last executing test programs: 42.784379408s ago: executing program 3 (id=1505): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)='v', 0x1}], 0x1) sendto$inet6(r2, 0x0, 0x0, 0x8, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x200000000006, 0xbc, 0x0, 0x7ffc0002}]}) lchown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) utimes(&(0x7f00000000c0)='./file0\x00', 0x0) 42.773734129s ago: executing program 3 (id=1509): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000014010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) 42.612077602s ago: executing program 3 (id=1516): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7040000f4ffffff840000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b22d, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000500000018000180140002007379"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x50, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 42.470324724s ago: executing program 3 (id=1518): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000340)=ANY=[@ANYBLOB="646f74732c747a3d5554432c646f74732c6e6f646f74732c636865636b3d7374726963742c666c7573682c6e6f646f74732c6e6f646f74732c71756965742c00a8f43e0a9765c2419bbc93d3bb042cde7dc609bd874b9221aab9404318121ead7505cda193a13e6d2fd30034c9c4f457dc798a67d4d30285c0590475ba33482c83a51b42d7f7ea92b35388ec28309e3b4b8a758575baa63a8679030bf6423a4759c2bb9f9353f43cc4c825234e791353a87ed0bcade85e0808d879b38514fafbba"], 0x1, 0x16f, &(0x7f0000000440)="$eJzs2zGr01AUB/CT9/KeT13eLA4BF6eiTo6KVBADitJBJ4Xq0krBLtGpH8UvKEinTl5po1ZDxQqNsfb3W3rgT+k5Q3M5gfvi6pvRcDJ9PXk8j7Msi/xOFLHI4jyO4jhqswAA/ieLlOJTSildmMXFD5FS6rojAKBtzn8AODy/Pf9vd9QYANAa+z8AHJ6nz54/vFuW/SdFcRbxcVYNqkH9Wef3H5T9G8XK+fpb86oaHH/Pb9Z58XN+Epe+5rc25qdx/VqdL7N7j8pGfjmG7Y8PAAAAB6G32syXu/zm/b7XK75p5HX1w/uBxv6ex5X8r40BAPyB6bv3o5fj8au3e1Ac7WHPOy7yf6ON/S5Ooy5OImL3P5F3P+BOii0eHlnW8tMJaNP6T991JwAAAAAAAAAAAAAAwK9scR/oc9oQRWx/najrGQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDpSwAAAP//BLJLKQ==") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000500)=0xfffffffffffffcc4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000640)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_robust_list(&(0x7f0000000600)={0x0, 0xeed7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x9) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffffffffffff) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0xc, 0xd, 0xffffe5a7, 0xffffffbe, 0x9, 0x3, 0x6, r8}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f00000002c0)={r8, 0x60, "5b23f6ec1bd4ab3cf4dfc5bc16708cb7608a2ca80ae43fc427aee368e78202ef744281ea465e316ebc03ae7dab711e375bcb09d0965c4b2b8f25d7c19f2da3c2ca2a1a75e19ca1903b603c17b197afac587d2f134b539d13b3e92c6a0db82aa8"}, &(0x7f0000000180)=0x68) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000200)={r8, 0x94, "621bebb0c598c3f2195801fd82d764eb858db6d52c6ecb203250092ced3331a37db281e6bf0ad343aa7ea3c878134023cb7e78b928c30d8ba87f1737767dbcc6be165446eeed9e9e97434963b285aa6947bae85560c56fc3a46e5e476646d29a4fdf559f7c82bb796aae6ff69a532d7295e6195aef443c0643a8ec1ac1731b1ad79961fac2e6f3de1dc6690a97bdfe7e61df981f"}, &(0x7f0000000080)=0x9c) 42.432786256s ago: executing program 3 (id=1521): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r0, 0x3a8bc000) mount_setattr(0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0) ptrace(0x10, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mount$9p_rdma(&(0x7f0000000280), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x10000, &(0x7f0000000680)=ANY=[@ANYBLOB="7472616e733d72646d612c706ff2743d3078303030303030303030303030346532302c00"]) 42.198551776s ago: executing program 3 (id=1526): gettid() syz_clone(0x2022400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000e00000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1, 0x0, 0x10000}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000ffffffffff"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) r2 = geteuid() setreuid(r2, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) mq_timedsend(r4, 0x0, 0x0, 0x4, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/4096, 0x1000, 0x0, 0x0) 42.198306005s ago: executing program 32 (id=1526): gettid() syz_clone(0x2022400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000e00000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1, 0x0, 0x10000}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000ffffffffff"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) r2 = geteuid() setreuid(r2, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) mq_timedsend(r4, 0x0, 0x0, 0x4, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/4096, 0x1000, 0x0, 0x0) 2.678591153s ago: executing program 2 (id=2196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$assume_authority(0x10, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)="4baa9f6869f100") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 2.678011213s ago: executing program 0 (id=2197): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r7 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r7, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r10 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r10, 0x29, 0x39, &(0x7f0000000340)=ANY=[], 0x18) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 2.255329017s ago: executing program 0 (id=2207): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 2.209086101s ago: executing program 0 (id=2209): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setlease(r1, 0x400, 0x0) utime(&(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r7, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) 2.074713332s ago: executing program 4 (id=2216): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0xf3a, 0x0) tee(r2, r6, 0xf3a, 0x4) write$binfmt_elf64(r4, &(0x7f0000000380)=ANY=[], 0x18c6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f00000002c0)='GPL\x00'}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x103040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x304}, "e9b172ecf2655b52", "7712b91180acb093fb6b48dce5ba7c41", "0711e4b2", "e9190a5ace69e884"}, 0x28) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x26e1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000001010101000000000000000002001c002000018006000340000000001400018008c301007f000001080002007f0000010c00198008", @ANYRES32=r7], 0x40}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb0}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x30}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x1) 1.836348131s ago: executing program 2 (id=2218): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r7 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r7, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r10 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r10, 0x29, 0x39, &(0x7f0000000340)=ANY=[], 0x18) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 1.618620079s ago: executing program 4 (id=2220): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.552505534s ago: executing program 4 (id=2222): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) close(r1) 1.525216056s ago: executing program 4 (id=2224): bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0x9, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x11) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) 