_fail_ex+0x24a/0x260 [ 70.216840][ T4788] should_failslab+0x8f/0xb0 [ 70.216925][ T4788] __kmalloc_node_noprof+0xad/0x410 [ 70.216964][ T4788] ? vmemdup_user+0x42/0x1b0 [ 70.217023][ T4788] vmemdup_user+0x42/0x1b0 [ 70.217050][ T4788] map_get_next_key+0x140/0x310 [ 70.217083][ T4788] ? __sys_bpf+0x6c1/0x7a0 [ 70.217132][ T4788] __sys_bpf+0x6cb/0x7a0 [ 70.217175][ T4788] __x64_sys_bpf+0x43/0x50 [ 70.217200][ T4788] x64_sys_call+0x2914/0x2dc0 [ 70.217228][ T4788] do_syscall_64+0xc9/0x1c0 [ 70.217253][ T4788] ? clear_bhb_loop+0x55/0xb0 [ 70.217284][ T4788] ? clear_bhb_loop+0x55/0xb0 [ 70.217393][ T4788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.217475][ T4788] RIP: 0033:0x7fa35146cda9 [ 70.217491][ T4788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.217511][ T4788] RSP: 002b:00007fa34fad1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 70.217531][ T4788] RAX: ffffffffffffffda RBX: 00007fa351685fa0 RCX: 00007fa35146cda9 [ 70.217626][ T4788] RDX: 0000000000000020 RSI: 0000000020001600 RDI: 0000000000000004 [ 70.217689][ T4788] RBP: 00007fa34fad1090 R08: 0000000000000000 R09: 0000000000000000 [ 70.217703][ T4788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.217717][ T4788] R13: 0000000000000000 R14: 00007fa351685fa0 R15: 00007ffc32953138 [ 70.217737][ T4788] [ 70.413966][ T4790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.452'. [ 70.445172][ T4794] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.492441][ T4794] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.555195][ T4802] SELinux: syz.3.456 (4802) set checkreqprot to 1. This is no longer supported. [ 70.570343][ T4802] loop3: detected capacity change from 0 to 512 [ 70.577834][ T4794] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.594741][ T4802] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.456: Failed to acquire dquot type 1 [ 70.606698][ T4802] EXT4-fs (loop3): 1 truncate cleaned up [ 70.613197][ T4802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.626239][ T4802] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.637911][ T4794] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.642546][ T4802] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.456: Failed to acquire dquot type 1 [ 70.670065][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.693128][ T4794] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.708344][ T4794] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.720660][ T4794] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.732348][ T4794] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.797963][ T4807] FAULT_INJECTION: forcing a failure. [ 70.797963][ T4807] name failslab, interval 1, probability 0, space 0, times 0 [ 70.810669][ T4807] CPU: 0 UID: 0 PID: 4807 Comm: syz.3.457 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 70.810698][ T4807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 70.810709][ T4807] Call Trace: [ 70.810715][ T4807] [ 70.810744][ T4807] dump_stack_lvl+0xf2/0x150 [ 70.810774][ T4807] dump_stack+0x15/0x1a [ 70.810800][ T4807] should_fail_ex+0x24a/0x260 [ 70.810864][ T4807] should_failslab+0x8f/0xb0 [ 70.810888][ T4807] kmem_cache_alloc_noprof+0x52/0x320 [ 70.810922][ T4807] ? dup_fd+0x3a/0x6a0 [ 70.810974][ T4807] dup_fd+0x3a/0x6a0 [ 70.810999][ T4807] ? avc_has_perm+0xd4/0x160 [ 70.811032][ T4807] copy_files+0x98/0xe0 [ 70.811069][ T4807] copy_process+0xcbf/0x1fb0 [ 70.811141][ T4807] kernel_clone+0x167/0x5e0 [ 70.811169][ T4807] ? vfs_write+0x644/0x920 [ 70.811197][ T4807] __x64_sys_clone+0xe8/0x120 [ 70.811245][ T4807] x64_sys_call+0x2d7e/0x2dc0 [ 70.811300][ T4807] do_syscall_64+0xc9/0x1c0 [ 70.811330][ T4807] ? clear_bhb_loop+0x55/0xb0 [ 70.811362][ T4807] ? clear_bhb_loop+0x55/0xb0 [ 70.811391][ T4807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.811539][ T4807] RIP: 0033:0x7f1e068ccda9 [ 70.811556][ T4807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.811573][ T4807] RSP: 002b:00007f1e04f36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 70.811590][ T4807] RAX: ffffffffffffffda RBX: 00007f1e06ae5fa0 RCX: 00007f1e068ccda9 [ 70.811604][ T4807] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.811618][ T4807] RBP: 00007f1e04f37090 R08: 0000000000000000 R09: 0000000000000000 [ 70.811659][ T4807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.811673][ T4807] R13: 0000000000000000 R14: 00007f1e06ae5fa0 R15: 00007ffe69b2ed38 [ 70.811689][ T4807] [ 71.003026][ T4812] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.076452][ T4817] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 71.088773][ T4812] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4812 comm=syz.2.459 [ 71.261295][ T4824] lo speed is unknown, defaulting to 1000 [ 71.550491][ T4830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.464'. [ 71.651533][ T4834] loop3: detected capacity change from 0 to 128 [ 71.679955][ T4837] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 71.722804][ T4839] vhci_hcd: default hub control req: ff03 v0010 i0005 l5 [ 72.146759][ T4851] futex_wake_op: syz.4.474 tries to shift op by -1; fix this program [ 72.259302][ T4857] bond1: entered promiscuous mode [ 72.264627][ T4857] bond1: entered allmulticast mode [ 72.271487][ T4857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.283056][ T4857] bond1 (unregistering): Released all slaves [ 72.458751][ T4864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.478'. [ 72.610797][ T4870] loop4: detected capacity change from 0 to 512 [ 72.633697][ T4870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.646448][ T4870] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.658006][ T4870] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.481: Abort forced by user [ 72.668215][ T4870] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 72.695709][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.704899][ T4860] loop1: detected capacity change from 0 to 764 [ 72.758044][ T4880] loop3: detected capacity change from 0 to 512 [ 72.766926][ T4882] FAULT_INJECTION: forcing a failure. [ 72.766926][ T4882] name failslab, interval 1, probability 0, space 0, times 0 [ 72.779678][ T4882] CPU: 1 UID: 0 PID: 4882 Comm: syz.1.484 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 72.779710][ T4882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 72.779724][ T4882] Call Trace: [ 72.779733][ T4882] [ 72.779742][ T4882] dump_stack_lvl+0xf2/0x150 [ 72.779776][ T4882] dump_stack+0x15/0x1a [ 72.779882][ T4882] should_fail_ex+0x24a/0x260 [ 72.779934][ T4882] should_failslab+0x8f/0xb0 [ 72.779959][ T4882] kmem_cache_alloc_noprof+0x52/0x320 [ 72.779991][ T4882] ? hashtab_duplicate+0x10f/0x370 [ 72.780102][ T4882] hashtab_duplicate+0x10f/0x370 [ 72.780176][ T4882] ? __pfx_cond_bools_copy+0x10/0x10 [ 72.780202][ T4882] ? __pfx_cond_bools_destroy+0x10/0x10 [ 72.780228][ T4882] cond_policydb_dup+0xd9/0x720 [ 72.780259][ T4882] ? __kmalloc_node_track_caller_noprof+0x1e4/0x410 [ 72.780364][ T4882] ? security_set_bools+0x8b/0x350 [ 72.780391][ T4882] security_set_bools+0xa8/0x350 [ 72.780414][ T4882] ? sel_commit_bools_write+0x164/0x260 [ 72.780444][ T4882] sel_commit_bools_write+0x1de/0x260 [ 72.780476][ T4882] vfs_writev+0x3fa/0x880 [ 72.780507][ T4882] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 72.780544][ T4882] ? mutex_lock+0xd/0x40 [ 72.780603][ T4882] do_writev+0xf4/0x220 [ 72.780635][ T4882] __x64_sys_writev+0x45/0x50 [ 72.780661][ T4882] x64_sys_call+0x1fab/0x2dc0 [ 72.780759][ T4882] do_syscall_64+0xc9/0x1c0 [ 72.780789][ T4882] ? clear_bhb_loop+0x55/0xb0 [ 72.780823][ T4882] ? clear_bhb_loop+0x55/0xb0 [ 72.780855][ T4882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.780912][ T4882] RIP: 0033:0x7f7bed85cda9 [ 72.780941][ T4882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.780961][ T4882] RSP: 002b:00007f7bebec1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 72.780984][ T4882] RAX: ffffffffffffffda RBX: 00007f7beda75fa0 RCX: 00007f7bed85cda9 [ 72.781025][ T4882] RDX: 0000000000000002 RSI: 00000000200025c0 RDI: 0000000000000006 [ 72.781040][ T4882] RBP: 00007f7bebec1090 R08: 0000000000000000 R09: 0000000000000000 [ 72.781060][ T4882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.781074][ T4882] R13: 0000000000000000 R14: 00007f7beda75fa0 R15: 00007ffd4f14fe38 [ 72.781094][ T4882] [ 73.008354][ T4880] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #2: comm syz.3.483: corrupted xattr block 255: invalid header [ 73.022077][ T4880] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 73.022640][ T4880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.022686][ T4880] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #2: comm syz.3.483: corrupted xattr block 255: invalid header [ 73.024863][ T4880] SELinux: (dev loop3, type ext4) getxattr errno 117 [ 73.064254][ T4880] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.097905][ T4890] veth1_macvtap: left promiscuous mode [ 73.103708][ T4890] macsec0: entered promiscuous mode [ 73.163354][ T4896] FAULT_INJECTION: forcing a failure. [ 73.163354][ T4896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.176636][ T4896] CPU: 1 UID: 0 PID: 4896 Comm: syz.0.490 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 73.176712][ T4896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 73.176728][ T4896] Call Trace: [ 73.176734][ T4896] [ 73.176742][ T4896] dump_stack_lvl+0xf2/0x150 [ 73.176878][ T4896] dump_stack+0x15/0x1a [ 73.176899][ T4896] should_fail_ex+0x24a/0x260 [ 73.176933][ T4896] should_fail+0xb/0x10 [ 73.177041][ T4896] should_fail_usercopy+0x1a/0x20 [ 73.177072][ T4896] _copy_from_user+0x1c/0xa0 [ 73.177095][ T4896] copy_msghdr_from_user+0x54/0x2a0 [ 73.177114][ T4896] ? __fget_files+0x17c/0x1c0 [ 73.177143][ T4896] __sys_recvmsg+0x140/0x260 [ 73.177239][ T4896] __x64_sys_recvmsg+0x46/0x50 [ 73.177269][ T4896] x64_sys_call+0xc64/0x2dc0 [ 73.177294][ T4896] do_syscall_64+0xc9/0x1c0 [ 73.177321][ T4896] ? clear_bhb_loop+0x55/0xb0 [ 73.177406][ T4896] ? clear_bhb_loop+0x55/0xb0 [ 73.177432][ T4896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.177523][ T4896] RIP: 0033:0x7f5c7251cda9 [ 73.177538][ T4896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.177555][ T4896] RSP: 002b:00007f5c70b81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 73.177574][ T4896] RAX: ffffffffffffffda RBX: 00007f5c72735fa0 RCX: 00007f5c7251cda9 [ 73.177589][ T4896] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 73.177602][ T4896] RBP: 00007f5c70b81090 R08: 0000000000000000 R09: 0000000000000000 [ 73.177663][ T4896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.177674][ T4896] R13: 0000000000000000 R14: 00007f5c72735fa0 R15: 00007ffe8df4b918 [ 73.177692][ T4896] [ 73.361368][ T4899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.489'. [ 73.370399][ T29] kauditd_printk_skb: 572 callbacks suppressed [ 73.370415][ T29] audit: type=1326 audit(1738413596.335:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4887 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b87dcda9 code=0x7ffc0000 [ 73.405991][ T29] audit: type=1326 audit(1738413596.355:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.3.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e068ccda9 code=0x7ffc0000 [ 73.429669][ T29] audit: type=1326 audit(1738413596.355:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.3.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e068ccda9 code=0x7ffc0000 [ 73.453177][ T29] audit: type=1326 audit(1738413596.355:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.3.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f1e068ccda9 code=0x7ffc0000 [ 73.456897][ T4889] futex_wake_op: syz.4.486 tries to shift op by -1; fix this program [ 73.476695][ T29] audit: type=1326 audit(1738413596.355:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.3.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e068ccda9 code=0x7ffc0000 [ 73.508171][ T29] audit: type=1326 audit(1738413596.355:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.3.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e068ccda9 code=0x7ffc0000 [ 73.525762][ T4904] FAULT_INJECTION: forcing a failure. [ 73.525762][ T4904] name failslab, interval 1, probability 0, space 0, times 0 [ 73.531642][ T29] audit: type=1326 audit(1738413596.355:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.3.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1e068ccda9 code=0x7ffc0000 [ 73.531669][ T29] audit: type=1400 audit(1738413596.375:3784): avc: denied { create } for pid=4901 comm="syz.1.