last executing test programs: 2.891749178s ago: executing program 3 (id=945): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = dup(0xffffffffffffffff) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRES8=r3, @ANYRES16=r1, @ANYRES32=r2], 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops}, 0x94) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000340)={r7}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000040)={r8}) openat$ptp0(0xffffffffffffff9c, 0x0, 0xaad82, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020033797a30000000000800410073697700140033006c6f0000000000001f00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.196573754s ago: executing program 4 (id=948): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) keyctl$set_reqkey_keyring(0xe, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r2, &(0x7f00000001c0)=ANY=[], 0x7a) 2.141107848s ago: executing program 4 (id=950): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000003640)='kfree\x00', r0, 0x0, 0x400}, 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000340)=""/85) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r2, &(0x7f0000000940)={0x28, 0x0, 0x0, @local}, 0x10) close(0x3) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x2000c014) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c04, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000340), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 2.078777673s ago: executing program 0 (id=952): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4a20, 0x0, @mcast2, 0x81}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xda}, r1, 0x8}}, 0x48) 1.999702029s ago: executing program 3 (id=954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e1d, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, &(0x7f0000000180)=0x10) (async) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000003c0)=ANY=[], 0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x4040000) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2, 0x1}, &(0x7f00000000c0)=0x8) (async, rerun: 32) socket$kcm(0x10, 0x400000002, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x8000}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000006000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="6add5d81231628b300000600004e1c747e18c80001000000040000000000004000"/46], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000600)="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", &(0x7f0000000780)="da8e88715fafa60be5820e4a90259c9034149fe289810ce45e7068dc582c045dd1edf9a6a26d43aa30d89ef9c64320e72730c4371991906f6c4b460995611074f18de106441d0123cabd597ef8707a59514b2ebe03a6ed9511e24e48dd9744ace14022836308243f4d857d4bb09448a2405b6734cf893b66e1d171bfef1f34f099fe6f993ad33f0c89056c", 0xce, r7}, 0x38) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r8}, 0x10) (async, rerun: 64) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r9, 0x0, 0x3}, 0x18) close(r5) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r11, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r11, {0x8}}, './file0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0x6f26d09854bf72e0}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0xf}, {}, {0xfff8, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x0) 1.983201861s ago: executing program 0 (id=955): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, 0x0, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x18) r1 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, 0x0, &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xfffff000) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0xfffffffffffffffc, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x163, 0x0) readv(r5, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0x18}], 0x1) syz_clone3(&(0x7f00000005c0)={0x34080800, &(0x7f0000000080), &(0x7f0000000240), &(0x7f00000002c0), {0x23}, &(0x7f0000000300)=""/230, 0xe6, 0x0, &(0x7f0000000400)=[r0, r0, r0, r0, r0, r0], 0x6, {r2}}, 0x58) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000640)={0x7, 0x81, 0xd, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r8, 0x1}, 0x1c}}, 0x0) 1.919418466s ago: executing program 2 (id=956): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x3, 0x3f}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001600)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x503, 0x402, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 1.849310002s ago: executing program 4 (id=958): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x3, 0x3f}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001600)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x503, 0x402, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r10 = socket(0x10, 0x3, 0x0) connect$netlink(r10, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 1.841993412s ago: executing program 3 (id=959): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000780)='snd_soc_dapm_connected\x00', r0, 0x0, 0x80005}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) fchmod(r3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000680)="9896a105de6a7c6bea7e9c8510b8c1ca2dcdefa0aa2d84506fc2a14fb251c1c40097bd42df8e53ea3d3606a8c9d02af3333d97e25b98978822037e81150c51", &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0xfffffffffffffff5, 0x0, 0x24004005}, 0x8040) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r8 = dup2(r7, r7) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00') ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r8, 0x1276, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f00000001c0)={0x398, 0x874f}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 1.706793173s ago: executing program 0 (id=962): r0 = syz_io_uring_setup(0x3798, &(0x7f0000000400)={0x0, 0xc458, 0x80, 0x3, 0xb8}, &(0x7f0000000300)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x90801) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x31, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x884) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)="5f719d7a65b6", 0x6}], 0x1}, 0x448e4) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8919, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x80041, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1.692508144s ago: executing program 3 (id=963): r0 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ef, 0x0, 0x2, 0x8002ae}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) recvfrom(r3, 0x0, 0x0, 0x20, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, 0x0, 0x0, 0x41000004, 0x0) r6 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000200)={0x100, 0x4, 0x2}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000077518ed0bd20267b19b800000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r7 = openat(r6, 0x0, 0x0, 0x22) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r8, 0x25, &(0x7f0000000000)) fcntl$lock(r8, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0x409}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x18) fcntl$lock(r8, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x1}) lseek(r7, 0x8183, 0x3) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r11, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000180)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000ff0300000000000007000000185100000c000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000007f8480000100000018100000", @ANYRES32=r9, @ANYBLOB="000000000000000018460000f9ffffff00000000000010008520000002000000186200000c00000000000000080000009500000000000000ba4d7854b969ed45a8b3724aa986851bb6f9b6c1316ed3dfa4a4ea4b3a99c019a6c95c2c63f8a2908b4c537dec16c480d36f460593a6181fc8aba780c84044f7963379ba564ccc4f7692e2712aab0afb4c8976f65a77ba9e8d7e9c4238bac9f872671a7cafb8e8245c1741612111d27c74cbf60dc773b601a81065c21fd1bb63ac9daffb49fc5b8142b5f172ccb0816b20c1bfcc0933b1390fedcf14aa4f2c353a8b93993d5b5692bba6f440712288729c774d015ae54ef7a6"], &(0x7f0000000400)='syzkaller\x00', 0x10000, 0x4e, &(0x7f0000000540)=""/78, 0x41100, 0x61, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0xf, 0x80000001, 0x10001}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000005c0)=[{0x4, 0x4, 0x9, 0xc}, {0x1, 0x1, 0x3, 0x11}, {0x3, 0x1, 0x1, 0x5}, {0x3, 0x3, 0x10, 0x2}], 0x10, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.570835754s ago: executing program 0 (id=964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = dup(0xffffffffffffffff) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRES8=r3, @ANYRES16=r1, @ANYRES32=r2], 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops}, 0x94) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000340)={r7}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000040)={r8}) openat$ptp0(0xffffffffffffff9c, 0x0, 0xaad82, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020033797a30000000000800410073697700140033006c6f0000000000001f00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 943.020814ms ago: executing program 2 (id=965): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4a20, 0x0, @mcast2, 0x81}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xda}, r2, 0x8}}, 0x48) 942.598784ms ago: executing program 2 (id=966): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f0000000180)=0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000580)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f0000000080)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@resgid}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x35, 0x38, 0x62, 0x35, 0x30, 0x30, 0x6d], 0x2d, [0x32, 0x33, 0x33, 0x32], 0x2d, [0x39, 0x65, 0x36, 0x64], 0x2d, [0x5a, 0x30, 0x62, 0x64], 0x2d, [0x61, 0x61, 0x36, 0x32, 0x35, 0x0, 0x65, 0x39]}}}]}, 0x3, 0x4eb, &(0x7f0000001fc0)="$eJzs3d9rW20dAPDvSX9u62ynXsyBc+ikG7ikXd1WvJgVRK8Gznlfa5uW0rQpbbqtZUiHf4Ag/kKvvPJG8FoE2Z8gwkDvRUQZus0LL973zUuSk3ddlrYpa5q2+Xzg6XnOj57v90k4T/LkHM4JoGtdiYipiOiJiOsRMZwuz6Qltmulst2rl09mKyWJcvnBf5JI0mX1fSXp9Fz6b4MR8d1vR/wgeTfu+ubW0kyhkF9L53Ol5dXc+ubWjcXlmYX8Qn5lamL89uSdyVuTY4fW1rvf/OfPf/zbb93901ce/X3639d+WElrKF23sx2t2G5xu1rT+6qvRV1vRKwdJNgx1pO2p6/TiQAA0JLKd/xPR8QXI+L1rzqdDQAAANAO5a8PxQdJRBkAAAA4tTLVa2CTTDa9FmAoMplstnYN72fjbKbQHxHzxY2Vudq1siPRl5lfLOTH0muFR6IvqcyPV+tv5m82zE9ExIWI+Onwmep8drZYmOv0jx8AAADQJc41jP//N1wb/wMAAACnzMgBtm1yLy8AAADgBDjI+B8AAAA4mXYd/ye9R5sIAAAA0A7fuXevUsr151/PPdzcWCo+vDGXX1/KLm/MZmeLa6vZhWJxoXrPvuX99lcoFle/Gisbj3Ol/Hopt765Nb1c3FgpTVef6z2d95xoAAAAOHoXvvDsb0lEbH/tTLVU9KfrWhirT7U3O6CdMgfb3N0/4BTp6XQCQMc0XODb36k8gKPnfDywz8D+Zw3zB/zZAAAAOA5GP/de5/+dD4QTzEAeupfz/9C93OALupfz/9DlBvbfZHC3FX8+5FwAAIC2GaqWJJNNzwUORSaTzUacrz4WoC+ZXyzkxyLiUxHx1+G+gcr8eKeTBgAAAAAAAAAAAAAAAAAAAAAAAIATplxOogwAAACcahGZfyXpg/xHh68ONf4+0J/8f7g6jYhHv37wi8czpdLaeGX5fz9ZXvpluvxmfQkAAADQSfVxen0cDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH6dXLJ7P1cpRxX3wjIkaaxe+Nwep08A/DEXH2dRK9O/4viYieQ4i//TQiLr4dvyeNMFJNrZZFY/xMRJxpU/xoMf65Q4gP3exZpf+Zqhx/fQ3HXyauVKfNj7/etLyvF1d26/8y9f6v2s816//O773rwXrl0vPf53aN/zTiUm/z/qceP3nP/vf739va2m1d+TcRo/t8/lRi5UrLq7n1za0bi8szC/mF/MrExPjtyTuTtybHcvOLhXz6t2mMn3z+jx/t1f6zTePX+t+92n/13d0NNIvx4fPHLz+zR/xrX2r+/l/cI37ltf9y+jlQWT9ar2/X6jtd/t1fLu/V/rld2r/f+39tt502uH7/R/9ocVMA4Aisb24tzRQK+bWTUYmofSs/Lvl0tnI+jkUaKq1VhtJjbseqnrYHvf9u0NYqneuTAACA9njzpb/TmQAAAAAAAAAAAAAAAAAAAED3avudzwbevrPAYOeaCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwp48DAAD//85EyV0=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000005c0)=0x8) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TUNGETVNETLE(r4, 0x800454dd, &(0x7f0000000000)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8080c61) 874.72466ms ago: executing program 1 (id=967): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtaction={0x90, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{0x7c, 0x1, [@m_bpf={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x1, 0x7, 0x4, 0x6}, {0x30, 0x98, 0x81, 0xfffffff9}, {0xc, 0x90, 0xa, 0x5}, {0xe54, 0x6a, 0x1, 0xfffffff6}, {0xff01, 0x3, 0x81, 0x4}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x164) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x208100, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0xfffffff9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffed5) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x14, 0x0, @gue={{0x1, 0x1, 0x1, 0x2, 0x100, @void}, "9935704b5f4cd745"}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) getrlimit(0x1, &(0x7f0000000440)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r9 = syz_pidfd_open(r4, 0x0) fsetxattr$trusted_overlay_redirect(r9, &(0x7f0000000040), 0x0, 0x0, 0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r10, &(0x7f0000000100)={&(0x7f00000001c0)={0xa, 0xe1c, 0x80000, @private2={0xfc, 0x2, '\x00', 0x4}, 0x800}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000029000000040000006c000000000000001800000000000000290000000400"], 0x30}, 0x40c0) listen(r3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x68dd8831b793f29f, &(0x7f0000000080)=ANY=[@ANYRESOCT=r3]) 848.268672ms ago: executing program 1 (id=968): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000080)) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$tipc(r3, &(0x7f0000000240)=@id={0x1e, 0x3, 0x2, {0x4e21}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa101, 0x0) write$binfmt_aout(r9, &(0x7f0000000100)=ANY=[], 0xff2e) connect$pppl2tp(r4, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0xfffffffe, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x32) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) preadv2(r1, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x2000, 0x0, 0x0) 810.982895ms ago: executing program 4 (id=969): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000003640)='kfree\x00', r0, 0x0, 0x400}, 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000340)=""/85) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r2, &(0x7f0000000940)={0x28, 0x0, 0x0, @local}, 0x10) close(0x3) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x2000c014) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c04, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000340), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 779.907387ms ago: executing program 3 (id=970): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r1, &(0x7f0000000100), 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@stripe={'stripe', 0x3d, 0x6}}, {@nouid32}, {@jqfmt_vfsold}, {@lazytime}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@dioread_lock}]}, 0x1, 0x550, &(0x7f0000000b00)="$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") r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x22040000}, 0xc, &(0x7f00000004c0)={&(0x7f0000001380)={0x694, r6, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x148, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x144, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ea}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ext4\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'resuid'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'noauto_da_alloc'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'sys_enter\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'nouid32'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@.$]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'sys_enter\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '^\x00\'$&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/ppp\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, ']-\xb0)/+\'-\'):^^,*})(/\x00'}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2a0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8b, 0x4, "8a64b67dce8a8deacd06da4a57a3c067453e83b9be86837e348dd82e5077b5378cac13d85968ffd3202e08a4f61c10e23f8108caa5121e8995cfe3cda957e1ea2071b5f4fcd3c36f05df6261528380f20fc792ce5c72b26c5c075ef6db51c1068fdb8d2cdeefd792471213ebfa265f507810af9db46b0935b13cb7618608a169254ca0087c00c6"}, @ETHTOOL_A_BITSET_MASK={0x69, 0x5, "d7615b898659376fda539fd38b0e8ad8ca8a363cc4a6e702ccc4505a8d6162d02dd4d12afdb93337357ea477865c2ac7067f94d017e8d22f1d08b23ecfa6c3a72f3317db1d09ae5220ab1fb4a16569a71772df0a38021fd11636936a372cff1f8d8919bd20"}, @ETHTOOL_A_BITSET_BITS={0x1a4, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}]}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x867c}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xc9, 0x2, 're\xc3lJ\xa4\x9f\xdfV\xe1\x19\xa0\xb1\x98\x9bK\x97k\xbcX+\xb9\x81M|\xd4\x83\x86@\xe2\x00N\x8a\xf1R\x11\xea\xfa\xc0Gh^\xd7?I.\xba\x84L\x13\xe3\xf6\xd1\xbcw\x81\x12\x89\xabu\xc8?\xf7\xde\x98\xc4\x92\x89\x02~\x97\xdf\xf3\x8f\xa0\xf3?\xbd!\"\xc8\xa3\xaa\x8c\n\x9d\x97\xaam\x9b\xe5\xab\x0frD\\\xc8\xba\x05\xc9s\xe2Y\xbbo\x0en F<\x04*a=K\x1ae\xb0\x19\xfc&\x85\xcf\xd65\xfe_?