1.442529453s ago: executing program 4 (id=2225): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x97a3}, 0x18) r1 = io_uring_setup(0x5b42, &(0x7f0000000640)={0x0, 0xffffffee, 0x800, 0x103fc, 0x159}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.392207887s ago: executing program 2 (id=2226): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='fib_table_lookup\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 1.370879578s ago: executing program 2 (id=2227): gettid() ptrace(0x10, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000e00000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085000000230000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1, 0x0, 0x10000}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f00"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) 1.35438664s ago: executing program 0 (id=2228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$assume_authority(0x10, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)="4baa9f6869f100") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 1.34330218s ago: executing program 4 (id=2229): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0xf3a, 0x0) tee(r2, r6, 0xf3a, 0x4) write$binfmt_elf64(r4, &(0x7f0000000380)=ANY=[], 0x18c6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f00000002c0)='GPL\x00'}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x103040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x304}, "e9b172ecf2655b52", "7712b91180acb093fb6b48dce5ba7c41", "0711e4b2", "e9190a5ace69e884"}, 0x28) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x26e1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000001010101000000000000000002001c0020000180060003400000", @ANYRES32=r7], 0x40}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb0}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x30}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x1) 1.294426455s ago: executing program 2 (id=2230): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setlease(r1, 0x400, 0x0) utime(&(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r7, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x20, 0x12, 0x1}, 0x20}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.197265813s ago: executing program 5 (id=2231): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0xf3a, 0x0) tee(r2, r6, 0xf3a, 0x4) write$binfmt_elf64(r4, &(0x7f0000000380)=ANY=[], 0x18c6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f00000002c0)='GPL\x00'}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x103040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x304}, "e9b172ecf2655b52", "7712b91180acb093fb6b48dce5ba7c41", "0711e4b2", "e9190a5ace69e884"}, 0x28) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x26e1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000001010101000000000000000002001c002000018006000340000000001400018008c301007f000001080002007f0000010c00198008", @ANYRES32=r7], 0x40}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb0}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x30}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x1) 638.491378ms ago: executing program 1 (id=2236): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) 440.736454ms ago: executing program 0 (id=2237): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 395.360948ms ago: executing program 5 (id=2238): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001280)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x30000000}) 385.757528ms ago: executing program 0 (id=2239): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setlease(r1, 0x400, 0x0) utime(&(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r7, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) 371.284289ms ago: executing program 1 (id=2240): gettid() ptrace(0x10, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000e00000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085000000230000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1, 0x0, 0x10000}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f00"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) 364.71207ms ago: executing program 5 (id=2241): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001340)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {}, {0x3}}}, 0x24}, 0x1, 0x2000000, 0x0, 0x10}, 0x84) 312.271194ms ago: executing program 1 (id=2242): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0x64010180}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r2, 0x6}, &(0x7f0000000400)=0x8) 311.284625ms ago: executing program 2 (id=2243): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000400008500000072000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) recvmmsg(r4, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10143, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dda00", 0x28, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@generic={0x13, 0x2}, @generic={0x22, 0x3, "a8"}, @mptcp=@mp_fclose={0x1e, 0xc, 0x7, 0x0, 0x2}]}}}}}}}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0x23, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}, @alu={0x7, 0x0, 0x6, 0xb, 0xe, 0xfffffffffffffff2, 0x8}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xe}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x2a4, 0x12, &(0x7f0000000200)=""/18, 0x41000, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x29cb0, r2, 0x1, &(0x7f00000005c0), &(0x7f0000000a00)=[{0x5, 0x5, 0x7, 0x3}], 0x10, 0x174}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbf6, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 234.061881ms ago: executing program 1 (id=2244): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000140)={0x0, 0x1, 0x5, 0x5}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0)=0x2f5, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x8801}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r9, 0x1, &(0x7f0000001c00)=[&(0x7f0000000400)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r8, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 200.954853ms ago: executing program 5 (id=2245): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 164.873636ms ago: executing program 1 (id=2246): bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0x9, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x11) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) 66.463044ms ago: executing program 1 (id=2247): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000040)) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) sendfile(r1, r3, 0x0, 0x8000002b) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20803, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r5, 0x3304) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000b28000)=0x20003) pause() fcntl$setsig(r6, 0xa, 0x12) poll(&(0x7f0000b2c000), 0x0, 0xffffffffffbffff8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000580)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r7 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000003, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r7, 0x16) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) 64.013944ms ago: executing program 5 (id=2248): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 0s ago: executing program 5 (id=2249): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0xf3a, 0x0) tee(r2, r6, 0xf3a, 0x4) write$binfmt_elf64(r4, &(0x7f0000000380)=ANY=[], 0x18c6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f00000002c0)='GPL\x00'}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x103040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x304}, "e9b172ecf2655b52", "7712b91180acb093fb6b48dce5ba7c41", "0711e4b2", "e9190a5ace69e884"}, 0x28) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x26e1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000001010101000000000000000002001c002000018006000340000000001400018008c301007f000001080002007f0000010c00198008", @ANYRES32=r7], 0x40}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb0}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x30}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x1) kernel console output (not intermixed with test programs): 00000006 [ 115.594705][ T7074] RBP: 00007f0d1da57090 R08: 0000000000000000 R09: 0000000000000000 [ 115.594719][ T7074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.594733][ T7074] R13: 00007f0d1f216038 R14: 00007f0d1f215fa0 R15: 00007ffd47655148 [ 115.594773][ T7074] [ 115.976371][ T7088] random: crng reseeded on system resumption [ 116.002580][ T7086] FAULT_INJECTION: forcing a failure. [ 116.002580][ T7086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.015729][ T7086] CPU: 1 UID: 0 PID: 7086 Comm: syz.2.1302 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 116.015813][ T7086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.015827][ T7086] Call Trace: [ 116.015834][ T7086] [ 116.015843][ T7086] __dump_stack+0x1d/0x30 [ 116.015892][ T7086] dump_stack_lvl+0xe8/0x140 [ 116.015912][ T7086] dump_stack+0x15/0x1b [ 116.015992][ T7086] should_fail_ex+0x265/0x280 [ 116.016014][ T7086] should_fail+0xb/0x20 [ 116.016071][ T7086] should_fail_usercopy+0x1a/0x20 [ 116.016095][ T7086] _copy_from_user+0x1c/0xb0 [ 116.016124][ T7086] proc_ioctl_default+0x43/0xa0 [ 116.016163][ T7086] usbdev_ioctl+0xe97/0x1710 [ 116.016234][ T7086] ? __pfx_usbdev_ioctl+0x10/0x10 [ 116.016258][ T7086] __se_sys_ioctl+0xcb/0x140 [ 116.016292][ T7086] __x64_sys_ioctl+0x43/0x50 [ 116.016394][ T7086] x64_sys_call+0x1816/0x2ff0 [ 116.016418][ T7086] do_syscall_64+0xd2/0x200 [ 116.016471][ T7086] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 116.016493][ T7086] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 116.016517][ T7086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.016540][ T7086] RIP: 0033:0x7f0d1efeebe9 [ 116.016635][ T7086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.016655][ T7086] RSP: 002b:00007f0d1da57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.016677][ T7086] RAX: ffffffffffffffda RBX: 00007f0d1f215fa0 RCX: 00007f0d1efeebe9 [ 116.016690][ T7086] RDX: 0000200000000040 RSI: 00000000c0105512 RDI: 0000000000000003 [ 116.016704][ T7086] RBP: 00007f0d1da57090 R08: 0000000000000000 R09: 0000000000000000 [ 116.016717][ T7086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.016730][ T7086] R13: 00007f0d1f216038 R14: 00007f0d1f215fa0 R15: 00007ffd47655148 [ 116.016812][ T7086] [ 116.361357][ T7097] loop0: detected capacity change from 0 to 512 [ 116.365355][ T7097] EXT4-fs: Ignoring removed i_version option [ 116.368380][ T7097] EXT4-fs (loop0): orphan cleanup on readonly fs [ 116.394718][ T7100] hub 6-0:1.0: USB hub found [ 116.394844][ T7100] hub 6-0:1.0: 8 ports detected [ 116.400009][ T7097] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1305: bg 0: block 131: padding at end of block bitmap is not set [ 116.453911][ T7106] loop4: detected capacity change from 0 to 512 [ 116.461684][ T7097] EXT4-fs (loop0): Remounting filesystem read-only [ 116.468283][ T7097] EXT4-fs (loop0): 1 truncate cleaned up [ 116.485380][ T7106] ext4 filesystem being mounted at /261/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.502014][ T7106] netlink: 'syz.4.1307': attribute type 13 has an invalid length. [ 116.524960][ T7110] netlink: 'syz.2.1308': attribute type 7 has an invalid length. [ 116.532791][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'. [ 116.625033][ T7106] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.632374][ T7106] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.637034][ T7114] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1307'. [ 116.770564][ T7106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.800377][ T7106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.883952][ T7135] random: crng reseeded on system resumption [ 116.948973][ T2143] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.957972][ T2143] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.980739][ T2143] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.015390][ T2143] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.031138][ T7129] loop0: detected capacity change from 0 to 8192 [ 117.075163][ T7150] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.088993][ T29] kauditd_printk_skb: 882 callbacks suppressed [ 117.089012][ T29] audit: type=1400 audit(1755046510.789:18371): avc: denied { ioctl } for pid=7148 comm="syz.2.1319" path="socket:[17683]" dev="sockfs" ino=17683 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.127290][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1319'. [ 117.155388][ T29] audit: type=1400 audit(1755046510.849:18372): avc: denied { create } for pid=7152 comm="syz.4.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 117.186000][ T29] audit: type=1400 audit(1755046510.859:18373): avc: denied { write } for pid=7152 comm="syz.4.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 117.206360][ T29] audit: type=1400 audit(1755046510.859:18374): avc: denied { nlmsg_write } for pid=7152 comm="syz.4.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 117.227097][ T29] audit: type=1326 audit(1755046510.859:18375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331c88ebe9 code=0x7ffc0000 [ 117.250706][ T29] audit: type=1326 audit(1755046510.859:18376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331c88ebe9 code=0x7ffc0000 [ 117.274369][ T29] audit: type=1326 audit(1755046510.859:18377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f331c88ebe9 code=0x7ffc0000 [ 117.297997][ T29] audit: type=1326 audit(1755046510.859:18378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331c88ebe9 code=0x7ffc0000 [ 117.321530][ T29] audit: type=1326 audit(1755046510.859:18379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331c88ebe9 code=0x7ffc0000 [ 117.345164][ T29] audit: type=1326 audit(1755046510.859:18380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f331c890b07 code=0x7ffc0000 [ 117.426730][ T7163] loop2: detected capacity change from 0 to 512 [ 117.438593][ T7163] EXT4-fs: Ignoring removed i_version option [ 117.445942][ T7163] EXT4-fs (loop2): orphan cleanup on readonly fs [ 117.453191][ T7163] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1320: bg 0: block 131: padding at end of block bitmap is not set [ 117.468678][ T7163] EXT4-fs (loop2): Remounting filesystem read-only [ 117.477292][ T7163] EXT4-fs (loop2): 1 truncate cleaned up [ 117.588102][ T7178] loop4: detected capacity change from 0 to 512 [ 117.595788][ T7178] EXT4-fs (loop4): blocks per group (34) and clusters per