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 73.544325][ T4904] CPU: 0 UID: 0 PID: 4904 Comm: syz.0.493 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 73.544387][ T4904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 73.544453][ T4904] Call Trace: [ 73.544461][ T4904] [ 73.544478][ T4904] dump_stack_lvl+0xf2/0x150 [ 73.544512][ T4904] dump_stack+0x15/0x1a [ 73.544537][ T4904] should_fail_ex+0x24a/0x260 [ 73.544624][ T4904] should_failslab+0x8f/0xb0 [ 73.544649][ T4904] kmem_cache_alloc_noprof+0x52/0x320 [ 73.544763][ T4904] ? audit_log_start+0x34c/0x6b0 [ 73.544802][ T4904] audit_log_start+0x34c/0x6b0 [ 73.544838][ T4904] ? io_sqpoll_wait_sq+0x172/0x1b0 [ 73.544947][ T4904] audit_seccomp+0x4b/0x130 [ 73.544980][ T4904] __seccomp_filter+0x6fa/0x1180 [ 73.545007][ T4904] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 73.545059][ T4904] ? vfs_write+0x644/0x920 [ 73.545079][ T4904] ? putname+0xcf/0xf0 [ 73.545178][ T4904] __secure_computing+0x9f/0x1c0 [ 73.545204][ T4904] syscall_trace_enter+0xd1/0x1f0 [ 73.545234][ T4904] do_syscall_64+0xaa/0x1c0 [ 73.545264][ T4904] ? clear_bhb_loop+0x55/0xb0 [ 73.545390][ T4904] ? clear_bhb_loop+0x55/0xb0 [ 73.545423][ T4904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.545471][ T4904] RIP: 0033:0x7f5c7251b7bc [ 73.545489][ T4904] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 73.545511][ T4904] RSP: 002b:00007f5c70b81030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 73.545533][ T4904] RAX: ffffffffffffffda RBX: 00007f5c72735fa0 RCX: 00007f5c7251b7bc [ 73.545548][ T4904] RDX: 000000000000000f RSI: 00007f5c70b810a0 RDI: 0000000000000004 [ 73.545562][ T4904] RBP: 00007f5c70b81090 R08: 0000000000000000 R09: 0000000000000000 [ 73.545576][ T4904] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 73.545590][ T4904] R13: 0000000000000000 R14: 00007f5c72735fa0 R15: 00007ffe8df4b918 [ 73.545612][ T4904] [ 73.545642][ T4904] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 73.567545][ T29] audit: type=1400 audit(1738413596.375:3785): avc: denied { mount } for pid=4901 comm="syz.1.492" name="/" dev="configfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 73.910822][ T4922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.499'. [ 73.953607][ T4927] sd 0:0:1:0: device reset [ 74.005520][ T4934] loop2: detected capacity change from 0 to 512 [ 74.012649][ T4934] EXT4-fs: inline encryption not supported [ 74.019393][ T4934] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.028370][ T4934] EXT4-fs (loop2): bad geometry: block count 589952 exceeds size of device (128 blocks) [ 74.057835][ T4934] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 74.067479][ T4934] 9pnet_fd: Insufficient options for proto=fd [ 74.241257][ T4953] netlink: 100 bytes leftover after parsing attributes in process `syz.0.511'. [ 74.342581][ T4967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.515'. [ 74.666217][ T4971] lo speed is unknown, defaulting to 1000 [ 74.928953][ T4988] netlink: 268 bytes leftover after parsing attributes in process `syz.3.522'. [ 75.078555][ T4999] netlink: 'syz.2.527': attribute type 3 has an invalid length. [ 75.249787][ T5002] futex_wake_op: syz.0.528 tries to shift op by -1; fix this program [ 75.356466][ T5004] futex_wake_op: syz.0.529 tries to shift op by -1; fix this program [ 75.689771][ T5025] FAULT_INJECTION: forcing a failure. [ 75.689771][ T5025] name failslab, interval 1, probability 0, space 0, times 0 [ 75.702491][ T5025] CPU: 0 UID: 0 PID: 5025 Comm: syz.2.537 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 75.702515][ T5025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 75.702614][ T5025] Call Trace: [ 75.702622][ T5025] [ 75.702630][ T5025] dump_stack_lvl+0xf2/0x150 [ 75.702663][ T5025] dump_stack+0x15/0x1a [ 75.702760][ T5025] should_fail_ex+0x24a/0x260 [ 75.702790][ T5025] should_failslab+0x8f/0xb0 [ 75.702812][ T5025] kmem_cache_alloc_node_noprof+0x59/0x320 [ 75.702912][ T5025] ? __alloc_skb+0x10b/0x310 [ 75.702962][ T5025] __alloc_skb+0x10b/0x310 [ 75.702983][ T5025] netlink_dump+0x157/0x7e0 [ 75.703010][ T5025] ? __skb_datagram_iter+0x42b/0x610 [ 75.703040][ T5025] netlink_recvmsg+0x427/0x740 [ 75.703075][ T5025] ? __pfx_netlink_recvmsg+0x10/0x10 [ 75.703103][ T5025] sock_recvmsg+0x13f/0x170 [ 75.703120][ T5025] ____sys_recvmsg+0xf9/0x280 [ 75.703170][ T5025] do_recvmmsg+0x2aa/0x6d0 [ 75.703209][ T5025] __x64_sys_recvmmsg+0xe2/0x170 [ 75.703323][ T5025] x64_sys_call+0x2a9a/0x2dc0 [ 75.703424][ T5025] do_syscall_64+0xc9/0x1c0 [ 75.703446][ T5025] ? clear_bhb_loop+0x55/0xb0 [ 75.703545][ T5025] ? clear_bhb_loop+0x55/0xb0 [ 75.703568][ T5025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.703665][ T5025] RIP: 0033:0x7fa35146cda9 [ 75.703678][ T5025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.703693][ T5025] RSP: 002b:00007fa34fad1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 75.703708][ T5025] RAX: ffffffffffffffda RBX: 00007fa351685fa0 RCX: 00007fa35146cda9 [ 75.703718][ T5025] RDX: 0000000000000344 RSI: 0000000020005c80 RDI: 0000000000000003 [ 75.703728][ T5025] RBP: 00007fa34fad1090 R08: 0000000000000000 R09: 0000000000000000 [ 75.703779][ T5025] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000001 [ 75.703788][ T5025] R13: 0000000000000000 R14: 00007fa351685fa0 R15: 00007ffc32953138 [ 75.703804][ T5025] [ 75.973594][ T5033] syz.2.541 (5033): attempted to duplicate a private mapping with mremap. This is not supported. [ 75.985194][ T5031] loop4: detected capacity change from 0 to 512 [ 75.998051][ T5033] bridge0: entered promiscuous mode [ 76.004703][ T5033] vlan2: entered promiscuous mode [ 76.031569][ T5033] bridge0: left promiscuous mode [ 76.085954][ T5031] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.540: corrupted xattr block 255: invalid header [ 76.099319][ T5031] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 76.107808][ T5031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.121019][ T5031] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.540: corrupted xattr block 255: invalid header [ 76.134392][ T5031] SELinux: (dev loop4, type ext4) getxattr errno 117 [ 76.143106][ T5031] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.290565][ T5049] siw: device registration error -23 [ 76.379027][ T5051] futex_wake_op: syz.2.547 tries to shift op by -1; fix this program [ 76.436571][ T5053] loop2: detected capacity change from 0 to 512 [ 76.542154][ T5055] FAULT_INJECTION: forcing a failure. [ 76.542154][ T5055] name failslab, interval 1, probability 0, space 0, times 0 [ 76.555511][ T5055] CPU: 1 UID: 0 PID: 5055 Comm: syz.0.549 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 76.555575][ T5055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 76.555631][ T5055] Call Trace: [ 76.555639][ T5055] [ 76.555648][ T5055] dump_stack_lvl+0xf2/0x150 [ 76.555678][ T5055] dump_stack+0x15/0x1a [ 76.555698][ T5055] should_fail_ex+0x24a/0x260 [ 76.555790][ T5055] should_failslab+0x8f/0xb0 [ 76.555820][ T5055] kmem_cache_alloc_noprof+0x52/0x320 [ 76.555902][ T5055] ? audit_log_start+0x34c/0x6b0 [ 76.555938][ T5055] audit_log_start+0x34c/0x6b0 [ 76.556024][ T5055] audit_seccomp+0x4b/0x130 [ 76.556056][ T5055] __seccomp_filter+0x6fa/0x1180 [ 76.556083][ T5055] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 76.556164][ T5055] ? vfs_write+0x644/0x920 [ 76.556183][ T5055] ? __schedule+0x75b/0x990 [ 76.556216][ T5055] __secure_computing+0x9f/0x1c0 [ 76.556240][ T5055] syscall_trace_enter+0xd1/0x1f0 [ 76.556271][ T5055] do_syscall_64+0xaa/0x1c0 [ 76.556378][ T5055] ? clear_bhb_loop+0x55/0xb0 [ 76.556410][ T5055] ? clear_bhb_loop+0x55/0xb0 [ 76.556436][ T5055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.556471][ T5055] RIP: 0033:0x7f5c7251cda9 [ 76.556489][ T5055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.556510][ T5055] RSP: 002b:00007f5c70b81038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 76.556532][ T5055] RAX: ffffffffffffffda RBX: 00007f5c72735fa0 RCX: 00007f5c7251cda9 [ 76.556544][ T5055] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff [ 76.556558][ T5055] RBP: 00007f5c70b81090 R08: 0000000000000000 R09: 0000000000000000 [ 76.556572][ T5055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.556585][ T5055] R13: 0000000000000000 R14: 00007f5c72735fa0 R15: 00007ffe8df4b918 [ 76.556622][ T5055] [ 76.777041][ T5053] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.548: corrupted xattr block 255: invalid header [ 76.790652][ T5053] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 76.802121][ T5061] netlink: 16 bytes leftover after parsing attributes in process `syz.4.551'. [ 76.807069][ T5053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.824516][ T5053] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.548: corrupted xattr block 255: invalid header [ 76.839090][ T5053] SELinux: (dev loop2, type ext4) getxattr errno 117 [ 76.847519][ T5053] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.940254][ T5068] loop2: detected capacity change from 0 to 512 [ 76.953979][ T5068] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.553: Failed to acquire dquot type 1 [ 76.965977][ T5068] EXT4-fs (loop2): 1 truncate cleaned up [ 76.972158][ T5068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.985545][ T5068] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.007223][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.070882][ T5081] loop2: detected capacity change from 0 to 512 [ 77.087117][ T5081] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 77.095724][ T5081] EXT4-fs (loop2): orphan cleanup on readonly fs [ 77.102855][ T5081] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 77.111449][ T5086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.559'. [ 77.121803][ T5081] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 77.133735][ T5081] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.557: bg 0: block 40: padding at end of block bitmap is not set [ 77.148167][ T5081] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 77.157986][ T5081] EXT4-fs (loop2): 1 truncate cleaned up [ 77.164115][ T5081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.184332][ T5081] smc: net device bond0 applied user defined pnetid SYZ0 [ 77.192785][ T5081] smc: net device bond0 erased user defined pnetid SYZ0 [ 77.208937][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.252689][ T5090] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 3710. macoff=82 [ 77.263600][ T5090] FAULT_INJECTION: forcing a failure. [ 77.263600][ T5090] name failslab, interval 1, probability 0, space 0, times 0 [ 77.276432][ T5090] CPU: 0 UID: 0 PID: 5090 Comm: syz.2.561 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 77.276526][ T5090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 77.276538][ T5090] Call Trace: [ 77.276545][ T5090] [ 77.276552][ T5090] dump_stack_lvl+0xf2/0x150 [ 77.276584][ T5090] dump_stack+0x15/0x1a [ 77.276631][ T5090] should_fail_ex+0x24a/0x260 [ 77.276672][ T5090] should_failslab+0x8f/0xb0 [ 77.276702][ T5090] kmem_cache_alloc_node_noprof+0x59/0x320 [ 77.276833][ T5090] ? __alloc_skb+0x10b/0x310 [ 77.276863][ T5090] __alloc_skb+0x10b/0x310 [ 77.276922][ T5090] mgmt_cmd_status+0x38/0x1e0 [ 77.277036][ T5090] ? sk_skb_reason_drop+0xba/0x290 [ 77.277066][ T5090] hci_mgmt_cmd+0x508/0x8c0 [ 77.277107][ T5090] ? __ww_mutex_lock+0x640/0xfd0 [ 77.277139][ T5090] hci_sock_sendmsg+0x50e/0x920 [ 77.277168][ T5090] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 77.277237][ T5090] __sock_sendmsg+0x140/0x180 [ 77.277297][ T5090] sock_write_iter+0x15e/0x1a0 [ 77.277346][ T5090] vfs_write+0x77b/0x920 [ 77.277368][ T5090] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 77.277402][ T5090] ? __pfx_sock_write_iter+0x10/0x10 [ 77.277474][ T5090] ksys_write+0xe8/0x1b0 [ 77.277498][ T5090] __x64_sys_write+0x42/0x50 [ 77.277518][ T5090] x64_sys_call+0x287e/0x2dc0 [ 77.277613][ T5090] do_syscall_64+0xc9/0x1c0 [ 77.277639][ T5090] ? clear_bhb_loop+0x55/0xb0 [ 77.277672][ T5090] ? clear_bhb_loop+0x55/0xb0 [ 77.277765][ T5090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.277868][ T5090] RIP: 0033:0x7fa35146cda9 [ 77.277897][ T5090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.277929][ T5090] RSP: 002b:00007fa34fad1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.277951][ T5090] RAX: ffffffffffffffda RBX: 00007fa351685fa0 RCX: 00007fa35146cda9 [ 77.277964][ T5090] RDX: 0000000000000006 RSI: 0000000020001280 RDI: 0000000000000006 [ 77.277978][ T5090] RBP: 00007fa34fad1090 R08: 0000000000000000 R09: 0000000000000000 [ 77.277991][ T5090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.278001][ T5090] R13: 0000000000000000 R14: 00007fa351685fa0 R15: 00007ffc32953138 [ 77.278016][ T5090] [ 77.562970][ T5094] sg_write: data in/out 1891168738/14 bytes for SCSI command 0x0-- guessing data in; [ 77.562970][ T5094] program syz.2.563 not setting count and/or reply_len properly [ 77.616394][ T5094] loop2: detected capacity change from 0 to 256 [ 77.633344][ T5094] FAT-fs (loop2): Directory bread(block 64) failed [ 77.649196][ T5094] FAT-fs (loop2): Directory bread(block 65) failed [ 77.659162][ T5094] FAT-fs (loop2): Directory bread(block 66) failed [ 77.667544][ T5094] FAT-fs (loop2): Directory bread(block 67) failed [ 77.677054][ T5099] netlink: 16 bytes leftover after parsing attributes in process `syz.4.566'. [ 77.681408][ T5094] FAT-fs (loop2): Directory bread(block 68) failed [ 77.692865][ T5094] FAT-fs (loop2): Directory bread(block 69) failed [ 77.699505][ T5094] FAT-fs (loop2): Directory bread(block 70) failed [ 77.706890][ T5094] FAT-fs (loop2): Directory bread(block 71) failed [ 77.714976][ T5094] FAT-fs (loop2): Directory