\r\xee\xdb\xbe#2\xa8H\xbbvn\x8b7\x83\xb4\xde\xcc]Oh\x02\xb5\xe62V\x87\xed\xe8\xd0\xde\xb2\xbf\xfd\x19\x1a\x1b\x96\"\xd7\x9b\x86\xd8\x93?\x14\xb65H\x8bj\x9a\xd0\x1fA5\xa9\xf9?\xce\xa3\x11\x7f$_\x1a\x8e\x0ek\x1d'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$?\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf278}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#{(\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xf8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_VALUE={0xe2, 0x4, "c597a357a9cc10ce9b36f23029e56ef5e7c4518fe189eb3204ebe28bf4db62d56f8cb2cf6c12b3898b3f874afbf0196f948a39caa0075b56d65f1d0cac64bf72bb6d342cf3bca3d096ac8dafd4fe49fc1be13bf9e35e8097062a40cd757f47228bcf87f815db9699b0ba414f34e43760dbe78097bc39fe8c7ddbf84e7c11dd29f6aa5eb464645fee96a633e01090323d758e790fe4c613374a32e4531e0ed23f8e3781c224a87a2c1d993981880ad8b42d169a76669bf98675591d01b5dc521f55283768feb5bfcbf71cb212a16adb80fec86fbaba5983dc32cd663e10ce"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x12c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x118, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '*;[}#@}!\'}}#^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x75}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'stripe'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-(&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/@G\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'delalloc'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc9b}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xac89}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x694}, 0x1, 0x0, 0x0, 0x8084}, 0x2000000) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x123640, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0x4, 0x2}, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x118, &(0x7f0000000580)=0x6, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r6, @ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000780)='sys_enter\x00', r10}, 0x18) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) pwritev(r11, 0x0, 0x0, 0x8, 0x49d) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="59bb28bd7000010008002b01ffffffff0c0099000600000013000010000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840) pwrite64(r9, &(0x7f0000000140)='2', 0xfdef, 0xfecc) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) 632.016579ms ago: executing program 0 (id=971): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) keyctl$set_reqkey_keyring(0xe, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r2, &(0x7f00000001c0)=ANY=[], 0x7a) 597.120422ms ago: executing program 1 (id=972): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002f80), 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014df0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000dc7bf4b900080000dc2c82be6f522ccd1c2005c848af0a5dd0146a3ecba53c605a6e62cdb46c009e6df5757fc3dbbfab0de40c7e33b7686bc3d4adb6c41523e087d10d702043e84584963f9b5c7d3f70691006a374d0df7e775adbdf83a42e0d919e245cf2c1dbb69485e3e2bbf01f52defa43e7018f4313e6405180311c53ebdac91731e4a4026a1c21d25d7fbc18f3ebcf5e9f212e5f9211ae07bda87b7cfa66a30bb263e460365c8ecf5cd0518a3e04d0a72ac0c7c2483daf634002a2845e84b81b2401d51d68da81115a90bc9db5994f264de873e3dc91"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000001180)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x1e00, 0x28, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = creat(&(0x7f0000000140)='./bus\x00', 0xc) flistxattr(r1, &(0x7f0000000000)=""/121, 0x79) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x14, 0x0, &(0x7f0000000880)="63ec1caea6a67877576a46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0104180000000000020000000b0000000000009308"], &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0x1}, 0x28) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0xc) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 561.766275ms ago: executing program 2 (id=973): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, 0x0, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x18) r1 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, 0x0, &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xfffff000) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0xfffffffffffffffc, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x163, 0x0) readv(r5, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0x18}], 0x1) syz_clone3(&(0x7f00000005c0)={0x34080800, &(0x7f0000000080), &(0x7f0000000240), &(0x7f00000002c0), {0x23}, &(0x7f0000000300)=""/230, 0xe6, 0x0, &(0x7f0000000400)=[r0, r0, r0, r0, r0, r0], 0x6, {r2}}, 0x58) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000640)={0x7, 0x81, 0xd, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r8, 0x1}, 0x1c}}, 0x0) 561.294865ms ago: executing program 1 (id=974): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000780)='snd_soc_dapm_connected\x00', r0, 0x0, 0x80005}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) fchmod(r3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000680)="9896a105de6a7c6bea7e9c8510b8c1ca2dcdefa0aa2d84506fc2a14fb251c1c40097bd42df8e53ea3d3606a8c9d02af3333d97e25b98978822037e81150c51", &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0xfffffffffffffff5, 0x0, 0x24004005}, 0x8040) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r8 = dup2(r7, r7) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00') ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r8, 0x1276, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f00000001c0)={0x398, 0x874f}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 538.588227ms ago: executing program 4 (id=975): r0 = syz_io_uring_setup(0x3798, &(0x7f0000000400)={0x0, 0xc458, 0x80, 0x3, 0xb8}, &(0x7f0000000300)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x90801) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x31, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x884) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)="5f719d7a65b6", 0x6}], 0x1}, 0x448e4) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8919, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 474.238462ms ago: executing program 3 (id=976): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x3, 0x3f}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001600)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x503, 0x402, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 473.696622ms ago: executing program 0 (id=977): r0 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ef, 0x0, 0x2, 0x8002ae}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) recvfrom(r3, 0x0, 0x0, 0x20, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, 0x0, 0x0, 0x41000004, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x100, 0x4, 0x2}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000077518ed0bd20267b19b800000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r7 = openat(r6, 0x0, 0x0, 0x22) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r8, 0x25, &(0x7f0000000000)) fcntl$lock(r8, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0x409}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x18) fcntl$lock(r8, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x1}) lseek(r7, 0x8183, 0x3) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r11, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000180)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000ff0300000000000007000000185100000c000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000007f8480000100000018100000", @ANYRES32=r9, @ANYBLOB="000000000000000018460000f9ffffff00000000000010008520000002000000186200000c00000000000000080000009500000000000000ba4d7854b969ed45a8b3724aa986851bb6f9b6c1316ed3dfa4a4ea4b3a99c019a6c95c2c63f8a2908b4c537dec16c480d36f460593a6181fc8aba780c84044f7963379ba564ccc4f7692e2712aab0afb4c8976f65a77ba9e8d7e9c4238bac9f872671a7cafb8e8245c1741612111d27c74cbf60dc773b601a81065c21fd1bb63ac9daffb49fc5b8142b5f172ccb0816b20c1bfcc0933b1390fedcf14aa4f2c353a8b93993d5b5692bba6f440712288729c774d015ae54ef7a6"], &(0x7f0000000400)='syzkaller\x00', 0x10000, 0x4e, &(0x7f0000000540)=""/78, 0x41100, 0x61, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000005c0)=[{0x4, 0x4, 0x9, 0xc}, {0x1, 0x1, 0x3, 0x11}, {0x3, 0x1, 0x1, 0x5}, {0x3, 0x3, 0x10, 0x2}], 0x10, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 470.954702ms ago: executing program 1 (id=978): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4a20, 0x0, @mcast2, 0x81}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xda}, r2, 0x8}}, 0x48) 395.122928ms ago: executing program 1 (id=979): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x3, 0x3f}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001600)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x503, 0x402, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r10 = socket(0x10, 0x3, 0x0) connect$netlink(r10, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 134.433919ms ago: executing program 4 (id=980): r0 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ef, 0x0, 0x2, 0x8002ae}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) recvfrom(r3, 0x0, 0x0, 0x20, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, 0x0, 0x0, 0x41000004, 0x0) r6 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000200)={0x100, 0x4, 0x2}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000077518ed0bd20267b19b800000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r7 = openat(r6, 0x0, 0x0, 0x22) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r8, 0x25, &(0x7f0000000000)) fcntl$lock(r8, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0x409}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x18) fcntl$lock(r8, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x1}) lseek(r7, 0x8183, 0x3) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r11, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000180)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000ff0300000000000007000000185100000c000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000007f8480000100000018100000", @ANYRES32=r9, @ANYBLOB="000000000000000018460000f9ffffff00000000000010008520000002000000186200000c00000000000000080000009500000000000000ba4d7854b969ed45a8b3724aa986851bb6f9b6c1316ed3dfa4a4ea4b3a99c019a6c95c2c63f8a2908b4c537dec16c480d36f460593a6181fc8aba780c84044f7963379ba564ccc4f7692e2712aab0afb4c8976f65a77ba9e8d7e9c4238bac9f872671a7cafb8e8245c1741612111d27c74cbf60dc773b601a81065c21fd1bb63ac9daffb49fc5b8142b5f172ccb0816b20c1bfcc0933b1390fedcf14aa4f2c353a8b93993d5b5692bba6f440712288729c774d015ae54ef7a6"], &(0x7f0000000400)='syzkaller\x00', 0x10000, 0x4e, &(0x7f0000000540)=""/78, 0x41100, 0x61, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0xf, 0x80000001, 0x10001}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000005c0)=[{0x4, 0x4, 0x9, 0xc}, {0x1, 0x1, 0x3, 0x11}, {0x3, 0x1, 0x1, 0x5}, {0x3, 0x3, 0x10, 0x2}], 0x10, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 73.722964ms ago: executing program 2 (id=981): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x9, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r0}, 0x38) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x4, 0x1, 0x30, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x40, 0x4, 0x2}}) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0xc0, r4, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xb}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1000}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4004c}, 0x4000000) 0s ago: executing program 2 (id=982): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = dup(0xffffffffffffffff) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRES8=r3, @ANYRES16=r1, @ANYRES32=r2], 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops}, 0x94) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000340)={r7}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000040)={r8}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) syz_open_procfs(0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020033797a30000000000800410073697700140033006c6f0000000000001f00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): to 512 [ 86.395813][ T5154] EXT4-fs: Ignoring removed nobh option [ 86.405959][ T5154] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.487: corrupted inode contents [ 86.418061][ T5154] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.487: mark_inode_dirty error [ 86.429883][ T5154] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.487: corrupted inode contents [ 86.442643][ T5154] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.487: mark_inode_dirty error [ 86.454551][ T5154] __quota_error: 5923 callbacks suppressed [ 86.454569][ T5154] Quota error (device loop4): write_blk: dquota write failed [ 86.468273][ T1687] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.470159][ T5154] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 86.480171][ T1687] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.495145][ T5154] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.487: Failed to acquire dquot type 0 [ 86.502602][ T1743] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.507033][ T5154] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.487: corrupted inode contents [ 86.533108][ T1743] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.541883][ T5154] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.487: mark_inode_dirty error [ 86.552692][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.553698][ T5154] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.487: corrupted inode contents [ 86.574600][ T5154] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.487: mark_inode_dirty error [ 86.586093][ T5154] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.487: corrupted inode contents [ 86.612925][ T5154] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 86.622979][ T5154] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.487: corrupted inode contents [ 86.635387][ T5162] loop0: detected capacity change from 0 to 2048 [ 86.642099][ T5154] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.487: mark_inode_dirty error [ 86.653409][ T5154] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 86.653517][ T5164] FAULT_INJECTION: forcing a failure. [ 86.653517][ T5164] name failslab, interval 1, probability 0, space 0, times 0 [ 86.663963][ T5154] EXT4-fs (loop4): 1 truncate cleaned up [ 86.675338][ T5164] CPU: 1 UID: 0 PID: 5164 Comm: syz.3.491 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 86.675381][ T5164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 86.675398][ T5164] Call Trace: [ 86.675406][ T5164] [ 86.675414][ T5164] __dump_stack+0x1d/0x30 [ 86.675446][ T5164] dump_stack_lvl+0xe8/0x140 [ 86.675472][ T5164] dump_stack+0x15/0x1b [ 86.675495][ T5164] should_fail_ex+0x265/0x280 [ 86.675524][ T5164] should_failslab+0x8c/0xb0 [ 86.675556][ T5164] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 86.675629][ T5164] ? __d_alloc+0x3d/0x340 [ 86.675669][ T5164] __d_alloc+0x3d/0x340 [ 86.675707][ T5164] d_alloc+0x2e/0x100 [ 86.675759][ T5164] lookup_one_qstr_excl+0x99/0x250 [ 86.675802][ T5164] filename_create+0x149/0x230 [ 86.675896][ T5164] kern_path_create+0x37/0x130 [ 86.675931][ T5164] unix_bind+0x1fd/0x920 [ 86.675974][ T5164] __sys_bind+0x1d1/0x2a0 [ 86.676031][ T5164] __x64_sys_bind+0x3f/0x50 [ 86.676072][ T5164] x64_sys_call+0x2b6e/0x2ff0 [ 86.676100][ T5164] do_syscall_64+0xd2/0x200 [ 86.676136][ T5164] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 86.676190][ T5164] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 86.676225][ T5164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.676288][ T5164] RIP: 0033:0x7f424ca3ebe9 [ 86.676308][ T5164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.676333][ T5164] RSP: 002b:00007f424b4a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 86.676358][ T5164] RAX: ffffffffffffffda RBX: 00007f424cc65fa0 RCX: 00007f424ca3ebe9 [ 86.676374][ T5164] RDX: 000000000000006e RSI: 0000200000003000 RDI: 0000000000000003 [ 86.676441][ T5164] RBP: 00007f424b4a7090 R08: 0000000000000000 R09: 0000000000000000 [ 86.676457][ T5164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.676554][ T5164] R13: 00007f424cc66038 R14: 00007f424cc65fa0 R15: 00007ffff304a868 [ 86.676581][ T5164] [ 86.699221][ T5162] loop0: p2 p3 p7 [ 86.705182][ T5154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.719141][ T5162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.488'. [ 86.723767][ T5154] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.919646][ T5154] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.932620][ T5166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'. [ 86.941586][ T29] audit: type=1326 audit(1755599507.614:51650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5165 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 86.942179][ T5166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'. [ 86.965115][ T29] audit: type=1326 audit(1755599507.614:51651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5165 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 86.965159][ T29] audit: type=1326 audit(1755599507.614:51652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5165 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 87.020824][ T29] audit: type=1326 audit(1755599507.614:51653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5165 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 87.044371][ T29] audit: type=1326 audit(1755599507.614:51654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5165 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 87.068018][ T29] audit: type=1326 audit(1755599507.614:51655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5165 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 87.095867][ T29] audit: type=1326 audit(1755599507.614:51656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5165 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 87.119410][ T29] audit: type=1326 audit(1755599507.614:51657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5165 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 87.165374][ T5179] 9pnet_virtio: no channels available for device syz [ 87.173636][ T5181] loop9: detected capacity change from 0 to 7 [ 87.180131][ T5181] Buffer I/O error on dev loop9, logical block 0, async page read [ 87.190004][ T5181] Buffer I/O error on dev loop9, logical block 0, async page read [ 87.197921][ T5181] loop9: unable to read partition table [ 87.204675][ T5181] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 87.204675][ T5181] ) failed (rc=-5) [ 87.225602][ T5185] loop0: detected capacity change from 0 to 512 [ 87.233453][ T5181] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.255877][ T5185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.278962][ T5185] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.295359][ T5181] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.312645][ T5190] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.324149][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.355981][ T5181] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.395594][ T5190] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.425368][ T5181] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.465695][ T5190] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.513518][ T4528] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.525387][ T4526] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.540697][ T4526] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.550727][ T5190] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.567241][ T4526] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.829290][ T5201] lo speed is unknown, defaulting to 1000 [ 87.835663][ T5201] lo speed is unknown, defaulting to 1000 [ 88.497290][ T5208] loop0: detected capacity change from 0 to 512 [ 88.515616][ T5208] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 88.530830][ T5208] EXT4-fs (loop0): mount failed [ 88.540647][ T5208] capability: warning: `syz.0.505' uses 32-bit capabilities (legacy support in use) [ 88.883184][ T5225] loop0: detected capacity change from 0 to 512 [ 88.896043][ T5225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.908911][ T5225] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.932306][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.181666][ T5231] loop0: detected capacity change from 0 to 2048 [ 89.228885][ T5231] loop0: p2 p3 p7 [ 89.265957][ T5242] netlink: 'syz.0.517': attribute type 4 has an invalid length. [ 89.499485][ T5256] siw: device registration error -23 [ 89.818700][ T5267] lo speed is unknown, defaulting to 1000 [ 89.825303][ T5267] lo speed is unknown, defaulting to 1000 [ 91.062751][ T5280] __nla_validate_parse: 16 callbacks suppressed [ 91.062772][ T5280] netlink: 124 bytes leftover after parsing attributes in process `syz.3.529'. [ 91.232312][ T5283] loop9: detected capacity change from 0 to 7 [ 91.245465][ T5283] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.257740][ T5283] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.265992][ T5283] loop9: unable to read partition table [ 91.272215][ T5283] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 91.272215][ T5283] ) failed (rc=-5) [ 91.289888][ T5283] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.306200][ T5285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.531'. [ 91.316240][ T5285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.531'. [ 91.335977][ T5283] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.396673][ T5283] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.456179][ T5283] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.475000][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 91.475018][ T29] audit: type=1326 audit(1755599512.164:51967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 91.504830][ T29] audit: type=1326 audit(1755599512.164:51968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 91.528569][ T29] audit: type=1326 audit(1755599512.174:51969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 91.552008][ T29] audit: type=1326 audit(1755599512.174:51970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 91.575696][ T29] audit: type=1326 audit(1755599512.174:51971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 91.599315][ T29] audit: type=1326 audit(1755599512.174:51972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 91.622960][ T29] audit: type=1326 audit(1755599512.174:51973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 91.646460][ T29] audit: type=1326 audit(1755599512.174:51974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 91.670252][ T29] audit: type=1326 audit(1755599512.174:51975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 91.694123][ T29] audit: type=1326 audit(1755599512.174:51976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 91.868061][ T5303] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5303 comm=syz.4.538 [ 91.880624][ T5303] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5303 comm=syz.4.538 [ 91.893706][ T5303] FAULT_INJECTION: forcing a failure. [ 91.893706][ T5303] name failslab, interval 1, probability 0, space 0, times 0 [ 91.906581][ T5303] CPU: 1 UID: 0 PID: 5303 Comm: syz.4.538 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 91.906617][ T5303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 91.906632][ T5303] Call Trace: [ 91.906647][ T5303] [ 91.906656][ T5303] __dump_stack+0x1d/0x30 [ 91.906753][ T5303] dump_stack_lvl+0xe8/0x140 [ 91.906777][ T5303] dump_stack+0x15/0x1b [ 91.906798][ T5303] should_fail_ex+0x265/0x280 [ 91.906822][ T5303] ? rtnl_newlink+0x5c/0x12d0 [ 91.906846][ T5303] should_failslab+0x8c/0xb0 [ 91.906935][ T5303] __kmalloc_cache_noprof+0x4c/0x320 [ 91.906970][ T5303] rtnl_newlink+0x5c/0x12d0 [ 91.906997][ T5303] ? bpf_get_stack+0x33/0x50 [ 91.907084][ T5303] ? bpf_prog_b8a90dd1efcc4ad9+0x46/0x4e [ 91.907100][ T5303] ? bpf_get_stack_raw_tp+0x106/0x130 [ 91.907122][ T5303] ? __rcu_read_unlock+0x34/0x70 [ 91.907148][ T5303] ? bpf_trace_run3+0x12c/0x1d0 [ 91.907252][ T5303] ? __kfree_skb+0x109/0x150 [ 91.907275][ T5303] ? __memcg_slab_free_hook+0x135/0x230 [ 91.907317][ T5303] ? __rcu_read_unlock+0x4f/0x70 [ 91.907417][ T5303] ? avc_has_perm_noaudit+0x1b1/0x200 [ 91.907519][ T5303] ? cred_has_capability+0x210/0x280 [ 91.907546][ T5303] ? selinux_capable+0x31/0x40 [ 91.907572][ T5303] ? security_capable+0x83/0x90 [ 91.907605][ T5303] ? ns_capable+0x7d/0xb0 [ 91.907623][ T5303] ? __pfx_rtnl_newlink+0x10/0x10 [ 91.907688][ T5303] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 91.907725][ T5303] netlink_rcv_skb+0x123/0x220 [ 91.907750][ T5303] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 91.907785][ T5303] rtnetlink_rcv+0x1c/0x30 [ 91.907879][ T5303] netlink_unicast+0x5bd/0x690 [ 91.907921][ T5303] netlink_sendmsg+0x58b/0x6b0 [ 91.908030][ T5303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.908057][ T5303] __sock_sendmsg+0x142/0x180 [ 91.908090][ T5303] ____sys_sendmsg+0x31e/0x4e0 [ 91.908118][ T5303] ___sys_sendmsg+0x17b/0x1d0 [ 91.908150][ T5303] __x64_sys_sendmsg+0xd4/0x160 [ 91.908212][ T5303] x64_sys_call+0x191e/0x2ff0 [ 91.908236][ T5303] do_syscall_64+0xd2/0x200 [ 91.908260][ T5303] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 91.908331][ T5303] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 91.908356][ T5303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.908381][ T5303] RIP: 0033:0x7f189ae4ebe9 [ 91.908399][ T5303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.908421][ T5303] RSP: 002b:00007f18998b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.908503][ T5303] RAX: ffffffffffffffda RBX: 00007f189b075fa0 RCX: 00007f189ae4ebe9 [ 91.908572][ T5303] RDX: 0000000004000c00 RSI: 0000200000000180 RDI: 0000000000000003 [ 91.908583][ T5303] RBP: 00007f18998b7090 R08: 0000000000000000 R09: 0000000000000000 [ 91.908595][ T5303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.908607][ T5303] R13: 00007f189b076038 R14: 00007f189b075fa0 R15: 00007ffcf4f74048 [ 91.908648][ T5303] [ 92.207353][ T5305] siw: device registration error -23 [ 92.420198][ T1687] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.431187][ T1743] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.442975][ T4528] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.454288][ T1687] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.493406][ T5309] netlink: 124 bytes leftover after parsing attributes in process `syz.1.540'. [ 92.767910][ T5319] lo speed is unknown, defaulting to 1000 [ 92.774235][ T5319] lo speed is unknown, defaulting to 1000 [ 93.229732][ T5322] loop4: detected capacity change from 0 to 512 [ 93.655574][ T5322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.678569][ T5322] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.057977][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.135289][ T5335] loop1: detected capacity change from 0 to 128 [ 94.142602][ T5335] FAT-fs (loop1): Directory bread(block 162) failed [ 94.149299][ T5335] FAT-fs (loop1): Directory bread(block 163) failed [ 94.156282][ T5335] FAT-fs (loop1): Directory bread(block 164) failed [ 94.162897][ T5335] FAT-fs (loop1): Directory bread(block 165) failed [ 94.169690][ T5335] FAT-fs (loop1): Directory bread(block 166) failed [ 94.176971][ T5335] FAT-fs (loop1): Directory bread(block 167) failed [ 94.191506][ T5337] FAULT_INJECTION: forcing a failure. [ 94.191506][ T5337] name failslab, interval 1, probability 0, space 0, times 0 [ 94.194225][ T5335] FAT-fs (loop1): Directory bread(block 168) failed [ 94.204370][ T5337] CPU: 1 UID: 0 PID: 5337 Comm: syz.0.549 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 94.204423][ T5337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.204470][ T5337] Call Trace: [ 94.204479][ T5337] [ 94.204488][ T5337] __dump_stack+0x1d/0x30 [ 94.204509][ T5337] dump_stack_lvl+0xe8/0x140 [ 94.204527][ T5337] dump_stack+0x15/0x1b [ 94.204616][ T5337] should_fail_ex+0x265/0x280 [ 94.204715][ T5337] ? audit_log_d_path+0x8d/0x150 [ 94.204756][ T5337] should_failslab+0x8c/0xb0 [ 94.204809][ T5337] __kmalloc_cache_noprof+0x4c/0x320 [ 94.204851][ T5337] audit_log_d_path+0x8d/0x150 [ 94.204892][ T5337] audit_log_d_path_exe+0x42/0x70 [ 94.205000][ T5337] audit_log_task+0x1e9/0x250 [ 94.205114][ T5337] ? secretmem_setattr+0xa9/0xc0 [ 94.205188][ T5337] audit_seccomp+0x61/0x100 [ 94.205247][ T5337] ? __seccomp_filter+0x68c/0x10d0 [ 94.205275][ T5337] __seccomp_filter+0x69d/0x10d0 [ 94.205308][ T5337] ? fput+0x8f/0xc0 [ 94.205388][ T5337] ? do_utimes+0x200/0x210 [ 94.205423][ T5337] __secure_computing+0x82/0x150 [ 94.205460][ T5337] syscall_trace_enter+0xcf/0x1e0 [ 94.205494][ T5337] do_syscall_64+0xac/0x200 [ 94.205554][ T5337] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 94.205584][ T5337] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 94.205618][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.205684][ T5337] RIP: 0033:0x7f48d873d5fc [ 94.205704][ T5337] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 94.205780][ T5337] RSP: 002b:00007f48d719f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 94.205807][ T5337] RAX: ffffffffffffffda RBX: 00007f48d8965fa0 RCX: 00007f48d873d5fc [ 94.205824][ T5337] RDX: 000000000000000f RSI: 00007f48d719f0a0 RDI: 0000000000000005 [ 94.205843][ T5337] RBP: 00007f48d719f090 R08: 0000000000000000 R09: 0000000000000000 [ 94.205858][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 94.205891][ T5337] R13: 00007f48d8966038 R14: 00007f48d8965fa0 R15: 00007fff9a9b3878 [ 94.205916][ T5337] [ 94.241269][ T5341] loop0: detected capacity change from 0 to 1024 [ 94.244571][ T5335] FAT-fs (loop1): Directory bread(block 169) failed [ 94.255630][ T5341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 94.268218][ T5335] FAT-fs (loop1): Directory bread(block 162) failed [ 94.272780][ T5341] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.277936][ T5335] FAT-fs (loop1): Directory bread(block 163) failed [ 94.309975][ T5341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.550'. [ 94.390298][ T5346] bond1: entered promiscuous mode [ 94.456703][ T5348] netlink: 36 bytes leftover after parsing attributes in process `syz.0.550'. [ 94.465736][ T5346] bond1: entered allmulticast mode [ 94.466074][ T5346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.509597][ T5346] bond1 (unregistering): Released all slaves [ 94.563030][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 94.607184][ T5359] loop0: detected capacity change from 0 to 2048 [ 94.659067][ T5359] loop0: p2 p3 p7 [ 94.752267][ T5362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.554'. [ 94.761930][ T5362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.554'. [ 94.918961][ T1687] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.934124][ T1687] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.945778][ T1687] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.963444][ T1687] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.978590][ T5368] loop2: detected capacity change from 0 to 512 [ 94.983102][ T5369] siw: device registration error -23 [ 95.006082][ T5368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.019703][ T5368] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.448575][ T5382] lo speed is unknown, defaulting to 1000 [ 95.455305][ T5382] lo speed is unknown, defaulting to 1000 [ 95.995450][ T5389] loop0: detected capacity change from 0 to 1024 [ 96.105856][ T5389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 96.124807][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.136410][ T5389] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.162563][ T5389] netlink: 20 bytes leftover after parsing attributes in process `syz.0.562'. [ 96.180515][ T5389] bond1: entered promiscuous mode [ 96.185810][ T5389] bond1: entered allmulticast mode [ 96.191772][ T5389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.211515][ T5389] bond1 (unregistering): Released all slaves [ 96.226175][ T5397] netlink: 36 bytes leftover after parsing attributes in process `syz.0.562'. [ 96.259596][ T5398] loop1: detected capacity change from 0 to 4096 [ 96.266418][ T5398] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.272959][ T5398] EXT4-fs: test_dummy_encryption option not supported [ 96.328096][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 96.343194][ T5400] loop9: detected capacity change from 0 to 7 [ 96.353180][ T5400] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.363778][ T5400] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.371688][ T5400] loop9: unable to read partition table [ 96.400892][ T5400] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 96.400892][ T5400] ) failed (rc=-5) [ 96.433865][ T5404] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.484245][ T29] kauditd_printk_skb: 586 callbacks suppressed [ 96.484340][ T29] audit: type=1326 audit(1755599517.164:52563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5732cb5ba7 code=0x7ffc0000 [ 96.516462][ T5404] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.545019][ T29] audit: type=1326 