group (32768) inconsistent [ 117.625457][ T7182] FAULT_INJECTION: forcing a failure. [ 117.625457][ T7182] name failslab, interval 1, probability 0, space 0, times 0 [ 117.638173][ T7182] CPU: 1 UID: 0 PID: 7182 Comm: syz.4.1330 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 117.638207][ T7182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.638218][ T7182] Call Trace: [ 117.638225][ T7182] [ 117.638232][ T7182] __dump_stack+0x1d/0x30 [ 117.638264][ T7182] dump_stack_lvl+0xe8/0x140 [ 117.638287][ T7182] dump_stack+0x15/0x1b [ 117.638351][ T7182] should_fail_ex+0x265/0x280 [ 117.638374][ T7182] should_failslab+0x8c/0xb0 [ 117.638403][ T7182] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 117.638437][ T7182] ? sidtab_sid2str_get+0xa0/0x130 [ 117.638463][ T7182] kmemdup_noprof+0x2b/0x70 [ 117.638492][ T7182] sidtab_sid2str_get+0xa0/0x130 [ 117.638513][ T7182] security_sid_to_context_core+0x1eb/0x2e0 [ 117.638593][ T7182] security_sid_to_context+0x27/0x40 [ 117.638614][ T7182] avc_audit_post_callback+0x9d/0x520 [ 117.638658][ T7182] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 117.638697][ T7182] common_lsm_audit+0x1b8/0x230 [ 117.638815][ T7182] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 117.638846][ T7182] slow_avc_audit+0x104/0x140 [ 117.638875][ T7182] avc_has_extended_perms+0x6d0/0x940 [ 117.639004][ T7182] ioctl_has_perm+0x257/0x2a0 [ 117.639032][ T7182] selinux_file_ioctl+0x308/0x3a0 [ 117.639055][ T7182] ? __fget_files+0x184/0x1c0 [ 117.639110][ T7182] security_file_ioctl+0x48/0x90 [ 117.639139][ T7182] __se_sys_ioctl+0x47/0x140 [ 117.639209][ T7182] __x64_sys_ioctl+0x43/0x50 [ 117.639316][ T7182] x64_sys_call+0x1816/0x2ff0 [ 117.639336][ T7182] do_syscall_64+0xd2/0x200 [ 117.639359][ T7182] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 117.639382][ T7182] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 117.639469][ T7182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.639489][ T7182] RIP: 0033:0x7f331c88ebe9 [ 117.639504][ T7182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.639526][ T7182] RSP: 002b:00007f331b2ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.639587][ T7182] RAX: ffffffffffffffda RBX: 00007f331cab5fa0 RCX: 00007f331c88ebe9 [ 117.639599][ T7182] RDX: 00002000000001c0 RSI: 00000000c0109207 RDI: 0000000000000004 [ 117.639612][ T7182] RBP: 00007f331b2ef090 R08: 0000000000000000 R09: 0000000000000000 [ 117.639625][ T7182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.639654][ T7182] R13: 00007f331cab6038 R14: 00007f331cab5fa0 R15: 00007ffc9809cb18 [ 117.639673][ T7182] [ 117.927007][ T7188] loop0: detected capacity change from 0 to 1024 [ 117.936665][ T7188] ext4: Unknown parameter 'obj_role' [ 117.944085][ T7192] loop4: detected capacity change from 0 to 512 [ 117.950979][ T7192] EXT4-fs: Ignoring removed i_version option [ 117.959710][ T7192] EXT4-fs (loop4): orphan cleanup on readonly fs [ 117.976875][ T7192] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1334: bg 0: block 131: padding at end of block bitmap is not set [ 117.998908][ T7192] EXT4-fs (loop4): Remounting filesystem read-only [ 118.005972][ T7195] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.013219][ T7195] IPv6: NLM_F_CREATE should be set when creating new route [ 118.016056][ T7192] EXT4-fs (loop4): 1 truncate cleaned up [ 118.020444][ T7195] IPv6: NLM_F_CREATE should be set when creating new route [ 118.153416][ T7205] loop4: detected capacity change from 0 to 4096 [ 118.153561][ T7207] loop0: detected capacity change from 0 to 4096 [ 118.160290][ T7205] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.169228][ T7207] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.219846][ T7213] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1342'. [ 118.228904][ T7213] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 118.285297][ T7215] loop2: detected capacity change from 0 to 512 [ 118.320505][ T7215] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.339321][ T7213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1342'. [ 118.355087][ T7213] hsr_slave_0: left promiscuous mode [ 118.380864][ T7213] hsr_slave_1: left promiscuous mode [ 118.412934][ T7214] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1340'. [ 118.604603][ T7225] netlink: 'syz.0.1344': attribute type 7 has an invalid length. [ 118.612476][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1344'. [ 118.642106][ T7233] loop0: detected capacity change from 0 to 512 [ 118.648966][ T7233] EXT4-fs: Ignoring removed i_version option [ 118.655955][ T7233] EXT4-fs (loop0): orphan cleanup on readonly fs [ 118.663036][ T7233] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1349: bg 0: block 131: padding at end of block bitmap is not set [ 118.678603][ T7233] EXT4-fs (loop0): Remounting filesystem read-only [ 118.685323][ T7233] EXT4-fs (loop0): 1 truncate cleaned up [ 118.721251][ T7238] loop2: detected capacity change from 0 to 1024 [ 118.728408][ T7238] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 118.770765][ T7242] loop0: detected capacity change from 0 to 4096 [ 118.777406][ T7242] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.943449][ T7242] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1353'. [ 118.963762][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1356'. [ 118.981138][ T7252] loop1: detected capacity change from 0 to 1024 [ 118.988173][ T7252] EXT4-fs: Ignoring removed orlov option [ 119.091564][ T7260] hub 6-0:1.0: USB hub found [ 119.096339][ T7260] hub 6-0:1.0: 8 ports detected [ 119.113569][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1356'. [ 119.133344][ T7263] netlink: 'syz.0.1360': attribute type 10 has an invalid length. [ 119.250125][ T7269] loop4: detected capacity change from 0 to 512 [ 119.256801][ T7269] EXT4-fs: Ignoring removed i_version option [ 119.265548][ T7269] EXT4-fs (loop4): orphan cleanup on readonly fs [ 119.272424][ T7269] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1363: bg 0: block 131: padding at end of block bitmap is not set [ 119.287077][ T7269] EXT4-fs (loop4): Remounting filesystem read-only [ 119.293758][ T7269] EXT4-fs (loop4): 1 truncate cleaned up [ 119.383112][ T7278] loop4: detected capacity change from 0 to 4096 [ 119.390052][ T7278] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.406875][ T7285] netlink: 'syz.1.1371': attribute type 10 has an invalid length. [ 119.425280][ T7285] siw: device registration error -23 [ 119.473811][ T7292] loop1: detected capacity change from 0 to 512 [ 119.511143][ T7292] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 119.522799][ T7292] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 119.532954][ T7292] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1373: Corrupt directory, running e2fsck is recommended [ 119.568577][ T7292] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 119.577302][ T7292] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1373: corrupted in-inode xattr: invalid ea_ino [ 119.590891][ T7292] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1373: couldn't read orphan inode 15 (err -117) [ 119.627435][ T7292] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 119.639100][ T7292] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 