last executing test programs: 3.914518544s ago: executing program 2 (id=997): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) lsm_get_self_attr(0x0, &(0x7f0000000840)={0x0, 0x0, 0x5d, 0x3d, ""/61}, &(0x7f0000000900)=0x5d, 0xd9b82a1d6f4158fd) 3.880424357s ago: executing program 2 (id=998): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c0000000b00000007000000010000060400000007000000000000000000000001000005ffff000001000000010000000000000000"], 0x0, 0x4f}, 0x20) 3.872390057s ago: executing program 2 (id=999): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[], 0x15) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000180)={0x0, 0x0, "bfdfd0ec360e6e408ab16e76f01b1fb6"}) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) write$P9_RLERRORu(r0, &(0x7f0000000140)=ANY=[@ANYRES16=r4], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x6, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x6, 0x6}, 0x100490, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$packet(0x11, 0x2, 0x300) creat(&(0x7f0000000200)='./file0\x00', 0x80) sendto$packet(r7, &(0x7f0000000640)="053c8100", 0x4, 0xb00, &(0x7f0000000080)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 3.815916272s ago: executing program 2 (id=1004): sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x20000805) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x400) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000100)=[0x8, 0x80000000]) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@nomblk_io_submit}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@nojournal_checksum}], [{@seclabel}]}, 0x1, 0x45f, &(0x7f0000000c80)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000410000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000007081da98b15249ba00"], &(0x7f0000000040)='GPL\x00'}, 0x80) r9 = epoll_create1(0x0) r10 = fcntl$dupfd(r9, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r10, r8, 0x11, 0x0, r10}, 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r7, r8, 0x11, 0x0, r7}, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) 3.461212221s ago: executing program 2 (id=1016): pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000f00)="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", 0x11a}], 0x1}}], 0x2, 0x0) sendto$inet(r3, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.60463951s ago: executing program 2 (id=1039): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff00000085"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000140)={[{@user_xattr}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}]}, 0x1, 0x445, &(0x7f0000000200)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") 2.60449776s ago: executing program 32 (id=1039): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff00000085"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000140)={[{@user_xattr}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}]}, 0x1, 0x445, &(0x7f0000000200)="$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") 1.078725013s ago: executing program 1 (id=1076): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x20040884}, 0x40000) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c04, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xc044020}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xb}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xfd}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x800}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r4}]}]}, 0x28}}, 0x0) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8, 0x0, 0x400007}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x516, &(0x7f0000000740)="$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") r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r9}, 0x10) rename(&(0x7f0000001c80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000c80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="180800001bc81a000000000002000001851000000600000018000000", @ANYRESOCT=0x0, @ANYRESOCT=r5], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 763.481538ms ago: executing program 4 (id=1084): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x18) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2b, 0x81}]}, 0x10) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}]) 689.697644ms ago: executing program 1 (id=1087): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2b, 0x81}]}, 0x10) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}]) 607.303331ms ago: executing program 4 (id=1091): mq_unlink(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) 585.113503ms ago: executing program 1 (id=1094): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000740)={{0x77359400}, {0x77359400}}, &(0x7f0000000780)) 567.985154ms ago: executing program 4 (id=1095): socket(0x10, 0x4, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000800)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095", @ANYRESDEC, @ANYRESDEC, @ANYRES32], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) socket$netlink(0x10, 0x3, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x800000000000000}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x1) 526.576547ms ago: executing program 1 (id=1096): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x30, 0x1412, 0x1, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000700000000000000fdffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014001900b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0x4, 0x7f, 0x0, 0x6, 0xd}}}}}, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/38, 0x26) 507.380589ms ago: executing program 3 (id=1097): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c0000000b00000007000000010000060400000007000000000000000000000001000005ffff000001000000010000000000000000"], 0x0, 0x4f}, 0x20) 506.354709ms ago: executing program 4 (id=1098): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000007000000000000000000008500000023000000"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = io_uring_setup(0x1694, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x1, 0x17b}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x3ff, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f1, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffe, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) 479.764291ms ago: executing program 1 (id=1099): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359c", 0x2}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 437.659625ms ago: executing program 3 (id=1100): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) munlock(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4f33}, 0x18) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) 365.37748ms ago: executing program 1 (id=1101): ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00'}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000240)={0x19, 0x3d24, 0x1575, 0x0, 0x0, 0xfffe}) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000017c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001e40)={0x2c, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54014840}, 0x20000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) 329.277343ms ago: executing program 3 (id=1102): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) 299.714006ms ago: executing program 3 (id=1104): mq_unlink(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) 265.491449ms ago: executing program 3 (id=1105): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000740)={{0x77359400}, {0x77359400}}, &(0x7f0000000780)) 238.124901ms ago: executing program 0 (id=1106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) syz_io_uring_setup(0x593, &(0x7f0000000400)={0x0, 0xc458, 0x80, 0x3, 0xb8}, &(0x7f0000000300), &(0x7f0000000a40)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) 202.265213ms ago: executing program 4 (id=1107): socket(0x10, 0x4, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000800)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095", @ANYRESDEC, @ANYRESDEC, @ANYRES32], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) socket$netlink(0x10, 0x3, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x800000000000000}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x1) 201.665243ms ago: executing program 0 (id=1108): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x30, 0x1412, 0x1, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000700000000000000fdffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014001900b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0x4, 0x7f, 0x0, 0x6, 0xd}}}}}, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/38, 0x26) 183.351885ms ago: executing program 0 (id=1109): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c0000000b00000007000000010000060400000007000000000000000000000001000005ffff000001000000010000000000000000"], 0x0, 0x4f}, 0x20) 161.321217ms ago: executing program 3 (id=1110): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) listen(r0, 0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) unshare(0x2040400) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000080)=[{&(0x7f0000000500)="7c15b6", 0x3}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 135.222529ms ago: executing program 0 (id=1111): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) munlock(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4f33}, 0x18) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) 114.942411ms ago: executing program 4 (id=1112): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2) write$binfmt_misc(r6, &(0x7f0000000280), 0xff9d) sendfile(r5, r6, &(0x7f0000000100), 0x2) fcntl$addseals(r6, 0x409, 0x8) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000002600)=@newtaction={0x352c, 0x30, 0x100, 0x70bd25, 0x25dfdbfb, {}, [{0x1174, 0x1, [@m_nat={0x120, 0x6, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0xbc2, 0x20000000, 0xffffb83c, 0x9}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x0, 0x2, 0x4, 0x400000}, @empty, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xff, 0x7, 0xdc, 0x1}, @dev={0xac, 0x14, 0x14, 0x2f}, @empty, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0xc, 0x1, 0x2, 0x7ff}, @dev={0xac, 0x14, 0x14, 0xd}, @empty, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xb286, 0x9, 0x8, 0x0, 0xff}, @local, @dev={0xac, 0x14, 0x14, 0x37}, 0xff}}]}, {0x2e, 0x6, "1b0bc9326901c09187dce554c3132d0bbd881a6908d074ec6f3092c257848565daa7134a881294d1d3ab"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_skbedit={0x1050, 0x3, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x10bc, 0x1, [@m_mpls={0xa8, 0x14, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x88029}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_TTL={0x5, 0x7, 0x40}]}, {0x54, 0x6, "7546af58ef9595c53ef1406ce7be9c84d0029fd4117a02f7f41cc7095f9b69111c46b29cd766d17d5fe745ec7152e63836519e91f2ae546f9f88428319a2545dec521d0f98ecfd275d939e00dfb2ab0d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x1d8, 0x14, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xf1a, 0x10000006, 0x9, 0xffff}, @empty, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x2, 0x2, 0x7, 0x4}, @loopback, @empty, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xff48, 0x8, 0x2, 0x34d2}, @multicast2, @multicast1, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x3, 0x3, 0x6, 0x6}, @loopback, @private=0xa010101, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x93a4, 0x20000000, 0x2c, 0x9}, @multicast2, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fff, 0x2, 0x10000000, 0x100, 0xe9c}, @empty, @broadcast, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc, 0x0, 0x3, 0x6, 0x6}, @dev={0xac, 0x14, 0x14, 0x3b}, @multicast1, 0xffffff00}}]}, {0x95, 0x6, "83921c7da82c3ccda45f976b1f2c30515b4635f2e7929ea2068801cce5d0ba50fa8b9a135794d74cda3eaa717dfb784d6e6f042011b930d75df0a28587bf75c53fa804a6f149c8e26cc181674cd8a0899988e5a3325db4af2ab394793d927904b17c8da720af79ba2a9fc0351a08ac52135cc192115644df6e8fcaee97a5a492c111800d1e90d7dd33850c0a9477307f39"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x124, 0x1a, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x81, 0x4, 0x8, 0x5, 0x80}}}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x4}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x40}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0x401}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}]}]}, {0x94, 0x6, "3822e4aebd1099f41356a9f231b9b2ad239609879b0def1ee5869faf73fa1dba84bec31bf987d5e07cca3d5844cd0a1ae22c54bee2dfbacddfeeea00397f127e863162fbf7e171abb630a72befc8c96bc6e572c5fb46fe18b1959162800a772c442bbe7fe518d5732b78d13e6ccf15f300306e606eafcf19b6229690b59bcc63d13c491dc71ab12a3dab9f954dd8ecd3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_police={0xd14, 0x13, 0x0, 0x0, {{0xb}, {0xc58, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x3, 0x7, 0x83d, 0x8, 0xeadc, 0x99f, 0x2, 0xf, 0x1, 0x0, 0xffff7fff, 0x4, 0xa, 0x5, 0x8, 0x7, 0x6c99f11e, 0xfffffffb, 0x8029, 0x7fffffff, 0x3, 0x6, 0x5b, 0x0, 0x1, 0x7, 0x6, 0x8, 0x40, 0x2, 0xffff7c50, 0x0, 0x844, 0x3d64, 0x4, 0xd5cd, 0x21c1, 0x7, 0xfffffff8, 0x5, 0x9, 0x14ce, 0x9, 0x10001, 0x7, 0x7fffffff, 0x0, 0x319, 0x5df, 0x7ff, 0x8, 0x7, 0x0, 0x1ff, 0x9, 0x9, 0x200, 0x5, 0x2, 0xdf, 0x3, 0xc14b, 0x2, 0x8, 0x5, 0x7fff, 0xc, 0x80000000, 0xf310, 0x7, 0x7, 0xe8e, 0x5, 0x0, 0xd52, 0x87bf, 0x9, 0x45d4, 0x9, 0x8, 0x6e2, 0x3c459fe3, 0x0, 0x1ff, 0x4, 0x8000, 0x3, 0x2, 0x200, 0x269ddefc, 0x7, 0x6, 0x100, 0x80000000, 0x9, 0x0, 0x1, 0xfffffffa, 0x1ff, 0x7, 0x0, 0x2, 0x9, 0x800, 0x9, 0x3, 0x1000, 0x6, 0x3, 0x7, 0xb, 0x5, 0x1, 0x6, 0x9, 0x1, 0x7, 0x81, 0x1, 0x200, 0xffff8000, 0x6, 0x5, 0x1, 0x4, 0xffffffff, 0x9, 0x3ff, 0xe2c5, 0x7, 0x7f00, 0x705, 0x6, 0x3, 0x401, 0x5, 0x32f, 0x3, 0x9, 0x33, 0x9, 0x8, 0x9, 0x800, 0xa16, 0x6, 0xeae, 0x9000000, 0x0, 0x9, 0x651, 0x7, 0x3, 0x3, 0x5, 0x1, 0x3, 0x200, 0x1, 0xe, 0x8, 0x6, 0xe5, 0xf010, 0x6c, 0x81, 0x2b, 0x9, 0x3, 0x9a8, 0x86c, 0x2, 0x5, 0xfff, 0x4, 0x8, 0x7f, 0xa00, 0xfffffffe, 0x2, 0x6, 0xb5a6, 0x4, 0xffff, 0x5, 0x7f, 0x8, 0x0, 0x0, 0x1, 0x1000, 0x8, 0x1, 0x1, 0x4, 0x5, 0x3, 0x6, 0xfffffffb, 0xff, 0x4, 0x6, 0x5, 0x81, 0x7fffffff, 0x396, 0x8, 0x4, 0x2, 0x0, 0x200000, 0x7, 0x3, 0xfffffffd, 0xc, 0x0, 0x2, 0xb, 0x8, 0x85, 0x0, 0x1000, 0x2, 0x4800, 0x8172, 0x200, 0x8000, 0x4, 0x1, 0x5, 0xff, 0xf5e2, 0xe2, 0x8, 0x4, 0xc, 0x2, 0x80000001, 0x4, 0xd, 0x101, 0x9, 0xb, 0x9, 0x94, 0xff, 0x0, 0x5, 0x9, 0xd2, 0x3, 0x2, 0x6, 0x0, 0x31be]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xff}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff, 0x4dff, 0x538, 0xfffffffe, 0x7, 0x4, 0x7, 0x3, 0x8, 0x3, 0x7, 0x3, 0x8000, 0x800, 0xf, 0x401, 0xb, 0x1, 0x3, 0x832, 0x4, 0x7fffffff, 0x0, 0xfff, 0x0, 0xfff, 0x6, 0xa3, 0xffffffff, 0x0, 0x80000001, 0x2, 0x5, 0x9b, 0x9fd8, 0x1, 0x2, 0xc2, 0x0, 0x3, 0x0, 0x2, 0x66, 0x1, 0x9, 0xbf0, 0x6a, 0x1, 0x2, 0x9, 0x71fd, 0xd, 0xe00, 0x0, 0xffff, 0x9, 0x80, 0x3, 0x9, 0xfff, 0xffffffff, 0x9, 0xad1, 0x6, 0x5, 0x200, 0x710, 0x5, 0x1, 0x2, 0x2, 0x0, 0x7f, 0x401, 0x100, 0xf18, 0x28, 0x81, 0x0, 0x1, 0x3, 0x7f, 0x5, 0x9, 0x8, 0x3, 0x5, 0x7, 0x2, 0x3, 0x6, 0x46, 0x0, 0xdd88, 0x8945, 0x4, 0x9, 0x81, 0x7f, 0xc2, 0x2, 0x1000, 0xa, 0x10001, 0xff, 0x800, 0x9, 0x4, 0x4, 0x1, 0x9, 0x996, 0xffff7fff, 0x7f, 0x7, 0x4, 0x4, 0x4ad8, 0xad, 0xfff, 0x200, 0x3ff, 0x72, 0x8, 0x6, 0x7, 0x1, 0x2, 0x0, 0xc1, 0x2, 0x7, 0x0, 0x60000, 0xffffffff, 0x5, 0x2, 0xb2, 0x2, 0x4, 0x2, 0x0, 0x7, 0xff, 0x7fff, 0x6, 0xfffffff9, 0xe, 0x7, 0xfffffffc, 0x23b, 0x4, 0x9, 0x7, 0x9, 0xfffffffe, 0x0, 0x7ff, 0x0, 0x9, 0x0, 0x3, 0x6, 0x6, 0x7ff, 0x101, 0x5, 0x0, 0x7, 0x5, 0x6, 0x0, 0x5, 0x8, 0xfe2, 0x8, 0x9907, 0xfd7a, 0x4, 0x0, 0x64, 0xb6, 0x6, 0xe68d14e6, 0x200, 0x9, 0x8, 0x5, 0x8, 0x8, 0x4, 0xd993, 0x55, 0xffffffff, 0x8, 0x1000, 0x271, 0x6, 0x101, 0x401, 0x8, 0x9, 0x25, 0x6, 0x2, 0x1, 0x3ff, 0x2, 0x5, 0x7, 0x8737, 0x1, 0x0, 0x6, 0x7fff, 0x6, 0x9db, 0x9, 0xf, 0x7, 0xd, 0x1800, 0xfffffffc, 0x9, 0x5, 0x9, 0xffff, 0xfffff758, 0x80000000, 0x0, 0x59c, 0x1, 0xb, 0xc264e96, 0x101, 0x2, 0x5, 0x28, 0x6, 