audit(1755599517.214:52564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5732c5add9 code=0x7ffc0000 [ 96.568437][ T29] audit: type=1326 audit(1755599517.214:52565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5732cb5ba7 code=0x7ffc0000 [ 96.591820][ T29] audit: type=1326 audit(1755599517.214:52566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5732c5add9 code=0x7ffc0000 [ 96.615381][ T29] audit: type=1326 audit(1755599517.214:52567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5732cb5ba7 code=0x7ffc0000 [ 96.638803][ T29] audit: type=1326 audit(1755599517.214:52568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5732c5add9 code=0x7ffc0000 [ 96.662136][ T29] audit: type=1326 audit(1755599517.214:52569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5732cb5ba7 code=0x7ffc0000 [ 96.685484][ T29] audit: type=1326 audit(1755599517.214:52570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5732c5add9 code=0x7ffc0000 [ 96.708897][ T29] audit: type=1326 audit(1755599517.214:52571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5732cb5ba7 code=0x7ffc0000 [ 96.732246][ T29] audit: type=1326 audit(1755599517.214:52572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5732c5add9 code=0x7ffc0000 [ 96.795971][ T5404] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.866055][ T5404] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.025518][ T4526] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.134207][ T5413] lo speed is unknown, defaulting to 1000 [ 97.140831][ T5413] lo speed is unknown, defaulting to 1000 [ 97.242394][ T4526] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.281911][ T4526] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.342153][ T4526] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.411361][ T5418] 9pnet_fd: Insufficient options for proto=fd [ 97.571697][ T5420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.571'. [ 97.607730][ T5420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.571'. [ 98.117757][ T5430] siw: device registration error -23 [ 98.662726][ T5439] netlink: 124 bytes leftover after parsing attributes in process `syz.4.576'. [ 98.848419][ T5444] netlink: 36 bytes leftover after parsing attributes in process `syz.2.579'. [ 98.857480][ T5444] netlink: 16 bytes leftover after parsing attributes in process `syz.2.579'. [ 98.866378][ T5444] netlink: 36 bytes leftover after parsing attributes in process `syz.2.579'. [ 98.875552][ T5444] netlink: 36 bytes leftover after parsing attributes in process `syz.2.579'. [ 99.046559][ T5452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.581'. [ 99.094543][ T5455] 9pnet_fd: Insufficient options for proto=fd [ 99.186554][ T5461] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 99.273660][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.292234][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.311229][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.331395][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.477457][ T5475] lo speed is unknown, defaulting to 1000 [ 99.483935][ T5475] lo speed is unknown, defaulting to 1000 [ 99.700261][ T5479] FAULT_INJECTION: forcing a failure. [ 99.700261][ T5479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.713478][ T5479] CPU: 1 UID: 0 PID: 5479 Comm: syz.4.591 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 99.713510][ T5479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 99.713526][ T5479] Call Trace: [ 99.713604][ T5479] [ 99.713614][ T5479] __dump_stack+0x1d/0x30 [ 99.713641][ T5479] dump_stack_lvl+0xe8/0x140 [ 99.713665][ T5479] dump_stack+0x15/0x1b [ 99.713685][ T5479] should_fail_ex+0x265/0x280 [ 99.713744][ T5479] should_fail+0xb/0x20 [ 99.713766][ T5479] should_fail_usercopy+0x1a/0x20 [ 99.713822][ T5479] _copy_to_user+0x20/0xa0 [ 99.713849][ T5479] simple_read_from_buffer+0xb5/0x130 [ 99.713870][ T5479] proc_fail_nth_read+0x10e/0x150 [ 99.713949][ T5479] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.713982][ T5479] vfs_read+0x1a8/0x770 [ 99.714007][ T5479] ? __rcu_read_unlock+0x4f/0x70 [ 99.714062][ T5479] ? __fget_files+0x184/0x1c0 [ 99.714090][ T5479] ? finish_task_switch+0xad/0x2b0 [ 99.714128][ T5479] ksys_read+0xda/0x1a0 [ 99.714150][ T5479] __x64_sys_read+0x40/0x50 [ 99.714173][ T5479] x64_sys_call+0x27bc/0x2ff0 [ 99.714199][ T5479] do_syscall_64+0xd2/0x200 [ 99.714231][ T5479] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 99.714268][ T5479] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 99.714292][ T5479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.714316][ T5479] RIP: 0033:0x7f189ae4d5fc [ 99.714335][ T5479] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 99.714357][ T5479] RSP: 002b:00007f18998b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.714448][ T5479] RAX: ffffffffffffffda RBX: 00007f189b075fa0 RCX: 00007f189ae4d5fc [ 99.714460][ T5479] RDX: 000000000000000f RSI: 00007f18998b70a0 RDI: 0000000000000004 [ 99.714471][ T5479] RBP: 00007f18998b7090 R08: 0000000000000000 R09: 0000000000000000 [ 99.714482][ T5479] R10: 0000000000000734 R11: 0000000000000246 R12: 0000000000000001 [ 99.714496][ T5479] R13: 00007f189b076038 R14: 00007f189b075fa0 R15: 00007ffcf4f74048 [ 99.714519][ T5479] [ 100.405561][ T5491] 9pnet_fd: Insufficient options for proto=fd [ 100.422321][ T5493] FAULT_INJECTION: forcing a failure. [ 100.422321][ T5493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.435553][ T5493] CPU: 1 UID: 0 PID: 5493 Comm: syz.4.595 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 100.435582][ T5493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.435595][ T5493] Call Trace: [ 100.435600][ T5493] [ 100.435608][ T5493] __dump_stack+0x1d/0x30 [ 100.435630][ T5493] dump_stack_lvl+0xe8/0x140 [ 100.435653][ T5493] dump_stack+0x15/0x1b [ 100.435668][ T5493] should_fail_ex+0x265/0x280 [ 100.435766][ T5493] should_fail+0xb/0x20 [ 100.435783][ T5493] should_fail_usercopy+0x1a/0x20 [ 100.435804][ T5493] _copy_from_user+0x1c/0xb0 [ 100.435854][ T5493] __sys_sendto+0x19e/0x330 [ 100.435913][ T5493] __x64_sys_sendto+0x76/0x90 [ 100.435975][ T5493] x64_sys_call+0x2d05/0x2ff0 [ 100.436002][ T5493] do_syscall_64+0xd2/0x200 [ 100.436029][ T5493] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 100.436054][ T5493] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 100.436108][ T5493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.436211][ T5493] RIP: 0033:0x7f189ae4ebe9 [ 100.436229][ T5493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.436252][ T5493] RSP: 002b:00007f18998b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 100.436275][ T5493] RAX: ffffffffffffffda RBX: 00007f189b075fa0 RCX: 00007f189ae4ebe9 [ 100.436292][ T5493] RDX: ffffffffffffff58 RSI: 0000200000000140 RDI: 0000000000000003 [ 100.436303][ T5493] RBP: 00007f18998b7090 R08: 0000200000000100 R09: 0000000000000010 [ 100.436314][ T5493] R10: 0000000020008005 R11: 0000000000000246 R12: 0000000000000001 [ 100.436326][ T5493] R13: 00007f189b076038 R14: 00007f189b075fa0 R15: 00007ffcf4f74048 [ 100.436343][ T5493] [ 100.790212][ T5495] siw: device registration error -23 [ 100.860229][ T5500] loop9: detected capacity change from 0 to 7 [ 100.874207][ T5500] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.894449][ T5500] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.902361][ T5500] loop9: unable to read partition table [ 100.926150][ T5500] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 100.926150][ T5500] ) failed (rc=-5) [ 100.995741][ T5500] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.085829][ T5500] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.175520][ T5500] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.226302][ T5500] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.241273][ T5525] 9pnet_fd: Insufficient options for proto=fd [ 101.527564][ T5529] siw: device registration error -23 [ 101.622197][ T5532] lo speed is unknown, defaulting to 1000 [ 101.628874][ T5532] lo speed is unknown, defaulting to 1000 [ 101.728419][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.802227][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.885210][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.912868][ T29] kauditd_printk_skb: 3896 callbacks suppressed [ 101.912886][ T29] audit: type=1326 audit(1755599522.594:56469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5535 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 102.019838][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.146998][ T29] audit: type=1326 audit(1755599522.624:56470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5535 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 102.170595][ T29] audit: type=1326 audit(1755599522.624:56471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5535 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 102.196262][ T29] audit: type=1326 audit(1755599522.624:56472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5535 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 102.219761][ T29] audit: type=1326 audit(1755599522.624:56473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5535 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 102.243214][ T29] audit: type=1326 audit(1755599522.634:56474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5535 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 102.266638][ T29] audit: type=1326 audit(1755599522.634:56475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5535 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 102.290046][ T29] audit: type=1326 audit(1755599522.634:56476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5535 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 102.313606][ T29] audit: type=1326 audit(1755599522.634:56477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5535 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 102.337039][ T29] audit: type=1326 audit(1755599522.634:56478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5535 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 102.367760][ T5542] loop4: detected capacity change from 0 to 512 [ 102.383266][ T5526] loop2: detected capacity change from 0 to 512 [ 102.570633][ T5544] geneve2: entered promiscuous mode [ 102.575952][ T5544] geneve2: entered allmulticast mode [ 102.616921][ T5542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.629881][ T5526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.649443][ T5542] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.670341][ T5526] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.977032][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.990960][ T5558] FAULT_INJECTION: forcing a failure. [ 102.990960][ T5558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.004234][ T5558] CPU: 1 UID: 0 PID: 5558 Comm: syz.0.619 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 103.004269][ T5558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.004284][ T5558] Call Trace: [ 103.004291][ T5558] [ 103.004299][ T5558] __dump_stack+0x1d/0x30 [ 103.004320][ T5558] dump_stack_lvl+0xe8/0x140 [ 103.004345][ T5558] dump_stack+0x15/0x1b [ 103.004364][ T5558] should_fail_ex+0x265/0x280 [ 103.004391][ T5558] should_fail+0xb/0x20 [ 103.004412][ T5558] should_fail_usercopy+0x1a/0x20 [ 103.004440][ T5558] _copy_to_user+0x20/0xa0 [ 103.004529][ T5558] simple_read_from_buffer+0xb5/0x130 [ 103.004557][ T5558] proc_fail_nth_read+0x10e/0x150 [ 103.004592][ T5558] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.004692][ T5558] vfs_read+0x1a8/0x770 [ 103.004719][ T5558] ? __rcu_read_unlock+0x4f/0x70 [ 103.004802][ T5558] ? __fget_files+0x184/0x1c0 [ 103.004832][ T5558] ksys_read+0xda/0x1a0 [ 103.004935][ T5558] __x64_sys_read+0x40/0x50 [ 103.004961][ T5558] x64_sys_call+0x27bc/0x2ff0 [ 103.004986][ T5558] do_syscall_64+0xd2/0x200 [ 103.005017][ T5558] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 103.005044][ T5558] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 103.005118][ T5558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.005145][ T5558] RIP: 0033:0x7f48d873d5fc [ 103.005162][ T5558] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 103.005180][ T5558] RSP: 002b:00007f48d719f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.005198][ T5558] RAX: ffffffffffffffda RBX: 00007f48d8965fa0 RCX: 00007f48d873d5fc [ 103.005210][ T5558] RDX: 000000000000000f RSI: 00007f48d719f0a0 RDI: 0000000000000004 [ 103.005223][ T5558] RBP: 00007f48d719f090 R08: 0000000000000000 R09: 0000000000000000 [ 103.005318][ T5558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.005334][ T5558] R13: 00007f48d8966038 R14: 00007f48d8965fa0 R15: 00007fff9a9b3878 [ 103.005356][ T5558] [ 103.244587][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.254874][ T5562] tmpfs: Unknown parameter 'Qp"%ȶI@ÔxV@ Ib+#!&c&Mw1Z;+ [ 103.254874][ T5562] HB-gr9;B^;}E TnsUM?o*^4 en2)Tf [ 103.254874][ T5562] _l S%幭<lG` &j\# 5ͽr+]_S08k?Ɵ' [ 103.256007][ T5566] mmap: syz.1.616 (5566) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.298397][ T5565] 9pnet_fd: Insufficient options for proto=fd [ 103.335379][ T5554] lo speed is unknown, defaulting to 1000 [ 103.341655][ T5554] lo speed is unknown, defaulting to 1000 [ 103.386604][ T5575] loop9: detected capacity change from 0 to 7 [ 103.392844][ T5575] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.400995][ T5575] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.408913][ T5575] loop9: unable to read partition table [ 103.415113][ T5575] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 103.415113][ T5575] ) failed (rc=-5) [ 103.602792][ T5573] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.610174][ T5573] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.845983][ T4526] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.890133][ T4526] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.939965][ T5591] lo speed is unknown, defaulting to 1000 [ 103.946440][ T5591] lo speed is unknown, defaulting to 1000 [ 104.120873][ T4526] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.248860][ T4526] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.401037][ T5597] loop4: detected capacity change from 0 to 512 [ 104.438565][ T5597] ext3: Unknown parameter 'journal_async_commit"grpid' [ 104.528938][ T5602] netlink: 'syz.2.628': attribute type 3 has an invalid length. [ 104.536666][ T5602] __nla_validate_parse: 5 callbacks suppressed [ 104.536680][ T5602] netlink: 666 bytes leftover after parsing attributes in process `syz.2.628'. [ 104.567245][ T5605] loop1: detected capacity change from 0 to 512 [ 104.608863][ T5605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.636770][ T5613] netlink: 44 bytes leftover after parsing attributes in process `syz.4.632'. [ 104.653080][ T5605] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.830230][ T5623] 9pnet_fd: Insufficient options for proto=fd [ 105.329979][ T5651] loop0: detected capacity change from 0 to 1024 [ 105.354004][ T5651] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 105.365083][ T5651] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 105.378148][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.406268][ T5653] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.414986][ T5655] 9pnet_fd: Insufficient options for proto=fd [ 105.422058][ T5651] JBD2: no valid journal superblock found [ 105.427924][ T5651] EXT4-fs (loop0): Could not load journal inode [ 105.441747][ T5651] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 105.453455][ T5657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.647'. [ 105.475574][ T5651] random: crng reseeded on system resumption [ 105.486091][ T5653] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.493208][ T5657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.647'. [ 105.635960][ T5653] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.729206][ T5670] lo speed is unknown, defaulting to 1000 [ 105.735782][ T5670] lo speed is unknown, defaulting to 1000 [ 105.818186][ T5669] loop0: detected capacity change from 0 to 128 [ 105.883924][ T5653] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.488128][ T4526] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.536768][ T4526] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.572648][ T4526] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.593444][ T5687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 106.622041][ T4526] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.724740][ T5695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.659'. [ 106.795717][ T5694] delete_channel: no stack [ 106.824466][ T5694] delete_channel: no stack [ 106.829048][ T5694] delete_channel: no stack [ 106.847919][ T5694] delete_channel: no stack [ 106.863435][ T5694] delete_channel: no stack [ 106.882158][ T5706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.662'. [ 106.891684][ T5694] delete_channel: no stack [ 106.906379][ T5694] delete_channel: no stack [ 106.916621][ T29] kauditd_printk_skb: 2229 callbacks suppressed [ 106.916634][ T29] audit: type=1326 audit(1755599527.604:58702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5681 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5732cb5ba7 code=0x7ffc0000 [ 106.973071][ T5694] delete_channel: no stack [ 106.983176][ T5694] delete_channel: no stack [ 106.994221][ T5710] IPv4: Oversized IP packet from 127.202.26.0 [ 107.004484][ T5694] delete_channel: no stack [ 107.008950][ T5694] delete_channel: no stack [ 107.025851][ T5694] delete_channel: no stack [ 107.040739][ T5694] delete_channel: no stack [ 107.049870][ T29] audit: type=1326 audit(1755599527.634:58703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5681 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5732c5add9 code=0x7ffc0000 [ 107.073487][ T29] audit: type=1326 audit(1755599527.634:58704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5681 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5732cb5ba7 code=0x7ffc0000 [ 107.096827][ T29] audit: type=1326 audit(1755599527.634:58705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5681 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5732c5add9 code=0x7ffc0000 [ 107.120269][ T29] audit: type=1326 audit(1755599527.634:58706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5681 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5732cb5ba7 code=0x7ffc0000 [ 107.143607][ T29] audit: type=1326 audit(1755599527.634:58707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5681 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5732c5add9 code=0x7ffc0000 [ 107.166961][ T29] audit: type=1326 audit(1755599527.634:58708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5681 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5732cb5ba7 code=0x7ffc0000 [ 107.190338][ T29] audit: type=1326 audit(1755599527.634:58709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5681 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5732c5add9 code=0x7ffc0000 [ 107.213692][ T29] audit: type=1326 audit(1755599527.634:58710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5681 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5732cb5ba7 code=0x7ffc0000 [ 107.216424][ T5694] delete_channel: no stack [ 107.237063][ T29] audit: type=1326 audit(1755599527.634:58711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5681 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5732c5add9 code=0x7ffc0000 [ 107.241566][ T5694] delete_channel: no stack [ 107.269429][ T5694] delete_channel: no stack [ 107.274217][ T5694] delete_channel: no stack [ 107.278853][ T5694] delete_channel: no stack [ 107.283328][ T5694] delete_channel: no stack [ 107.287895][ T5694] delete_channel: no stack [ 107.292409][ T5694] delete_channel: no stack [ 107.296907][ T5694] delete_channel: no stack [ 107.301364][ T5694] delete_channel: no stack [ 107.315259][ T5694] delete_channel: no stack [ 107.330334][ T5714] loop4: detected capacity change from 0 to 1024 [ 107.331830][ T5694] delete_channel: no stack [ 107.344784][ T5694] delete_channel: no stack [ 107.350285][ T5694] delete_channel: no stack [ 107.354916][ T5694] delete_channel: no stack [ 107.359826][ T5694] delete_channel: no stack [ 107.389621][ T5694] delete_channel: no stack [ 107.466910][ T5714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 107.484413][ T5694] delete_channel: no stack [ 107.488980][ T5694] delete_channel: no stack [ 107.490742][ T5714] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.493433][ T5694] delete_channel: no stack [ 107.508999][ T5694] delete_channel: no stack [ 107.513471][ T5694] delete_channel: no stack [ 107.517945][ T5694] delete_channel: no stack [ 107.522426][ T5694] delete_channel: no stack [ 107.526935][ T5694] delete_channel: no stack [ 107.533290][ T5694] delete_channel: no stack [ 107.537835][ T5694] delete_channel: no stack [ 107.542305][ T5694] delete_channel: no stack [ 107.546838][ T5694] delete_channel: no stack [ 107.551392][ T5694] delete_channel: no stack [ 107.566226][ T5694] delete_channel: no stack [ 107.570714][ T5694] delete_channel: no stack [ 107.575238][ T5694] delete_channel: no stack [ 107.579748][ T5694] delete_channel: no stack [ 107.594237][ T5694] delete_channel: no stack [ 107.598980][ T5694] delete_channel: no stack [ 107.603472][ T5694] delete_channel: no stack [ 107.605060][ T5727] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.614078][ T5694] delete_channel: no stack [ 107.627524][ T5714] netlink: 20 bytes leftover after parsing attributes in process `syz.4.664'. [ 107.628247][ T5694] delete_channel: no stack [ 107.642518][ T5694] delete_channel: no stack [ 107.647080][ T5694] delete_channel: no stack [ 107.649456][ T5714] bond1: entered promiscuous mode [ 107.651701][ T5694] delete_channel: no stack [ 107.656655][ T5714] bond1: entered allmulticast mode [ 107.661103][ T5694] delete_channel: no stack [ 107.672078][ T5714] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.674063][ T5694] delete_channel: no stack [ 107.683225][ T5694] delete_channel: no stack [ 107.687764][ T5694] delete_channel: no stack [ 107.690791][ T5736] netlink: 36 bytes leftover after parsing attributes in process `syz.4.664'. [ 107.692238][ T5694] delete_channel: no stack [ 107.692262][ T5694] delete_channel: no stack [ 107.692285][ T5694] delete_channel: no stack [ 107.714688][ T5694] delete_channel: no stack [ 107.716107][ T5714] bond1 (unregistering): Released all slaves [ 107.719225][ T5694] delete_channel: no stack [ 107.729736][ T5694] delete_channel: no stack [ 107.735079][ T5727] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.763035][ T5730] netlink: 44 bytes leftover after parsing attributes in process `syz.2.667'. [ 107.787317][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 107.805741][ T5727] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.841913][ T5750] loop9: detected capacity change from 0 to 7 [ 107.848842][ T5750] Buffer I/O error on dev loop9, logical block 0, async page read [ 107.857126][ T5750] Buffer I/O error on dev loop9, logical block 0, async page read [ 107.865093][ T5750] loop9: unable to read partition table [ 107.870888][ T5750] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 107.870888][ T5750] ) failed (rc=-5) [ 107.898545][ T5727] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.144340][ T5760] siw: device registration error -23 [ 108.221972][ T5761] lo speed is unknown, defaulting to 1000 [ 108.228719][ T5761] lo speed is unknown, defaulting to 1000 [ 109.114043][ T5764] FAULT_INJECTION: forcing a failure. [ 109.114043][ T5764] name failslab, interval 1, probability 0, space 0, times 0 [ 109.126786][ T5764] CPU: 1 UID: 0 PID: 5764 Comm: syz.0.674 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 109.126823][ T5764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 109.126839][ T5764] Call Trace: [ 109.126847][ T5764] [ 109.126858][ T5764] __dump_stack+0x1d/0x30 [ 109.126884][ T5764] dump_stack_lvl+0xe8/0x140 [ 109.126987][ T5764] dump_stack+0x15/0x1b [ 109.127007][ T5764] should_fail_ex+0x265/0x280 [ 109.127034][ T5764] should_failslab+0x8c/0xb0 [ 109.127064][ T5764] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 109.127121][ T5764] ? security_context_to_sid_core+0x69/0x3b0 [ 109.127152][ T5764] kmemdup_nul+0x36/0xc0 [ 109.127185][ T5764] security_context_to_sid_core+0x69/0x3b0 [ 109.127277][ T5764] ? avc_has_perm_noaudit+0x1b1/0x200 [ 109.127313][ T5764] security_context_to_sid+0x2e/0x40 [ 109.127419][ T5764] sel_write_context+0xf8/0x200 [ 109.127494][ T5764] selinux_transaction_write+0xc6/0x110 [ 109.127532][ T5764] ? __pfx_selinux_transaction_write+0x10/0x10 [ 109.127563][ T5764] vfs_write+0x269/0x960 [ 109.127583][ T5764] ? __rcu_read_unlock+0x4f/0x70 [ 109.127649][ T5764] ? __fget_files+0x184/0x1c0 [ 109.127691][ T5764] ksys_write+0xda/0x1a0 [ 109.127718][ T5764] __x64_sys_write+0x40/0x50 [ 109.127739][ T5764] x64_sys_call+0x27fe/0x2ff0 [ 109.127765][ T5764] do_syscall_64+0xd2/0x200 [ 109.127803][ T5764] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 109.127834][ T5764] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 109.127865][ T5764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.127972][ T5764] RIP: 0033:0x7f48d873ebe9 [ 109.127991][ T5764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.128011][ T5764] RSP: 002b:00007f48d719f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.128047][ T5764] RAX: ffffffffffffffda RBX: 00007f48d8965fa0 RCX: 00007f48d873ebe9 [ 109.128062][ T5764] RDX: 000000000000001d RSI: 0000200000000340 RDI: 0000000000000005 [ 109.128078][ T5764] RBP: 00007f48d719f090 R08: 0000000000000000 R09: 0000000000000000 [ 109.128093][ T5764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.128135][ T5764] R13: 00007f48d8966038 R14: 00007f48d8965fa0 R15: 00007fff9a9b3878 [ 109.128159][ T5764] [ 109.413414][ T5768] 9pnet_fd: Insufficient options for proto=fd [ 109.466258][ T5773] loop1: detected capacity change from 0 to 1024 [ 109.506734][ T5773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 109.534320][ T5773] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.584354][ T5773] __nla_validate_parse: 2 callbacks suppressed [ 109.584368][ T5773] netlink: 20 bytes leftover after parsing attributes in process `syz.1.678'. [ 109.627877][ T5773] bond1: entered promiscuous mode [ 109.633126][ T5773] bond1: entered allmulticast mode [ 109.649699][ T5773] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.670582][ T5778] netlink: 36 bytes leftover after parsing attributes in process `syz.1.678'. [ 109.690934][ T5773] bond1 (unregistering): Released all slaves [ 109.768889][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 109.865540][ T5786] FAULT_INJECTION: forcing a failure. [ 109.865540][ T5786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.878769][ T5786] CPU: 1 UID: 0 PID: 5786 Comm: syz.2.681 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 109.878882][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 109.878898][ T5786] Call Trace: [ 109.878906][ T5786] [ 109.878915][ T5786] __dump_stack+0x1d/0x30 [ 109.878941][ T5786] dump_stack_lvl+0xe8/0x140 [ 109.878964][ T5786] dump_stack+0x15/0x1b [ 109.878983][ T5786] should_fail_ex+0x265/0x280 [ 109.879023][ T5786] should_fail+0xb/0x20 [ 109.879045][ T5786] should_fail_usercopy+0x1a/0x20 [ 109.879072][ T5786] _copy_from_iter+0xcf/0xe40 [ 109.879098][ T5786] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 109.879174][ T5786] copy_page_from_iter+0x178/0x2a0 [ 109.879208][ T5786] ? anon_pipe_write+0x41/0xaa0 [ 109.879239][ T5786] anon_pipe_write+0x514/0xaa0 [ 109.879263][ T5786] ? anon_pipe_write+0x41/0xaa0 [ 109.879327][ T5786] ? __pfx_anon_pipe_write+0x10/0x10 [ 109.879352][ T5786] vfs_write+0x52a/0x960 [ 109.879426][ T5786] ksys_write+0xda/0x1a0 [ 109.879448][ T5786] __x64_sys_write+0x40/0x50 [ 109.879544][ T5786] x64_sys_call+0x27fe/0x2ff0 [ 109.879572][ T5786] do_syscall_64+0xd2/0x200 [ 109.879606][ T5786] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 109.879636][ T5786] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 109.879727][ T5786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.879762][ T5786] RIP: 0033:0x7f5732cbebe9 [ 109.879781][ T5786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.879869][ T5786] RSP: 002b:00007f573171f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.879893][ T5786] RAX: ffffffffffffffda RBX: 00007f5732ee5fa0 RCX: 00007f5732cbebe9 [ 109.879909][ T5786] RDX: 0000000000011000 RSI: 0000200000000040 RDI: 0000000000000007 [ 109.879925][ T5786] RBP: 00007f573171f090 R08: 0000000000000000 R09: 0000000000000000 [ 109.879940][ T5786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.880010][ T5786] R13: 00007f5732ee6038 R14: 00007f5732ee5fa0 R15: 00007ffdf6228698 [ 109.880035][ T5786] [ 110.242526][ T5790] netlink: 44 bytes leftover after parsing attributes in process `syz.1.683'. [ 110.252660][ T5790] netlink: 120 bytes leftover after parsing attributes in process `syz.1.683'. [ 110.261786][ T5790] netlink: 120 bytes leftover after parsing attributes in process `syz.1.683'. [ 110.493040][ T5801] loop0: detected capacity change from 0 to 128 [ 110.529616][ T5803] netlink: 60 bytes leftover after parsing attributes in process `syz.1.687'. [ 110.538818][ T5803] unsupported nlmsg_type 40 [ 111.240078][ T5822] lo speed is unknown, defaulting to 1000 [ 111.246708][ T5822] lo speed is unknown, defaulting to 1000 [ 111.842658][ T5833] FAULT_INJECTION: forcing a failure. [ 111.842658][ T5833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.855954][ T5833] CPU: 1 UID: 0 PID: 5833 Comm: syz.1.695 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 111.855993][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.856037][ T5833] Call Trace: [ 111.856043][ T5833] [ 111.856051][ T5833] __dump_stack+0x1d/0x30 [ 111.856077][ T5833] dump_stack_lvl+0xe8/0x140 [ 111.856171][ T5833] dump_stack+0x15/0x1b [ 111.856197][ T5833] should_fail_ex+0x265/0x280 [ 111.856229][ T5833] should_fail+0xb/0x20 [ 111.856250][ T5833] should_fail_usercopy+0x1a/0x20 [ 111.856462][ T5833] _copy_from_user+0x1c/0xb0 [ 111.856544][ T5833] bpf_test_init+0xdf/0x160 [ 111.856659][ T5833] bpf_prog_test_run_xdp+0x274/0x910 [ 111.856681][ T5833] ? kstrtouint+0x76/0xc0 [ 111.856703][ T5833] ? __rcu_read_unlock+0x4f/0x70 [ 111.856734][ T5833] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 111.856826][ T5833] bpf_prog_test_run+0x22a/0x390 [ 111.856866][ T5833] __sys_bpf+0x4b9/0x7b0 [ 111.856963][ T5833] __x64_sys_bpf+0x41/0x50 [ 111.856991][ T5833] x64_sys_call+0x2aea/0x2ff0 [ 111.857096][ T5833] do_syscall_64+0xd2/0x200 [ 111.857125][ T5833] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 111.857169][ T5833] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 111.857201][ T5833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.857227][ T5833] RIP: 0033:0x7f7dac9bebe9 [ 111.857245][ T5833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.857321][ T5833] RSP: 002b:00007f7dab427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 111.857339][ T5833] RAX: ffffffffffffffda RBX: 00007f7dacbe5fa0 RCX: 00007f7dac9bebe9 [ 111.857355][ T5833] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 111.857370][ T5833] RBP: 00007f7dab427090 R08: 0000000000000000 R09: 0000000000000000 [ 111.857386][ T5833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.857401][ T5833] R13: 00007f7dacbe6038 R14: 00007f7dacbe5fa0 R15: 00007fff06d3e9d8 [ 111.857425][ T5833] [ 112.116760][ T5835] loop0: detected capacity change from 0 to 1024 [ 112.136017][ T5835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 112.155412][ T5835] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.171730][ T5840] netlink: 44 bytes leftover after parsing attributes in process `syz.1.697'. [ 112.192639][ T5840] netlink: 120 bytes leftover after parsing attributes in process `syz.1.697'. [ 112.201737][ T5840] netlink: 120 bytes leftover after parsing attributes in process `syz.1.697'. [ 112.216807][ T5835] netlink: 20 bytes leftover after parsing attributes in process `syz.0.696'. [ 112.233158][ T5835] bond1: entered promiscuous mode [ 112.238317][ T5835] bond1: entered allmulticast mode [ 112.243672][ T5835] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.252568][ T5835] bond1 (unregistering): Released all slaves [ 112.318112][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 112.642127][ T5853] siw: device registration error -23 [ 112.663687][ T5852] lo speed is unknown, defaulting to 1000 [ 112.669900][ T5852] lo speed is unknown, defaulting to 1000 [ 112.838984][ T29] kauditd_printk_skb: 2443 callbacks suppressed [ 112.838998][ T29] audit: type=1400 audit(1755599533.524:61155): avc: denied { create } for pid=5856 comm="syz.0.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 113.347112][ T29] audit: type=1326 audit(1755599534.034:61156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5856 comm="syz.0.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 113.372090][ T29] audit: type=1326 audit(1755599534.054:61157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5856 comm="syz.0.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 113.395564][ T29] audit: type=1326 audit(1755599534.054:61158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5856 comm="syz.0.