bread(block 72) failed [ 77.721851][ T5094] FAT-fs (loop2): Directory bread(block 73) failed [ 77.758203][ T5104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.568'. [ 77.898398][ T5118] pim6reg1: entered promiscuous mode [ 77.963044][ T5152] netlink: 16 bytes leftover after parsing attributes in process `syz.1.576'. [ 78.530909][ T5154] loop4: detected capacity change from 0 to 512 [ 78.553859][ T5154] __quota_error: 697 callbacks suppressed [ 78.553874][ T5154] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 78.569714][ T5154] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 78.580289][ T5154] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.577: Failed to acquire dquot type 1 [ 78.592308][ T5154] EXT4-fs (loop4): 1 truncate cleaned up [ 78.598336][ T5154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.611639][ T5154] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.632460][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.654486][ T5158] loop4: detected capacity change from 0 to 512 [ 78.661625][ T5158] EXT4-fs: Ignoring removed i_version option [ 78.668665][ T5158] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 78.679255][ T5158] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 78.687515][ T5158] System zones: 1-12 [ 78.691609][ T5158] EXT4-fs (loop4): orphan cleanup on readonly fs [ 78.698232][ T5158] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.578: invalid indirect mapped block 12 (level 1) [ 78.711719][ T5158] EXT4-fs (loop4): Remounting filesystem read-only [ 78.718310][ T5158] EXT4-fs (loop4): 1 truncate cleaned up [ 78.724429][ T5158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 78.736480][ T5158] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 78.743866][ T5158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 78.760096][ T5158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'. [ 78.808495][ T5163] syzkaller1: entered promiscuous mode [ 78.814769][ T5163] syzkaller1: entered allmulticast mode [ 78.824521][ T5158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'. [ 78.862718][ T5169] FAULT_INJECTION: forcing a failure. [ 78.862718][ T5169] name failslab, interval 1, probability 0, space 0, times 0 [ 78.876091][ T5169] CPU: 1 UID: 0 PID: 5169 Comm: syz.2.584 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 78.876116][ T5169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 78.876147][ T5169] Call Trace: [ 78.876155][ T5169] [ 78.876166][ T5169] dump_stack_lvl+0xf2/0x150 [ 78.876216][ T5169] dump_stack+0x15/0x1a [ 78.876248][ T5169] should_fail_ex+0x24a/0x260 [ 78.876327][ T5169] ? genl_start+0x11e/0x3a0 [ 78.876356][ T5169] should_failslab+0x8f/0xb0 [ 78.876388][ T5169] __kmalloc_cache_noprof+0x4e/0x320 [ 78.876459][ T5169] genl_start+0x11e/0x3a0 [ 78.876579][ T5169] __netlink_dump_start+0x32a/0x520 [ 78.876622][ T5169] genl_rcv_msg+0x4e5/0x6c0 [ 78.876658][ T5169] ? __pfx_nl80211_dump_wiphy+0x10/0x10 [ 78.876710][ T5169] ? __pfx_nl80211_dump_wiphy_done+0x10/0x10 [ 78.876803][ T5169] ? __pfx_genl_start+0x10/0x10 [ 78.876824][ T5169] ? __pfx_genl_dumpit+0x10/0x10 [ 78.876846][ T5169] ? __pfx_genl_done+0x10/0x10 [ 78.876930][ T5169] netlink_rcv_skb+0x12c/0x230 [ 78.877036][ T5169] ? __pfx_genl_rcv_msg+0x10/0x10 [ 78.877074][ T5169] genl_rcv+0x28/0x40 [ 78.877099][ T5169] netlink_unicast+0x599/0x670 [ 78.877162][ T5169] netlink_sendmsg+0x5cc/0x6e0 [ 78.877268][ T5169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.877303][ T5169] __sock_sendmsg+0x140/0x180 [ 78.877323][ T5169] ____sys_sendmsg+0x312/0x410 [ 78.877413][ T5169] __sys_sendmsg+0x19d/0x230 [ 78.877534][ T5169] __x64_sys_sendmsg+0x46/0x50 [ 78.877562][ T5169] x64_sys_call+0x2734/0x2dc0 [ 78.877603][ T5169] do_syscall_64+0xc9/0x1c0 [ 78.877630][ T5169] ? clear_bhb_loop+0x55/0xb0 [ 78.877656][ T5169] ? clear_bhb_loop+0x55/0xb0 [ 78.877757][ T5169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.877855][ T5169] RIP: 0033:0x7fa35146cda9 [ 78.877872][ T5169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.877948][ T5169] RSP: 002b:00007fa34fad1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.877969][ T5169] RAX: ffffffffffffffda RBX: 00007fa351685fa0 RCX: 00007fa35146cda9 [ 78.877983][ T5169] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000005 [ 78.877996][ T5169] RBP: 00007fa34fad1090 R08: 0000000000000000 R09: 0000000000000000 [ 78.878009][ T5169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.878022][ T5169] R13: 0000000000000000 R14: 00007fa351685fa0 R15: 00007ffc32953138 [ 78.878099][ T5169] [ 79.132432][ T29] audit: type=1400 audit(1738413602.105:4474): avc: denied { ioctl } for pid=5171 comm="syz.4.583" path="socket:[11810]" dev="sockfs" ino=11810 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.133514][ T5172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.583'. [ 79.185907][ T5176] lo speed is unknown, defaulting to 1000 [ 79.230835][ T5175] loop2: detected capacity change from 0 to 2048 [ 79.261220][ T5175] /dev/loop2: Can't open blockdev [ 79.266948][ T29] audit: type=1400 audit(1738413602.225:4475): avc: denied { read } for pid=5181 comm="syz.1.587" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.290738][ T29] audit: type=1400 audit(1738413602.225:4476): avc: denied { open } for pid=5181 comm="syz.1.587" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.314905][ T29] audit: type=1400 audit(1738413602.235:4477): avc: denied { ioctl } for pid=5181 comm="syz.1.587" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.340230][ T29] audit: type=1400 audit(1738413602.295:4478): avc: denied { getopt } for pid=5181 comm="syz.1.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.365151][ T5185] loop1: detected capacity change from 0 to 128 [ 79.402133][ T5175] loop2: detected capacity change from 0 to 2048 [ 79.408798][ T5175] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.415375][ T5175] EXT4-fs: Ignoring removed i_version option [ 79.454053][ T5175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.502414][ T5175] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 79.509156][ T5175] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 79.517643][ T5175] vhci_hcd vhci_hcd.0: Device attached [ 79.525826][ T5200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.593'. [ 79.530374][ T5182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.587'. [ 79.544221][ T5200] FAULT_INJECTION: forcing a failure. [ 79.544221][ T5200] name failslab, interval 1, probability 0, space 0, times 0 [ 79.545493][ T5182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.556888][ T5200] CPU: 0 UID: 0 PID: 5200 Comm: syz.0.593 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 79.556915][ T5200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 79.556929][ T5200] Call Trace: [ 79.556966][ T5200] [ 79.556976][ T5200] dump_stack_lvl+0xf2/0x150 [ 79.557059][ T5200] dump_stack+0x15/0x1a [ 79.557085][ T5200] should_fail_ex+0x24a/0x260 [ 79.557124][ T5200] ? sctp_association_new+0x71/0x1130 [ 79.557156][ T5200] should_failslab+0x8f/0xb0 [ 79.557258][ T5200] __kmalloc_cache_noprof+0x4e/0x320 [ 79.557299][ T5200] ? __list_add_valid_or_report+0x38/0xe0 [ 79.557329][ T5200] sctp_association_new+0x71/0x1130 [ 79.557425][ T5200] sctp_connect_new_asoc+0x1b0/0x3b0 [ 79.557460][ T5200] sctp_sendmsg+0xf05/0x1920 [ 79.557494][ T5200] ? __pfx_sctp_sendmsg+0x10/0x10 [ 79.557522][ T5200] inet_sendmsg+0xc5/0xd0 [ 79.557554][ T5200] __sock_sendmsg+0x102/0x180 [ 79.557646][ T5200] __sys_sendto+0x1a8/0x230 [ 79.557694][ T5200] __x64_sys_sendto+0x78/0x90 [ 79.557725][ T5200] x64_sys_call+0x29fa/0x2dc0 [ 79.557830][ T5200] do_syscall_64+0xc9/0x1c0 [ 79.557875][ T5200] ? clear_bhb_loop+0x55/0xb0 [ 79.557908][ T5200] ? clear_bhb_loop+0x55/0xb0 [ 79.558010][ T5200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.558043][ T5200] RIP: 0033:0x7f5c7251cda9 [ 79.558061][ T5200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.558083][ T5200] RSP: 002b:00007f5c70b81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 79.558132][ T5200] RAX: ffffffffffffffda RBX: 00007f5c72735fa0 RCX: 00007f5c7251cda9 [ 79.558147][ T5200] RDX: 0000000000034000 RSI: 0000000020000500 RDI: 000000000000000b [ 79.558162][ T5200] RBP: 00007f5c70b81090 R08: 0000000020000140 R09: 000000000000001c [ 79.558176][ T5200] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 79.558191][ T5200] R13: 0000000000000000 R14: 00007f5c72735fa0 R15: 00007ffe8df4b918 [ 79.558218][ T5200] [ 79.558625][ T5197] vhci_hcd: connection closed [ 79.564401][ T5182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.575391][ T5144] vhci_hcd: stop threads [ 79.780454][ T5144] vhci_hcd: release socket [ 79.784955][ T5144] vhci_hcd: disconnect device [ 79.793697][ T5182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.801233][ T5182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.821611][ T3373] usb 6-1: enqueue for inactive port 0 [ 80.032040][ T3373] usb 6-1: enqueue for inactive port 0 [ 80.075118][ T5213] siw: device registration error -23 [ 80.103433][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.253288][ T29] audit: type=1400 audit(1738413603.215:4479): avc: denied { write } for pid=5216 comm=4CA9F285779DFEE7715A403908146A scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 80.347058][ T5219] FAULT_INJECTION: forcing a failure. [ 80.347058][ T5219] name failslab, interval 1, probability 0, space 0, times 0 [ 80.360527][ T5219] CPU: 1 UID: 0 PID: 5219 Comm: syz.1.599 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 80.360556][ T5219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 80.360572][ T5219] Call Trace: [ 80.360591][ T5219] [ 80.360599][ T5219] dump_stack_lvl+0xf2/0x150 [ 80.360633][ T5219] dump_stack+0x15/0x1a [ 80.360656][ T5219] should_fail_ex+0x24a/0x260 [ 80.360707][ T5219] should_failslab+0x8f/0xb0 [ 80.360765][ T5219] __kmalloc_noprof+0xab/0x3f0 [ 80.360804][ T5219] ? security_prepare_creds+0x53/0x120 [ 80.360832][ T5219] security_prepare_creds+0x53/0x120 [ 80.360856][ T5219] prepare_creds+0x346/0x480 [ 80.360917][ T5219] copy_creds+0x90/0x3f0 [ 80.360954][ T5219] copy_process+0x64b/0x1fb0 [ 80.360989][ T5219] ? 0xffffffff81000000 [ 80.361005][ T5219] ? selinux_file_permission+0x22a/0x360 [ 80.361030][ T5219] ? __rcu_read_unlock+0x4e/0x70 [ 80.361121][ T5219] kernel_clone+0x167/0x5e0 [ 80.361217][ T5219] __x64_sys_clone+0xe8/0x120 [ 80.361252][ T5219] x64_sys_call+0x2d7e/0x2dc0 [ 80.361413][ T5219] do_syscall_64+0xc9/0x1c0 [ 80.361443][ T5219] ? clear_bhb_loop+0x55/0xb0 [ 80.361474][ T5219] ? clear_bhb_loop+0x55/0xb0 [ 80.361546][ T5219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.361574][ T5219] RIP: 0033:0x7f7bed85cda9 [ 80.361595][ T5219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.361664][ T5219] RSP: 002b:00007f7bebec0fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 80.361688][ T5219] RAX: ffffffffffffffda RBX: 00007f7beda75fa0 RCX: 00007f7bed85cda9 [ 80.361735][ T5219] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 80.361746][ T5219] RBP: 00007f7bebec1090 R08: 0000000000000000 R09: 0000000000000000 [ 80.361758][ T5219] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 80.361853][ T5219] R13: 0000000000000000 R14: 00007f7beda75fa0 R15: 00007ffd4f14fe38 [ 80.361875][ T5219] [ 80.592026][ T5223] loop4: detected capacity change from 0 to 512 [ 80.612551][ T5223] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 80.626167][ T5223] EXT4-fs (loop4): orphan cleanup on readonly fs [ 80.638549][ T5223] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 80.657515][ T5223] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 80.666215][ T5223] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.600: bg 0: block 40: padding at end of block bitmap is not set [ 80.683366][ T29] audit: type=1400 audit(1738413603.635:4480): avc: denied { create } for pid=5227 comm="syz.1.