0x1, 0x9, 0x1b, 0x81, 0x1ff0, 0x2, 0xfffffffe, 0x62d, 0x8, 0x80000001, 0x8, 0x3, 0x7, 0x6, 0x4, 0x2, 0xffffffff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xb32}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7f}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6000000, 0x6f, 0x6, 0x4, 0x5, 0x7fffffff, 0x8000, 0x10000, 0x8, 0x1, 0x200, 0x4, 0x800, 0xc, 0x2, 0x0, 0x3, 0x3, 0x33, 0x9, 0xcbc5, 0xfff, 0x400, 0x40, 0x5, 0x7, 0x2, 0x0, 0xf309, 0x0, 0x0, 0x8, 0x6, 0x1, 0xfffffffe, 0xc, 0xd02, 0x7, 0x4, 0xe0000, 0x5, 0x80000001, 0x0, 0x1, 0x3, 0xda93, 0x40, 0x2, 0x2, 0x5a2, 0x1, 0x3c3, 0x7, 0x42, 0x2, 0x6, 0x1ff, 0x8, 0xd26, 0x5, 0x7, 0x400000, 0x10, 0x9, 0x7fff, 0x3, 0x400, 0x9, 0x4, 0xf7d, 0x8, 0x9, 0x9, 0x5, 0x7, 0x156bb3f, 0x2, 0x2, 0x4, 0xc85, 0x7, 0x6, 0x4, 0x80000000, 0xf91, 0x7, 0xb6, 0xc5, 0x1, 0x1, 0x6, 0x4, 0x1, 0x10001, 0x1, 0x7ff, 0x3, 0x100, 0xe1fc, 0x8000, 0x2, 0xc, 0x8, 0x1000, 0x8, 0x10, 0x2, 0x3, 0x6, 0x8, 0x101, 0x3ff, 0x5, 0x9, 0x10000, 0xb, 0xfffffffd, 0x44d9, 0x9, 0x5, 0x5, 0x400, 0x3, 0xa, 0x8, 0x4, 0xdb, 0x8, 0x2, 0x0, 0x7, 0xc07, 0x7f, 0x9, 0x200, 0x8, 0x0, 0x81, 0x400, 0x5, 0x7ff, 0x3, 0x7, 0x7, 0x78, 0xd8de, 0xffffffd9, 0xc, 0x7fff, 0x9, 0xdf7, 0x10, 0x3, 0xfb, 0x8001, 0x0, 0x3, 0x40, 0x0, 0x9, 0x1000, 0x9, 0x10, 0xd, 0x5, 0x3, 0xe, 0x3, 0x401, 0x1, 0x80000001, 0x2, 0xda84, 0xfffffff8, 0x9, 0x1, 0x1, 0x8, 0x8, 0x4, 0x8, 0xfff, 0x80000001, 0x9, 0x53, 0x5, 0x3, 0xffffffff, 0xfff, 0x7, 0xfbb, 0xf7293b96, 0x3, 0x4, 0xfffffff7, 0x2, 0x4033dd75, 0x4f38b0f7, 0x101, 0x6, 0x64ef, 0x6, 0x6, 0x9845, 0x6, 0x0, 0x800, 0x70, 0x2066, 0x2, 0x7d, 0xf0000000, 0x9, 0x7, 0x7, 0x81, 0x0, 0x8, 0x1, 0x7, 0x0, 0x81, 0x7, 0x0, 0x0, 0x6, 0x9a38, 0x97c5, 0x1, 0x9, 0x80, 0x672, 0xb, 0xa40, 0x9, 0x8, 0x1, 0x5, 0x1, 0x2, 0x0, 0x80000000, 0x10000, 0x3ff, 0xc, 0x7d, 0x8, 0x800, 0x4, 0x7fffffff, 0x9, 0x990, 0x2, 0x8, 0x8, 0x8000]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}], []]}, {0x94, 0x6, "4e756d004e7c016994890d9876cf5d6fd2675b74d4252c00518e5449f609305562d8588f846675a144570d94461fac11532b38461a9d334629724c3c0dbe9a9c4caf1f70930e09eed92e9fdcafc8e8bb6ffbc73f8a34c0a96d92627c2087df94f1024ab093789f916a830c89ddeb8747e51373da5885b78086af97efd38220457a0831eb047b5381b87cac11fedf9f19"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x12e8, 0x1, [@m_skbedit={0x80, 0x1a, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0x1}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x688, 0x9, 0x1, 0x9, 0x401}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0xfff3}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}]}, {0x24, 0x6, "958e6125a17556d3e28d82bcbf7d594e34b7be5649029d956325371b4c435030"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x13c, 0x20, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xd}]}, {0xfd, 0x6, "aca4c2d0e4f33f93574cbc642ab1600fa6d64315530e52225ffef549dec7d5feffd642cad60819f11b1beb2ba543a94f6282e52746287413cc0a04de6e2cd6b9016c43651b56f0caf8ec7970f4c8711aa95b036a6b7a31b07b12e749d3df64ad017294418db2ef3caf440ba77dbd7dfa984111e78663b5ebe9d4cfe21c3541ec48262a538be790d36e89d789b46f6084d3b33d18e983e1a771996df1a37f701d184b05c807366915a2eeb7fa91bde0cf5013e101037cd347a658d872e958a8afcfb7150823819fccf93ddbf14e0790887c7199cd8e5fb23ae064745280f8595f3be9d07eed55d71ab4b2d1c69b1439c0599ea3bdb1deedc97c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}, @m_connmark={0x78, 0x0, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x5, 0x200, 0xad66}, 0x5}}]}, {0x29, 0x6, "6fe8d29b1d6dd4a92e1c349e35165fccc79f76b87d97965a2049c3590a9d3f3372fb9044df"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xf34, 0xa, 0x0, 0x0, {{0xf}, {0x4}, {0xf04, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0xa0, 0x17, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x4}]}, {0x6a, 0x6, "cd1be9e9a3554ba6796dcc309c59c1c27e3eb309583cc65199f2758af8415c4d74d515d30ea33e4f692c863a1c72b4e0dc09d2720560bbb583b0ad19974addc33f4c9de1385195158f25304a1aec15012761bfc0a74ff38cc925eefbcad9088bd2df6e4f21bf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0xdc, 0x3, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @random="4f0158ee36bc"}, @TCA_IFE_SMAC={0xa, 0x4, @link_local}, @TCA_IFE_DMAC={0xa, 0x3, @remote}]}, {0x90, 0x6, "879036d0240428081d4aa170156f1c82d57072a8bb8c10242eba92d611467e6c310dba7ffb0d8c447595cf2bde84526d67e5ecd3cd8b1294a2822618550ee446bb78fc10beaa3b5107e2737ee31f657422175752817819e597640974d56138112303956e151260cd492c4dbd4417b12464afa88b43927eb30f76f80c70a700cc631b1c130110584ac7e584d4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x352c}}, 0x4800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x54, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x0, 0x0, &(0x7f00000001c0), 0x8, 0x8a, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$isdn_base(0x22, 0x3, 0x0) writev(r8, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 61.583485ms ago: executing program 0 (id=1113): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) 0s ago: executing program 0 (id=1114): mq_unlink(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) kernel console output (not intermixed with test programs): 000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.466451][ T4181] R13: 00007f44cb696038 R14: 00007f44cb695fa0 R15: 00007ffecc3b65e8 [ 46.466474][ T4181] [ 46.818808][ T4195] netlink: 80 bytes leftover after parsing attributes in process `syz.2.185'. [ 46.839723][ T4197] netlink: 36 bytes leftover after parsing attributes in process `syz.1.186'. [ 46.839748][ T4197] netlink: 36 bytes leftover after parsing attributes in process `syz.1.186'. [ 46.839808][ T4197] netlink: 36 bytes leftover after parsing attributes in process `syz.1.186'. [ 46.877720][ T4197] netlink: 36 bytes leftover after parsing attributes in process `syz.1.186'. [ 46.915026][ T4197] loop1: detected capacity change from 0 to 1024 [ 46.921196][ T4197] EXT4-fs: Ignoring removed orlov option [ 46.941828][ T4197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.999805][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.073676][ T4208] usb usb1: check_ctrlrecip: process 4208 (syz.1.188) requesting ep 01 but needs 81 [ 47.073749][ T4208] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 47.156285][ T4214] FAULT_INJECTION: forcing a failure. [ 47.156285][ T4214] name failslab, interval 1, probability 0, space 0, times 0 [ 47.156322][ T4214] CPU: 1 UID: 0 PID: 4214 Comm: syz.1.191 Tainted: G W 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 47.156367][ T4214] Tainted: [W]=WARN [ 47.156375][ T4214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 47.156394][ T4214] Call Trace: [ 47.156401][ T4214] [ 47.156410][ T4214] __dump_stack+0x1d/0x30 [ 47.156511][ T4214] dump_stack_lvl+0xe8/0x140 [ 47.156531][ T4214] dump_stack+0x15/0x1b [ 47.156549][ T4214] should_fail_ex+0x265/0x280 [ 47.156632][ T4214] should_failslab+0x8c/0xb0 [ 47.156733][ T4214] __kmalloc_noprof+0xa5/0x3e0 [ 47.156765][ T4214] ? unregister_netdevice_many_notify+0x4c9/0x15d0 [ 47.156794][ T4214] ? unlist_netdevice+0x2cc/0x320 [ 47.156855][ T4214] unregister_netdevice_many_notify+0x4c9/0x15d0 [ 47.156884][ T4214] ? __rcu_read_unlock+0x4f/0x70 [ 47.156906][ T4214] unregister_netdevice_queue+0x1f5/0x220 [ 47.157002][ T4214] unregister_netdev+0xb3/0xe0 [ 47.157057][ T4214] slip_close+0xe4/0x100 [ 47.157164][ T4214] ? __pfx_slip_close+0x10/0x10 [ 47.157188][ T4214] tty_ldisc_close+0x74/0xa0 [ 47.157214][ T4214] tty_set_ldisc+0x1b9/0x380 [ 47.157285][ T4214] tiocsetd+0x51/0x60 [ 47.157310][ T4214] tty_ioctl+0xa7f/0xb80 [ 47.157335][ T4214] ? __pfx_tty_ioctl+0x10/0x10 [ 47.157388][ T4214] __se_sys_ioctl+0xcb/0x140 [ 47.157445][ T4214] __x64_sys_ioctl+0x43/0x50 [ 47.157472][ T4214] x64_sys_call+0x1816/0x2ff0 [ 47.157491][ T4214] do_syscall_64+0xd2/0x200 [ 47.157586][ T4214] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.157607][ T4214] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 47.157667][ T4214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.157686][ T4214] RIP: 0033:0x7eff6eecebe9 [ 47.157700][ T4214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.157768][ T4214] RSP: 002b:00007eff6d937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.157786][ T4214] RAX: ffffffffffffffda RBX: 00007eff6f0f5fa0 RCX: 00007eff6eecebe9 [ 47.157832][ T4214] RDX: 0000200000000100 RSI: 0000000000005423 RDI: 0000000000000003 [ 47.157843][ T4214] RBP: 00007eff6d937090 R08: 0000000000000000 R09: 0000000000000000 [ 47.157854][ T4214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.157866][ T4214] R13: 00007eff6f0f6038 R14: 00007eff6f0f5fa0 R15: 00007fffb8fc7118 [ 47.157912][ T4214] [ 47.158116][ T4216] loop3: detected capacity change from 0 to 512 [ 47.415266][ T29] kauditd_printk_skb: 574 callbacks suppressed [ 47.415283][ T29] audit: type=1400 audit(1755086233.386:1398): avc: denied { execmem } for pid=4217 comm="syz.4.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.429572][ T4216] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 47.474021][ T4216] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 47.474067][ T4216] System zones: 1-12 [ 47.474158][ T4216] EXT4-fs (loop3): orphan cleanup on readonly fs [ 47.474400][ T4216] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.192: bg 0: block 361: padding at end of block bitmap is not set [ 47.474567][ T4216] EXT4-fs (loop3): Remounting filesystem read-only [ 47.474720][ T4216] EXT4-fs (loop3): 1 truncate cleaned up [ 47.475259][ T4216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 47.558212][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 47.583501][ T4224] netlink: 'syz.3.195': attribute type 13 has an invalid length. [ 47.591891][ T29] audit: type=1400 audit(1755086233.636:1399): avc: denied { create } for pid=4220 comm="syz.1.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 47.622952][ T4226] loop0: detected capacity change from 0 to 512 [ 47.639473][ T4224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 47.643469][ T29] audit: type=1400 audit(1755086233.636:1400): avc: denied { bind } for pid=4220 comm="syz.1.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 47.681798][ T4226] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 47.691865][ T4226] EXT4-fs (loop0): orphan cleanup on readonly fs [ 47.731725][ T4226] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.196: corrupted inode contents [ 47.778813][ T4226] EXT4-fs (loop0): Remounting filesystem read-only [ 47.812089][ T4226] EXT4-fs (loop0): 1 truncate cleaned up [ 47.817809][ T29] audit: type=1326 audit(1755086233.856:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce132ebe9 code=0x7ffc0000 [ 47.817866][ T1691] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 47.841397][ T29] audit: type=1326 audit(1755086233.856:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f2ce132ebe9 code=0x7ffc0000 [ 47.851998][ T1691] Quota error (device loop0): write_blk: dquota write failed [ 47.875264][ T29] audit: type=1326 audit(1755086233.856:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce132ebe9 code=0x7ffc0000 [ 47.875337][ T29] audit: type=1326 audit(1755086233.856:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ce132ebe9 code=0x7ffc0000 [ 47.882725][ T1691] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 47.939481][ T1691] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 47.950117][ T1691] Quota error (device loop0): write_blk: dquota write failed [ 47.979678][ T4235] usb usb1: check_ctrlrecip: process 4235 (syz.2.199) requesting ep 01 but needs 81 [ 48.034068][ T4235] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 48.042982][ T1691] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 48.083960][ T4242] netlink: 'syz.3.198': attribute type 10 has an invalid length. [ 48.095946][ T4241] loop2: detected capacity change from 0 to 1024 [ 48.102678][ T4242] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.110009][ T4242] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.118991][ T4241] EXT4-fs: Ignoring removed nobh option [ 48.152417][ T4242] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.159525][ T4242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.166881][ T4242] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.173969][ T4242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.185484][ T4241] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 48.194930][ T4226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.207974][ T4241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.295602][ T4241] serio: Serial port ptm0 [ 48.304433][ T4242] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.311613][ T4242] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.438467][ T4247] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 48.558960][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.667429][ T4259] FAULT_INJECTION: forcing a failure. [ 48.667429][ T4259] name failslab, interval 1, probability 0, space 0, times 0 [ 48.680128][ T4259] CPU: 1 UID: 0 PID: 4259 Comm: syz.0.205 Tainted: G W 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 48.680237][ T4259] Tainted: [W]=WARN [ 48.680245][ T4259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 48.680258][ T4259] Call Trace: [ 48.680264][ T4259] [ 48.680272][ T4259] __dump_stack+0x1d/0x30 [ 48.680296][ T4259] dump_stack_lvl+0xe8/0x140 [ 48.680319][ T4259] dump_stack+0x15/0x1b [ 48.680337][ T4259] should_fail_ex+0x265/0x280 [ 48.680376][ T4259] should_failslab+0x8c/0xb0 [ 48.680405][ T4259] __kmalloc_noprof+0xa5/0x3e0 [ 48.680433][ T4259] ? blk_rq_map_user_iov+0x442/0x14a0 [ 48.680462][ T4259] blk_rq_map_user_iov+0x442/0x14a0 [ 48.680510][ T4259] ? blk_mq_get_tag+0x4f9/0x570 [ 48.680544][ T4259] ? __blk_mq_alloc_requests+0xd86/0xe30 [ 48.680706][ T4259] blk_rq_map_user_io+0x18f/0x260 [ 48.680739][ T4259] ? __rcu_read_unlock+0x4f/0x70 [ 48.680768][ T4259] ? sg_link_reserve+0x117/0x140 [ 48.680802][ T4259] sg_common_write+0xb06/0xc30 [ 48.680884][ T4259] sg_write+0x6b5/0x750 [ 48.680923][ T4259] vfs_writev+0x403/0x8b0 [ 48.680954][ T4259] ? __pfx_sg_write+0x10/0x10 [ 48.681064][ T4259] do_writev+0xe7/0x210 [ 48.681126][ T4259] __x64_sys_writev+0x45/0x50 [ 48.681160][ T4259] x64_sys_call+0x1e9a/0x2ff0 [ 48.681182][ T4259] do_syscall_64+0xd2/0x200 [ 48.681266][ T4259] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.681291][ T4259] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 48.681316][ T4259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.681352][ T4259] RIP: 0033:0x7f44cb46ebe9 [ 48.681370][ T4259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.681387][ T4259] RSP: 002b:00007f44c9ed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 48.681410][ T4259] RAX: ffffffffffffffda RBX: 00007f44cb695fa0 RCX: 00007f44cb46ebe9 [ 48.681422][ T4259] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 48.681507][ T4259] RBP: 00007f44c9ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 48.681520][ T4259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.681532][ T4259] R13: 00007f44cb696038 R14: 00007f44cb695fa0 R15: 00007ffecc3b65e8 [ 48.681567][ T4259] [ 48.687729][ T4257] usb usb1: check_ctrlrecip: process 4257 (syz.3.204) requesting ep 01 but needs 81 [ 48.920815][ T4257] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 48.931646][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.135228][ T4275] netlink: 'syz.0.210': attribute type 10 has an invalid length. [ 49.232005][ T4280] veth0_to_team: entered promiscuous mode [ 49.272635][ T4284] FAULT_INJECTION: forcing a failure. [ 49.272635][ T4284] name failslab, interval 1, probability 0, space 0, times 0 [ 49.285582][ T4284] CPU: 1 UID: 0 PID: 4284 Comm: syz.4.214 Tainted: G W 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 49.285622][ T4284] Tainted: [W]=WARN [ 49.285686][ T4284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 49.285698][ T4284] Call Trace: [ 49.285704][ T4284] [ 49.285712][ T4284] __dump_stack+0x1d/0x30 [ 49.285747][ T4284] dump_stack_lvl+0xe8/0x140 [ 49.285769][ T4284] dump_stack+0x15/0x1b [ 49.285897][ T4284] should_fail_ex+0x265/0x280 [ 49.286000][ T4284] should_failslab+0x8c/0xb0 [ 49.286024][ T4284] kmem_cache_alloc_noprof+0x50/0x310 [ 49.286122][ T4284] ? audit_log_start+0x365/0x6c0 [ 49.286155][ T4284] audit_log_start+0x365/0x6c0 [ 49.286197][ T4284] audit_seccomp+0x48/0x100 [ 49.286224][ T4284] ? __seccomp_filter+0x68c/0x10d0 [ 49.286259][ T4284] __seccomp_filter+0x69d/0x10d0 [ 49.286284][ T4284] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 49.286315][ T4284] ? vfs_write+0x7e8/0x960 [ 49.286338][ T4284] ? __rcu_read_unlock+0x4f/0x70 [ 49.286411][ T4284] ? __fget_files+0x184/0x1c0 [ 49.286438][ T4284] __secure_computing+0x82/0x150 [ 49.286458][ T4284] syscall_trace_enter+0xcf/0x1e0 [ 49.286479][ T4284] do_syscall_64+0xac/0x200 [ 49.286623][ T4284] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.286650][ T4284] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 49.286682][ T4284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.286707][ T4284] RIP: 0033:0x7f8a5f78ebe9 [ 49.286726][ T4284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.286756][ T4284] RSP: 002b:00007f8a5e1f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b6 [ 49.286779][ T4284] RAX: ffffffffffffffda RBX: 00007f8a5f9b5fa0 RCX: 00007f8a5f78ebe9 [ 49.286793][ T4284] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 49.286808][ T4284] RBP: 00007f8a5e1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 49.286822][ T4284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.286835][ T4284] R13: 00007f8a5f9b6038 R14: 00007f8a5f9b5fa0 R15: 00007ffced88fd68 [ 49.286855][ T4284] [ 49.514642][ T4286] loop0: detected capacity change from 0 to 512 [ 49.522857][ T4286] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.534601][ T4286] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 49.548901][ T4286] EXT4-fs (loop0): 1 truncate cleaned up [ 49.555371][ T4286] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.601981][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.776156][ T4366] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 49.782716][ T4366] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 49.790352][ T4366] vhci_hcd vhci_hcd.0: Device attached [ 49.799140][ T4367] vhci_hcd: unknown pdu 2 [ 49.820088][ T4356] vhci_hcd: stop threads [ 49.824440][ T4356] vhci_hcd: release socket [ 49.828912][ T4356] vhci_hcd: disconnect device [ 49.888027][ T4373] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.910319][ T4375] loop3: detected capacity change from 0 to 1024 [ 49.919039][ T4375] EXT4-fs: Ignoring removed nobh option [ 49.935017][ T4375] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 49.935327][ T4373] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.946517][ T4375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.979071][ T4369] mmap: syz.4.223 (4369) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.018461][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.046371][ T4373] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.093874][ T4373] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.202303][ T4348] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.215503][ T4348] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.227722][ T4348] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.239306][ T4348] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.354577][ T4388] loop4: detected capacity change from 0 to 512 [ 50.474183][ T4406] loop4: detected capacity change from 0 to 512 [ 50.506900][ T4406] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 50.511104][ T4411] loop2: detected capacity change from 0 to 1024 [ 50.523372][ T4411] EXT4-fs: Ignoring removed nobh option [ 50.529279][ T4406] EXT4-fs (loop4): orphan cleanup on readonly fs [ 50.540987][ T4406] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.237: corrupted inode contents [ 50.546102][ T4411] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 50.562448][ T4411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.567232][ T4406] EXT4-fs (loop4): Remounting filesystem read-only [ 50.588260][ T4411] serio: Serial port ptm0 [ 50.593330][ T4406] EXT4-fs (loop4): 1 truncate cleaned up [ 50.599093][ T4348] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 50.609875][ T4348] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 50.621247][ T4348] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 50.632328][ T4406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.667677][ T4406] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 50.684434][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.712841][ T4421] __nla_validate_parse: 6 callbacks suppressed [ 50.712858][ T4421] netlink: 36 bytes leftover after parsing attributes in process `syz.1.240'. [ 50.766054][ T4425] loop4: detected capacity change from 0 to 512 [ 50.790954][ T4425] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.808879][ T4425] EXT4-fs (loop4): 1 truncate cleaned up [ 50.815576][ T4425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.860303][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.912419][ T4430] FAULT_INJECTION: forcing a failure. [ 50.912419][ T4430] name failslab, interval 1, probability 0, space 0, times 0 [ 50.925191][ T4430] CPU: 1 UID: 0 PID: 4430 Comm: syz.4.245 Tainted: G W 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 50.925229][ T4430] Tainted: [W]=WARN [ 50.925236][ T4430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 50.925246][ T4430] Call Trace: [ 50.925298][ T4430] [ 50.925306][ T4430] __dump_stack+0x1d/0x30 [ 50.925329][ T4430] dump_stack_lvl+0xe8/0x140 [ 50.925349][ T4430] dump_stack+0x15/0x1b [ 50.925365][ T4430] should_fail_ex+0x265/0x280 [ 50.925462][ T4430] should_failslab+0x8c/0xb0 [ 50.925489][ T4430] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 50.925541][ T4430] ? shmem_alloc_inode+0x34/0x50 [ 50.925564][ T4430] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 50.925587][ T4430] shmem_alloc_inode+0x34/0x50 [ 50.925609][ T4430] alloc_inode+0x3d/0x170 [ 50.925671][ T4430] new_inode+0x1d/0xe0 [ 50.925761][ T4430] shmem_get_inode+0x244/0x750 [ 50.925782][ T4430] __shmem_file_setup+0x113/0x210 [ 50.925881][ T4430] shmem_file_setup+0x3b/0x50 [ 50.925913][ T4430] __se_sys_memfd_create+0x2c3/0x590 [ 50.925945][ T4430] __x64_sys_memfd_create+0x31/0x40 [ 50.926012][ T4430] x64_sys_call+0x2abe/0x2ff0 [ 50.926033][ T4430] do_syscall_64+0xd2/0x200 [ 50.926061][ T4430] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.926162][ T4430] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 50.926188][ T4430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.926209][ T4430] RIP: 0033:0x7f8a5f78ebe9 [ 50.926224][ T4430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.926249][ T4430] RSP: 002b:00007f8a5e1f6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 50.926268][ T4430] RAX: ffffffffffffffda RBX: 0000000000000445 RCX: 00007f8a5f78ebe9 [ 50.926279][ T4430] RDX: 00007f8a5e1f6ef0 RSI: 0000000000000000 RDI: 00007f8a5f8127e8 [ 50.926290][ T4430] RBP: 0000200000000200 R08: 00007f8a5e1f6bb7 R09: 00007f8a5e1f6e40 [ 50.926300][ T4430] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 50.926311][ T4430] R13: 00007f8a5e1f6ef0 R14: 00007f8a5e1f6eb0 R15: 0000200000000140 [ 50.926399][ T4430] [ 50.927290][ T4432] FAULT_INJECTION: forcing a failure. [ 50.927290][ T4432] name failslab, interval 1, probability 0, space 0, times 0 [ 51.121461][ T4443] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 51.121461][ T4443] program syz.0.251 not setting count and/or reply_len properly [ 51.122000][ T4432] CPU: 0 UID: 0 PID: 4432 Comm: syz.3.246 Tainted: G W 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 51.122047][ T4432] Tainted: [W]=WARN [ 51.122053][ T4432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 51.122068][ T4432] Call Trace: [ 51.122075][ T4432] [ 51.122083][ T4432] __dump_stack+0x1d/0x30 [ 51.122163][ T4432] dump_stack_lvl+0xe8/0x140 [ 51.122191][ T4432] dump_stack+0x15/0x1b [ 51.122224][ T4432] should_fail_ex+0x265/0x280 [ 51.122298][ T4432] ? io_manage_buffers_legacy+0x188/0x6c0 [ 51.122326][ T4432] should_failslab+0x8c/0xb0 [ 51.122350][ T4432] __kmalloc_cache_noprof+0x4c/0x320 [ 51.122381][ T4432] io_manage_buffers_legacy+0x188/0x6c0 [ 51.122425][ T4432] __io_issue_sqe+0xfb/0x2e0 [ 51.122443][ T4432] ? io_assign_file+0x56/0x200 [ 51.122462][ T4432] io_issue_sqe+0x53/0x970 [ 51.122481][ T4432] ? io_provide_buffers_prep+0x1c7/0x1f0 [ 51.122582][ T4432] io_submit_sqes+0x664/0x1050 [ 51.122608][ T4432] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 51.122675][ T4432] ? 0xffffffff81000000 [ 51.122688][ T4432] ? __rcu_read_unlock+0x4f/0x70 [ 51.122709][ T4432] ? get_pid_task+0x96/0xd0 [ 51.122781][ T4432] ? proc_fail_nth_write+0x13b/0x160 [ 51.122807][ T4432] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 51.122906][ T4432] ? vfs_write+0x7e8/0x960 [ 51.122928][ T4432] ? __rcu_read_unlock+0x4f/0x70 [ 51.123012][ T4432] ? __fget_files+0x184/0x1c0 [ 51.123037][ T4432] ? fput+0x8f/0xc0 [ 51.123103][ T4432] __x64_sys_io_uring_enter+0x78/0x90 [ 51.123126][ T4432] x64_sys_call+0x2de1/0x2ff0 [ 51.123158][ T4432] do_syscall_64+0xd2/0x200 [ 51.123190][ T4432] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.123214][ T4432] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 51.123246][ T4432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.123281][ T4432] RIP: 0033:0x7f125331ebe9 [ 51.123296][ T4432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.123314][ T4432] RSP: 002b:00007f1251d7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 51.123334][ T4432] RAX: ffffffffffffffda RBX: 00007f1253545fa0 RCX: 00007f125331ebe9 [ 51.123350][ T4432] RDX: 0000000000000000 RSI: 00000000000047fa RDI: 0000000000000003 [ 51.123362][ T4432] RBP: 00007f1251d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 51.123375][ T4432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.123387][ T4432] R13: 00007f1253546038 R14: 00007f1253545fa0 R15: 00007ffd868c4688 [ 51.123447][ T4432] [ 51.367352][ T4448] netlink: 52 bytes leftover after parsing attributes in process `syz.3.252'. [ 51.434070][ T4448] netem: change failed [ 51.441728][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.483987][ T4457] loop0: detected capacity change from 0 to 1024 [ 51.512095][ T4457] EXT4-fs: Ignoring removed nobh option [ 51.533442][ T4457] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 51.567874][ T4457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.600098][ T4454] usb usb1: check_ctrlrecip: process 4454 (syz.4.256) requesting ep 01 but needs 81 [ 51.628045][ T4454] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 51.636993][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.665561][ T4469] loop2: detected capacity change from 0 to 512 [ 51.698613][ T4473] loop4: detected capacity change from 0 to 1024 [ 51.735780][ T4469] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 51.749352][ T4473] EXT4-fs: Ignoring removed nobh option [ 51.760296][ T4478] netlink: 'syz.0.261': attribute type 13 has an invalid length. [ 51.777299][ T4469] EXT4-fs (loop2): orphan cleanup on readonly fs [ 51.808313][ T4480] loop3: detected capacity change from 0 to 512 [ 51.820725][ T4473] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 51.825433][ T4469] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.259: corrupted inode contents [ 51.849761][ T4469] EXT4-fs (loop2): Remounting filesystem read-only [ 51.858035][ T4469] EXT4-fs (loop2): 1 truncate cleaned up [ 51.865589][ T4348] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 51.876220][ T4348] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 51.882101][ T4480] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 51.887009][ T4348] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 51.904954][ T4478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 51.920705][ T4480] EXT4-fs (loop3): orphan cleanup on readonly fs [ 51.928776][ T4480] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.262: corrupted inode contents [ 51.959037][ T4480] EXT4-fs (loop3): Remounting filesystem read-only [ 51.982093][ T4480] EXT4-fs (loop3): 1 truncate cleaned up [ 51.989264][ T4348] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 51.999871][ T4348] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 52.011002][ T4348] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 52.047578][ T4486] hub 9-0:1.0: USB hub found [ 52.069404][ T4486] hub 9-0:1.0: 8 ports detected [ 52.098564][ T4493] FAULT_INJECTION: forcing a failure. [ 52.098564][ T4493] name failslab, interval 1, probability 0, space 0, times 0 [ 52.111236][ T4493] CPU: 1 UID: 0 PID: 4493 Comm: syz.4.266 Tainted: G W 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 52.111272][ T4493] Tainted: [W]=WARN [ 52.111320][ T4493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 52.111331][ T4493] Call Trace: [ 52.111337][ T4493] [ 52.111344][ T4493] __dump_stack+0x1d/0x30 [ 52.111365][ T4493] dump_stack_lvl+0xe8/0x140 [ 52.111386][ T4493] dump_stack+0x15/0x1b [ 52.111404][ T4493] should_fail_ex+0x265/0x280 [ 52.111442][ T4493] ? io_manage_buffers_legacy+0x188/0x6c0 [ 52.111470][ T4493] should_failslab+0x8c/0xb0 [ 52.111496][ T4493] __kmalloc_cache_noprof+0x4c/0x320 [ 52.111551][ T4493] io_manage_buffers_legacy+0x188/0x6c0 [ 52.111585][ T4493] __io_issue_sqe+0xfb/0x2e0 [ 52.111629][ T4493] ? io_assign_file+0x56/0x200 [ 52.111647][ T4493] io_issue_sqe+0x53/0x970 [ 52.111668][ T4493] ? io_provide_buffers_prep+0x1c7/0x1f0 [ 52.111717][ T4493] io_submit_sqes+0x664/0x1050 [ 52.111742][ T4493] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 52.111762][ T4493] ? 