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 113.419058][ T29] audit: type=1326 audit(1755599534.054:61159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5856 comm="syz.0.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 113.442398][ T29] audit: type=1326 audit(1755599534.054:61160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5856 comm="syz.0.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 113.465949][ T29] audit: type=1326 audit(1755599534.054:61161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5856 comm="syz.0.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 113.489459][ T29] audit: type=1326 audit(1755599534.054:61162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5856 comm="syz.0.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 113.513011][ T29] audit: type=1326 audit(1755599534.054:61163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5856 comm="syz.0.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 113.566601][ T5863] tmpfs: Bad value for 'mpol' [ 113.579699][ T5863] serio: Serial port ttyS3 [ 113.617433][ T29] audit: type=1326 audit(1755599534.304:61164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5856 comm="syz.0.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 113.683043][ T5868] loop2: detected capacity change from 0 to 512 [ 113.706220][ T5868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.719501][ T5868] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.795389][ T5880] loop0: detected capacity change from 0 to 1024 [ 113.805612][ T5880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 113.818008][ T5880] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.856229][ T5880] bond1: entered promiscuous mode [ 113.861319][ T5880] bond1: entered allmulticast mode [ 113.866936][ T5880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.875573][ T5880] bond1 (unregistering): Released all slaves [ 113.958899][ T1743] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.979552][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 113.994609][ T1743] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.002883][ T1743] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.020269][ T1743] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.299611][ T5897] lo speed is unknown, defaulting to 1000 [ 114.306097][ T5897] lo speed is unknown, defaulting to 1000 [ 114.730231][ T5903] FAULT_INJECTION: forcing a failure. [ 114.730231][ T5903] name failslab, interval 1, probability 0, space 0, times 0 [ 114.743016][ T5903] CPU: 1 UID: 0 PID: 5903 Comm: syz.1.714 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 114.743054][ T5903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.743112][ T5903] Call Trace: [ 114.743119][ T5903] [ 114.743130][ T5903] __dump_stack+0x1d/0x30 [ 114.743180][ T5903] dump_stack_lvl+0xe8/0x140 [ 114.743205][ T5903] dump_stack+0x15/0x1b [ 114.743226][ T5903] should_fail_ex+0x265/0x280 [ 114.743252][ T5903] should_failslab+0x8c/0xb0 [ 114.743328][ T5903] kmem_cache_alloc_noprof+0x50/0x310 [ 114.743412][ T5903] ? getname_flags+0x80/0x3b0 [ 114.743474][ T5903] getname_flags+0x80/0x3b0 [ 114.743505][ T5903] __se_sys_quotactl+0x16a/0x670 [ 114.743536][ T5903] __x64_sys_quotactl+0x55/0x70 [ 114.743561][ T5903] x64_sys_call+0x15d6/0x2ff0 [ 114.743588][ T5903] do_syscall_64+0xd2/0x200 [ 114.743685][ T5903] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 114.743736][ T5903] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 114.743759][ T5903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.743779][ T5903] RIP: 0033:0x7f7dac9bebe9 [ 114.743793][ T5903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.743810][ T5903] RSP: 002b:00007f7dab427038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 114.743834][ T5903] RAX: ffffffffffffffda RBX: 00007f7dacbe5fa0 RCX: 00007f7dac9bebe9 [ 114.743893][ T5903] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffff80000202 [ 114.743909][ T5903] RBP: 00007f7dab427090 R08: 0000000000000000 R09: 0000000000000000 [ 114.743922][ T5903] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 114.743933][ T5903] R13: 00007f7dacbe6038 R14: 00007f7dacbe5fa0 R15: 00007fff06d3e9d8 [ 114.743951][ T5903] [ 115.653654][ T5905] siw: device registration error -23 [ 115.827065][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.885244][ T5915] loop0: detected capacity change from 0 to 1024 [ 115.908542][ T5917] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.921135][ T5915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 115.933548][ T5915] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.960429][ T5915] __nla_validate_parse: 9 callbacks suppressed [ 115.960449][ T5915] netlink: 20 bytes leftover after parsing attributes in process `syz.0.719'. [ 115.982947][ T5915] bond1: entered promiscuous mode [ 115.988074][ T5915] bond1: entered allmulticast mode [ 115.993525][ T5915] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.003068][ T5915] bond1 (unregistering): Released all slaves [ 116.027790][ T5922] netlink: 36 bytes leftover after parsing attributes in process `syz.0.719'. [ 116.046611][ T5917] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.053399][ T5917] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.592029][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 117.621949][ T5932] netlink: 44 bytes leftover after parsing attributes in process `syz.0.722'. [ 117.632282][ T5932] netlink: 120 bytes leftover after parsing attributes in process `syz.0.722'. [ 117.641340][ T5932] netlink: 120 bytes leftover after parsing attributes in process `syz.0.722'. [ 117.656752][ T5917] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.711794][ T5943] loop1: detected capacity change from 0 to 512 [ 117.719168][ T5943] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 117.734858][ T5943] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 117.743003][ T5943] System zones: 0-2, 18-18, 34-34 [ 117.749234][ T5943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.762339][ T5943] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.781005][ T5943] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 117.795716][ T5943] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32896 with max blocks 16 with error 28 [ 117.808373][ T5943] EXT4-fs (loop1): This should not happen!! Data will be lost [ 117.808373][ T5943] [ 117.818115][ T5943] EXT4-fs (loop1): Total free blocks count 0 [ 117.824120][ T5943] EXT4-fs (loop1): Free/Dirty block details [ 117.830034][ T5943] EXT4-fs (loop1): free_blocks=39626 [ 117.835476][ T5943] EXT4-fs (loop1): dirty_blocks=16 [ 117.840660][ T5943] EXT4-fs (loop1): Block reservation details [ 117.846667][ T5943] EXT4-fs (loop1): i_reserved_data_blocks=16 [ 117.879648][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.924197][ T5947] lo speed is unknown, defaulting to 1000 [ 117.930509][ T5947] lo speed is unknown, defaulting to 1000 [ 119.308561][ T5952] siw: device registration error -23 [ 119.479940][ T5961] loop0: detected capacity change from 0 to 1024 [ 119.497174][ T5961] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 119.509739][ T5961] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.536347][ T5961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.732'. [ 119.551715][ T5961] bond1: entered promiscuous mode [ 119.556916][ T5961] bond1: entered allmulticast mode [ 119.562572][ T5961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.571656][ T5961] bond1 (unregistering): Released all slaves [ 119.599862][ T5966] netlink: 36 bytes leftover after parsing attributes in process `syz.0.732'. [ 119.627207][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 119.731995][ T5974] tipc: Started in network mode [ 119.737047][ T5974] tipc: Node identity 5a04c16ba8b8, cluster identity 4711 [ 119.744308][ T5974] tipc: Enabled bearer , priority 0 [ 119.751844][ T5974] tipc: Disabling bearer [ 119.802649][ T5975] netlink: 'syz.0.736': attribute type 13 has an invalid length. [ 119.838304][ T5975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.846501][ T5975] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.856245][ T5975] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.993390][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 119.993408][ T29] audit: type=1400 audit(1755599540.674:61182): avc: denied { read } for pid=5984 comm="syz.0.740" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 120.022526][ T29] audit: type=1400 audit(1755599540.674:61183): avc: denied { open } for pid=5984 comm="syz.0.740" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 120.059174][ T5985] SELinux: failed to load policy [ 120.069316][ T5985] IPv6: Can't replace route, no match found [ 120.076610][ T29] audit: type=1326 audit(1755599540.764:61184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.0.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 120.102675][ T29] audit: type=1326 audit(1755599540.764:61185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.0.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 120.127647][ T29] audit: type=1326 audit(1755599540.764:61186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.0.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 120.151516][ T29] audit: type=1326 audit(1755599540.764:61187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.0.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 120.174936][ T29] audit: type=1326 audit(1755599540.764:61188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.0.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f48d873d69f code=0x7ffc0000 [ 120.198223][ T29] audit: type=1326 audit(1755599540.764:61189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.0.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 120.222315][ T29] audit: type=1326 audit(1755599540.764:61190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.0.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 120.245959][ T29] audit: type=1326 audit(1755599540.764:61191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.0.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 120.297020][ T5991] loop2: detected capacity change from 0 to 1024 [ 120.316023][ T5991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 120.364153][ T5991] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.397434][ T5991] netlink: 20 bytes leftover after parsing attributes in process `syz.2.743'. [ 120.412596][ T5991] bond1: entered promiscuous mode [ 120.417838][ T5991] bond1: entered allmulticast mode [ 120.423550][ T5991] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.433726][ T5991] bond1 (unregistering): Released all slaves [ 120.488326][ T5996] netlink: 36 bytes leftover after parsing attributes in process `syz.2.743'. [ 120.500611][ T5997] siw: device registration error -23 [ 120.603687][ T5999] netlink: 44 bytes leftover after parsing attributes in process `syz.1.744'. [ 120.624970][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 121.197320][ T6029] __nla_validate_parse: 2 callbacks suppressed [ 121.197340][ T6029] netlink: 44 bytes leftover after parsing attributes in process `syz.0.754'. [ 121.212307][ T6036] loop4: detected capacity change from 0 to 1024 [ 121.214951][ T6029] netlink: 120 bytes leftover after parsing attributes in process `syz.0.754'. [ 121.228260][ T6029] netlink: 120 bytes leftover after parsing attributes in process `syz.0.754'. [ 121.236120][ T6036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 121.249860][ T6036] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.274171][ T6036] netlink: 20 bytes leftover after parsing attributes in process `syz.4.755'. [ 121.288563][ T6036] bond1: entered promiscuous mode [ 121.293794][ T6036] bond1: entered allmulticast mode [ 121.299452][ T6036] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.308410][ T6036] bond1 (unregistering): Released all slaves [ 121.334775][ T6040] netlink: 36 bytes leftover after parsing attributes in process `syz.4.755'. [ 121.376281][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 121.401596][ T6042] netlink: 44 bytes leftover after parsing attributes in process `syz.0.757'. [ 121.412316][ T6042] netlink: 120 bytes leftover after parsing attributes in process `syz.0.757'. [ 121.421447][ T6042] netlink: 120 bytes leftover after parsing attributes in process `syz.0.757'. [ 121.899753][ T6070] loop2: detected capacity change from 0 to 1024 [ 121.919670][ T6070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 121.931824][ T6070] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.989080][ T6070] netlink: 20 bytes leftover after parsing attributes in process `syz.2.766'. [ 122.001583][ T6073] siw: device registration error -23 [ 122.021351][ T6070] bond1: entered promiscuous mode [ 122.026475][ T6070] bond1: entered allmulticast mode [ 122.032707][ T6070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.044871][ T6070] bond1 (unregistering): Released all slaves [ 122.064167][ T6075] netlink: 36 bytes leftover after parsing attributes in process `syz.2.766'. [ 122.132558][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 122.710682][ T1743] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.735734][ T1743] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.744819][ T1743] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.753174][ T1743] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.826298][ T6105] loop2: detected capacity change from 0 to 1024 [ 122.868413][ T6105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 122.931341][ T6105] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.102382][ T6105] bond1: entered promiscuous mode [ 123.107888][ T6105] bond1: entered allmulticast mode [ 123.116072][ T6105] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.144815][ T5964] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 123.168932][ T6105] bond1 (unregistering): Released all slaves [ 123.198151][ T6129] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.271067][ T6130] siw: device registration error -23 [ 123.376872][ T6129] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.417960][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 123.457025][ T6129] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.516447][ T6129] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.712420][ T6134] loop4: detected capacity change from 0 to 2048 [ 123.725749][ T6134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.770792][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.980017][ T6152] loop0: detected capacity change from 0 to 1024 [ 123.996621][ T6152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 124.008990][ T6152] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.133825][ T6152] lo speed is unknown, defaulting to 1000 [ 124.140249][ T6152] lo speed is unknown, defaulting to 1000 [ 124.212209][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 124.486930][ T6183] loop2: detected capacity change from 0 to 1024 [ 124.511554][ T6183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 124.543253][ T6183] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.700011][ T6183] bond1: entered promiscuous mode [ 124.706114][ T6183] bond1: entered allmulticast mode [ 124.712283][ T6183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.723830][ T6183] bond1 (unregistering): Released all slaves [ 124.779564][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 125.402453][ T29] kauditd_printk_skb: 6660 callbacks suppressed [ 125.402475][ T29] audit: type=1326 audit(1755599545.674:67852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f189adeadd9 code=0x7ffc0000 [ 125.432684][ T29] audit: type=1326 audit(1755599545.674:67853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f189ae45ba7 code=0x7ffc0000 [ 125.456322][ T29] audit: type=1326 audit(1755599545.674:67854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f189adeadd9 code=0x7ffc0000 [ 125.480041][ T29] audit: type=1326 audit(1755599545.674:67855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f189ae45ba7 code=0x7ffc0000 [ 125.503397][ T29] audit: type=1326 audit(1755599545.674:67856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f189adeadd9 code=0x7ffc0000 [ 125.526857][ T29] audit: type=1326 audit(1755599545.674:67857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f189ae45ba7 code=0x7ffc0000 [ 125.551004][ T29] audit: type=1326 audit(1755599545.674:67858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f189adeadd9 code=0x7ffc0000 [ 