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.710530][ T5223] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 80.723187][ T5223] EXT4-fs (loop4): 1 truncate cleaned up [ 80.729213][ T5223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.744706][ T5231] FAULT_INJECTION: forcing a failure. [ 80.744706][ T5231] name failslab, interval 1, probability 0, space 0, times 0 [ 80.745457][ T5229] netlink: 'syz.1.603': attribute type 4 has an invalid length. [ 80.758202][ T5231] CPU: 1 UID: 0 PID: 5231 Comm: syz.0.605 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 80.758241][ T5231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 80.758257][ T5231] Call Trace: [ 80.758264][ T5231] [ 80.758351][ T5231] dump_stack_lvl+0xf2/0x150 [ 80.758385][ T5231] dump_stack+0x15/0x1a [ 80.758411][ T5231] should_fail_ex+0x24a/0x260 [ 80.758486][ T5231] should_failslab+0x8f/0xb0 [ 80.758525][ T5231] kmem_cache_alloc_node_noprof+0x59/0x320 [ 80.758567][ T5231] ? __alloc_skb+0x10b/0x310 [ 80.758597][ T5231] __alloc_skb+0x10b/0x310 [ 80.758623][ T5231] ? audit_log_start+0x34c/0x6b0 [ 80.758688][ T5231] audit_log_start+0x368/0x6b0 [ 80.758729][ T5231] audit_seccomp+0x4b/0x130 [ 80.758778][ T5231] __seccomp_filter+0x6fa/0x1180 [ 80.758805][ T5231] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 80.758869][ T5231] ? vfs_write+0x644/0x920 [ 80.758895][ T5231] ? putname+0xcf/0xf0 [ 80.758935][ T5231] __secure_computing+0x9f/0x1c0 [ 80.758962][ T5231] syscall_trace_enter+0xd1/0x1f0 [ 80.759037][ T5231] ? fpregs_assert_state_consistent+0x83/0xa0 [ 80.759083][ T5231] do_syscall_64+0xaa/0x1c0 [ 80.759112][ T5231] ? clear_bhb_loop+0x55/0xb0 [ 80.759145][ T5231] ? clear_bhb_loop+0x55/0xb0 [ 80.759233][ T5231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.759265][ T5231] RIP: 0033:0x7f5c7251cda9 [ 80.759283][ T5231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.759305][ T5231] RSP: 002b:00007f5c70b81038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 80.759374][ T5231] RAX: ffffffffffffffda RBX: 00007f5c72735fa0 RCX: 00007f5c7251cda9 [ 80.759424][ T5231] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.759480][ T5231] RBP: 00007f5c70b81090 R08: 0000000000000000 R09: 0000000000000000 [ 80.759505][ T5231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.759535][ T5231] R13: 0000000000000000 R14: 00007f5c72735fa0 R15: 00007ffe8df4b918 [ 80.759556][ T5231] [ 80.759567][ T5231] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 80.862590][ T5234] futex_wake_op: syz.2.604 tries to shift op by -1; fix this program [ 80.988318][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.002073][ T5236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.607'. [ 81.014883][ T5236] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 81.027420][ T5239] loop4: detected capacity change from 0 to 512 [ 81.037270][ T5239] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 81.048595][ T5239] EXT4-fs (loop4): orphan cleanup on readonly fs [ 81.055352][ T5239] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 81.070888][ T5239] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 81.078017][ T5239] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.606: bg 0: block 40: padding at end of block bitmap is not set [ 81.094125][ T5239] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 81.107219][ T5239] EXT4-fs (loop4): 1 truncate cleaned up [ 81.113486][ T5239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.131455][ T5245] sg_write: data in/out 1891168738/14 bytes for SCSI command 0x0-- guessing data in; [ 81.131455][ T5245] program syz.0.609 not setting count and/or reply_len properly [ 81.156411][ T5239] smc: net device bond0 applied user defined pnetid SYZ0 [ 81.163986][ T5239] smc: net device bond0 erased user defined pnetid SYZ0 [ 81.180707][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.201969][ T5248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.611'. [ 81.281575][ T3373] usb usb6-port1: attempt power cycle [ 82.041845][ T5270] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 82.320246][ T5272] loop2: detected capacity change from 0 to 512 [ 82.327882][ T5272] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 82.336706][ T5272] EXT4-fs (loop2): orphan cleanup on readonly fs [ 82.343376][ T5272] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 82.358286][ T5272] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 82.365367][ T5272] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.618: bg 0: block 40: padding at end of block bitmap is not set [ 82.380461][ T5272] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 82.389632][ T5272] EXT4-fs (loop2): 1 truncate cleaned up [ 82.395858][ T5272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.420997][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.472956][ T5277] loop1: detected capacity change from 0 to 164 [ 82.495835][ T5275] futex_wake_op: syz.2.619 tries to shift op by -1; fix this program [ 82.651098][ T5286] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 82.663792][ T5285] loop2: detected capacity change from 0 to 512 [ 82.712125][ T5285] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 82.730084][ T5285] EXT4-fs (loop2): orphan cleanup on readonly fs [ 82.737500][ T5285] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 82.737689][ T5285] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 82.738088][ T5285] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.623: bg 0: block 40: padding at end of block bitmap is not set [ 82.738269][ T5285] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 82.786297][ T5285] EXT4-fs (loop2): 1 truncate cleaned up [ 82.789043][ T5289] __nla_validate_parse: 2 callbacks suppressed [ 82.789060][ T5289] netlink: 20 bytes leftover after parsing attributes in process `syz.4.625'. [ 82.794295][ T5285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.887014][ T5285] smc: net device bond0 applied user defined pnetid SYZ0 [ 82.902747][ T5285] smc: net device bond0 erased user defined pnetid SYZ0 [ 82.940951][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.999312][ T5295] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 83.171887][ T3373] usb usb6-port1: unable to enumerate USB device [ 83.255912][ T5307] FAULT_INJECTION: forcing a failure. [ 83.255912][ T5307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.269178][ T5307] CPU: 1 UID: 0 PID: 5307 Comm: syz.2.634 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 83.269205][ T5307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 83.269219][ T5307] Call Trace: [ 83.269227][ T5307] [ 83.269236][ T5307] dump_stack_lvl+0xf2/0x150 [ 83.269335][ T5307] dump_stack+0x15/0x1a [ 83.269362][ T5307] should_fail_ex+0x24a/0x260 [ 83.269519][ T5307] should_fail+0xb/0x10 [ 83.269552][ T5307] should_fail_usercopy+0x1a/0x20 [ 83.269574][ T5307] _copy_from_user+0x1c/0xa0 [ 83.269599][ T5307] __se_sys_futex_waitv+0x14e/0x360 [ 83.269637][ T5307] __x64_sys_futex_waitv+0x67/0x80 [ 83.269701][ T5307] x64_sys_call+0x105f/0x2dc0 [ 83.269733][ T5307] do_syscall_64+0xc9/0x1c0 [ 83.269790][ T5307] ? clear_bhb_loop+0x55/0xb0 [ 83.269823][ T5307] ? clear_bhb_loop+0x55/0xb0 [ 83.269856][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.269895][ T5307] RIP: 0033:0x7fa35146cda9 [ 83.269909][ T5307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.269927][ T5307] RSP: 002b:00007fa34fad1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 83.269949][ T5307] RAX: ffffffffffffffda RBX: 00007fa351685fa0 RCX: 00007fa35146cda9 [ 83.269965][ T5307] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000180 [ 83.269980][ T5307] RBP: 00007fa34fad1090 R08: 0000000000000000 R09: 0000000000000000 [ 83.269993][ T5307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.270063][ T5307] R13: 0000000000000000 R14: 00007fa351685fa0 R15: 00007ffc32953138 [ 83.270087][ T5307] [ 83.304218][ T5277] syz.1.620 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 83.426838][ T5309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'. [ 83.432992][ T5277] CPU: 0 UID: 0 PID: 5277 Comm: syz.1.620 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 83.433024][ T5277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 83.433038][ T5277] Call Trace: [ 83.433045][ T5277] [ 83.433054][ T5277] dump_stack_lvl+0xf2/0x150 [ 83.433140][ T5277] dump_stack+0x15/0x1a [ 83.433167][ T5277] dump_header+0x83/0x2d0 [ 83.433204][ T5277] oom_kill_process+0x341/0x4c0 [ 83.433244][ T5277] out_of_memory+0x9af/0xbe0 [ 83.433368][ T5277] ? css_next_descendant_pre+0x11c/0x140 [ 83.433397][ T5277] mem_cgroup_out_of_memory+0x13e/0x190 [ 83.433494][ T5277] try_charge_memcg+0x508/0x7f0 [ 83.433539][ T5277] obj_cgroup_charge_pages+0xbd/0x1a0 [ 83.433595][ T5277] __memcg_kmem_charge_page+0x9d/0x170 [ 83.433645][ T5277] __alloc_frozen_pages_noprof+0x1bc/0x340 [ 83.433693][ T5277] alloc_pages_mpol+0xb4/0x260 [ 83.433740][ T5277] alloc_pages_noprof+0xe8/0x130 [ 83.433835][ T5277] __vmalloc_node_range_noprof+0x6e5/0xe70 [ 83.433880][ T5277] __kvmalloc_node_noprof+0x121/0x170 [ 83.433912][ T5277] ? ip_set_alloc+0x1f/0x30 [ 83.433942][ T5277] ip_set_alloc+0x1f/0x30 [ 83.433970][ T5277] hash_netiface_create+0x273/0x730 [ 83.434060][ T5277] ? __nla_parse+0x40/0x60 [ 83.434086][ T5277] ? __pfx_hash_netiface_create+0x10/0x10 [ 83.434190][ T5277] ip_set_create+0x359/0x8a0 [ 83.434224][ T5277] ? strnstr+0x100/0x100 [ 83.434392][ T5277] ? __nla_parse+0x40/0x60 [ 83.434449][ T5277] nfnetlink_rcv_msg+0x4a9/0x570 [ 83.434501][ T5277] netlink_rcv_skb+0x12c/0x230 [ 83.434547][ T5277] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 83.434583][ T5277] nfnetlink_rcv+0x16c/0x15d0 [ 83.434607][ T5277] ? kmem_cache_free+0xdc/0x2d0 [ 83.434718][ T5277] ? nlmon_xmit+0x51/0x60 [ 83.434751][ T5277] ? __kfree_skb+0x102/0x150 [ 83.434835][ T5277] ? consume_skb+0x49/0x160 [ 83.434896][ T5277] ? nlmon_xmit+0x51/0x60 [ 83.434928][ T5277] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 83.434982][ T5277] ? __dev_queue_xmit+0xb6e/0x2090 [ 83.435081][ T5277] ? ref_tracker_free+0x3a5/0x410 [ 83.435120][ T5277] ? __dev_queue_xmit+0x186/0x2090 [ 83.435164][ T5277] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 83.435287][ T5277] netlink_unicast+0x599/0x670 [ 83.435327][ T5277] netlink_sendmsg+0x5cc/0x6e0 [ 83.435383][ T5277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.435424][ T5277] __sock_sendmsg+0x140/0x180 [ 83.435488][ T5277] ____sys_sendmsg+0x312/0x410 [ 83.435529][ T5277] __sys_sendmsg+0x19d/0x230 [ 83.435589][ T5277] __x64_sys_sendmsg+0x46/0x50 [ 83.435635][ T5277] x64_sys_call+0x2734/0x2dc0 [ 83.435665][ T5277] do_syscall_64+0xc9/0x1c0 [ 83.435690][ T5277] ? clear_bhb_loop+0x55/0xb0 [ 83.435722][ T5277] ? clear_bhb_loop+0x55/0xb0 [ 83.435756][ T5277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.435840][ T5277] RIP: 0033:0x7f7bed85cda9 [ 83.435860][ T5277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.435883][ T5277] RSP: 002b:00007f7bebec1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.435906][ T5277] RAX: ffffffffffffffda RBX: 00007f7beda75fa0 RCX: 00007f7bed85cda9 [ 83.435922][ T5277] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000009 [ 83.435937][ T5277] RBP: 00007f7bed8de2a0 R08: 0000000000000000 R09: 0000000000000000 [ 83.435983][ T5277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.435995][ T5277] R13: 0000000000000000 R14: 00007f7beda75fa0 R15: 00007ffd4f14fe38 [ 83.436096][ T5277] [ 83.436104][ T5277] memory: usage 307200kB, limit 307200kB, failcnt 138 [ 83.813667][ T5277] memory+swap: usage 307480kB, limit 9007199254740988kB, failcnt 0 [ 83.821584][ T5277] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 83.828953][ T5277] Memory cgroup stats for /syz1: [ 83.829202][ T5277] cache 8192 [ 83.837426][ T5277] rss 4096 [ 83.840547][ T5277] shmem 0 [ 83.843535][ T5277] mapped_file 8192 [ 83.847294][ T5277] dirty 0 [ 83.850259][ T5277] writeback 0 [ 83.854143][ T5277] workingset_refault_anon 20 [ 83.858798][ T5277] workingset_refault_file 6 [ 83.863340][ T5277] swap 286720 [ 83.866670][ T5277] swapcached 4096 [ 83.870311][ T5277] pgpgin 36228 [ 83.873723][ T5277] pgpgout 36223 [ 83.877208][ T5277] pgfault 45925 [ 83.880796][ T5277] pgmajfault 17 [ 83.885002][ T5277] inactive_anon 0 [ 83.888674][ T5277] active_anon 0 [ 83.892200][ T5277] inactive_file 16384 [ 83.896189][ T5277] active_file 0 [ 83.899659][ T5277] unevictable 0 [ 83.903172][ T5277] hierarchical_memory_limit 314572800 [ 83.908580][ T5277] hierarchical_memsw_limit 9223372036854771712 [ 83.915417][ T5277] total_cache 8192 [ 83.919133][ T5277] total_rss 4096 [ 83.922723][ T5277] total_shmem 0 [ 83.926185][ T5277] total_mapped_file 8192 [ 83.930444][ T5277] total_dirty 0 [ 83.934010][ T5277] total_writeback 0 [ 83.937865][ T5277] total_workingset_refault_anon 20 [ 83.943660][ T5277] total_workingset_refault_file 6 [ 83.948684][ T5277] total_swap 286720 [ 83.952579][ T5277] total_swapcached 4096 [ 83.956736][ T5277] total_pgpgin 36228 [ 83.960669][ T5277] total_pgpgout 36223 [ 83.964669][ T5277] total_pgfault 45925 [ 83.968660][ T5277] total_pgmajfault 17 [ 83.973320][ T5277] total_inactive_anon 0 [ 83.977613][ T5277] total_active_anon 0 [ 83.981621][ T5277] total_inactive_file 16384 [ 83.986201][ T5277] total_active_file 0 [ 83.990186][ T5277] total_unevictable 0 [ 83.994286][ T5277] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.620,pid=5276,uid=0 [ 84.009465][ T5277] Memory cgroup out of memory: Killed process 5276 (syz.1.620) total-vm:93712kB, anon-rss:916kB, file-rss:22316kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 84.032736][ T5309] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 84.194071][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 84.194086][ T29] audit: type=1400 audit(1738413607.055:4695): avc: denied { execmem } for pid=5310 comm="syz.4.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.340585][ T5316] netlink: 32 bytes leftover after parsing attributes in process `syz.4.636'. [ 84.365160][ T5315] smc: net device bond0 applied user defined pnetid SYZ0 [ 84.373628][ T5315] smc: net device bond0 erased user defined pnetid SYZ0 [ 84.627236][ T29] audit: type=1400 audit(1738413607.255:4696): avc: denied { mounton } for pid=5310 comm="syz.4.636" path="/135/file0" dev="tmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.650726][ T29] audit: type=1400 audit(1738413607.255:4697): avc: denied { create } for pid=5310 comm="syz.4.