0xffffffff81000000 [ 52.111776][ T4493] ? __rcu_read_unlock+0x4f/0x70 [ 52.111808][ T4493] ? get_pid_task+0x96/0xd0 [ 52.111830][ T4493] ? proc_fail_nth_write+0x13b/0x160 [ 52.111858][ T4493] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 52.111945][ T4493] ? vfs_write+0x7e8/0x960 [ 52.111968][ T4493] ? __rcu_read_unlock+0x4f/0x70 [ 52.112024][ T4493] ? __fget_files+0x184/0x1c0 [ 52.112048][ T4493] ? fput+0x8f/0xc0 [ 52.112078][ T4493] __x64_sys_io_uring_enter+0x78/0x90 [ 52.112114][ T4493] x64_sys_call+0x2de1/0x2ff0 [ 52.112161][ T4493] do_syscall_64+0xd2/0x200 [ 52.112184][ T4493] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.112206][ T4493] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 52.112292][ T4493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.112314][ T4493] RIP: 0033:0x7f8a5f78ebe9 [ 52.112330][ T4493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.112350][ T4493] RSP: 002b:00007f8a5e1f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 52.112371][ T4493] RAX: ffffffffffffffda RBX: 00007f8a5f9b5fa0 RCX: 00007f8a5f78ebe9 [ 52.112390][ T4493] RDX: 0000000000000000 RSI: 00000000000047fa RDI: 0000000000000003 [ 52.112404][ T4493] RBP: 00007f8a5e1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.112417][ T4493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.112430][ T4493] R13: 00007f8a5f9b6038 R14: 00007f8a5f9b5fa0 R15: 00007ffced88fd68 [ 52.112451][ T4493] [ 52.472738][ T29] kauditd_printk_skb: 713 callbacks suppressed [ 52.472755][ T29] audit: type=1400 audit(1755086238.506:2095): avc: denied { create } for pid=4494 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 52.511882][ T4496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.267'. [ 52.665946][ T29] audit: type=1326 audit(1755086238.706:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44cb46ebe9 code=0x7ffc0000 [ 52.716851][ T4500] loop2: detected capacity change from 0 to 1024 [ 52.729270][ T4500] EXT4-fs: Ignoring removed nobh option [ 52.741270][ T4498] usb usb1: check_ctrlrecip: process 4498 (syz.0.269) requesting ep 01 but needs 81 [ 52.757133][ T29] audit: type=1326 audit(1755086238.706:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44cb46ebe9 code=0x7ffc0000 [ 52.780574][ T29] audit: type=1326 audit(1755086238.706:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f44cb46ebe9 code=0x7ffc0000 [ 52.780811][ T4498] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 52.803994][ T29] audit: type=1326 audit(1755086238.706:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44cb46ebe9 code=0x7ffc0000 [ 52.834475][ T29] audit: type=1326 audit(1755086238.706:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44cb46ebe9 code=0x7ffc0000 [ 52.857927][ T29] audit: type=1326 audit(1755086238.706:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44cb46ebe9 code=0x7ffc0000 [ 52.881354][ T29] audit: type=1326 audit(1755086238.716:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44cb46ebe9 code=0x7ffc0000 [ 52.904786][ T29] audit: type=1326 audit(1755086238.716:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44cb46ebe9 code=0x7ffc0000 [ 52.928165][ T29] audit: type=1326 audit(1755086238.716:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44cb46ebe9 code=0x7ffc0000 [ 52.971539][ T4500] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 53.037097][ T4514] netlink: 'syz.4.273': attribute type 13 has an invalid length. [ 53.094209][ T4514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 53.139610][ T4525] netlink: 48 bytes leftover after parsing attributes in process `syz.2.278'. [ 53.159207][ T4529] loop3: detected capacity change from 0 to 128 [ 53.176394][ T4529] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.198472][ T4530] syz_tun: entered allmulticast mode [ 53.243035][ T4534] netlink: 'syz.4.281': attribute type 13 has an invalid length. [ 53.267655][ T4536] FAULT_INJECTION: forcing a failure. [ 53.267655][ T4536] name failslab, interval 1, probability 0, space 0, times 0 [ 53.280369][ T4536] CPU: 1 UID: 0 PID: 4536 Comm: syz.3.282 Tainted: G W 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 53.280469][ T4536] Tainted: [W]=WARN [ 53.280476][ T4536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 53.280486][ T4536] Call Trace: [ 53.280492][ T4536] [ 53.280499][ T4536] __dump_stack+0x1d/0x30 [ 53.280562][ T4536] dump_stack_lvl+0xe8/0x140 [ 53.280659][ T4536] dump_stack+0x15/0x1b [ 53.280675][ T4536] should_fail_ex+0x265/0x280 [ 53.280695][ T4536] should_failslab+0x8c/0xb0 [ 53.280756][ T4536] kmem_cache_alloc_noprof+0x50/0x310 [ 53.280787][ T4536] ? getname_flags+0x80/0x3b0 [ 53.280833][ T4536] getname_flags+0x80/0x3b0 [ 53.280926][ T4536] getname_uflags+0x21/0x30 [ 53.281024][ T4536] io_linkat_prep+0x105/0x1b0 [ 53.281134][ T4536] io_submit_sqes+0x5de/0x1050 [ 53.281163][ T4536] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 53.281215][ T4536] ? 0xffffffff81000000 [ 53.281250][ T4536] ? __rcu_read_unlock+0x4f/0x70 [ 53.281272][ T4536] ? get_pid_task+0x96/0xd0 [ 53.281294][ T4536] ? proc_fail_nth_write+0x13b/0x160 [ 53.281324][ T4536] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 53.281428][ T4536] ? vfs_write+0x7e8/0x960 [ 53.281450][ T4536] ? __rcu_read_unlock+0x4f/0x70 [ 53.281489][ T4536] ? __fget_files+0x184/0x1c0 [ 53.281517][ T4536] ? fput+0x8f/0xc0 [ 53.281547][ T4536] __x64_sys_io_uring_enter+0x78/0x90 [ 53.281569][ T4536] x64_sys_call+0x2de1/0x2ff0 [ 53.281632][ T4536] do_syscall_64+0xd2/0x200 [ 53.281661][ T4536] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.281684][ T4536] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 53.281722][ T4536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.281746][ T4536] RIP: 0033:0x7f125331ebe9 [ 53.281762][ T4536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.281782][ T4536] RSP: 002b:00007f1251d7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 53.281802][ T4536] RAX: ffffffffffffffda RBX: 00007f1253545fa0 RCX: 00007f125331ebe9 [ 53.281814][ T4536] RDX: 0000000000004b5d RSI: 0000000000001d69 RDI: 0000000000000003 [ 53.281887][ T4536] RBP: 00007f1251d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 53.281898][ T4536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.281909][ T4536] R13: 00007f1253546038 R14: 00007f1253545fa0 R15: 00007ffd868c4688 [ 53.281928][ T4536] [ 53.523002][ T4534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 53.604740][ T4541] loop3: detected capacity change from 0 to 1024 [ 53.619621][ T4541] EXT4-fs: Ignoring removed nobh option [ 53.634970][ T4542] loop4: detected capacity change from 0 to 1024 [ 53.656501][ T4541] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 53.666941][ T4542] EXT4-fs: Ignoring removed nobh option [ 53.698551][ T4542] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 53.714709][ T4542] serio: Serial port ptm0 [ 53.970009][ T4565] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 54.060268][ T4567] netlink: 36 bytes leftover after parsing attributes in process `syz.1.293'. [ 54.169676][ T4573] usb usb1: check_ctrlrecip: process 4573 (syz.1.296) requesting ep 01 but needs 81 [ 54.180640][ T4573] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 54.242922][ T4581] loop1: detected capacity change from 0 to 512 [ 54.262319][ T4581] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 54.279161][ T4581] EXT4-fs (loop1): orphan cleanup on readonly fs [ 54.291543][ T4577] loop3: detected capacity change from 0 to 512 [ 54.299364][ T4581] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.300: corrupted inode contents [ 54.325489][ T4581] EXT4-fs (loop1): Remounting filesystem read-only [ 54.336651][ T4577] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.348572][ T4581] EXT4-fs (loop1): 1 truncate cleaned up [ 54.361032][ T4350] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 54.371679][ T4350] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 54.387319][ T4350] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 54.404783][ T4577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 54.413638][ T4577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 54.510455][ T4587] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 54.517044][ T4587] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 54.524640][ T4587] vhci_hcd vhci_hcd.0: Device attached [ 54.532587][ T4588] vhci_hcd: cannot find the pending unlink 6 [ 54.543587][ T4587] loop1: detected capacity change from 0 to 512 [ 54.565771][ T4587] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.600579][ T4587] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.301: corrupted inode contents [ 54.616239][ T4587] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.301: mark_inode_dirty error [ 54.632203][ T4587] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.301: corrupted inode contents [ 54.654737][ T4587] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.301: mark_inode_dirty error [ 54.684794][ T4603] loop3: detected capacity change from 0 to 512 [ 54.693156][ T4603] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.727408][ T4603] EXT4-fs (loop3): 1 truncate cleaned up [ 54.733649][ T4588] vhci_hcd: connection closed [ 54.733911][ T4350] vhci_hcd: stop threads [ 54.743032][ T4350] vhci_hcd: release socket [ 54.747607][ T4350] vhci_hcd: disconnect device [ 54.777805][ T4616] netlink: 48 bytes leftover after parsing attributes in process `syz.4.311'. [ 54.786829][ T3488] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 54.794472][ T3488] usb 3-1: enqueue for inactive port 0 [ 54.800029][ T3488] usb 3-1: enqueue for inactive port 0 [ 54.805850][ T3488] usb 3-1: enqueue for inactive port 0 [ 54.884164][ T4624] netlink: 48 bytes leftover after parsing attributes in process `syz.3.314'. [ 54.890944][ T3488] vhci_hcd: vhci_device speed not set [ 55.118295][ T4618] loop2: detected capacity change from 0 to 32768 [ 55.172227][ T3293] loop2: p1 p2 p3 < > [ 55.178569][ T3293] loop2: p1 size 242222080 extends beyond EOD, truncated [ 55.190554][ T3293] loop2: p2 start 4294967295 is beyond EOD, truncated [ 55.205587][ T4618] loop2: p1 p2 p3 < > [ 55.209821][ T4618] loop2: p1 size 242222080 extends beyond EOD, truncated [ 55.217742][ T4618] loop2: p2 start 4294967295 is beyond EOD, truncated [ 55.320047][ T4637] veth0_to_team: entered promiscuous mode [ 55.403793][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 55.405316][ T4468] udevd[4468]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 55.525622][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 55.541195][ T4468] udevd[4468]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 55.582117][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 55.592093][ T4468] udevd[4468]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 55.635490][ T4675] random: crng reseeded on system resumption [ 55.748990][ T4687] loop2: detected capacity change from 0 to 512 [ 55.756255][ T4687] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 55.774463][ T4687] EXT4-fs (loop2): 1 truncate cleaned up [ 55.804716][ T4695] netlink: 'syz.0.334': attribute type 10 has an invalid length. [ 55.984726][ T4709] loop2: detected capacity change from 0 to 1024 [ 56.012167][ T4709] EXT4-fs: Ignoring removed orlov option [ 56.017942][ T4709] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.049235][ T4709] EXT4-fs: old and new quota format mixing [ 56.059836][ T4709] loop2: detected capacity change from 0 to 128 [ 56.068690][ T4709] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.102137][ T4722] netlink: 36 bytes leftover after parsing attributes in process `syz.1.348'. [ 56.147436][ T4721] netlink: 36 bytes leftover after parsing attributes in process `syz.0.349'. [ 56.354699][ T4741] usb usb1: check_ctrlrecip: process 4741 (syz.1.357) requesting ep 01 but needs 81 [ 56.364796][ T4741] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 56.400654][ T4751] @: renamed from vlan0 (while UP) [ 56.482615][ T4765] 9pnet_fd: Insufficient options for proto=fd [ 56.528472][ T4771] loop2: detected capacity change from 0 to 1024 [ 56.548990][ T4771] EXT4-fs: Ignoring removed nobh option [ 56.557895][ T4765] netlink: 48 bytes leftover after parsing attributes in process `syz.0.366'. [ 56.574105][ T4771] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 56.611147][ T4781] usb usb1: check_ctrlrecip: process 4781 (syz.4.372) requesting ep 01 but needs 81 [ 56.620643][ T4781] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 56.667850][ T4793] loop1: detected capacity change from 0 to 128 [ 56.675788][ T4793] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.716078][ T4797] netlink: 80 bytes leftover after parsing attributes in process `syz.0.381'. [ 56.750157][ T4807] netlink: 20 bytes leftover after parsing attributes in process `syz.2.384'. [ 56.798597][ T4814] usb usb1: check_ctrlrecip: process 4814 (syz.2.387) requesting ep 01 but needs 81 [ 56.808365][ T4814] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 56.837173][ T4819] loop2: detected capacity change from 0 to 512 [ 56.860248][ T4819] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 56.861531][ T4825] loop4: detected capacity change from 0 to 1024 [ 56.874774][ T4819] EXT4-fs (loop2): orphan cleanup on readonly fs [ 56.876134][ T4825] EXT4-fs: Ignoring removed nobh option [ 56.888834][ T4819] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.389: corrupted inode contents [ 56.902895][ T4825] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 56.915526][ T4819] EXT4-fs (loop2): Remounting filesystem read-only [ 56.930596][ T4819] EXT4-fs (loop2): 1 truncate cleaned up [ 56.937058][ T4354] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 56.947686][ T4354] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 56.966833][ T4354] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 56.995202][ T4838] netlink: 48 bytes leftover after parsing attributes in process `syz.1.396'. [ 56.997814][ T4819] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 57.028322][ T4840] FAULT_INJECTION: forcing a failure. [ 57.028322][ T4840] name failslab, interval 1, probability 0, space 0, times 0 [ 57.041180][ T4840] CPU: 1 UID: 0 PID: 4840 Comm: syz.0.397 Tainted: G W 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 57.041249][ T4840] Tainted: [W]=WARN [ 57.041255][ T4840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 57.041266][ T4840] Call Trace: [ 57.041273][ T4840] [ 57.041281][ T4840] __dump_stack+0x1d/0x30 [ 57.041306][ T4840] dump_stack_lvl+0xe8/0x140 [ 57.041329][ T4840] dump_stack+0x15/0x1b [ 57.041417][ T4840] should_fail_ex+0x265/0x280 [ 57.041437][ T4840] should_failslab+0x8c/0xb0 [ 57.041464][ T4840] kmem_cache_alloc_noprof+0x50/0x310 [ 57.041520][ T4840] ? getname_flags+0x80/0x3b0 [ 57.041598][ T4840] getname_flags+0x80/0x3b0 [ 57.041628][ T4840] __x64_sys_rmdir+0x21/0x40 [ 57.041707][ T4840] x64_sys_call+0x238c/0x2ff0 [ 57.041730][ T4840] do_syscall_64+0xd2/0x200 [ 57.041755][ T4840] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 57.041796][ T4840] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 57.041823][ T4840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.041845][ T4840] RIP: 0033:0x7f44cb46ebe9 [ 57.041862][ T4840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.041886][ T4840] RSP: 002b:00007f44c9ed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 57.041905][ T4840] RAX: ffffffffffffffda RBX: 00007f44cb695fa0 RCX: 00007f44cb46ebe9 [ 57.041929][ T4840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 57.041940][ T4840] RBP: 00007f44c9ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 57.041952][ T4840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.041965][ T4840] R13: 00007f44cb696038 R14: 00007f44cb695fa0 R15: 00007ffecc3b65e8 [ 57.041985][ T4840] [ 57.042791][ T4840] netlink: 20 bytes leftover after parsing attributes in process `syz.0.397'. [ 57.275870][ T4848] usb usb1: check_ctrlrecip: process 4848 (syz.4.399) requesting ep 01 but needs 81 [ 57.276830][ T4852] netlink: 'syz.0.402': attribute type 13 has an invalid length. [ 57.285569][ T4848] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 57.317683][ T4852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.479764][ T4869] loop4: detected capacity change from 0 to 512 [ 57.487491][ T29] kauditd_printk_skb: 797 callbacks suppressed [ 57.487509][ T29] audit: type=1326 audit(1755086243.536:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44cb46ebe9 code=0x7ffc0000 [ 57.569207][ T4874] syz.3.404 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 57.581446][ T4874] netlink: 24 bytes leftover after parsing attributes in process `syz.3.404'. [ 57.603109][ T4874] loop3: detected capacity change from 0 to 512 [ 57.634689][ T4874] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.809358][ T4869] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 57.836939][ T4869] EXT4-fs (loop4): orphan cleanup on readonly fs [ 57.868505][ T4869] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.408: corrupted inode contents [ 57.957436][ T4869] EXT4-fs (loop4): Remounting filesystem read-only [ 58.008521][ T4869] EXT4-fs (loop4): 1 truncate cleaned up [ 58.465056][ T4894] usb usb1: check_ctrlrecip: process 4894 (syz.0.416) requesting ep 01 but needs 81 [ 58.474763][ T4348] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 58.474934][ T29] audit: type=1326 audit(1755086243.536:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44cb46ebe9 code=0x7ffc0000 [ 58.485314][ T4348] Quota error (device loop4): write_blk: dquota write failed [ 58.485330][ T4348] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 58.508670][ T29] audit: type=1326 audit(1755086243.536:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44cb46ebe9 code=0x7ffc0000 [ 58.516057][ T4348] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 58.516077][ T4348] Quota error (device loop4): write_blk: dquota write failed [ 58.516099][ T4348] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 58.551712][ T4894] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 58.560363][ T29] audit: type=1326 audit(1755086243.536:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44cb46ebe9 