125.575675][ T29] audit: type=1326 audit(1755599545.674:67859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f189ae45ba7 code=0x7ffc0000 [ 125.599341][ T29] audit: type=1326 audit(1755599545.674:67860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f189adeadd9 code=0x7ffc0000 [ 125.623591][ T29] audit: type=1326 audit(1755599545.674:67861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f189ae45ba7 code=0x7ffc0000 [ 125.962732][ T6220] loop4: detected capacity change from 0 to 1024 [ 126.020194][ T6220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 126.032434][ T6220] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.080424][ T6220] bond1: entered promiscuous mode [ 126.085603][ T6220] bond1: entered allmulticast mode [ 126.091200][ T6220] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.110645][ T6220] bond1 (unregistering): Released all slaves [ 126.174941][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 126.208410][ T6237] loop4: detected capacity change from 0 to 1024 [ 126.226080][ T6237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 126.238827][ T6237] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.268009][ T6237] __nla_validate_parse: 23 callbacks suppressed [ 126.268030][ T6237] netlink: 20 bytes leftover after parsing attributes in process `syz.4.810'. [ 126.291225][ T6237] bond1: entered promiscuous mode [ 126.296365][ T6237] bond1: entered allmulticast mode [ 126.301706][ T6237] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.316726][ T6237] bond1 (unregistering): Released all slaves [ 126.335035][ T6242] netlink: 36 bytes leftover after parsing attributes in process `syz.4.810'. [ 126.366613][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 126.389036][ T6244] loop2: detected capacity change from 0 to 1024 [ 126.406536][ T6244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 126.419536][ T6244] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.450294][ T6244] netlink: 20 bytes leftover after parsing attributes in process `syz.2.823'. [ 126.469480][ T6244] bond1: entered promiscuous mode [ 126.474668][ T6244] bond1: entered allmulticast mode [ 126.480455][ T6244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.512874][ T6257] netlink: 36 bytes leftover after parsing attributes in process `syz.2.823'. [ 126.557046][ T6244] bond1 (unregistering): Released all slaves [ 126.651248][ T6260] siw: device registration error -23 [ 126.766440][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 126.902609][ T6263] loop1: detected capacity change from 0 to 2048 [ 126.995222][ T6263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.019940][ T6267] netlink: 44 bytes leftover after parsing attributes in process `syz.2.818'. [ 127.030389][ T6267] netlink: 120 bytes leftover after parsing attributes in process `syz.2.818'. [ 127.039630][ T6267] netlink: 120 bytes leftover after parsing attributes in process `syz.2.818'. [ 127.081274][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.251046][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.821'. [ 127.262196][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.821'. [ 127.418809][ T6289] Illegal XDP return value 58480392 on prog (id 625) dev N/A, expect packet loss! [ 127.695359][ T6303] loop9: detected capacity change from 0 to 7 [ 127.702851][ T6303] Buffer I/O error on dev loop9, logical block 0, async page read [ 127.711263][ T6303] Buffer I/O error on dev loop9, logical block 0, async page read [ 127.720729][ T6303] loop9: unable to read partition table [ 127.726780][ T6303] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 127.726780][ T6303] ) failed (rc=-5) [ 127.747656][ T6303] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.763409][ T3436] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.784050][ T3436] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.792380][ T3436] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.816582][ T6303] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.828576][ T3436] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.841019][ T6311] loop3: detected capacity change from 0 to 1024 [ 127.855893][ T6303] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.870843][ T6311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 127.889010][ T6311] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.901654][ T6303] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.970960][ T6311] netlink: 20 bytes leftover after parsing attributes in process `syz.3.830'. [ 127.979796][ T4528] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.992483][ T4528] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.009029][ T6311] bond1: entered promiscuous mode [ 128.014388][ T6311] bond1: entered allmulticast mode [ 128.019991][ T6311] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.040348][ T6311] bond1 (unregistering): Released all slaves [ 128.049663][ T4528] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.066241][ T4528] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.094987][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 128.315908][ T6331] siw: device registration error -23 [ 128.762375][ T6344] loop0: detected capacity change from 0 to 128 [ 128.805519][ T6344] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 128.812303][ T6344] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 128.820056][ T6344] vhci_hcd vhci_hcd.0: Device attached [ 128.829174][ T6345] vhci_hcd: connection closed [ 128.829333][ T4528] vhci_hcd: stop threads [ 128.840350][ T4528] vhci_hcd: release socket [ 128.844925][ T4528] vhci_hcd: disconnect device [ 129.069433][ T6357] loop9: detected capacity change from 0 to 7 [ 129.076939][ T6357] Buffer I/O error on dev loop9, logical block 0, async page read [ 129.085232][ T6357] Buffer I/O error on dev loop9, logical block 0, async page read [ 129.093095][ T6357] loop9: unable to read partition table [ 129.099193][ T6357] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 129.099193][ T6357] ) failed (rc=-5) [ 129.119818][ T6357] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.175941][ T6357] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.215961][ T6357] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.256279][ T6357] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.294402][ T6360] loop3: detected capacity change from 0 to 1024 [ 129.306052][ T6360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 129.318712][ T6360] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.350370][ T6360] bond1: entered promiscuous mode [ 129.355507][ T6360] bond1: entered allmulticast mode [ 129.361086][ T6360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.372006][ T6360] bond1 (unregistering): Released all slaves [ 129.411537][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 129.831629][ T6397] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.907293][ T6398] siw: device registration error -23 [ 130.067318][ T6397] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.127014][ T6397] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.187315][ T6397] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.313421][ T6406] loop2: detected capacity change from 0 to 1024 [ 130.325775][ T6406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 130.345742][ T6406] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.379191][ T6406] bond1: entered promiscuous mode [ 130.384336][ T6406] bond1: entered allmulticast mode [ 130.389891][ T6406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.407388][ T6406] bond1 (unregistering): Released all slaves [ 130.425266][ T29] kauditd_printk_skb: 7525 callbacks suppressed [ 130.425290][ T29] audit: type=1326 audit(1755599551.114:75387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.4.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189ae4ebe9 code=0x7ffc0000 [ 130.455981][ T29] audit: type=1326 audit(1755599551.114:75388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.4.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189ae4ebe9 code=0x7ffc0000 [ 130.495951][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 130.654167][ T29] audit: type=1326 audit(1755599551.334:75389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6417 comm="syz.4.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189ae4ebe9 code=0x7ffc0000 [ 130.677878][ T29] audit: type=1326 audit(1755599551.334:75390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6417 comm="syz.4.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189ae4ebe9 code=0x7ffc0000 [ 130.730857][ T29] audit: type=1400 audit(1755599551.414:75391): avc: denied { read } for pid=6426 comm="syz.0.864" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 130.765198][ T29] audit: type=1400 audit(1755599551.414:75392): avc: denied { open } for pid=6426 comm="syz.0.864" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 130.790064][ T29] audit: type=1400 audit(1755599551.414:75393): avc: denied { module_load } for pid=6426 comm="syz.0.864" path="/sys/kernel/notes" dev="sysfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 130.813881][ T29] audit: type=1400 audit(1755599551.414:75394): avc: denied { ioctl } for pid=6426 comm="syz.0.864" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 130.842905][ T6437] FAULT_INJECTION: forcing a failure. [ 130.842905][ T6437] name failslab, interval 1, probability 0, space 0, times 0 [ 130.855738][ T6437] CPU: 0 UID: 0 PID: 6437 Comm: syz.4.867 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 130.855768][ T6437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.855784][ T6437] Call Trace: [ 130.855793][ T6437] [ 130.855803][ T6437] __dump_stack+0x1d/0x30 [ 130.855829][ T6437] dump_stack_lvl+0xe8/0x140 [ 130.855854][ T6437] dump_stack+0x15/0x1b [ 130.855875][ T6437] should_fail_ex+0x265/0x280 [ 130.855986][ T6437] should_failslab+0x8c/0xb0 [ 130.856047][ T6437] __kvmalloc_node_noprof+0x123/0x4e0 [ 130.856082][ T6437] ? alloc_netdev_mqs+0x6e2/0xa30 [ 130.856109][ T6437] alloc_netdev_mqs+0x6e2/0xa30 [ 130.856131][ T6437] slip_open+0x2d1/0x920 [ 130.856243][ T6437] ? vfree+0x295/0x3a0 [ 130.856279][ T6437] ? up_write+0x18/0x60 [ 130.856304][ T6437] tty_ldisc_open+0x5d/0xb0 [ 130.856381][ T6437] tty_set_ldisc+0x1db/0x380 [ 130.856422][ T6437] tiocsetd+0x51/0x60 [ 130.856559][ T6437] tty_ioctl+0xa7f/0xb80 [ 130.856591][ T6437] ? __pfx_tty_ioctl+0x10/0x10 [ 130.856695][ T6437] __se_sys_ioctl+0xcb/0x140 [ 130.856735][ T6437] __x64_sys_ioctl+0x43/0x50 [ 130.856770][ T6437] x64_sys_call+0x1816/0x2ff0 [ 130.856803][ T6437] do_syscall_64+0xd2/0x200 [ 130.856843][ T6437] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 130.856869][ T6437] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 130.856893][ T6437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.857018][ T6437] RIP: 0033:0x7f189ae4ebe9 [ 130.857034][ T6437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.857067][ T6437] RSP: 002b:00007f18998b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.857101][ T6437] RAX: ffffffffffffffda RBX: 00007f189b075fa0 RCX: 00007f189ae4ebe9 [ 130.857118][ T6437] RDX: 00002000000003c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 130.857161][ T6437] RBP: 00007f18998b7090 R08: 0000000000000000 R09: 0000000000000000 [ 130.857177][ T6437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 130.857190][ T6437] R13: 00007f189b076038 R14: 00007f189b075fa0 R15: 00007ffcf4f74048 [ 130.857255][ T6437] [ 131.092769][ T29] audit: type=1326 audit(1755599551.764:75396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6432 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 131.116249][ T29] audit: type=1326 audit(1755599551.764:75395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.2.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5732cbebe9 code=0x7ffc0000 [ 131.823038][ T6455] loop2: detected capacity change from 0 to 1024 [ 131.836081][ T6455] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 131.850423][ T6455] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.887358][ T6455] __nla_validate_parse: 20 callbacks suppressed [ 131.887379][ T6455] netlink: 20 bytes leftover after parsing attributes in process `syz.2.872'. [ 131.914410][ T6455] bond1: entered promiscuous mode [ 131.919888][ T6455] bond1: entered allmulticast mode [ 131.925807][ T6455] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.944758][ T6455] bond1 (unregistering): Released all slaves [ 131.957107][ T6460] netlink: 36 bytes leftover after parsing attributes in process `syz.2.872'. [ 132.008061][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 132.102463][ T6462] loop2: detected capacity change from 0 to 2048 [ 132.120158][ T6462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.206569][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.282303][ T6469] netlink: 44 bytes leftover after parsing attributes in process `syz.2.875'. [ 132.293727][ T6469] netlink: 120 bytes leftover after parsing attributes in process `syz.2.875'. [ 132.304013][ T6469] netlink: 120 bytes leftover after parsing attributes in process `syz.2.875'. [ 132.368048][ T6480] siw: device registration error -23 [ 132.437568][ T1743] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.459747][ T1743] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.511432][ T1743] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.526779][ T1743] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.625238][ T6484] loop4: detected capacity change from 0 to 512 [ 132.658953][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.879'. [ 132.730013][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.879'. [ 132.786569][ T6484] EXT4-fs (loop4): orphan cleanup on readonly fs [ 132.793628][ T6484] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 132.815111][ T6484] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 132.824903][ T6484] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.878: bg 0: block 248: padding at end of block bitmap is not set [ 132.840536][ T6484] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 132.850132][ T6484] EXT4-fs (loop4): 1 orphan inode deleted [ 132.857241][ T6484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.890563][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.932298][ T6496] loop2: detected capacity change from 0 to 1024 [ 132.955909][ T6496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 132.968289][ T6496] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.010270][ T6496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.883'. [ 133.029912][ T6496] bond1: entered promiscuous mode [ 133.035336][ T6496] bond1: entered allmulticast mode [ 133.046717][ T6496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.066734][ T6496] bond1 (unregistering): Released all slaves [ 133.074605][ T6508] netlink: 36 bytes leftover after parsing attributes in process `syz.2.883'. [ 133.091606][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.103786][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.123401][ T4535] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.141396][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.180739][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 133.235267][ T6519] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.279522][ T6521] loop1: detected capacity change from 0 to 2048 [ 133.307309][ T6519] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.325540][ T6521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.396463][ T6519] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.431470][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.443425][ T6519] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.536347][ T1743] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.550414][ T3436] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.563788][ T3436] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.578183][ T3436] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.818523][ T6539] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.825998][ T6539] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.908221][ T6547] loop1: detected capacity change from 0 to 512 [ 133.925448][ T6547] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 133.952566][ T6547] EXT4-fs (loop1): mount failed [ 133.996865][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.894'. [ 134.120430][ T6565] siw: device registration error -23 [ 134.252506][ T6539] gretap1: left promiscuous mode [ 134.257607][ T6539] gretap1: left allmulticast mode [ 134.308782][ T3383] lo speed is unknown, defaulting to 1000 [ 