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.671997][ T29] audit: type=1400 audit(1738413607.255:4698): avc: denied { module_request } for pid=5310 comm="syz.4.636" kmod="fs-ceph" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 84.693391][ T29] audit: type=1400 audit(1738413607.365:4699): avc: denied { ioctl } for pid=5317 comm="syz.2.637" path="socket:[12121]" dev="sockfs" ino=12121 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.736113][ T5326] netlink: 20 bytes leftover after parsing attributes in process `syz.2.637'. [ 84.749186][ T29] audit: type=1400 audit(1738413607.705:4700): avc: denied { write } for pid=5317 comm="syz.2.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.793007][ T29] audit: type=1400 audit(1738413607.765:4701): avc: denied { perfmon } for pid=5317 comm="syz.2.637" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.827438][ T29] audit: type=1400 audit(1738413607.795:4702): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 84.848110][ T29] audit: type=1400 audit(1738413607.795:4703): avc: denied { append } for pid=2982 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.889046][ T29] audit: type=1400 audit(1738413607.845:4704): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.997256][ T5333] loop1: detected capacity change from 0 to 512 [ 85.013125][ T5333] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 85.021947][ T5333] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.031161][ T5333] EXT4-fs (loop1): blocks per group (64) and clusters per group (32768) inconsistent [ 85.064455][ T5344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.649'. [ 85.101222][ T5347] smc: net device bond0 applied user defined pnetid SYZ0 [ 85.117048][ T5333] lo speed is unknown, defaulting to 1000 [ 85.124819][ T5347] smc: net device bond0 erased user defined pnetid SYZ0 [ 85.207396][ T5352] loop4: detected capacity change from 0 to 512 [ 85.214792][ T5352] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.228037][ T5352] EXT4-fs (loop4): orphan cleanup on readonly fs [ 85.234806][ T5352] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.651: Failed to acquire dquot type 1 [ 85.246848][ T5352] EXT4-fs (loop4): 1 truncate cleaned up [ 85.253393][ T5352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.439124][ T5356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.652'. [ 85.899397][ T5358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.653'. [ 85.925863][ T5360] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 85.990039][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.085149][ T5370] loop4: detected capacity change from 0 to 512 [ 86.106560][ T5370] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.659: corrupted xattr block 255: invalid header [ 86.119978][ T5370] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 86.128879][ T5370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.141507][ T5370] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.659: corrupted xattr block 255: invalid header [ 86.155703][ T5370] SELinux: (dev loop4, type ext4) getxattr errno 117 [ 86.163173][ T5370] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.225740][ T5374] siw: device registration error -23 [ 86.233091][ T5374] netlink: 32 bytes leftover after parsing attributes in process `syz.2.655'. [ 86.544473][ T5379] smc: net device bond0 applied user defined pnetid SYZ0 [ 86.552826][ T5379] smc: net device bond0 erased user defined pnetid SYZ0 [ 86.598818][ T5384] loop1: detected capacity change from 0 to 1764 [ 86.607328][ T5384] iso9660: Bad value for 'uid' [ 86.612213][ T5384] iso9660: Bad value for 'uid' [ 86.761037][ T5398] netlink: 16 bytes leftover after parsing attributes in process `syz.0.668'. [ 86.856232][ T5404] futex_wake_op: syz.4.670 tries to shift op by -1; fix this program [ 86.911575][ T5408] loop2: detected capacity change from 0 to 512 [ 86.923877][ T5408] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.672: corrupted xattr block 255: invalid header [ 86.929514][ T5411] smc: net device bond0 applied user defined pnetid SYZ0 [ 86.937708][ T5408] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 86.938049][ T5408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.965904][ T5408] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.672: corrupted xattr block 255: invalid header [ 86.985242][ T5408] SELinux: (dev loop2, type ext4) getxattr errno 117 [ 86.992614][ T5408] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.066362][ T5417] loop4: detected capacity change from 0 to 8192 [ 87.080073][ T5418] netlink: 'syz.2.675': attribute type 1 has an invalid length. [ 87.089187][ T5418] lo speed is unknown, defaulting to 1000 [ 87.095814][ T5415] netlink: 'syz.2.675': attribute type 1 has an invalid length. [ 87.133592][ T5422] netlink: 16 bytes leftover after parsing attributes in process `syz.2.678'. [ 87.324414][ T5428] loop4: detected capacity change from 0 to 2048 [ 87.332406][ T5428] ext4: Unknown parameter 'dont_hash' [ 87.349935][ T5428] loop4: detected capacity change from 0 to 2048 [ 87.362355][ T5428] capability: warning: `syz.4.679' uses 32-bit capabilities (legacy support in use) [ 87.445562][ T5432] futex_wake_op: syz.4.681 tries to shift op by -1; fix this program [ 87.622131][ T5444] smc: net device bond0 erased user defined pnetid SYZ0 [ 88.036449][ T5442] __nla_validate_parse: 1 callbacks suppressed [ 88.036466][ T5442] netlink: 32 bytes leftover after parsing attributes in process `syz.4.683'. [ 88.218283][ T5441] siw: device registration error -23 [ 88.440705][ T5456] loop4: detected capacity change from 0 to 512 [ 88.465708][ T5456] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 88.474894][ T5456] EXT4-fs (loop4): orphan cleanup on readonly fs [ 88.482187][ T5456] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 88.502165][ T5456] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 88.526920][ T5456] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.688: bg 0: block 40: padding at end of block bitmap is not set [ 88.561039][ T5456] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 88.582041][ T5456] EXT4-fs (loop4): 1 truncate cleaned up [ 88.602097][ T5456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.628469][ T5456] smc: net device bond0 applied user defined pnetid SYZ0 [ 88.628696][ T5468] futex_wake_op: syz.2.692 tries to shift op by -1; fix this program [ 88.636377][ T5456] smc: net device bond0 erased user defined pnetid SYZ0 [ 88.654380][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.686358][ T5471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'. [ 88.705859][ T5471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'. [ 88.774926][ T5481] loop4: detected capacity change from 0 to 512 [ 88.800849][ T5483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.700'. [ 88.815486][ T5481] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 88.826756][ T5481] EXT4-fs (loop4): orphan cleanup on readonly fs [ 88.833999][ T5481] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 88.849184][ T5481] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 88.856469][ T5481] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.699: bg 0: block 40: padding at end of block bitmap is not set [ 88.871862][ T5481] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 88.880913][ T5481] EXT4-fs (loop4): 1 truncate cleaned up [ 88.887128][ T5481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.908606][ T5481] smc: net device bond0 applied user defined pnetid SYZ0 [ 88.917468][ T5481] smc: net device bond0 erased user defined pnetid SYZ0 [ 88.973201][ T5487] siw: device registration error -23 [ 88.981026][ T5487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 88.989932][ T5487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 89.015882][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.085419][ T5491] loop4: detected capacity change from 0 to 512 [ 89.122647][ T5491] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.701: corrupted xattr block 255: invalid header [ 89.138663][ T5491] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 89.148520][ T5491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.163705][ T5491] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.701: corrupted xattr block 255: invalid header [ 89.178325][ T5491] SELinux: (dev loop4, type ext4) getxattr errno 117 [ 89.187556][ T5491] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.210022][ T29] kauditd_printk_skb: 505 callbacks suppressed [ 89.210040][ T29] audit: type=1326 audit(1738413612.175:5208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5470 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa351463d67 code=0x7ffc0000 [ 89.248319][ T29] audit: type=1326 audit(1738413612.205:5209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5470 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa351408fa9 code=0x7ffc0000 [ 89.272030][ T29] audit: type=1326 audit(1738413612.205:5210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5470 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa351463d67 code=0x7ffc0000 [ 89.295540][ T29] audit: type=1326 audit(1738413612.215:5211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5470 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa351408fa9 code=0x7ffc0000 [ 89.318807][ T29] audit: type=1326 audit(1738413612.215:5212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5470 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fa35146cda9 code=0x7ffc0000 [ 89.342673][ T29] audit: type=1326 audit(1738413612.215:5213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5470 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa351463d67 code=0x7ffc0000 [ 89.366824][ T29] audit: type=1326 audit(1738413612.215:5214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5470 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa351408fa9 code=0x7ffc0000 [ 89.390174][ T29] audit: type=1326 audit(1738413612.215:5215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5470 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fa35146cda9 code=0x7ffc0000 [ 89.414207][ T29] audit: type=1326 audit(1738413612.215:5216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5470 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa351463d67 code=0x7ffc0000 [ 89.437457][ T29] audit: type=1326 audit(1738413612.215:5217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5470 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa351408fa9 code=0x7ffc0000 [ 89.530417][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.538686][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x6 [ 89.546196][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.553729][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2 [ 89.561839][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.568860][ T5498] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 89.569237][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.583787][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.591963][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.599364][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4 [ 89.606841][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.614307][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.622355][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.629868][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.637399][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.644867][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.653042][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.660458][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.667932][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.675385][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.683540][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.690943][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.698399][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.705827][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.713977][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.721442][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.728896][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.736335][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.744360][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.751785][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.759189][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.766611][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.774671][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.782227][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.842786][ T3375] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 89.903606][ T5517] loop2: detected capacity change from 0 to 512 [ 89.916430][ T5513] veth1_macvtap: left promiscuous mode [ 89.922861][ T5513] macsec0: entered promiscuous mode [ 89.930736][ T5517] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.712: corrupted xattr block 255: invalid header [ 89.945124][ T5517] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 89.964232][ T5517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.976836][ T5517] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.712: corrupted xattr block 255: invalid header [ 89.990552][ T5517] SELinux: (dev loop2, type ext4) getxattr errno 117 [ 90.003201][ T5517] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.323841][ T5543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'. [ 90.332677][ T5543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.722'. [ 90.732317][ T5546] loop1: detected capacity change from 0 to 512 [ 90.740649][ T5546] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.723: corrupted xattr block 95: invalid header [ 90.754785][ T5546] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.723: bg 0: block 7: invalid block bitmap [ 90.767845][ T5546] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 90.776786][ T5546] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.723: corrupted xattr block 95: invalid header [ 90.790360][ T5546] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 90.800156][ T5546] EXT4-fs (loop1): 1 orphan inode deleted [ 90.806331][ T5546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000004 r/w without journal. Quota mode: none. [ 90.832802][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000004. [ 90.858245][ T5550] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 91.067116][ T5568] futex_wake_op: syz.0.729 tries to shift op by -1; fix this program [ 91.094077][ T5563] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5563 comm=syz.1.728 [ 91.118486][ T5572] loop2: detected capacity change from 0 to 512 [ 91.137665][ T5572] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.732: corrupted xattr block 255: invalid header [ 91.152359][ T5572] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 91.160911][ T5572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.174248][ T5572] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.732: corrupted xattr block 255: invalid header [ 91.187648][ T5572] SELinux: (dev loop2, type ext4) getxattr errno 117 [ 91.196801][ T5572] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.115687][ T5604] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.174028][ T5613] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 92.185483][ T5596] futex_wake_op: syz.4.740 tries to shift op by -1; fix this program [ 92.188344][ T5597] lo speed is unknown, defaulting to 1000 [ 92.206629][ T5604] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.275090][ T5604] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.301315][ T5597] chnl_net:caif_netlink_parms(): no params data found [ 92.339144][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.346350][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.354262][ T5597] bridge_slave_0: entered allmulticast mode [ 92.360717][ T5597] bridge_slave_0: entered promiscuous mode [ 92.368271][ T5604] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.380687][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.388443][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.395742][ T5597] bridge_slave_1: entered allmulticast mode [ 92.402454][ T5597] bridge_slave_1: entered promiscuous mode [ 92.420033][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.431383][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.442787][ T5604] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.454934][ T5604] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.473829][ T5604] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.486228][ T5604] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.512335][ T5597] team0: Port device team_slave_0 added [ 92.519320][ T5597] team0: Port device team_slave_1 added [ 92.525494][ T5626] futex_wake_op: syz.2.745 tries to shift op by -1; fix this program [ 92.562469][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.569463][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.596274][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.607227][ T5628] veth1_macvtap: left promiscuous mode [ 92.612845][ T5628] macsec0: entered promiscuous mode [ 92.628118][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.635915][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.662972][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.699925][ T5597] hsr_slave_0: entered promiscuous mode [ 92.708508][ T5597] hsr_slave_1: entered promiscuous mode [ 92.714623][ T5597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.722961][ T5597] Cannot create hsr debugfs directory [ 92.743410][ T5636] loop2: detected capacity change from 0 to 512 [ 92.750989][ T5636] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.776373][ T5636] EXT4-fs (loop2): orphan cleanup on readonly fs [ 92.783550][ T5636] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.747: Failed to acquire dquot type 1 [ 92.795353][ T5636] EXT4-fs (loop2): 1 truncate cleaned up [ 92.801511][ T5636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.906933][ T5597] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 92.916688][ T5597] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 92.934693][ T5597] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 92.946544][ T5597] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 92.969324][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.976438][ T5597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.983781][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.990895][ T5597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.018245][ T5642] siw: device registration error -23 [ 93.027380][ T5146] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.036413][ T5146] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.158970][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.245594][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.272818][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.280121][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.289820][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.296961][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.308649][ T5650] loop4: detected capacity change from 0 to 512 [ 93.315919][ T5650] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.325418][ T5650] EXT4-fs (loop4): orphan cleanup on readonly fs [ 93.332395][ T5650] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.751: Failed to acquire dquot type 1 [ 93.344196][ T5650] EXT4-fs (loop4): 1 truncate cleaned up [ 93.350411][ T5650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.384440][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.485921][ T5597] veth0_vlan: entered promiscuous mode [ 93.494756][ T5597] veth1_vlan: entered promiscuous mode [ 93.510481][ T5597] veth0_macvtap: entered promiscuous mode [ 93.518464][ T5597] veth1_macvtap: entered promiscuous mode [ 93.531900][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.533907][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.551476][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.561415][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.571939][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.581904][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.592548][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.602394][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.612941][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.624037][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.638072][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.648712][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.658634][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.669771][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.679616][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.690159][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.700715][ T5597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.711245][ T5597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.742813][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.754852][ T5597] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.763703][ T5597] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.772555][ T5597] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.781329][ T5597] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.894788][ T5684] loop5: detected capacity change from 0 to 512 [ 93.925226][ T5684] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 93.933650][ T5684] EXT4-fs (loop5): orphan cleanup on readonly fs [ 93.940191][ T5684] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 93.955570][ T5684] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 93.962662][ T5684] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.739: bg 0: block 40: padding at end of block bitmap is not set [ 93.977384][ T5684] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 93.988450][ T5684] EXT4-fs (loop5): 1 truncate cleaned up [ 93.995913][ T5684] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.071129][ T5688] siw: device registration error -23 [ 94.110783][ T5597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.126914][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.357280][ T5692] veth1_macvtap: left promiscuous mode [ 94.370457][ T5692] macsec0: entered promiscuous mode [ 94.525996][ T29] kauditd_printk_skb: 282 callbacks suppressed [ 94.526011][ T29] audit: type=1326 audit(1738413617.495:5496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5698 comm="syz.4.762" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58b87dcda9 code=0x0 [ 94.636983][ T29] audit: type=1400 audit(1738413617.605:5497): avc: denied { name_bind } for pid=5698 comm="syz.4.762" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 95.289261][ T29] audit: type=1400 audit(1738413618.255:5498): avc: denied { setopt } for pid=5711 comm="syz.5.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.309303][ T29] audit: type=1400 audit(1738413618.255:5499): avc: denied { read } for pid=5711 comm="syz.5.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.329037][ T29] audit: type=1400 audit(1738413618.255:5500): avc: denied { ioctl } for pid=5711 comm="syz.5.764" path="socket:[13977]" dev="sockfs" ino=13977 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.353938][ T29] audit: type=1400 audit(1738413618.255:5501): avc: denied { create } for pid=5711 comm="syz.5.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 95.358720][ T5719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.767'. [ 95.377861][ T29] audit: type=1400 audit(1738413618.255:5502): avc: denied { bind } for pid=5711 comm="syz.5.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 95.404532][ T29] audit: type=1326 audit(1738413618.375:5503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5711 comm="syz.5.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952aaacda9 code=0x7ffc0000 [ 95.455393][ T29] audit: type=1326 audit(1738413618.415:5504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5711 comm="syz.5.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952aaacda9 code=0x7ffc0000 [ 95.478949][ T29] audit: type=1326 audit(1738413618.415:5505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5711 comm="syz.5.