code=0x7ffc0000 [ 58.584668][ T4348] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 58.607871][ T29] audit: type=1326 audit(1755086243.536:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44cb46ebe9 code=0x7ffc0000 [ 58.607901][ T29] audit: type=1326 audit(1755086243.776:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44cb46ebe9 code=0x7ffc0000 [ 58.822672][ T4869] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 59.351787][ T4908] netlink: 7 bytes leftover after parsing attributes in process `syz.2.422'. [ 59.363309][ T4908] netlink: 60 bytes leftover after parsing attributes in process `syz.2.422'. [ 59.407513][ T4912] netlink: 'syz.3.424': attribute type 10 has an invalid length. [ 59.426843][ T4912] netlink: 'syz.3.424': attribute type 10 has an invalid length. [ 59.454938][ T4912] loop3: detected capacity change from 0 to 512 [ 59.477765][ T4912] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 59.487501][ T4912] EXT4-fs (loop3): group descriptors corrupted! [ 59.553860][ T4919] loop3: detected capacity change from 0 to 1024 [ 59.560686][ T4919] EXT4-fs: Ignoring removed nobh option [ 59.739584][ T4919] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 59.755952][ T4923] loop2: detected capacity change from 0 to 1024 [ 59.763075][ T4923] EXT4-fs: Ignoring removed nobh option [ 59.780412][ T4923] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 59.807068][ T4926] usb usb1: check_ctrlrecip: process 4926 (syz.0.428) requesting ep 01 but needs 81 [ 59.817863][ T4923] serio: Serial port ptm1 [ 59.833803][ T4926] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 60.198442][ T4945] SELinux: policydb magic number 0x5f737973 does not match expected magic number 0xf97cff8c [ 60.212433][ T4934] loop3: detected capacity change from 0 to 32768 [ 60.219291][ T4945] SELinux: failed to load policy [ 60.225526][ T4945] SELinux: policydb version -1061089188 does not match my version range 15-35 [ 60.234615][ T4945] SELinux: failed to load policy [ 60.244371][ T4945] loop4: detected capacity change from 0 to 512 [ 60.266403][ T4934] loop3: p1 p2 p3 < > [ 60.271521][ T4934] loop3: p1 size 242222080 extends beyond EOD, truncated [ 60.282048][ T4945] EXT4-fs (loop4): 1 truncate cleaned up [ 60.290662][ T4945] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.436: invalid indirect mapped block 234881024 (level 0) [ 60.306915][ T4934] loop3: p2 start 4294967295 is beyond EOD, truncated [ 60.364938][ T4955] usb usb1: check_ctrlrecip: process 4955 (syz.1.439) requesting ep 01 but needs 81 [ 60.375917][ T4955] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 60.414148][ T4957] loop1: detected capacity change from 0 to 512 [ 60.452249][ T4957] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 60.483523][ T4957] EXT4-fs (loop1): orphan cleanup on readonly fs [ 60.495806][ T4957] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.440: corrupted inode contents [ 60.509985][ T4957] EXT4-fs (loop1): Remounting filesystem read-only [ 60.517589][ T4957] EXT4-fs (loop1): 1 truncate cleaned up [ 60.525511][ T4348] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 60.536087][ T4348] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 60.554420][ T4348] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 60.635674][ T4977] loop1: detected capacity change from 0 to 512 [ 60.661669][ T4977] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.692196][ T4983] netlink: 'syz.4.443': attribute type 10 has an invalid length. [ 60.710494][ T4977] EXT4-fs (loop1): 1 truncate cleaned up [ 60.757990][ T4985] loop2: detected capacity change from 0 to 1024 [ 60.782631][ T4985] EXT4-fs: Ignoring removed nobh option [ 60.790372][ T4988] usb usb1: check_ctrlrecip: process 4988 (syz.0.451) requesting ep 01 but needs 81 [ 60.801701][ T4988] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 60.811913][ T4985] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 60.873392][ T4997] loop1: detected capacity change from 0 to 1024 [ 60.880268][ T4997] EXT4-fs: Ignoring removed nobh option [ 60.881261][ T4985] 9pnet_fd: Insufficient options for proto=fd [ 60.922009][ T4997] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 60.962075][ T4997] serio: Serial port ptm0 [ 61.177081][ T5031] loop3: detected capacity change from 0 to 1024 [ 61.185596][ T5031] EXT4-fs: Ignoring removed nobh option [ 61.214255][ T5031] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 61.237366][ T5031] 9pnet_fd: Insufficient options for proto=fd [ 61.285983][ T5052] loop2: detected capacity change from 0 to 1024 [ 61.293022][ T5052] EXT4-fs: Ignoring removed nobh option [ 61.302761][ T5052] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 61.316664][ T5050] loop3: detected capacity change from 0 to 512 [ 61.323714][ T5050] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 61.345191][ T5050] EXT4-fs (loop3): 1 truncate cleaned up [ 61.368255][ T5057] __nla_validate_parse: 11 callbacks suppressed [ 61.368273][ T5057] netlink: 48 bytes leftover after parsing attributes in process `syz.3.475'. [ 61.519388][ T5072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'. [ 61.569884][ T5074] 9pnet_fd: Insufficient options for proto=fd [ 61.608037][ T5079] FAULT_INJECTION: forcing a failure. [ 61.608037][ T5079] name failslab, interval 1, probability 0, space 0, times 0 [ 61.620782][ T5079] CPU: 0 UID: 0 PID: 5079 Comm: syz.2.485 Tainted: G W 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 61.620820][ T5079] Tainted: [W]=WARN [ 61.620827][ T5079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 61.620841][ T5079] Call Trace: [ 61.620849][ T5079] [ 61.620936][ T5079] __dump_stack+0x1d/0x30 [ 61.620960][ T5079] dump_stack_lvl+0xe8/0x140 [ 61.620982][ T5079] dump_stack+0x15/0x1b [ 61.621000][ T5079] should_fail_ex+0x265/0x280 [ 61.621028][ T5079] should_failslab+0x8c/0xb0 [ 61.621051][ T5079] kmem_cache_alloc_noprof+0x50/0x310 [ 61.621116][ T5079] ? getname_flags+0x80/0x3b0 [ 61.621188][ T5079] getname_flags+0x80/0x3b0 [ 61.621219][ T5079] __x64_sys_renameat+0x50/0x80 [ 61.621260][ T5079] x64_sys_call+0x25e2/0x2ff0 [ 61.621283][ T5079] do_syscall_64+0xd2/0x200 [ 61.621318][ T5079] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.621342][ T5079] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 61.621424][ T5079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.621447][ T5079] RIP: 0033:0x7f2ce132ebe9 [ 61.621464][ T5079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.621480][ T5079] RSP: 002b:00007f2cdfd97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000108 [ 61.621565][ T5079] RAX: ffffffffffffffda RBX: 00007f2ce1555fa0 RCX: 00007f2ce132ebe9 [ 61.621578][ T5079] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000006 [ 61.621591][ T5079] RBP: 00007f2cdfd97090 R08: 0000000000000000 R09: 0000000000000000 [ 61.621604][ T5079] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 61.621618][ T5079] R13: 00007f2ce1556038 R14: 00007f2ce1555fa0 R15: 00007fff3e07c178 [ 61.621662][ T5079] [ 61.948602][ T5095] netlink: 'syz.2.493': attribute type 21 has an invalid length. [ 61.992278][ T5095] netlink: 156 bytes leftover after parsing attributes in process `syz.2.493'. [ 62.036809][ T5103] 9pnet_fd: Insufficient options for proto=fd [ 62.075095][ T5109] serio: Serial port ptm0 [ 62.079862][ T5107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.497'. [ 62.137032][ T5114] netlink: 24 bytes leftover after parsing attributes in process `syz.4.501'. [ 62.270660][ T5131] loop1: detected capacity change from 0 to 1024 [ 62.279534][ T5131] EXT4-fs: Ignoring removed nobh option [ 62.314251][ T5136] netlink: 'syz.2.510': attribute type 21 has an invalid length. [ 62.322079][ T5136] netlink: 156 bytes leftover after parsing attributes in process `syz.2.510'. [ 62.337658][ T5131] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 62.356429][ T5131] 9pnet_fd: Insufficient options for proto=fd [ 62.434015][ T5145] usb usb1: check_ctrlrecip: process 5145 (syz.1.513) requesting ep 01 but needs 81 [ 62.443522][ T5145] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 62.535003][ T5148] netlink: 20 bytes leftover after parsing attributes in process `syz.1.514'. [ 62.563480][ T29] kauditd_printk_skb: 819 callbacks suppressed [ 62.563499][ T29] audit: type=1400 audit(1755086248.606:3703): avc: denied { create } for pid=5146 comm="syz.1.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 62.603594][ T29] audit: type=1400 audit(1755086248.636:3704): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.628013][ T29] audit: type=1400 audit(1755086248.636:3705): avc: denied { open } for pid=3305 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.652206][ T29] audit: type=1400 audit(1755086248.636:3706): avc: denied { ioctl } for pid=3305 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.677936][ T29] audit: type=1400 audit(1755086248.636:3707): avc: denied { map_create } for pid=5149 comm="syz.2.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 62.697116][ T29] audit: type=1400 audit(1755086248.646:3708): avc: denied { prog_load } for pid=5149 comm="syz.2.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 62.716219][ T29] audit: type=1400 audit(1755086248.646:3709): avc: denied { bpf } for pid=5149 comm="syz.2.515" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.736672][ T29] audit: type=1400 audit(1755086248.646:3710): avc: denied { perfmon } for pid=5149 comm="syz.2.515" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.778721][ T29] audit: type=1400 audit(1755086248.646:3711): avc: denied { allowed } for pid=5149 comm="syz.2.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 62.798025][ T29] audit: type=1400 audit(1755086248.686:3712): avc: denied { create } for pid=5149 comm="syz.2.515" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 62.939365][ T5168] loop1: detected capacity change from 0 to 1024 [ 62.946678][ T5168] EXT4-fs: Ignoring removed nobh option [ 62.964883][ T5168] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 62.979818][ T5168] 9pnet_fd: Insufficient options for proto=fd [ 63.021040][ T5174] loop1: detected capacity change from 0 to 512 [ 63.038855][ T5174] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.052476][ T5174] EXT4-fs (loop1): 1 truncate cleaned up [ 63.070116][ T5177] usb usb1: check_ctrlrecip: process 5177 (syz.2.524) requesting ep 01 but needs 81 [ 63.081692][ T5177] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 63.200377][ T5191] netlink: 'syz.1.529': attribute type 13 has an invalid length. [ 63.324570][ T5191] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 63.379803][ T5198] loop4: detected capacity change from 0 to 512 [ 63.402480][ T5198] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.443572][ T5198] EXT4-fs (loop4): 1 truncate cleaned up [ 63.713376][ T5207] syz_tun: entered allmulticast mode [ 63.721803][ T5209] loop1: detected capacity change from 0 to 512 [ 63.736333][ T5209] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.740987][ T5205] syz_tun: left allmulticast mode [ 63.772130][ T5209] EXT4-fs (loop1): 1 truncate cleaned up [ 63.820581][ T5217] netlink: 'syz.2.540': attribute type 21 has an invalid length. [ 63.840976][ T5217] netlink: 156 bytes leftover after parsing attributes in process `syz.2.540'. [ 64.066923][ T5238] wg2: entered promiscuous mode [ 64.071951][ T5238] wg2: entered allmulticast mode [ 64.078249][ T5240] loop1: detected capacity change from 0 to 2048 [ 64.085015][ T5244] syz_tun: entered allmulticast mode [ 64.090639][ T5243] syz_tun: left allmulticast mode [ 64.107325][ T5240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=5240 comm=syz.1.550 [ 64.134895][ T5248] loop2: detected capacity change from 0 to 512 [ 64.145484][ T5248] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.159400][ T5248] EXT4-fs (loop2): 1 truncate cleaned up [ 64.315053][ T5254] netlink: 'syz.2.553': attribute type 10 has an invalid length. [ 64.457039][ T5260] FAULT_INJECTION: forcing a failure. [ 64.457039][ T5260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.470247][ T5260] CPU: 1 UID: 0 PID: 5260 Comm: syz.2.556 Tainted: G W 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 64.470362][ T5260] Tainted: [W]=WARN [ 64.470368][ T5260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 64.470379][ T5260] Call Trace: [ 64.470460][ T5260] [ 64.470469][ T5260] __dump_stack+0x1d/0x30 [ 64.470494][ T5260] dump_stack_lvl+0xe8/0x140 [ 64.470524][ T5260] dump_stack+0x15/0x1b [ 64.470544][ T5260] should_fail_ex+0x265/0x280 [ 64.470569][ T5260] should_fail+0xb/0x20 [ 64.470589][ T5260] should_fail_usercopy+0x1a/0x20 [ 64.470612][ T5260] _copy_from_user+0x1c/0xb0 [ 64.470666][ T5260] memdup_user+0x5e/0xd0 [ 64.470694][ T5260] strndup_user+0x68/0xb0 [ 64.470716][ T5260] __se_sys_mount+0x4d/0x2e0 [ 64.470743][ T5260] ? fput+0x8f/0xc0 [ 64.470780][ T5260] ? ksys_write+0x192/0x1a0 [ 64.470821][ T5260] __x64_sys_mount+0x67/0x80 [ 64.470844][ T5260] x64_sys_call+0x2b4d/0x2ff0 [ 64.470869][ T5260] do_syscall_64+0xd2/0x200 [ 64.470926][ T5260] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 64.470949][ T5260] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 64.470976][ T5260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.471001][ T5260] RIP: 0033:0x7f2ce132ebe9 [ 64.471049][ T5260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.471122][ T5260] RSP: 002b:00007f2cdfd97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 64.471146][ T5260] RAX: ffffffffffffffda RBX: 00007f2ce1555fa0 RCX: 00007f2ce132ebe9 [ 64.471159][ T5260] RDX: 0000200000001400 RSI: 0000200000000300 RDI: 0000200000000240 [ 64.471215][ T5260] RBP: 00007f2cdfd97090 R08: 0000200000000140 R09: 0000000000000000 [ 64.471229][ T5260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.471244][ T5260] R13: 00007f2ce1556038 R14: 00007f2ce1555fa0 R15: 00007fff3e07c178 [ 64.471266][ T5260] [ 64.727145][ T5258] loop1: detected capacity change from 0 to 164 [ 64.740014][ T5258] syz.1.555: attempt to access beyond end of device [ 64.740014][ T5258] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 64.758342][ T5258] syz.1.555: attempt to access beyond end of device [ 64.758342][ T5258] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 64.903487][ T5277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.562'. [ 64.921667][ T5279] syz_tun: entered allmulticast mode [ 64.927219][ T5278] syz_tun: left allmulticast mode [ 65.187968][ T5301] loop1: detected capacity change from 0 to 512 [ 65.201285][ T5301] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.218399][ T5301] EXT4-fs (loop1): 1 truncate cleaned up [ 65.301062][ T5307] loop1: detected capacity change from 0 to 512 [ 65.308296][ T5307] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.322730][ T5307] EXT4-fs (loop1): 1 truncate cleaned up [ 65.355436][ T5312] syz_tun: entered allmulticast mode [ 65.361389][ T5311] syz_tun: left allmulticast mode [ 65.484881][ T5326] loop2: detected capacity change from 0 to 1024 [ 65.492225][ T5326] EXT4-fs: Ignoring removed nobh option [ 65.503914][ T5326] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 65.580642][ T5332] loop1: detected capacity change from 0 to 1024 [ 65.588151][ T5332] EXT4-fs: Ignoring removed nobh option [ 65.603296][ T5332] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 65.622904][ T5332] 9pnet_fd: Insufficient options for proto=fd [ 65.660620][ T5340] usb usb1: check_ctrlrecip: process 5340 (syz.4.585) requesting ep 01 but needs 81 [ 65.671896][ T5340] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 65.700276][ T5346] netlink: 200 bytes leftover after parsing attributes in process `syz.2.589'. [ 65.710302][ T5344] syz_tun: entered allmulticast mode [ 65.739446][ T5351] netlink: 'syz.1.591': attribute type 21 has an invalid length. [ 65.810349][ T5358] netlink: 'syz.1.594': attribute type 21 has an invalid length. [ 65.901670][ T5365] loop1: detected capacity change from 0 to 1024 [ 65.908735][ T5365] EXT4-fs: Ignoring removed nobh option [ 65.928034][ T5365] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 65.965750][ T5365] 9pnet_fd: Insufficient options for proto=fd [ 66.217610][ T5404] loop1: detected capacity change from 0 to 1024 [ 66.254322][ T5404] EXT4-fs: Ignoring removed nobh option [ 66.274910][ T5404] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 66.344513][ T5417] loop4: detected capacity change from 0 to 1024 [ 66.351932][ T5417] EXT4-fs: Ignoring removed nobh option [ 66.362394][ T5417] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 66.484003][ T5442] loop1: detected capacity change from 0 to 1024 [ 66.484900][ T5438] usb usb1: check_ctrlrecip: process 5438 (syz.2.627) requesting ep 01 but needs 81 [ 66.490937][ T5442] EXT4-fs: Ignoring removed nobh option [ 66.499923][ T5438] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 66.512109][ T5442] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 66.564866][ T5449] netlink: 'syz.1.631': attribute type 21 has an invalid length. [ 66.573175][ T5449] __nla_validate_parse: 5 callbacks suppressed [ 66.573189][ T5449] netlink: 156 bytes leftover after parsing attributes in process `syz.1.631'. [ 66.699665][ T5461] loop4: detected capacity change from 0 to 1024 [ 66.706920][ T5461] EXT4-fs: Ignoring removed nobh option [ 66.723898][ T5461] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 66.735642][ T5461] serio: Serial port ptm0 [ 66.796408][ T5475] loop1: detected capacity change from 0 to 1024 [ 66.803517][ T5475] EXT4-fs: Ignoring removed nobh option [ 66.812513][ T5475] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 66.876248][ T5481] netlink: 'syz.1.643': attribute type 21 has an invalid length. [ 66.884388][ T5481] netlink: 156 bytes leftover after parsing attributes in process `syz.1.643'. [ 66.992506][ T5493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.649'. [ 67.008760][ T5495] loop3: detected capacity change from 0 to 1024 [ 67.016271][ T5495] EXT4-fs: Ignoring removed nobh option [ 67.033410][ T5495] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 67.066489][ T5501] loop1: detected capacity change from 0 to 1024 [ 67.073642][ T5501] EXT4-fs: Ignoring removed nobh option [ 67.082671][ T5501] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 67.193188][ T5518] netlink: 'syz.3.658': attribute type 21 has an invalid length. [ 67.201229][ T5518] netlink: 156 bytes leftover after parsing attributes in process `syz.3.658'. [ 67.263960][ T5522] usb usb1: check_ctrlrecip: process 5522 (syz.3.660) requesting ep 01 but needs 81 [ 67.273525][ T5522] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 67.284224][ T5524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.661'. [ 67.342035][ T5530] loop1: detected capacity change from 0 to 1024 [ 67.344655][ T5532] loop3: detected capacity change from 0 to 1024 [ 67.348928][ T5530] EXT4-fs: Ignoring removed nobh option [ 67.355378][ T5532] EXT4-fs: Ignoring removed nobh option [ 67.372456][ T5532] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 67.372586][ T5530] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 67.382240][ T5532] EXT4-fs mount: 95 callbacks suppressed [ 67.382255][ T5532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.414141][ T5530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.456773][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.467047][ T5540] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.488583][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.506228][ T5540] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.523803][ T5545] netlink: 'syz.2.667': attribute type 10 has an invalid length. [ 67.531594][ T5545] netlink: 40 bytes leftover after parsing attributes in process `syz.2.667'. [ 67.552234][ T5547] netlink: 'syz.1.670': attribute type 21 has an invalid length. [ 67.565449][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.567094][ T5545] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 67.583777][ T5545] team0: Failed to send options change via netlink (err -105) [ 67.591467][ T5545] team0: Port device geneve1 added [ 67.606962][ T5547] netlink: 156 bytes leftover after parsing attributes in process `syz.1.670'. [ 67.610777][ T29] kauditd_printk_skb: 1391 callbacks suppressed [ 67.610794][ T29] audit: type=1326 audit(1755086253.646:5104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5552 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5f78ebe9 code=0x7ffc0000 [ 67.645729][ T29] audit: type=1326 audit(1755086253.646:5105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5552 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a5f78ebe9 code=0x7ffc0000 [ 67.669181][ T29] audit: type=1326 audit(1755086253.646:5106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5552 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5f78ebe9 code=0x7ffc0000 [ 67.692679][ T29] audit: type=1326 audit(1755086253.646:5107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5552 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a5f78ebe9 code=0x7ffc0000 [ 67.716134][ T29] audit: type=1326 audit(1755086253.646:5108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5552 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5f78ebe9 code=0x7ffc0000 [ 67.739564][ T29] audit: type=1326 audit(1755086253.646:5109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5552 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5f78ebe9 code=0x7ffc0000 [ 67.740696][ T5540] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.762981][ T29] audit: type=1326 audit(1755086253.646:5110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5552 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a5f78ebe9 code=0x7ffc0000 [ 67.799308][ T29] audit: type=1326 audit(1755086253.666:5111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5552 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5f78ebe9 code=0x7ffc0000 [ 67.822814][ T29] audit: type=1326 audit(1755086253.666:5112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5552 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5f78ebe9 code=0x7ffc0000 [ 67.846337][ T29] audit: type=1326 audit(1755086253.686:5113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5552 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a5f78ebe9 code=0x7ffc0000 [ 67.873936][ T5554] loop3: detected capacity change from 0 to 512 [ 67.881585][ T5554] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 67.893432][ T5554] EXT4-fs (loop3): 1 truncate cleaned up [ 67.899848][ T5554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.915431][ T5540] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.931403][ T5557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.674'. [ 67.942242][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.972652][ T4348] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.990154][ T5563] loop1: detected capacity change from 0 to 512 [ 67.994086][ T4348] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.006296][ T4348] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.015496][ T4348] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.027032][ T5563] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 68.035685][ T5563] EXT4-fs (loop1): orphan cleanup on readonly fs [ 68.046282][ T5563] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.677: corrupted inode contents [ 68.071388][ T5563] EXT4-fs (loop1): Remounting filesystem read-only [ 68.078036][ T5563] EXT4-fs (loop1): 1 truncate cleaned up [ 68.091412][ T5571] loop4: detected capacity change from 0 to 1024 [ 68.091663][ T4348] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 68.098376][ T5571] EXT4-fs: Ignoring removed nobh option [ 68.108349][ T4348] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 68.135494][ T4348] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 68.147565][ T5568] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 68.161930][ T5563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.193546][ T5571] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 68.206861][ T5571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.230897][ T5576] loop3: detected capacity change from 0 to 1024 [ 68.237583][ T5576] EXT4-fs: Ignoring removed nobh option [ 68.251760][ T5576] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 68.261379][ T5576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.278841][ T5576] serio: Serial port ptm1 [ 68.349533][ T5594] netlink: 'syz.0.687': attribute type 21 has an invalid length. [ 68.357508][ T5594] netlink: 156 bytes leftover after parsing attributes in process `syz.0.687'. [ 68.386883][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.588125][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.827253][ T5606] netlink: 'syz.1.691': attribute type 10 has an invalid length. [ 68.835215][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.842475][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.851988][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.859122][ T5606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.866446][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.873577][ T5606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.882621][ T5606] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 69.023275][ T5615] loop1: detected capacity change from 0 to 512 [ 69.031561][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.052672][ T5615] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 69.061472][ T5615] EXT4-fs (loop1): orphan cleanup on readonly fs [ 69.073626][ T5615] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.695: corrupted inode contents [ 69.085859][ T5615] EXT4-fs (loop1): Remounting filesystem read-only [ 69.092636][ T5615] EXT4-fs (loop1): 1 truncate cleaned up [ 69.098408][ T4350] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 69.108971][ T4350] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 69.119902][ T4350] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 69.131457][ T5615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.265175][ T5631] netlink: 'syz.4.699': attribute type 21 has an invalid length. [ 69.274240][ T5631] netlink: 156 bytes leftover after parsing attributes in process `syz.4.699'. [ 69.338256][ T5635] loop4: detected capacity change from 0 to 512 [ 69.362205][ T5635] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 69.378628][ T5635] EXT4-fs (loop4): orphan cleanup on readonly fs [ 69.389611][ T5635] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.700: corrupted inode contents [ 69.414931][ T5635] EXT4-fs (loop4): Remounting filesystem read-only [ 69.428113][ T5635] EXT4-fs (loop4): 1 truncate cleaned up [ 69.435161][ T4352] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 69.445881][ T4352] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 69.458346][ T4352] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 69.561854][ T5635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.861833][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.197262][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.255579][ T5667] loop4: detected capacity change from 0 to 1024 [ 70.262717][ T5667] EXT4-fs: Ignoring removed nobh option [ 70.271939][ T5667] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 70.284482][ T5667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.362419][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.372845][ T5676] loop2: detected capacity change from 0 to 512 [ 70.380084][ T5676] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 70.393570][ T5676] EXT4-fs (loop2): 1 truncate cleaned up [ 70.399732][ T5676] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.428817][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.464258][ T5689] loop4: detected capacity change from 0 to 512 [ 70.465948][ T5691] netlink: 'syz.2.717': attribute type 13 has an invalid length. [ 70.478347][ T5691] netlink: 'syz.2.717': attribute type 27 has an invalid length. [ 70.492821][ T5689] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 70.501283][ T5689] EXT4-fs (loop4): orphan cleanup on readonly fs [ 70.509501][ T5689] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.716: corrupted inode contents [ 70.522598][ T5689] EXT4-fs (loop4): Remounting filesystem read-only [ 70.529316][ T5689] EXT4-fs (loop4): 1 truncate cleaned up [ 70.535501][ T4353] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 70.546079][ T4353] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 70.557802][ T4353] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 70.568708][ T5689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.709998][ T5709] netlink: 'syz.2.722': attribute type 21 has an invalid length. [ 70.798010][ T5715] syz_tun: entered allmulticast mode [ 70.803810][ T5714] syz_tun: left allmulticast mode [ 70.828510][ T5721] netlink: 'syz.2.728': attribute type 13 has an invalid length. [ 71.095861][ T5739] loop2: detected capacity change from 0 to 1024 [ 71.112858][ T5739] EXT4-fs: Ignoring removed nobh option [ 71.160679][ T5739] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 71.172208][ T5739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.285214][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.322767][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.413803][ T5767] loop4: detected capacity change from 0 to 512 [ 71.600932][ T5784] syzkaller1: entered promiscuous mode [ 71.606498][ T5784] syzkaller1: entered allmulticast mode [ 71.613715][ T5784] FAULT_INJECTION: forcing a failure. [ 71.613715][ T5784] name failslab, interval 1, probability 0, space 0, times 0 [ 71.626457][ T5784] CPU: 0 UID: 0 PID: 5784 Comm: syz.2.749 Tainted: G W 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 71.626494][ T5784] Tainted: [W]=WARN [ 71.626533][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 71.626546][ T5784] Call Trace: [ 71.626552][ T5784] [ 71.626560][ T5784] __dump_stack+0x1d/0x30 [ 71.626590][ T5784] dump_stack_lvl+0xe8/0x140 [ 71.626612][ T5784] dump_stack+0x15/0x1b [ 71.626630][ T5784] should_fail_ex+0x265/0x280 [ 71.626654][ T5784] should_failslab+0x8c/0xb0 [ 71.626681][ T5784] kmem_cache_alloc_noprof+0x50/0x310 [ 71.626753][ T5784] ? dst_alloc+0xbd/0x100 [ 71.626776][ T5784] dst_alloc+0xbd/0x100 [ 71.626805][ T5784] ip_route_input_rcu+0x177d/0x1d00 [ 71.626843][ T5784] ip_route_input_noref+0x5f/0x90 [ 71.626922][ T5784] ip_rcv_finish_core+0x315/0xb40 [ 71.626943][ T5784] ip_rcv_finish+0x100/0x1c0 [ 71.626960][ T5784] ip_rcv+0x62/0x140 [ 71.626979][ T5784] ? __pfx_ip_rcv_finish+0x10/0x10 [ 71.627001][ T5784] ? __pfx_ip_rcv+0x10/0x10 [ 71.627028][ T5784] __netif_receive_skb+0xff/0x270 [ 71.627055][ T5784] ? tun_rx_batched+0xc7/0x430 [ 71.627088][ T5784] netif_receive_skb+0x4b/0x2e0 [ 71.627114][ T5784] ? tun_rx_batched+0xc7/0x430 [ 71.627158][ T5784] tun_rx_batched+0xfc/0x430 [ 71.627193][ T5784] tun_get_user+0x1eb6/0x2680 [ 71.627225][ T5784] ? ref_tracker_alloc+0x1f2/0x2f0 [ 71.627286][ T5784] ? selinux_file_permission+0x1e4/0x320 [ 71.627310][ T5784] tun_chr_write_iter+0x15e/0x210 [ 71.627366][ T5784] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 71.627394][ T5784] vfs_write+0x52a/0x960 [ 71.627419][ T5784] ksys_write+0xda/0x1a0 [ 71.627460][ T5784] __x64_sys_write+0x40/0x50 [ 71.627485][ T5784] x64_sys_call+0x27fe/0x2ff0 [ 71.627513][ T5784] do_syscall_64+0xd2/0x200 [ 71.627540][ T5784] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 71.627567][ T5784] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 71.627668][ T5784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.627690][ T5784] RIP: 0033:0x7f2ce132ebe9 [ 71.627707][ T5784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.627760][ T5784] RSP: 002b:00007f2cdfd76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 71.627783][ T5784] RAX: ffffffffffffffda RBX: 00007f2ce1556090 RCX: 00007f2ce132ebe9 [ 71.627861][ T5784] RDX: 0000000000000fca RSI: 0000200000001700 RDI: 0000000000000004 [ 71.627874][ T5784] RBP: 00007f2cdfd76090 R08: 0000000000000000 R09: 0000000000000000 [ 71.627888][ T5784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.627902][ T5784] R13: 00007f2ce1556128 R14: 00007f2ce1556090 R15: 00007fff3e07c178 [ 71.627921][ T5784] [ 71.936148][ T5791] __nla_validate_parse: 7 callbacks suppressed [ 71.936169][ T5791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.753'. [ 72.526548][ T5831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.775'. [ 72.634142][ T5838] syzkaller1: entered promiscuous mode [ 72.639795][ T5838] syzkaller1: entered allmulticast mode [ 72.792035][ T5840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.763'. [ 72.932327][ T5855] validate_nla: 1 callbacks suppressed [ 72.932345][ T5855] netlink: 'syz.0.768': attribute type 21 has an invalid length. [ 72.946217][ T5855] netlink: 156 bytes leftover after parsing attributes in process `syz.0.768'. [ 72.984240][ T29] kauditd_printk_skb: 412 callbacks suppressed [ 72.984255][ T29] audit: type=1400 audit(1755086259.026:5502): avc: denied { block_suspend } for pid=5857 comm="syz.0.769" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.045563][ T29] audit: type=1400 audit(1755086259.086:5503): avc: denied { create } for pid=5857 comm="syz.0.