134.314623][ T3383] syz0: Port: 1 Link DOWN [ 134.334748][ T4535] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.384867][ T4535] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.447749][ T4535] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.518681][ T4535] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.627512][ T6571] loop9: detected capacity change from 0 to 7 [ 134.637751][ T6571] Buffer I/O error on dev loop9, logical block 0, async page read [ 134.659476][ T6571] Buffer I/O error on dev loop9, logical block 0, async page read [ 134.667628][ T6571] loop9: unable to read partition table [ 134.712859][ T6573] loop3: detected capacity change from 0 to 1024 [ 134.724276][ T6571] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 134.724276][ T6571] ) failed (rc=-5) [ 134.878164][ T6571] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.915700][ T6573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 134.940392][ T6573] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.973929][ T6573] bond1: entered promiscuous mode [ 134.979725][ T6573] bond1: entered allmulticast mode [ 134.985392][ T6573] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.005215][ T6573] bond1 (unregistering): Released all slaves [ 135.046634][ T6571] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.090889][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 135.107006][ T6571] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.181214][ T6592] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.205942][ T6571] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.256090][ T6592] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.323274][ T6597] loop4: detected capacity change from 0 to 2048 [ 135.331823][ T6592] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.345851][ T6597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.382193][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.402126][ T6592] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.410629][ T6603] loop4: detected capacity change from 0 to 512 [ 135.426047][ T6603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.438739][ T6603] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.805516][ T29] kauditd_printk_skb: 8583 callbacks suppressed [ 135.805535][ T29] audit: type=1326 audit(1755599556.494:83978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 135.837573][ T29] audit: type=1326 audit(1755599556.494:83979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 135.863257][ T29] audit: type=1326 audit(1755599556.494:83980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 135.888728][ T29] audit: type=1326 audit(1755599556.494:83981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 135.912215][ T29] audit: type=1326 audit(1755599556.494:83982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 135.935873][ T29] audit: type=1326 audit(1755599556.494:83983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 135.959922][ T29] audit: type=1326 audit(1755599556.494:83984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 135.983902][ T29] audit: type=1326 audit(1755599556.494:83985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 136.007718][ T29] audit: type=1326 audit(1755599556.494:83986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 136.031276][ T29] audit: type=1326 audit(1755599556.494:83987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d873ebe9 code=0x7ffc0000 [ 136.249513][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.409682][ T6631] siw: device registration error -23 [ 136.819439][ T6633] loop4: detected capacity change from 0 to 1024 [ 136.836114][ T6633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 136.849274][ T6633] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.893029][ T6633] bond1: entered promiscuous mode [ 136.898369][ T6633] bond1: entered allmulticast mode [ 136.904450][ T6633] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.925358][ T6633] bond1 (unregistering): Released all slaves [ 136.938328][ T6637] __nla_validate_parse: 6 callbacks suppressed [ 136.938393][ T6637] netlink: 36 bytes leftover after parsing attributes in process `syz.4.913'. [ 136.998280][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 137.179205][ T4528] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.191769][ T4528] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.224044][ T4528] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.241868][ T4528] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.386315][ T6654] loop3: detected capacity change from 0 to 2048 [ 137.394814][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.919'. [ 137.448545][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.919'. [ 137.456278][ T6654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.500959][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.663666][ T4528] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.677805][ T4528] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.694222][ T4528] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.706370][ T6675] loop3: detected capacity change from 0 to 1024 [ 137.720969][ T4528] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.755967][ T6675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 137.769619][ T6675] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.798949][ T6675] netlink: 20 bytes leftover after parsing attributes in process `syz.3.924'. [ 137.823508][ T6675] bond1: entered promiscuous mode [ 137.828855][ T6675] bond1: entered allmulticast mode [ 137.834562][ T6675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.867883][ T6687] loop9: detected capacity change from 0 to 7 [ 137.874333][ T6687] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.882366][ T6687] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.891506][ T6687] loop9: unable to read partition table [ 137.897360][ T6687] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 137.897360][ T6687] ) failed (rc=-5) [ 137.911728][ T6688] netlink: 36 bytes leftover after parsing attributes in process `syz.3.924'. [ 137.922710][ T6675] bond1 (unregistering): Released all slaves [ 137.991215][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 138.053835][ T6694] siw: device registration error -23 [ 138.452705][ T6692] netlink: 21 bytes leftover after parsing attributes in process `syz.0.929'. [ 138.477230][ T6703] SELinux: Context system_u:object_r:var_t:s0 is not valid (left unmapped). [ 138.494328][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.933'. [ 138.508883][ T6692] loop0: detected capacity change from 0 to 128 [ 138.519927][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.933'. [ 138.541785][ T6692] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.559823][ T6692] ext4 filesystem being mounted at /212/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 138.820497][ T6721] loop9: detected capacity change from 0 to 7 [ 138.838103][ T6717] loop1: detected capacity change from 0 to 2048 [ 138.856201][ T6721] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.870560][ T6721] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.878525][ T6721] loop9: unable to read partition table [ 138.935403][ T6717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.955796][ T6721] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 138.955796][ T6721] ) failed (rc=-5) [ 139.039536][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.101884][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.132286][ T6732] FAULT_INJECTION: forcing a failure. [ 139.132286][ T6732] name failslab, interval 1, probability 0, space 0, times 0 [ 139.145084][ T6732] CPU: 0 UID: 0 PID: 6732 Comm: syz.2.941 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 139.145122][ T6732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.145147][ T6732] Call Trace: [ 139.145156][ T6732] [ 139.145167][ T6732] __dump_stack+0x1d/0x30 [ 139.145193][ T6732] dump_stack_lvl+0xe8/0x140 [ 139.145217][ T6732] dump_stack+0x15/0x1b [ 139.145266][ T6732] should_fail_ex+0x265/0x280 [ 139.145292][ T6732] should_failslab+0x8c/0xb0 [ 139.145402][ T6732] kmem_cache_alloc_noprof+0x50/0x310 [ 139.145437][ T6732] ? getname_flags+0x80/0x3b0 [ 139.145469][ T6732] ? fput+0x8f/0xc0 [ 139.145562][ T6732] getname_flags+0x80/0x3b0 [ 139.145591][ T6732] __x64_sys_mkdirat+0x40/0x60 [ 139.145632][ T6732] x64_sys_call+0x2b7/0x2ff0 [ 139.145739][ T6732] do_syscall_64+0xd2/0x200 [ 139.145805][ T6732] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 139.145835][ T6732] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 139.145860][ T6732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.145944][ T6732] RIP: 0033:0x7f5732cbebe9 [ 139.145963][ T6732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.145995][ T6732] RSP: 002b:00007f573171f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 139.146017][ T6732] RAX: ffffffffffffffda RBX: 00007f5732ee5fa0 RCX: 00007f5732cbebe9 [ 139.146033][ T6732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 139.146047][ T6732] RBP: 00007f573171f090 R08: 0000000000000000 R09: 0000000000000000 [ 139.146063][ T6732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.146078][ T6732] R13: 00007f5732ee6038 R14: 00007f5732ee5fa0 R15: 00007ffdf6228698 [ 139.146173][ T6732] [ 139.862591][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.946'. [ 139.991641][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.946'. [ 140.325639][ T6775] loop4: detected capacity change from 0 to 2048 [ 140.362276][ T6786] loop9: detected capacity change from 0 to 7 [ 140.368656][ T6786] Buffer I/O error on dev loop9, logical block 0, async page read [ 140.382781][ T6786] Buffer I/O error on dev loop9, logical block 0, async page read [ 140.390719][ T6786] loop9: unable to read partition table [ 140.405251][ T6775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.426842][ T6786] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 140.426842][ T6786] ) failed (rc=-5) [ 140.482051][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.823004][ T29] kauditd_printk_skb: 5935 callbacks suppressed [ 140.823019][ T29] audit: type=1326 audit(1755599561.504:89917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6810 comm="syz.3.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424ca3ebe9 code=0x7ffc0000 [ 140.866242][ T29] audit: type=1326 audit(1755599561.544:89918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6810 comm="syz.3.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424ca3ebe9 code=0x7ffc0000 [ 140.889832][ T29] audit: type=1326 audit(1755599561.544:89919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6810 comm="syz.3.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f424ca3ebe9 code=0x7ffc0000 [ 140.913393][ T29] audit: type=1326 audit(1755599561.544:89920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6810 comm="syz.3.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424ca3ebe9 code=0x7ffc0000 [ 140.937049][ T29] audit: type=1326 audit(1755599561.544:89921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f7dac9bebe9 code=0x7ffc0000 [ 140.960457][ T29] audit: type=1326 audit(1755599561.544:89922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6810 comm="syz.3.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f424ca3ebe9 code=0x7ffc0000 [ 140.983907][ T29] audit: type=1326 audit(1755599561.544:89923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6810 comm="syz.3.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424ca3ebe9 code=0x7ffc0000 [ 141.007553][ T29] audit: type=1326 audit(1755599561.544:89924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6810 comm="syz.3.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f424ca3ebe9 code=0x7ffc0000 [ 141.031059][ T29] audit: type=1326 audit(1755599561.544:89925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6810 comm="syz.3.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424ca3ebe9 code=0x7ffc0000 [ 141.054602][ T29] audit: type=1326 audit(1755599561.544:89926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6810 comm="syz.3.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f424ca3ebe9 code=0x7ffc0000 [ 141.080755][ T6821] siw: device registration error -23 [ 141.428273][ T6831] loop2: detected capacity change from 0 to 512 [ 141.441255][ T6831] ext4: Unknown parameter 'fsuuid' [ 141.649308][ T6840] loop3: detected capacity change from 0 to 1024 [ 141.668128][ T6841] loop4: detected capacity change from 0 to 2048 [ 141.676233][ T6828] Set syz1 is full, maxelem 65536 reached [ 141.687323][ T6840] EXT4-fs: Ignoring removed oldalloc option [ 141.693574][ T6840] EXT4-fs (loop3): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 141.722220][ T6840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.736303][ T6841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.779148][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.821615][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.884382][ T6865] loop9: detected capacity change from 0 to 7 [ 141.895134][ T6865] Buffer I/O error on dev loop9, logical block 0, async page read [ 141.907097][ T6865] Buffer I/O error on dev loop9, logical block 0, async page read [ 141.915119][ T6865] loop9: unable to read partition table [ 141.932337][ T6865] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 141.932337][ T6865] ) failed (rc=-5) [ 142.017969][ T6870] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.092346][ T6869] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.126430][ T6870] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.170039][ T6869] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.205787][ T6870] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.266076][ T6869] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.378717][ T6870] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.415998][ T6869] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.431733][ T6881] ================================================================== [ 142.440530][ T6881] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 142.447255][ T6881] [ 142.449767][ T6881] write to 0xffff888106eca550 of 8 bytes by task 6886 on cpu 0: [ 142.457427][ T6881] __dentry_kill+0x142/0x4b0 [ 142.462062][ T6881] dput+0x5e/0xd0 [ 142.465718][ T6881] step_into+0x5b2/0x820 [ 142.469995][ T6881] path_openat+0x13e8/0x2170 [ 142.474626][ T6881] do_filp_open+0x109/0x230 [ 142.479161][ T6881] io_openat2+0x272/0x390 [ 142.483609][ T6881] io_openat+0x1b/0x30 [ 142.487758][ T6881] __io_issue_sqe+0xfe/0x2e0 [ 142.492895][ T6881] io_issue_sqe+0x53/0x970 [ 142.497428][ T6881] io_wq_submit_work+0x3f7/0x5f0 [ 142.502908][ T6881] io_worker_handle_work+0x44e/0x9b0 [ 142.508318][ T6881] io_wq_worker+0x22e/0x870 [ 142.513111][ T6881] ret_from_fork+0xda/0x150 [ 142.517909][ T6881] ret_from_fork_asm+0x1a/0x30 [ 142.522791][ T6881] [ 142.525342][ T6881] read to 0xffff888106eca550 of 8 bytes by task 6881 on cpu 1: [ 142.533777][ T6881] fast_dput+0x5f/0x2c0 [ 142.538084][ T6881] dput+0x24/0xd0 [ 142.542205][ T6881] step_into+0x5b2/0x820 [ 142.546484][ T6881] path_openat+0x13e8/0x2170 [ 142.551114][ T6881] do_filp_open+0x109/0x230 [ 142.555667][ T6881] io_openat2+0x272/0x390 [ 142.560046][ T6881] io_openat+0x1b/0x30 [ 142.564140][ T6881] __io_issue_sqe+0xfe/0x2e0 [ 142.568757][ T6881] io_issue_sqe+0x53/0x970 [ 142.573190][ T6881] io_wq_submit_work+0x3f7/0x5f0 [ 142.578146][ T6881] io_worker_handle_work+0x44e/0x9b0 [ 142.583439][ T6881] io_wq_worker+0x22e/0x870 [ 142.587959][ T6881] ret_from_fork+0xda/0x150 [ 142.592750][ T6881] ret_from_fork_asm+0x1a/0x30 [ 142.597705][ T6881] [ 142.600039][ T6881] value changed: 0xffff888237755b88 -> 0x0000000000000000 [ 142.607857][ T6881] [ 142.610293][ T6881] Reported by Kernel Concurrency Sanitizer on: [ 142.616909][ T6881] CPU: 1 UID: 0 PID: 6881 Comm: iou-wrk-6880 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 142.629707][ T6881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 142.640314][ T6881] ================================================================== [ 142.863319][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.872292][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.880637][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.888984][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.897364][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.905784][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.914235][ T4535] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.922627][ T4535] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0