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f952aaacda9 code=0x7ffc0000 [ 95.506533][ T5722] smc: net device bond0 applied user defined pnetid SYZ0 [ 95.515245][ T5722] smc: net device bond0 erased user defined pnetid SYZ0 [ 95.603678][ T5729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.771'. [ 95.630982][ T5729] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 95.813390][ T5738] loop5: detected capacity change from 0 to 512 [ 95.830794][ T5738] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 95.859051][ T5738] EXT4-fs (loop5): orphan cleanup on readonly fs [ 95.868269][ T5738] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 95.886228][ T5738] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 95.894414][ T5738] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.773: bg 0: block 40: padding at end of block bitmap is not set [ 95.912944][ T5738] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 95.924532][ T5738] EXT4-fs (loop5): 1 truncate cleaned up [ 95.932008][ T5738] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.956185][ T5738] smc: net device bond0 applied user defined pnetid SYZ0 [ 95.965499][ T5738] smc: net device bond0 erased user defined pnetid SYZ0 [ 95.983764][ T5741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.775'. [ 95.993116][ T5597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.142824][ T5749] loop1: detected capacity change from 0 to 512 [ 96.180477][ T5749] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #2: comm syz.1.779: corrupted xattr block 255: invalid header [ 96.199710][ T5753] loop4: detected capacity change from 0 to 512 [ 96.212268][ T5749] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 96.212369][ T5747] futex_wake_op: syz.5.778 tries to shift op by -1; fix this program [ 96.220979][ T5749] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #2: comm syz.1.779: corrupted xattr block 255: invalid header [ 96.250455][ T5749] SELinux: (dev loop1, type ext4) getxattr errno 117 [ 96.268428][ T5753] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.780: corrupted xattr block 255: invalid header [ 96.282934][ T5753] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 96.291552][ T5753] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.780: corrupted xattr block 255: invalid header [ 96.305058][ T5753] SELinux: (dev loop4, type ext4) getxattr errno 117 [ 96.322156][ T5758] loop5: detected capacity change from 0 to 512 [ 96.370497][ T5758] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 96.383299][ T5758] EXT4-fs (loop5): orphan cleanup on readonly fs [ 96.395598][ T5758] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 96.424134][ T5767] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.445663][ T5758] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 96.452898][ T5758] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.782: bg 0: block 40: padding at end of block bitmap is not set [ 96.474065][ T5773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.788'. [ 96.483159][ T5773] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 96.514816][ T5758] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 96.523876][ T5758] EXT4-fs (loop5): 1 truncate cleaned up [ 96.538779][ T5758] smc: net device bond0 applied user defined pnetid SYZ0 [ 96.546429][ T5758] smc: net device bond0 erased user defined pnetid SYZ0 [ 96.573051][ T5780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 96.582188][ T5780] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 96.640785][ T5784] netlink: 16 bytes leftover after parsing attributes in process `syz.5.791'. [ 96.728209][ T5788] siw: device registration error -23 [ 96.736054][ T5788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.789'. [ 96.744888][ T5788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.789'. [ 96.767815][ T5788] wireguard0: entered promiscuous mode [ 96.773402][ T5788] wireguard0: entered allmulticast mode [ 97.112483][ T5807] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 97.379417][ T5818] netlink: 14 bytes leftover after parsing attributes in process `syz.2.801'. [ 97.495414][ T5823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.803'. [ 97.504483][ T5823] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 97.733627][ T5842] loop5: detected capacity change from 0 to 512 [ 97.740616][ T5842] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.751832][ T5842] EXT4-fs (loop5): orphan cleanup on readonly fs [ 97.760934][ T5842] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.810: Failed to acquire dquot type 1 [ 97.777871][ T5842] EXT4-fs (loop5): 1 truncate cleaned up [ 97.784463][ T5842] EXT4-fs mount: 6 callbacks suppressed [ 97.784476][ T5842] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.940135][ T5853] loop1: detected capacity change from 0 to 512 [ 98.947869][ T5853] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.042644][ T5597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.057171][ T5853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.069888][ T5853] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.087972][ T5863] loop4: detected capacity change from 0 to 512 [ 99.097230][ T5863] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.111038][ T5855] wireguard1: entered promiscuous mode [ 99.116644][ T5855] wireguard1: entered allmulticast mode [ 99.126833][ T5863] EXT4-fs (loop4): orphan cleanup on readonly fs [ 99.135185][ T5863] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.814: Failed to acquire dquot type 1 [ 99.147924][ T5863] EXT4-fs (loop4): 1 truncate cleaned up [ 99.154766][ T5863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.401245][ T5867] futex_wake_op: syz.5.816 tries to shift op by -1; fix this program [ 99.454982][ T5875] 9pnet_fd: Insufficient options for proto=fd [ 99.806750][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.978184][ T5882] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 100.055168][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.180936][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 100.180952][ T29] audit: type=1400 audit(1738413623.145:5690): avc: denied { relabelfrom } for pid=5890 comm="syz.5.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 100.207732][ T29] audit: type=1400 audit(1738413623.145:5691): avc: denied { relabelto } for pid=5890 comm="syz.5.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 100.247185][ T29] audit: type=1400 audit(1738413623.215:5692): avc: denied { ioctl } for pid=5890 comm="syz.5.825" path="socket:[14402]" dev="sockfs" ino=14402 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.739922][ T5906] siw: device registration error -23 [ 100.775986][ T5906] wireguard2: entered promiscuous mode [ 100.781542][ T5906] wireguard2: entered allmulticast mode [ 100.854387][ T29] audit: type=1400 audit(1738413623.825:5693): avc: denied { setopt } for pid=5910 comm="syz.1.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 101.042116][ T29] audit: type=1326 audit(1738413623.865:5694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.5.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952aaacda9 code=0x7ffc0000 [ 101.065636][ T29] audit: type=1326 audit(1738413623.865:5695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.5.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952aaacda9 code=0x7ffc0000 [ 101.088995][ T29] audit: type=1326 audit(1738413623.865:5696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.5.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f952aaacda9 code=0x7ffc0000 [ 101.112599][ T29] audit: type=1326 audit(1738413623.865:5697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.5.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952aaacda9 code=0x7ffc0000 [ 101.136153][ T29] audit: type=1326 audit(1738413623.865:5698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.5.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952aaacda9 code=0x7ffc0000 [ 101.159595][ T29] audit: type=1326 audit(1738413623.865:5699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.5.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f952aaacda9 code=0x7ffc0000 [ 101.160087][ T5917] cgroup2: Unknown parameter '0x00000000000000050xffffffffffffffff0xffffffffffffffff0x0000000000000007' [ 101.268359][ T5913] futex_wake_op: syz.5.829 tries to shift op by -1; fix this program [ 101.287702][ T5915] 9pnet_fd: Insufficient options for proto=fd [ 101.359383][ T5928] loop5: detected capacity change from 0 to 512 [ 101.377026][ T5928] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.834: corrupted in-inode xattr: invalid ea_ino [ 101.432904][ T5928] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.834: couldn't read orphan inode 15 (err -117) [ 101.449364][ T5928] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.465266][ T5939] smc: net device bond0 applied user defined pnetid SYZ0 [ 101.473883][ T5939] smc: net device bond0 erased user defined pnetid SYZ0 [ 101.486693][ T5928] __nla_validate_parse: 3 callbacks suppressed [ 101.486711][ T5928] netlink: 60 bytes leftover after parsing attributes in process `syz.5.834'. [ 101.493099][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.839'. [ 101.511576][ T5928] netlink: 60 bytes leftover after parsing attributes in process `syz.5.834'. [ 101.593413][ T5597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.622952][ T5952] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 101.631799][ T5953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.842'. [ 101.740168][ T5958] lo speed is unknown, defaulting to 1000 [ 101.817358][ T5965] loop1: detected capacity change from 0 to 512 [ 101.838339][ T5965] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.847: corrupted in-inode xattr: invalid ea_ino [ 101.861939][ T5965] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.847: couldn't read orphan inode 15 (err -117) [ 101.876421][ T5965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.909516][ T5968] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 102.055566][ T5970] loop5: detected capacity change from 0 to 512 [ 102.075979][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.083951][ T5970] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 102.112308][ T5970] EXT4-fs (loop5): orphan cleanup on readonly fs [ 102.119803][ T5970] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 102.145806][ T5970] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 102.154804][ T5970] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.849: bg 0: block 40: padding at end of block bitmap is not set [ 102.170142][ T5970] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 102.179563][ T5970] EXT4-fs (loop5): 1 truncate cleaned up [ 102.187948][ T5970] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.205746][ T5974] loop1: detected capacity change from 0 to 764 [ 102.215494][ T5974] netlink: 'syz.1.850': attribute type 4 has an invalid length. [ 102.241009][ T5970] smc: net device bond0 applied user defined pnetid SYZ0 [ 102.249677][ T5970] smc: net device bond0 erased user defined pnetid SYZ0 [ 102.270044][ T5597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.305339][ T5976] loop5: detected capacity change from 0 to 512 [ 102.312684][ T5976] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.323727][ T5976] EXT4-fs (loop5): orphan cleanup on readonly fs [ 102.333078][ T5976] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.851: Failed to acquire dquot type 1 [ 102.346033][ T5976] EXT4-fs (loop5): 1 truncate cleaned up [ 102.352495][ T5976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.383714][ T5597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.480491][ T5986] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 102.620717][ T5997] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 102.643490][ T6001] loop5: detected capacity change from 0 to 512 [ 102.652639][ T5997] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 102.666277][ T6001] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 102.697022][ T6001] EXT4-fs (loop5): orphan cleanup on readonly fs [ 102.741877][ T6001] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 102.765047][ T6001] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 102.777251][ T6001] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.862: bg 0: block 40: padding at end of block bitmap is not set [ 102.794740][ T6010] smc: net device bond0 applied user defined pnetid SYZ0 [ 102.802719][ T6010] smc: net device bond0 erased user defined pnetid SYZ0 [ 102.809792][ T6001] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 102.830943][ T6001] EXT4-fs (loop5): 1 truncate cleaned up [ 102.844482][ T6001] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.886237][ T6001] smc: net device bond0 applied user defined pnetid SYZ0 [ 102.906037][ T6001] smc: net device bond0 erased user defined pnetid SYZ0 [ 102.933334][ T5597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.975750][ T6023] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 102.986199][ T6024] loop4: detected capacity change from 0 to 512 [ 102.994097][ T6024] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.018252][ T6024] EXT4-fs (loop4): orphan cleanup on readonly fs [ 103.026392][ T6024] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.871: Failed to acquire dquot type 1 [ 103.039420][ T6024] EXT4-fs (loop4): 1 truncate cleaned up [ 103.045706][ T6024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.138438][ T6036] loop1: detected capacity change from 0 to 512 [ 103.147211][ T6036] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #2: comm syz.1.878: corrupted xattr block 255: invalid header [ 103.160737][ T6036] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 103.169641][ T6036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.182264][ T6038] loop5: detected capacity change from 0 to 512 [ 103.183537][ T6036] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #2: comm syz.1.878: corrupted xattr block 255: invalid header [ 103.201758][ T6038] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.209471][ T6038] EXT4-fs (loop5): orphan cleanup on readonly fs [ 103.215543][ T6036] SELinux: (dev loop1, type ext4) getxattr errno 117 [ 103.218008][ T6038] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.877: Failed to acquire dquot type 1 [ 103.225285][ T6036] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.235538][ T6038] EXT4-fs (loop5): 1 truncate cleaned up [ 103.250328][ T6038] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.544566][ T6049] siw: device registration error -23 [ 103.606000][ T6049] wireguard0: entered promiscuous mode [ 103.612261][ T6049] wireguard0: entered allmulticast mode [ 103.784960][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.956886][ T5597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.980389][ T6068] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 104.289624][ T6080] loop2: detected capacity change from 0 to 512 [ 104.340036][ T6082] siw: device registration error -23 [ 104.486716][ T6084] loop1: detected capacity change from 0 to 512 [ 104.542473][ T6080] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.891: corrupted xattr block 255: invalid header [ 104.578948][ T6084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.618631][ T6080] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 104.631339][ T6084] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.646039][ T6080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.669775][ T6080] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.891: corrupted xattr block 255: invalid header [ 104.683581][ T6080] SELinux: (dev loop2, type ext4) getxattr errno 117 [ 104.707034][ T6080] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.897163][ T6100] lo speed is unknown, defaulting to 1000 [ 105.014924][ T6100] Invalid ELF header magic: != ELF [ 105.225325][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 105.225343][ T29] audit: type=1400 audit(1738413627.985:6036): avc: denied { sys_module } for pid=6083 comm="syz.1.892" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 105.253297][ T29] audit: type=1400 audit(1738413627.985:6037): avc: denied { module_load } for pid=6083 comm="syz.1.892" path="/sys/kernel/notes" dev="sysfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 105.267045][ T6099] netlink: 260 bytes leftover after parsing attributes in process `syz.0.896'. [ 105.277904][ T29] audit: type=1326 audit(1738413628.185:6038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35146cda9 code=0x7fc00000 [ 105.310096][ T29] audit: type=1326 audit(1738413628.185:6039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa35146cda9 code=0x7fc00000 [ 105.337704][ T29] audit: type=1400 audit(1738413628.265:6040): avc: denied { execute } for pid=6090 comm="syz.2.893" name="file0" dev="tmpfs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 105.360105][ T29] audit: type=1400 audit(1738413628.265:6041): avc: denied { execute_no_trans } for pid=6090 comm="syz.2.893" path="/211/file0" dev="tmpfs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 105.383670][ T29] audit: type=1400 audit(1738413628.285:6042): avc: denied { ioctl } for pid=6098 comm="syz.0.896" path="socket:[15586]" dev="sockfs" ino=15586 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.408696][ T29] audit: type=1400 audit(1738413628.295:6043): avc: denied { read write } for pid=6105 comm="syz.5.897" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.432694][ T29] audit: type=1400 audit(1738413628.295:6044): avc: denied { open } for pid=6105 comm="syz.5.897" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.456846][ T29] audit: type=1400 audit(1738413628.295:6045): avc: denied { ioctl } for pid=6105 comm="syz.5.897" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.466194][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.899'. [ 105.495462][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.572845][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.899'. [ 105.605647][ T6114] loop1: detected capacity change from 0 to 512 [ 105.634018][ T6114] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 105.665953][ T6114] EXT4-fs (loop1): orphan cleanup on readonly fs [ 105.676071][ T6114] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 105.692391][ T6114] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 105.699869][ T6114] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.901: bg 0: block 40: padding at end of block bitmap is not set [ 105.727028][ T6115] bond0: entered promiscuous mode [ 105.732131][ T6115] bond_slave_0: entered promiscuous mode [ 105.737870][ T6115] bond_slave_1: entered promiscuous mode [ 105.743942][ T6114] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 105.754505][ T6114] EXT4-fs (loop1): 1 truncate cleaned up [ 105.760634][ T6120] loop5: detected capacity change from 0 to 8192 [ 105.768459][ T6114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.819415][ T6121] siw: device registration error -23 [ 105.873431][ T6120] loop5: p1 p2 p3 p4 [ 105.878222][ T6120] loop5: p1 start 67159808 is beyond EOD, truncated [ 105.884898][ T6120] loop5: p2 size 130943 extends beyond EOD, truncated [ 105.908402][ T6121] wireguard0: entered promiscuous mode [ 105.914972][ T6121] wireguard0: entered allmulticast mode [ 105.932205][ T6114] smc: net device bond0 applied user defined pnetid SYZ0 [ 105.946489][ T6114] smc: net device bond0 erased user defined pnetid SYZ0 [ 105.980573][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.031579][ T6120] loop5: p3 start 12586 is beyond EOD, truncated [ 106.037998][ T6120] loop5: p4 size 3599499264 extends beyond EOD, truncated [ 106.486908][ T3000] loop5: p1 p2 p3 p4 [ 106.491107][ T3000] loop5: p1 start 67159808 is beyond EOD, truncated [ 106.497742][ T3000] loop5: p2 size 130943 extends beyond EOD, truncated [ 106.514092][ T3000] loop5: p3 start 12586 is beyond EOD, truncated [ 106.520478][ T3000] loop5: p4 size 3599499264 extends beyond EOD, truncated [ 106.599273][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 106.599283][ T4572] udevd[4572]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 106.648803][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.911'. [ 106.659573][ T6146] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 106.687735][ T6148] loop5: detected capacity change from 0 to 512 [ 106.690678][ T6151] smc: net device bond0 applied user defined pnetid SYZ0 [ 106.702347][ T6151] smc: net device bond0 erased user defined pnetid SYZ0 [ 106.709412][ T6148] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.734113][ T6148] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.747653][ T6148] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.759098][ T6155] netlink: 'syz.0.914': attribute type 14 has an invalid length. [ 106.774522][ T6148] netlink: 8 bytes leftover after parsing attributes in process `syz.5.912'. [ 106.774776][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.914'. [ 106.783402][ T6148] netlink: 84 bytes leftover after parsing attributes in process `syz.5.912'. [ 106.802530][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.914'. [ 106.840751][ T6163] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 106.887161][ T6171] FAULT_INJECTION: forcing a failure. [ 106.887161][ T6171] name failslab, interval 1, probability 0, space 0, times 0 [ 106.899978][ T6171] CPU: 0 UID: 0 PID: 6171 Comm: syz.0.919 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 106.900006][ T6171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 106.900026][ T6171] Call Trace: [ 106.900033][ T6171] [ 106.900042][ T6171] dump_stack_lvl+0xf2/0x150 [ 106.900075][ T6171] dump_stack+0x15/0x1a [ 106.900096][ T6171] should_fail_ex+0x24a/0x260 [ 106.900187][ T6171] should_failslab+0x8f/0xb0 [ 106.900238][ T6171] kmem_cache_alloc_noprof+0x52/0x320 [ 106.900274][ T6171] ? security_inode_alloc+0x37/0x100 [ 106.900303][ T6171] security_inode_alloc+0x37/0x100 [ 106.900331][ T6171] inode_init_always_gfp+0x4a2/0x4f0 [ 106.900364][ T6171] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 106.900405][ T6171] alloc_inode+0x82/0x160 [ 106.900436][ T6171] new_inode+0x1e/0x100 [ 106.900497][ T6171] hugetlbfs_get_inode+0x7d/0x380 [ 106.900544][ T6171] hugetlb_file_setup+0x188/0x3c0 [ 106.900584][ T6171] ksys_mmap_pgoff+0x172/0x330 [ 106.900641][ T6171] x64_sys_call+0x1940/0x2dc0 [ 106.900667][ T6171] do_syscall_64+0xc9/0x1c0 [ 106.900752][ T6171] ? clear_bhb_loop+0x55/0xb0 [ 106.900778][ T6171] ? clear_bhb_loop+0x55/0xb0 [ 106.900847][ T6171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.900888][ T6171] RIP: 0033:0x7f5c7251cda9 [ 106.900981][ T6171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.901004][ T6171] RSP: 002b:00007f5c70b81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 106.901029][ T6171] RAX: ffffffffffffffda RBX: 00007f5c72735fa0 RCX: 00007f5c7251cda9 [ 106.901048][ T6171] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000000020000000 [ 106.901062][ T6171] RBP: 00007f5c70b81090 R08: ffffffffffffffff R09: 0000000000000000 [ 106.901077][ T6171] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001 [ 106.901156][ T6171] R13: 0000000000000000 R14: 00007f5c72735fa0 R15: 00007ffe8df4b918 [ 106.901178][ T6171] [ 107.138980][ T6179] FAULT_INJECTION: forcing a failure. [ 107.138980][ T6179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.152247][ T6179] CPU: 0 UID: 0 PID: 6179 Comm: syz.4.923 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 107.152312][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 107.152328][ T6179] Call Trace: [ 107.152335][ T6179] [ 107.152344][ T6179] dump_stack_lvl+0xf2/0x150 [ 107.152377][ T6179] dump_stack+0x15/0x1a [ 107.152404][ T6179] should_fail_ex+0x24a/0x260 [ 107.152444][ T6179] should_fail+0xb/0x10 [ 107.152545][ T6179] should_fail_usercopy+0x1a/0x20 [ 107.152565][ T6179] _copy_from_user+0x1c/0xa0 [ 107.152590][ T6179] __se_sys_mount+0x115/0x2d0 [ 107.152619][ T6179] ? fput+0x1c4/0x200 [ 107.152663][ T6179] ? ksys_write+0x176/0x1b0 [ 107.152684][ T6179] __x64_sys_mount+0x67/0x80 [ 107.152764][ T6179] x64_sys_call+0x2c84/0x2dc0 [ 107.152875][ T6179] do_syscall_64+0xc9/0x1c0 [ 107.152904][ T6179] ? clear_bhb_loop+0x55/0xb0 [ 107.152931][ T6179] ? clear_bhb_loop+0x55/0xb0 [ 107.152957][ T6179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.153000][ T6179] RIP: 0033:0x7f58b87dcda9 [ 107.153019][ T6179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.153042][ T6179] RSP: 002b:00007f58b6e47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 107.153066][ T6179] RAX: ffffffffffffffda RBX: 00007f58b89f5fa0 RCX: 00007f58b87dcda9 [ 107.153081][ T6179] RDX: 00000000200002c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 107.153169][ T6179] RBP: 00007f58b6e47090 R08: 0000000020000400 R09: 0000000000000000 [ 107.153181][ T6179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.153192][ T6179] R13: 0000000000000000 R14: 00007f58b89f5fa0 R15: 00007ffe7c61f958 [ 107.153250][ T6179] [ 107.376460][ T6186] smc: net device bond0 applied user defined pnetid SYZ0 [ 107.384440][ T6186] smc: net device bond0 erased user defined pnetid SYZ0 [ 107.427273][ T6191] loop1: detected capacity change from 0 to 512 [ 107.435782][ T6191] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.444408][ T3373] ================================================================== [ 107.452530][ T3373] BUG: KCSAN: data-race in __filemap_add_folio / nr_blockdev_pages [ 107.460465][ T3373] [ 107.462797][ T3373] read-write to 0xffff888100630bb0 of 8 bytes by task 6191 on cpu 0: [ 107.470864][ T3373] __filemap_add_folio+0x430/0x6f0 [ 107.476000][ T3373] filemap_add_folio+0x9c/0x1b0 [ 107.480871][ T3373] __filemap_get_folio+0x32f/0x630 [ 107.485999][ T3373] bdev_getblk+0x173/0x3b0 [ 107.490420][ T3373] ext4_sb_breadahead_unmovable+0x44/0x190 [ 107.496241][ T3373] ext4_group_desc_init+0x59f/0x12c0 [ 107.501535][ T3373] ext4_fill_super+0x21cc/0x3650 [ 107.506480][ T3373] get_tree_bdev_flags+0x29f/0x310 [ 107.511598][ T3373] get_tree_bdev+0x1f/0x30 [ 107.516019][ T3373] ext4_get_tree+0x1c/0x30 [ 107.520440][ T3373] vfs_get_tree+0x56/0x1e0 [ 107.524895][ T3373] do_new_mount+0x227/0x690 [ 107.529404][ T3373] path_mount+0x49b/0xb30 [ 107.533757][ T3373] __se_sys_mount+0x27f/0x2d0 [ 107.538461][ T3373] __x64_sys_mount+0x67/0x80 [ 107.543069][ T3373] x64_sys_call+0x2c84/0x2dc0 [ 107.547762][ T3373] do_syscall_64+0xc9/0x1c0 [ 107.552364][ T3373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.558267][ T3373] [ 107.560677][ T3373] read to 0xffff888100630bb0 of 8 bytes by task 3373 on cpu 1: [ 107.568221][ T3373] nr_blockdev_pages+0x7c/0xd0 [ 107.573006][ T3373] si_meminfo+0x87/0xd0 [ 107.577178][ T3373] update_defense_level+0x49/0x5b0 [ 107.582295][ T3373] defense_work_handler+0x1f/0x80 [ 107.587359][ T3373] process_scheduled_works+0x483/0x9a0 [ 107.592835][ T3373] worker_thread+0x51d/0x6f0 [ 107.597432][ T3373] kthread+0x4ae/0x520 [ 107.601512][ T3373] ret_from_fork+0x4b/0x60 [ 107.605939][ T3373] ret_from_fork_asm+0x1a/0x30 [ 107.610714][ T3373] [ 107.613040][ T3373] value changed: 0x0000000000000001 -> 0x0000000000000002 [ 107.620142][ T3373] [ 107.622485][ T3373] Reported by Kernel Concurrency Sanitizer on: [ 107.628638][ T3373] CPU: 1 UID: 0 PID: 3373 Comm: kworker/1:3 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 107.639065][ T3373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 107.649132][ T3373] Workqueue: events_long defense_work_handler [ 107.655217][ T3373] ================================================================== [ 107.682147][ T6191] EXT4-fs (loop1): orphan cleanup on readonly fs [ 107.690105][ T6191] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.926: Failed to acquire dquot type 1 [ 107.704814][ T6191] EXT4-fs (loop1): 1 truncate cleaned up [ 107.711144][ T6191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.724892][ T6190] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 108.211950][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.