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 73.066051][ T29] audit: type=1326 audit(1755086259.086:5504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44cb46ebe9 code=0x7ffc0000 [ 73.089418][ T29] audit: type=1326 audit(1755086259.086:5505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44cb46ebe9 code=0x7ffc0000 [ 73.112744][ T29] audit: type=1326 audit(1755086259.086:5506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44cb46ebe9 code=0x7ffc0000 [ 73.136240][ T29] audit: type=1326 audit(1755086259.086:5507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44cb46ebe9 code=0x7ffc0000 [ 73.159622][ T29] audit: type=1326 audit(1755086259.086:5508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44cb46ebe9 code=0x7ffc0000 [ 73.183009][ T29] audit: type=1326 audit(1755086259.086:5509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44cb46ebe9 code=0x7ffc0000 [ 73.206401][ T29] audit: type=1326 audit(1755086259.086:5510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44cb46ebe9 code=0x7ffc0000 [ 73.229793][ T29] audit: type=1326 audit(1755086259.086:5511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5857 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44cb46ebe9 code=0x7ffc0000 [ 73.457661][ T5869] loop4: detected capacity change from 0 to 1024 [ 73.465839][ T5869] EXT4-fs: Ignoring removed nobh option [ 73.480060][ T5871] loop2: detected capacity change from 0 to 1024 [ 73.487108][ T5871] EXT4-fs: Ignoring removed nobh option [ 73.490366][ T5869] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 73.501737][ T5869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.511963][ T5871] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 73.524077][ T5871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.580928][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.623819][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.645859][ T5882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.783'. [ 73.674350][ T5886] loop2: detected capacity change from 0 to 512 [ 73.681267][ T5886] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.693018][ T5886] EXT4-fs (loop2): 1 truncate cleaned up [ 73.699028][ T5886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.728811][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.762248][ T5892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.786'. [ 73.874649][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.790'. [ 74.117923][ T5911] loop2: detected capacity change from 0 to 1024 [ 74.118392][ T5911] EXT4-fs: Ignoring removed nobh option [ 74.135062][ T5911] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 74.135778][ T5911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.223136][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.518448][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.798'. [ 74.532463][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.800'. [ 74.638838][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'. [ 74.911584][ T5965] loop3: detected capacity change from 0 to 512 [ 74.918689][ T5965] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.932289][ T5965] EXT4-fs (loop3): 1 truncate cleaned up [ 74.938716][ T5965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.963422][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.317880][ T6015] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 75.320007][ T6018] loop2: detected capacity change from 0 to 128 [ 75.369347][ T6018] syz.2.839: attempt to access beyond end of device [ 75.369347][ T6018] loop2: rw=0, sector=121, nr_sectors = 8 limit=128 [ 75.440663][ T6021] loop4: detected capacity change from 0 to 128 [ 75.449335][ T6021] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.461728][ T6021] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.477744][ T6021] FAULT_INJECTION: forcing a failure. [ 75.477744][ T6021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.490904][ T6021] CPU: 0 UID: 0 PID: 6021 Comm: syz.4.840 Tainted: G W 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 75.490971][ T6021] Tainted: [W]=WARN [ 75.490979][ T6021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.490992][ T6021] Call Trace: [ 75.490999][ T6021] [ 75.491005][ T6021] __dump_stack+0x1d/0x30 [ 75.491075][ T6021] dump_stack_lvl+0xe8/0x140 [ 75.491126][ T6021] dump_stack+0x15/0x1b [ 75.491173][ T6021] should_fail_ex+0x265/0x280 [ 75.491196][ T6021] should_fail+0xb/0x20 [ 75.491215][ T6021] should_fail_usercopy+0x1a/0x20 [ 75.491267][ T6021] _copy_from_user+0x1c/0xb0 [ 75.491299][ T6021] __sys_bpf+0x178/0x7b0 [ 75.491337][ T6021] __x64_sys_bpf+0x41/0x50 [ 75.491364][ T6021] x64_sys_call+0x2aea/0x2ff0 [ 75.491434][ T6021] do_syscall_64+0xd2/0x200 [ 75.491498][ T6021] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 75.491525][ T6021] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 75.491547][ T6021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.491568][ T6021] RIP: 0033:0x7f8a5f78ebe9 [ 75.491586][ T6021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.491606][ T6021] RSP: 002b:00007f8a5e1f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.491626][ T6021] RAX: ffffffffffffffda RBX: 00007f8a5f9b5fa0 RCX: 00007f8a5f78ebe9 [ 75.491675][ T6021] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 000000000000001c [ 75.491688][ T6021] RBP: 00007f8a5e1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 75.491733][ T6021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.491746][ T6021] R13: 00007f8a5f9b6038 R14: 00007f8a5f9b5fa0 R15: 00007ffced88fd68 [ 75.491780][ T6021] [ 75.705293][ T6026] loop2: detected capacity change from 0 to 128 [ 75.705910][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.719734][ T6026] syz.2.842: attempt to access beyond end of device [ 75.719734][ T6026] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 75.734234][ T6026] syz.2.842: attempt to access beyond end of device [ 75.734234][ T6026] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 75.749481][ T6026] syz.2.842: attempt to access beyond end of device [ 75.749481][ T6026] loop2: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 75.763532][ T6026] syz.2.842: attempt to access beyond end of device [ 75.763532][ T6026] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 75.777616][ T6026] syz.2.842: attempt to access beyond end of device [ 75.777616][ T6026] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 75.793998][ T6026] syz.2.842: attempt to access beyond end of device [ 75.793998][ T6026] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 75.809785][ T6026] syz.2.842: attempt to access beyond end of device [ 75.809785][ T6026] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 75.824009][ T6026] syz.2.842: attempt to access beyond end of device [ 75.824009][ T6026] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 75.838109][ T6026] syz.2.842: attempt to access beyond end of device [ 75.838109][ T6026] loop2: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 76.322521][ T6059] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.373605][ T6059] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.435331][ T6059] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.504651][ T6059] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.578298][ T6083] loop2: detected capacity change from 0 to 512 [ 76.581998][ T4350] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.596257][ T4351] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.601612][ T6083] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 76.611154][ T6086] sd 0:0:1:0: device reset [ 76.613559][ T6083] EXT4-fs (loop2): orphan cleanup on readonly fs [ 76.616873][ T4351] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.624962][ T6083] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.865: corrupted inode contents [ 76.635595][ T4351] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.643841][ T6083] EXT4-fs (loop2): Remounting filesystem read-only [ 76.658996][ T6083] EXT4-fs (loop2): 1 truncate cleaned up [ 76.665220][ T4350] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 76.675826][ T4350] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 76.686426][ T4350] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 76.697150][ T6083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.147959][ T6109] loop1: detected capacity change from 0 to 512 [ 77.165708][ T6109] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 77.197287][ T6109] EXT4-fs (loop1): 1 truncate cleaned up [ 77.211376][ T6109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.286202][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.297934][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.443960][ T6129] loop4: detected capacity change from 0 to 1024 [ 77.459672][ T6129] EXT4-fs: Ignoring removed nobh option [ 77.473779][ T6131] __nla_validate_parse: 1 callbacks suppressed [ 77.473795][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 77.490048][ T6129] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 77.505274][ T6129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.537588][ T6129] serio: Serial port ptm0 [ 77.606114][ T6141] 9pnet_fd: Insufficient options for proto=fd [ 77.802606][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.894'. [ 77.909422][ T6167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.897'. [ 78.049355][ T29] kauditd_printk_skb: 453 callbacks suppressed [ 78.049372][ T29] audit: type=1400 audit(1755086264.086:5959): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.063153][ T6175] loop1: detected capacity change from 0 to 1024 [ 78.080366][ T29] audit: type=1400 audit(1755086264.086:5960): avc: denied { open } for pid=3303 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.110435][ T29] audit: type=1400 audit(1755086264.086:5961): avc: denied { ioctl } for pid=3303 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.111996][ T6175] EXT4-fs: Ignoring removed nobh option [ 78.136134][ T29] audit: type=1400 audit(1755086264.156:5962): avc: denied { mounton } for pid=6174 comm="syz.1.902" path="/195/file1" dev="tmpfs" ino=1063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.172861][ T6175] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 78.182155][ T6175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.196874][ T29] audit: type=1400 audit(1755086264.246:5963): avc: denied { mount } for pid=6174 comm="syz.1.902" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 78.219366][ T29] audit: type=1400 audit(1755086264.246:5964): avc: denied { add_name } for pid=6174 comm="syz.1.902" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.240219][ T29] audit: type=1400 audit(1755086264.246:5965): avc: denied { create } for pid=6174 comm="syz.1.902" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 78.260555][ T29] audit: type=1326 audit(1755086264.246:5966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6174 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6eecebe9 code=0x7ffc0000 [ 78.283970][ T29] audit: type=1326 audit(1755086264.246:5967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6174 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff6eecebe9 code=0x7ffc0000 [ 78.307452][ T29] audit: type=1326 audit(1755086264.246:5968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6174 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6eecebe9 code=0x7ffc0000 [ 78.441084][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.450829][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.464719][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.911'. [ 78.516786][ T6200] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 78.556093][ T6203] netlink: 20 bytes leftover after parsing attributes in process `syz.3.912'. [ 78.722520][ T6210] loop1: detected capacity change from 0 to 1024 [ 78.736360][ T6210] EXT4-fs: Ignoring removed nobh option [ 78.826065][ T6210] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 78.834881][ T6215] wg2: entered promiscuous mode [ 78.839773][ T6215] wg2: entered allmulticast mode [ 78.847363][ T6210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.905019][ T6210] serio: Serial port ptm0 [ 78.969329][ T6220] 9pnet_fd: Insufficient options for proto=fd [ 79.539228][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.922'. [ 79.557601][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.598304][ T6235] loop1: detected capacity change from 0 to 512 [ 79.606176][ T6235] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.618263][ T6235] EXT4-fs (loop1): 1 truncate cleaned up [ 79.624395][ T6235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.649596][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.651721][ T6231] syz.4.924 (6231) used greatest stack depth: 10160 bytes left [ 79.735728][ T6254] netlink: 20 bytes leftover after parsing attributes in process `syz.3.929'. [ 79.818390][ T6246] netlink: 'syz.4.931': attribute type 10 has an invalid length. [ 79.910558][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'. [ 79.910676][ T6261] syz_tun: entered allmulticast mode [ 79.928764][ T6260] syz_tun: left allmulticast mode [ 79.959096][ T6267] loop4: detected capacity change from 0 to 512 [ 79.966498][ T6267] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 79.980154][ T6267] EXT4-fs (loop4): 1 truncate cleaned up [ 79.987035][ T6267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.010414][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.259543][ T6302] netlink: 'syz.4.949': attribute type 10 has an invalid length. [ 80.409777][ T6310] loop4: detected capacity change from 0 to 512 [ 80.416778][ T6310] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.429363][ T6310] EXT4-fs (loop4): 1 truncate cleaned up [ 80.435530][ T6310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.472995][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.753007][ T6336] netlink: 'syz.1.965': attribute type 10 has an invalid length. [ 80.760977][ T6336] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.768082][ T6336] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.911575][ T6339] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 81.609753][ T6382] loop1: detected capacity change from 0 to 512 [ 81.610422][ T6382] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 81.613584][ T6382] EXT4-fs (loop1): 1 truncate cleaned up [ 81.633493][ T6382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.655672][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.916430][ T6402] netlink: 48 bytes leftover after parsing attributes in process `syz.3.990'. [ 81.967697][ T6406] netlink: 36 bytes leftover after parsing attributes in process `syz.2.988'. [ 82.209753][ T6418] loop2: detected capacity change from 0 to 512 [ 82.216830][ T6418] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.229148][ T6418] EXT4-fs (loop2): 1 truncate cleaned up [ 82.235222][ T6418] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.256493][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.365622][ T6436] loop2: detected capacity change from 0 to 512 [ 82.372114][ T6434] loop4: detected capacity change from 0 to 2048 [ 82.372289][ T6436] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.385252][ T6436] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.392345][ T6436] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.393544][ T6434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.412696][ T6436] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 82.430342][ T6436] EXT4-fs (loop2): 1 truncate cleaned up [ 82.431904][ T6434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=6434 comm=syz.4.1003 [ 82.436789][ T6436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.490901][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.556753][ T6447] loop4: detected capacity change from 0 to 512 [ 82.566390][ T6447] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 82.605317][ T6447] EXT4-fs (loop4): 1 truncate cleaned up [ 82.616475][ T6447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.645982][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.686459][ T6463] __nla_validate_parse: 1 callbacks suppressed [ 82.686476][ T6463] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1014'. [ 82.703120][ T6464] sd 0:0:1:0: device reset [ 82.710331][ T3305] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /247/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 82.734192][ T3305] EXT4-fs error (device loop2): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 82.757361][ T3305] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /247/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 82.800456][ T3305] EXT4-fs error (device loop2): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 82.835499][ T3305] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /247/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 82.887464][ T3305] EXT4-fs error (device loop2): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 82.919609][ T3305] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /247/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 82.950075][ T6480] loop4: detected capacity change from 0 to 164 [ 82.973046][ T3305] EXT4-fs error (device loop2): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 83.019412][ T3305] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /247/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 83.053305][ T3305] EXT4-fs error (device loop2): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 83.118396][ T29] kauditd_printk_skb: 733 callbacks suppressed [ 83.118415][ T29] audit: type=1400 audit(1755086269.156:6702): avc: denied { write } for pid=6489 comm="syz.3.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.145569][ T29] audit: type=1326 audit(1755086269.156:6703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6489 comm="syz.3.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125331ebe9 code=0x7ffc0000 [ 83.169234][ T29] audit: type=1326 audit(1755086269.156:6704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6489 comm="syz.3.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125331ebe9 code=0x7ffc0000 [ 83.192818][ T29] audit: type=1326 audit(1755086269.156:6705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6489 comm="syz.3.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f125331ebe9 code=0x7ffc0000 [ 83.216521][ T29] audit: type=1326 audit(1755086269.156:6706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6489 comm="syz.3.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125331ebe9 code=0x7ffc0000 [ 83.227860][ T6491] syz_tun: entered allmulticast mode [ 83.245325][ T29] audit: type=1326 audit(1755086269.156:6707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6489 comm="syz.3.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f125331ebe9 code=0x7ffc0000 [ 83.268834][ T29] audit: type=1326 audit(1755086269.156:6708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6489 comm="syz.3.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125331ebe9 code=0x7ffc0000 [ 83.292273][ T29] audit: type=1326 audit(1755086269.156:6709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6489 comm="syz.3.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f125331ebe9 code=0x7ffc0000 [ 83.315651][ T29] audit: type=1326 audit(1755086269.156:6710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6489 comm="syz.3.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125331ebe9 code=0x7ffc0000 [ 83.339081][ T29] audit: type=1326 audit(1755086269.156:6711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6489 comm="syz.3.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f125331ebe9 code=0x7ffc0000 [ 83.368737][ T6489] syz_tun: left allmulticast mode [ 83.452618][ T6500] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 83.524548][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.542088][ T4354] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.630512][ T4354] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.656609][ T6529] loop4: detected capacity change from 0 to 512 [ 83.665278][ T4354] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.665815][ T6532] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1043'. [ 83.702547][ T6534] sd 0:0:1:0: device reset [ 83.707935][ T6529] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 83.723381][ T6529] EXT4-fs (loop4): orphan cleanup on readonly fs [ 83.734040][ T4354] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.736746][ T6529] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1046: corrupted inode contents [ 83.762134][ T6529] EXT4-fs (loop4): Remounting filesystem read-only [ 83.768861][ T6529] EXT4-fs (loop4): 1 truncate cleaned up [ 83.778626][ T4350] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 83.789232][ T4350] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 83.800375][ T4350] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 83.817579][ T6529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.835385][ T6547] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1050'. [ 83.903145][ T6551] loop1: detected capacity change from 0 to 1024 [ 83.910529][ T6551] EXT4-fs: Ignoring removed nobh option [ 83.917849][ T4354] team0: Port device geneve1 removed [ 83.928279][ T6551] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 83.946205][ T4354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.957203][ T4354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.968336][ T4354] bond0 (unregistering): Released all slaves [ 83.997066][ T6554] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 84.075398][ T4354] hsr_slave_0: left promiscuous mode [ 84.085600][ T4354] hsr_slave_1: left promiscuous mode [ 84.092309][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.099715][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.109963][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.117494][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.134401][ T4354] veth1_macvtap: left promiscuous mode [ 84.146261][ T4354] veth0_macvtap: left promiscuous mode [ 84.160419][ T4354] veth1_vlan: left promiscuous mode [ 84.165810][ T4354] veth0_vlan: left promiscuous mode [ 84.261203][ T6570] loop1: detected capacity change from 0 to 512 [ 84.272478][ T6570] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 84.282935][ T6570] EXT4-fs (loop1): orphan cleanup on readonly fs [ 84.295137][ T6570] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1059: corrupted inode contents [ 84.320561][ T6570] EXT4-fs (loop1): Remounting filesystem read-only [ 84.334401][ T6570] EXT4-fs (loop1): 1 truncate cleaned up [ 84.340696][ T4352] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 84.351268][ T4352] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 84.362170][ T4354] team0 (unregistering): Port device team_slave_1 removed [ 84.362830][ T4352] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 84.379744][ T4354] team0 (unregistering): Port device team_slave_0 removed [ 84.390298][ T4351] smc: removing ib device syz! [ 84.592592][ T6573] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 84.650806][ T6587] loop3: detected capacity change from 0 to 1024 [ 84.662885][ T6587] EXT4-fs: Ignoring removed nobh option [ 84.698428][ T6587] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 84.760316][ T6523] chnl_net:caif_netlink_parms(): no params data found [ 84.897225][ T6523] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.904444][ T6523] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.918201][ T6523] bridge_slave_0: entered allmulticast mode [ 84.925233][ T6523] bridge_slave_0: entered promiscuous mode [ 84.932138][ T6523] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.939220][ T6523] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.946471][ T6523] bridge_slave_1: entered allmulticast mode [ 84.953100][ T6523] bridge_slave_1: entered promiscuous mode [ 84.971411][ T6523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.987955][ T6523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.012520][ T6523] team0: Port device team_slave_0 added [ 85.023903][ T6523] team0: Port device team_slave_1 added [ 85.053830][ T6523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.060972][ T6523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.086893][ T6523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.137090][ T6630] loop1: detected capacity change from 0 to 2048 [ 85.141896][ T6523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.150505][ T6523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.176480][ T6523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.195192][ T6630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=6630 comm=syz.1.1076 [ 85.220435][ T6523] hsr_slave_0: entered promiscuous mode [ 85.228706][ T6523] hsr_slave_1: entered promiscuous mode [ 85.231550][ T6637] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1081'. [ 85.235089][ T6523] debugfs: 'hsr0' already exists in 'hsr' [ 85.249354][ T6523] Cannot create hsr debugfs directory [ 85.267943][ T6638] loop4: detected capacity change from 0 to 1024 [ 85.276746][ T6638] EXT4-fs: Ignoring removed nobh option [ 85.293180][ T6638] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 85.362878][ T6523] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.387185][ T6523] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.396574][ T6523] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.414688][ T6523] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.473496][ T6523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.493961][ T6523] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.506299][ T4354] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.513511][ T4354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.537770][ T4354] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.544910][ T4354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.602925][ T6667] loop3: detected capacity change from 0 to 512 [ 85.619343][ T6667] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 85.636491][ T6667] EXT4-fs (loop3): 1 truncate cleaned up [ 85.670708][ T6683] loop4: detected capacity change from 0 to 512 [ 85.678071][ T6523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.703268][ T6683] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 85.716317][ T6684] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1093'. [ 85.720898][ T6683] EXT4-fs (loop4): orphan cleanup on readonly fs [ 85.753538][ T6683] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1098: corrupted inode contents [ 85.765901][ T6683] EXT4-fs (loop4): Remounting filesystem read-only [ 85.776428][ T6683] EXT4-fs (loop4): 1 truncate cleaned up [ 85.783958][ T4348] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 85.794569][ T4348] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 85.813375][ T4348] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 85.933497][ T6719] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 85.963202][ T6523] veth0_vlan: entered promiscuous mode [ 85.993068][ T6523] veth1_vlan: entered promiscuous mode [ 86.037886][ T6523] veth0_macvtap: entered promiscuous mode [ 86.053989][ T6730] wg2: left promiscuous mode [ 86.058631][ T6730] wg2: left allmulticast mode [ 86.065765][ T6730] wg2: entered promiscuous mode [ 86.070658][ T6730] wg2: entered allmulticast mode [ 86.078537][ T6523] veth1_macvtap: entered promiscuous mode [ 86.089773][ T6523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.100315][ T6523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.112288][ T4351] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.122635][ T4351] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.140970][ T4348] ================================================================== [ 86.149086][ T4348] BUG: KCSAN: data-race in __ip_select_ident / crng_fast_key_erasure [ 86.157186][ T4348] [ 86.157580][ T6736] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1112'. [ 86.159521][ T4348] read to 0xffff88811f9765a8 of 8 bytes by task 10 on cpu 0: [ 86.159542][ T4348] __ip_select_ident+0x2e/0x1a0 [ 86.180680][ T4348] iptunnel_xmit+0x344/0x480 [ 86.185289][ T4348] udp_tunnel_xmit_skb+0x1aa/0x1f0 [ 86.190418][ T4348] geneve_xmit+0x16ff/0x1940 [ 86.195023][ T4348] dev_hard_start_xmit+0x125/0x3e0 [ 86.200141][ T4348] __dev_queue_xmit+0x10f9/0x2000 [ 86.205168][ T4348] neigh_resolve_output+0x3f3/0x460 [ 86.210373][ T4348] ip6_finish_output2+0xa66/0xd30 [ 86.215401][ T4348] ip6_finish_output+0x3a4/0x540 [ 86.220336][ T4348] ip6_output+0xfd/0x240 [ 86.224576][ T4348] mld_sendpack+0x42b/0x6f0 [ 86.229091][ T4348] mld_ifc_work+0x55c/0x840 [ 86.233602][ T4348] process_scheduled_works+0x4cb/0x9d0 [ 86.239079][ T4348] worker_thread+0x582/0x770 [ 86.243676][ T4348] kthread+0x489/0x510 [ 86.247754][ T4348] ret_from_fork+0xda/0x150 [ 86.252277][ T4348] ret_from_fork_asm+0x1a/0x30 [ 86.257058][ T4348] [ 86.259383][ T4348] write to 0xffff88811f9765a8 of 16 bytes by task 4348 on cpu 1: [ 86.267101][ T4348] crng_fast_key_erasure+0xd9/0x110 [ 86.272303][ T4348] crng_make_state+0xc0/0x250 [ 86.276983][ T4348] _get_random_bytes+0x85/0x190 [ 86.281833][ T4348] get_random_bytes+0x1d/0x30 [ 86.286508][ T4348] __ip_select_ident+0x198/0x1a0 [ 86.291449][ T4348] iptunnel_xmit+0x344/0x480 [ 86.296039][ T4348] udp_tunnel_xmit_skb+0x1aa/0x1f0 [ 86.301160][ T4348] send4+0x494/0x580 [ 86.305068][ T4348] wg_socket_send_skb_to_peer+0x95/0x130 [ 86.310714][ T4348] wg_socket_send_buffer_to_peer+0xf1/0x120 [ 86.316663][ T4348] wg_packet_handshake_send_worker+0x10d/0x160 [ 86.322828][ T4348] process_scheduled_works+0x4cb/0x9d0 [ 86.328304][ T4348] worker_thread+0x582/0x770 [ 86.332911][ T4348] kthread+0x489/0x510 [ 86.336982][ T4348] ret_from_fork+0xda/0x150 [ 86.341497][ T4348] ret_from_fork_asm+0x1a/0x30 [ 86.346266][ T4348] [ 86.348583][ T4348] Reported by Kernel Concurrency Sanitizer on: [ 86.354739][ T4348] CPU: 1 UID: 0 PID: 4348 Comm: kworker/u8:56 Tainted: G W 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 86.368997][ T4348] Tainted: [W]=WARN [ 86.372801][ T4348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 86.382858][ T4348] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 86.389821][ T4348] ================================================================== [ 86.407115][ T4351] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.428660][ T4353] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0