119.649271][ T7292] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1373: Corrupt directory, running e2fsck is recommended [ 119.669631][ T7292] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 119.681220][ T7292] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 119.691323][ T7292] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1373: Corrupt directory, running e2fsck is recommended [ 119.809171][ T7312] loop2: detected capacity change from 0 to 128 [ 119.826528][ T7312] SELinux: Context Ü is not valid (left unmapped). [ 119.829876][ T7306] loop4: detected capacity change from 0 to 512 [ 119.845603][ T7314] netlink: 'syz.1.1384': attribute type 10 has an invalid length. [ 119.854260][ T7306] EXT4-fs: Ignoring removed i_version option [ 119.880121][ T7306] EXT4-fs (loop4): orphan cleanup on readonly fs [ 119.891120][ T7306] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1377: bg 0: block 131: padding at end of block bitmap is not set [ 119.914060][ T7306] EXT4-fs (loop4): Remounting filesystem read-only [ 119.928851][ T7306] EXT4-fs (loop4): 1 truncate cleaned up [ 119.930387][ T7324] FAULT_INJECTION: forcing a failure. [ 119.930387][ T7324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.947750][ T7324] CPU: 0 UID: 0 PID: 7324 Comm: syz.3.1387 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 119.947864][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.947878][ T7324] Call Trace: [ 119.947885][ T7324] [ 119.947892][ T7324] __dump_stack+0x1d/0x30 [ 119.947925][ T7324] dump_stack_lvl+0xe8/0x140 [ 119.947947][ T7324] dump_stack+0x15/0x1b [ 119.947970][ T7324] should_fail_ex+0x265/0x280 [ 119.947993][ T7324] should_fail+0xb/0x20 [ 119.948012][ T7324] should_fail_usercopy+0x1a/0x20 [ 119.948037][ T7324] _copy_from_user+0x1c/0xb0 [ 119.948079][ T7324] do_ipv6_setsockopt+0x124/0x2160 [ 119.948116][ T7324] ? _parse_integer_limit+0x170/0x190 [ 119.948140][ T7324] ? _parse_integer+0x27/0x40 [ 119.948160][ T7324] ? kstrtoull+0x111/0x140 [ 119.948180][ T7324] ? __rcu_read_unlock+0x4f/0x70 [ 119.948220][ T7324] ? avc_has_perm_noaudit+0x1b1/0x200 [ 119.948250][ T7324] ipv6_setsockopt+0x59/0x130 [ 119.948295][ T7324] tcp_setsockopt+0x98/0xb0 [ 119.948316][ T7324] sock_common_setsockopt+0x69/0x80 [ 119.948347][ T7324] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 119.948379][ T7324] smc_setsockopt+0x183/0x750 [ 119.948472][ T7324] ? __pfx_smc_setsockopt+0x10/0x10 [ 119.948503][ T7324] __sys_setsockopt+0x184/0x200 [ 119.948577][ T7324] __x64_sys_setsockopt+0x64/0x80 [ 119.948598][ T7324] x64_sys_call+0x20ec/0x2ff0 [ 119.948621][ T7324] do_syscall_64+0xd2/0x200 [ 119.948650][ T7324] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 119.948783][ T7324] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 119.948880][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.948903][ T7324] RIP: 0033:0x7f6f261febe9 [ 119.948929][ T7324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.948949][ T7324] RSP: 002b:00007f6f24c67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 119.948982][ T7324] RAX: ffffffffffffffda RBX: 00007f6f26425fa0 RCX: 00007f6f261febe9 [ 119.948996][ T7324] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 119.949010][ T7324] RBP: 00007f6f24c67090 R08: 0000000000000020 R09: 0000000000000000 [ 119.949023][ T7324] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 119.949054][ T7324] R13: 00007f6f26426038 R14: 00007f6f26425fa0 R15: 00007ffe703ce778 [ 119.949074][ T7324] [ 120.008621][ T7314] siw: device registration error -23 [ 120.236424][ T7331] loop1: detected capacity change from 0 to 128 [ 120.383263][ T7346] wireguard1: entered promiscuous mode [ 120.389005][ T7346] wireguard1: entered allmulticast mode [ 120.424193][ T7349] hub 6-0:1.0: USB hub found [ 120.453804][ T7349] hub 6-0:1.0: 8 ports detected [ 120.512022][ T7356] netlink: 'syz.4.1402': attribute type 5 has an invalid length. [ 120.534003][ T269] bio_check_eod: 101 callbacks suppressed [ 120.534021][ T269] kworker/u8:4: attempt to access beyond end of device [ 120.534021][ T269] loop1: rw=1, sector=145, nr_sectors = 16 limit=128 [ 120.567458][ T269] kworker/u8:4: attempt to access beyond end of device [ 120.567458][ T269] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 120.582166][ T269] kworker/u8:4: attempt to access beyond end of device [ 120.582166][ T269] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 120.596189][ T269] kworker/u8:4: attempt to access beyond end of device [ 120.596189][ T269] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 120.622214][ T269] kworker/u8:4: attempt to access beyond end of device [ 120.622214][ T269] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 120.635908][ T7362] loop2: detected capacity change from 0 to 512 [ 120.643082][ T269] kworker/u8:4: attempt to access beyond end of device [ 120.643082][ T269] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 120.657708][ T269] kworker/u8:4: attempt to access beyond end of device [ 120.657708][ T269] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 120.664382][ T7365] loop4: detected capacity change from 0 to 4096 [ 120.677897][ T7365] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.685006][ T269] kworker/u8:4: attempt to access beyond end of device [ 120.685006][ T269] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 120.698852][ T269] kworker/u8:4: attempt to access beyond end of device [ 120.698852][ T269] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 120.698861][ T7362] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 120.698890][ T7362] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 120.712411][ T269] kworker/u8:4: attempt to access beyond end of device [ 120.712411][ T269] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 120.723680][ T7362] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1405: Corrupt directory, running e2fsck is recommended [ 120.768990][ T7362] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 120.787542][ T7362] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.1405: corrupted in-inode xattr: invalid ea_ino [ 120.821068][ T7362] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1405: couldn't read orphan inode 15 (err -117) [ 120.883812][ T7362] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 120.895410][ T7362] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 120.905539][ T7362] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1405: Corrupt directory, running e2fsck is recommended [ 120.930637][ T7362] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.1405: path /290/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 120.960797][ T7362] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 64: comm syz.2.1405: path /290/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 121.256523][ T7384] loop2: detected capacity change from 0 to 1024 [ 121.301787][ T7384] EXT4-fs: Ignoring removed orlov option [ 121.319928][ T7389] FAULT_INJECTION: forcing a failure. [ 121.319928][ T7389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.333194][ T7389] CPU: 1 UID: 0 PID: 7389 Comm: syz.3.1414 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 121.333224][ T7389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.333245][ T7389] Call Trace: [ 121.333251][ T7389] [ 121.333258][ T7389] __dump_stack+0x1d/0x30 [ 121.333326][ T7389] dump_stack_lvl+0xe8/0x140 [ 121.333348][ T7389] dump_stack+0x15/0x1b [ 121.333368][ T7389] should_fail_ex+0x265/0x280 [ 121.333389][ T7389] should_fail+0xb/0x20 [ 121.333405][ T7389] should_fail_usercopy+0x1a/0x20 [ 121.333492][ T7389] _copy_from_user+0x1c/0xb0 [ 121.333517][ T7389] do_ipv6_setsockopt+0x124/0x2160 [ 121.333579][ T7389] ? perf_iterate_sb+0x62a/0x650 [ 121.333605][ T7389] ? __pfx_perf_event_switch_output+0x10/0x10 [ 121.333629][ T7389] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 121.333683][ T7389] ? __rcu_read_unlock+0x4f/0x70 [ 121.333701][ T7389] ? __rcu_read_unlock+0x4f/0x70 [ 121.333723][ T7389] ? perf_cgroup_switch+0x10c/0x480 [ 121.333745][ T7389] ? perf_iterate_sb+0x62a/0x650 [ 121.333770][ T7389] ? __pfx_perf_event_switch_output+0x10/0x10 [ 121.333833][ T7389] ? _raw_spin_unlock+0x26/0x50 [ 121.333877][ T7389] ipv6_setsockopt+0x59/0x130 [ 121.333900][ T7389] tcp_setsockopt+0x98/0xb0 [ 121.333923][ T7389] sock_common_setsockopt+0x69/0x80 [ 121.334027][ T7389] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 121.334074][ T7389] smc_setsockopt+0x183/0x750 [ 121.334106][ T7389] ? __pfx_smc_setsockopt+0x10/0x10 [ 121.334162][ T7389] __sys_setsockopt+0x184/0x200 [ 121.334182][ T7389] __x64_sys_setsockopt+0x64/0x80 [ 121.334201][ T7389] x64_sys_call+0x20ec/0x2ff0 [ 121.334268][ T7389] do_syscall_64+0xd2/0x200 [ 121.334298][ T7389] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 121.334327][ T7389] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 121.334354][ T7389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.334429][ T7389] RIP: 0033:0x7f6f261febe9 [ 121.334473][ T7389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.334594][ T7389] RSP: 002b:00007f6f24c67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 121.334617][ T7389] RAX: ffffffffffffffda RBX: 00007f6f26425fa0 RCX: 00007f6f261febe9 [ 121.334629][ T7389] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 121.334642][ T7389] RBP: 00007f6f24c67090 R08: 0000000000000020 R09: 0000000000000000 [ 121.334656][ T7389] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 121.334671][ T7389] R13: 00007f6f26426038 R14: 00007f6f26425fa0 R15: 00007ffe703ce778 [ 121.334764][ T7389] [ 121.704086][ T7397] __nla_validate_parse: 3 callbacks suppressed [ 121.704102][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1411'. [ 121.818237][ T7398] pim6reg: entered allmulticast mode [ 122.193651][ T7410] loop0: detected capacity change from 0 to 512 [ 122.210845][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 122.210862][ T29] audit: type=1326 audit(1755046516.918:18618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.2.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1efeebe9 code=0x7ffc0000 [ 122.240754][ T29] audit: type=1326 audit(1755046516.918:18619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.2.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1efeebe9 code=0x7ffc0000 [ 122.279562][ T7410] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 122.291135][ T7410] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 122.301313][ T7410] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1420: Corrupt directory, running e2fsck is recommended [ 122.312207][ T29] audit: type=1326 audit(1755046516.968:18620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.2.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0d1efeebe9 code=0x7ffc0000 [ 122.337877][ T29] audit: type=1326 audit(1755046516.968:18621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.2.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1efeebe9 code=0x7ffc0000 [ 122.361386][ T29] audit: type=1326 audit(1755046516.968:18622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.2.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0d1efeebe9 code=0x7ffc0000 [ 122.385212][ T29] audit: type=1326 audit(1755046516.968:18623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.2.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1efeebe9 code=0x7ffc0000 [ 122.408789][ T29] audit: type=1326 audit(1755046516.968:18624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.2.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d1efeebe9 code=0x7ffc0000 [ 122.432378][ T29] audit: type=1326 audit(1755046516.968:18625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.2.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1efeebe9 code=0x7ffc0000 [ 122.434750][ T7410] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 122.455978][ T29] audit: type=1326 audit(1755046516.968:18626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.2.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d1efeebe9 code=0x7ffc0000 [ 122.465131][ T7410] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.1420: corrupted in-inode xattr: invalid ea_ino [ 122.487589][ T29] audit: type=1326 audit(1755046516.968:18627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.2.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1efeebe9 code=0x7ffc0000 [ 122.544072][ T7410] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1420: couldn't read orphan inode 15 (err -117) [ 122.564126][ T7420] netlink: 'syz.4.1422': attribute type 10 has an invalid length. [ 122.574033][ T7420] netlink: 'syz.4.1422': attribute type 10 has an invalid length. [ 122.584231][ T7418] loop3: detected capacity change from 0 to 2048 [ 122.594147][ T7410] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 122.605675][ T7410] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 122.615897][ T7410] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1420: Corrupt directory, running e2fsck is recommended [ 122.635324][ T7410] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.1420: path /299/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 122.658061][ T7410] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 64: comm syz.0.1420: path /299/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 122.680792][ T7418] EXT4-fs (loop3): failed to initialize system zone (-117) [ 122.697078][ T7418] EXT4-fs (loop3): mount failed [ 122.729388][ T7418] cgroup: No subsys list or none specified [ 123.221989][ T7452] FAULT_INJECTION: forcing a failure. [ 123.221989][ T7452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.235146][ T7452] CPU: 0 UID: 0 PID: 7452 Comm: syz.4.1435 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 123.235179][ T7452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.235192][ T7452] Call Trace: [ 123.235198][ T7452] [ 123.235216][ T7452] __dump_stack+0x1d/0x30 [ 123.235240][ T7452] dump_stack_lvl+0xe8/0x140 [ 123.235325][ T7452] dump_stack+0x15/0x1b [ 123.235343][ T7452] should_fail_ex+0x265/0x280 [ 123.235365][ T7452] should_fail+0xb/0x20 [ 123.235384][ T7452] should_fail_usercopy+0x1a/0x20 [ 123.235408][ T7452] _copy_to_user+0x20/0xa0 [ 123.235456][ T7452] simple_read_from_buffer+0xb5/0x130 [ 123.235479][ T7452] proc_fail_nth_read+0x10e/0x150 [ 123.235584][ T7452] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 123.235664][ T7452] vfs_read+0x1a8/0x770 [ 123.235685][ T7452] ? __fput+0x555/0x650 [ 123.235792][ T7452] ? __rcu_read_unlock+0x4f/0x70 [ 123.235884][ T7452] ? __fget_files+0x184/0x1c0 [ 123.235911][ T7452] ksys_read+0xda/0x1a0 [ 123.235936][ T7452] __x64_sys_read+0x40/0x50 [ 123.235957][ T7452] x64_sys_call+0x27bc/0x2ff0 [ 123.236068][ T7452] do_syscall_64+0xd2/0x200 [ 123.236096][ T7452] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 123.236144][ T7452] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 123.236183][ T7452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.236206][ T7452] RIP: 0033:0x7f331c88d5fc [ 123.236224][ T7452] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 123.236276][ T7452] RSP: 002b:00007f331b2ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 123.236298][ T7452] RAX: ffffffffffffffda RBX: 00007f331cab5fa0 RCX: 00007f331c88d5fc [ 123.236312][ T7452] RDX: 000000000000000f RSI: 00007f331b2ef0a0 RDI: 0000000000000007 [ 123.236326][ T7452] RBP: 00007f331b2ef090 R08: 0000000000000000 R09: 0000000000000000 [ 123.236338][ T7452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.236422][ T7452] R13: 00007f331cab6038 R14: 00007f331cab5fa0 R15: 00007ffc9809cb18 [ 123.236442][ T7452] [ 123.607373][ T7464] random: crng reseeded on system resumption [ 123.664118][ T7466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1441'. [ 123.749176][ T7466] netlink: 'syz.0.1441': attribute type 5 has an invalid length. [ 123.765410][ T7474] loop3: detected capacity change from 0 to 512 [ 123.785411][ T7474] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 123.797127][ T7474] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 123.807577][ T7474] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1440: Corrupt directory, running e2fsck is recommended [ 123.834911][ T7474] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 123.843390][ T7474] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.1440: corrupted in-inode xattr: invalid ea_ino [ 123.858103][ T7474] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1440: couldn't read orphan inode 15 (err -117) [ 123.873207][ T7474] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 123.884891][ T7474] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 123.898240][ T7474] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1440: Corrupt directory, running e2fsck is recommended [ 123.937943][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1446'. [ 123.971410][ T7474] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.1440: path /261/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 123.993256][ T7483] loop0: detected capacity change from 0 to 2048 [ 124.018061][ T7474] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 64: comm syz.3.1440: path /261/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 124.045817][ T7479] loop4: detected capacity change from 0 to 1024 [ 124.053188][ T7479] EXT4-fs: Ignoring removed orlov option [ 124.059597][ T7483] loop0: p1 < > p4 [ 124.081037][ T7483] loop0: p4 size 8388608 extends beyond EOD, truncated [ 124.192781][ T7493] 9pnet_fd: Insufficient options for proto=fd [ 124.323988][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1446'. [ 124.601558][ T7511] hub 6-0:1.0: USB hub found [ 124.636442][ T7511] hub 6-0:1.0: 8 ports detected [ 124.651879][ T7516] bond0: option mode: unable to set because the bond device has slaves [ 124.771999][ T7519] netlink: 'syz.1.1461': attribute type 1 has an invalid length. [ 124.779796][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1461'. [ 124.810369][ T7519] wg2: entered promiscuous mode [ 124.827609][ T7519] wg2: entered allmulticast mode [ 125.105537][ T7546] loop1: detected capacity change from 0 to 512 [ 125.122306][ T7546] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 125.133857][ T7546] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 125.144154][ T7546] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1473: Corrupt directory, running e2fsck is recommended [ 125.183812][ T7546] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 125.199682][ T7546] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1473: corrupted in-inode xattr: invalid ea_ino [ 125.217440][ T7551] loop0: detected capacity change from 0 to 128 [ 125.265550][ T7546] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1473: couldn't read orphan inode 15 (err -117) [ 125.307880][ T7546] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 125.319638][ T7546] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 125.329888][ T7546] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1473: Corrupt directory, running e2fsck is recommended [ 125.347623][ T7546] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.1473: path /295/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 125.368992][ T7546] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 64: comm syz.1.1473: path /295/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 125.501879][ T7574] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 125.554225][ T420] bio_check_eod: 101 callbacks suppressed [ 125.554244][ T420] kworker/u8:5: attempt to access beyond end of device [ 125.554244][ T420] loop0: rw=1, sector=145, nr_sectors = 16 limit=128 [ 125.577606][ T7578] hub 6-0:1.0: USB hub found [ 125.584316][ T7578] hub 6-0:1.0: 8 ports detected [ 125.610851][ T420] kworker/u8:5: attempt to access beyond end of device [ 125.610851][ T420] loop0: rw=1, sector=169, nr_sectors = 8 limit=128 [ 125.651876][ T420] kworker/u8:5: attempt to access beyond end of device [ 125.651876][ T420] loop0: rw=1, sector=185, nr_sectors = 8 limit=128 [ 125.665461][ T420] kworker/u8:5: attempt to access beyond end of device [ 125.665461][ T420] loop0: rw=1, sector=201, nr_sectors = 8 limit=128 [ 125.679051][ T420] kworker/u8:5: attempt to access beyond end of device [ 125.679051][ T420] loop0: rw=1, sector=217, nr_sectors = 8 limit=128 [ 125.692548][ T420] kworker/u8:5: attempt to access beyond end of device [ 125.692548][ T420] loop0: rw=1, sector=233, nr_sectors = 8 limit=128 [ 125.726205][ T420] kworker/u8:5: attempt to access beyond end of device [ 125.726205][ T420] loop0: rw=1, sector=249, nr_sectors = 8 limit=128 [ 125.758089][ T7585] SELinux: failed to load policy [ 125.763326][ T420] kworker/u8:5: attempt to access beyond end of device [ 125.763326][ T420] loop0: rw=1, sector=265, nr_sectors = 8 limit=128 [ 125.792140][ T420] kworker/u8:5: attempt to access beyond end of device [ 125.792140][ T420] loop0: rw=1, sector=281, nr_sectors = 8 limit=128 [ 125.828821][ T420] kworker/u8:5: attempt to access beyond end of device [ 125.828821][ T420] loop0: rw=1, sector=297, nr_sectors = 8 limit=128 [ 125.925180][ T7596] FAULT_INJECTION: forcing a failure. [ 125.925180][ T7596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.938475][ T7596] CPU: 1 UID: 0 PID: 7596 Comm: syz.4.1494 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 125.938510][ T7596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.938522][ T7596] Call Trace: [ 125.938529][ T7596] [ 125.938537][ T7596] __dump_stack+0x1d/0x30 [ 125.938558][ T7596] dump_stack_lvl+0xe8/0x140 [ 125.938636][ T7596] dump_stack+0x15/0x1b [ 125.938656][ T7596] should_fail_ex+0x265/0x280 [ 125.938681][ T7596] should_fail+0xb/0x20 [ 125.938702][ T7596] should_fail_usercopy+0x1a/0x20 [ 125.938725][ T7596] _copy_from_user+0x1c/0xb0 [ 125.938816][ T7596] __sys_bpf+0x178/0x7b0 [ 125.938907][ T7596] __x64_sys_bpf+0x41/0x50 [ 125.938929][ T7596] x64_sys_call+0x2aea/0x2ff0 [ 125.938959][ T7596] do_syscall_64+0xd2/0x200 [ 125.939058][ T7596] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 125.939085][ T7596] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 125.939114][ T7596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.939202][ T7596] RIP: 0033:0x7f331c88ebe9 [ 125.939221][ T7596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.939240][ T7596] RSP: 002b:00007f331b2ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.939259][ T7596] RAX: ffffffffffffffda RBX: 00007f331cab5fa0 RCX: 00007f331c88ebe9 [ 125.939272][ T7596] RDX: 0000000000000018 RSI: 0000200000000240 RDI: 0000000000000006 [ 125.939284][ T7596] RBP: 00007f331b2ef090 R08: 0000000000000000 R09: 0000000000000000 [ 125.939298][ T7596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.939329][ T7596] R13: 00007f331cab6038 R14: 00007f331cab5fa0 R15: 00007ffc9809cb18 [ 125.939351][ T7596] [ 126.205954][ T7594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1492'. [ 126.306357][ T7606] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 126.331751][ T7608] loop2: detected capacity change from 0 to 512 [ 126.339900][ T7608] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 126.351546][ T7608] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 126.361649][ T7608] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1499: Corrupt directory, running e2fsck is recommended [ 126.374818][ T7608] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 126.383249][ T7608] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.1499: corrupted in-inode xattr: invalid ea_ino [ 126.397458][ T7608] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1499: couldn't read orphan inode 15 (err -117) [ 126.412828][ T7608] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 126.424416][ T7608] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 126.434565][ T7608] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1499: Corrupt directory, running e2fsck is recommended [ 126.447735][ T7608] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.1499: path /306/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 126.469742][ T7608] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 64: comm syz.2.1499: path /306/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 126.532065][ T7613] hub 6-0:1.0: USB hub found [ 126.538653][ T7613] hub 6-0:1.0: 8 ports detected [ 126.625406][ T7631] loop3: detected capacity change from 0 to 128 [ 126.639663][ T7633] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 126.654373][ T7633] netlink: 'syz.2.1510': attribute type 5 has an invalid length. [ 126.714232][ T7638] loop1: detected capacity change from 0 to 512 [ 126.742490][ T7638] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 126.754075][ T7638] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 126.764221][ T7638] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1512: Corrupt directory, running e2fsck is recommended [ 126.802082][ T7638] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 126.818462][ T7641] loop2: detected capacity change from 0 to 4096 [ 126.825451][ T7641] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.825979][ T7638] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1512: corrupted in-inode xattr: invalid ea_ino [ 126.855136][ T7649] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1516'. [ 126.880740][ T7651] loop3: detected capacity change from 0 to 128 [ 126.889271][ T7638] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1512: couldn't read orphan inode 15 (err -117) [ 126.921893][ T7638] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 126.933668][ T7638] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 126.944033][ T7638] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1512: Corrupt directory, running e2fsck is recommended [ 127.028620][ T7660] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1514'. [ 127.062447][ T4394] bond0: (slave syz_tun): Releasing backup interface [ 127.089622][ T7661] netlink: 'syz.0.1522': attribute type 10 has an invalid length. [ 127.106784][ T7661] netlink: 'syz.0.1522': attribute type 10 has an invalid length. [ 127.120476][ T7663] netlink: 'syz.4.1524': attribute type 5 has an invalid length. [ 127.154237][ T269] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.202625][ T269] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.273356][ T29] kauditd_printk_skb: 382 callbacks suppressed [ 127.273373][ T29] audit: type=1400 audit(1755046521.978:19010): avc: denied { mounton } for pid=7675 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 127.275382][ T269] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.325910][ T29] audit: type=1400 audit(1755046522.028:19011): avc: denied { write } for pid=7673 comm="syz.4.1529" name="ip_vs" dev="proc" ino=4026532872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 127.430605][ T269] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.572315][ T7688] loop2: detected capacity change from 0 to 256 [ 127.591807][ T7688] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1530'. [ 127.705762][ T269] bond0 (unregistering): (slave team0): Releasing backup interface [ 127.719274][ T269] bond0 (unregistering): Released all slaves [ 127.879621][ T7694] loop1: detected capacity change from 0 to 512 [ 127.886332][ T7694] EXT4-fs: Ignoring removed i_version option [ 128.296422][ T7694] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 128.311050][ T7694] EXT4-fs (loop1): 1 truncate cleaned up [ 128.317108][ T7694] EXT4-fs mount: 66 callbacks suppressed [ 128.317125][ T7694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.355046][ T7675] chnl_net:caif_netlink_parms(): no params data found [ 128.380246][ T7701] loop0: detected capacity change from 0 to 1024 [ 128.397661][ T7701] EXT4-fs: Ignoring removed bh option [ 128.406737][ T29] audit: type=1326 audit(1755046523.108:19012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7702 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331c88ebe9 code=0x7ffc0000 [ 128.430448][ T29] audit: type=1326 audit(1755046523.108:19013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7702 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331c88ebe9 code=0x7ffc0000 [ 128.454149][ T29] audit: type=1326 audit(1755046523.108:19014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7702 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f331c88ebe9 code=0x7ffc0000 [ 128.458827][ T7701] EXT4-fs: inline encryption not supported [ 128.477832][ T29] audit: type=1326 audit(1755046523.108:19015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7702 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331c88ebe9 code=0x7ffc0000 [ 128.491097][ T7701] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 128.507277][ T29] audit: type=1326 audit(1755046523.108:19016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7702 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331c88ebe9 code=0x7ffc0000 [ 128.541166][ T29] audit: type=1326 audit(1755046523.108:19017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7702 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f331c88ebe9 code=0x7ffc0000 [ 128.550005][ T7701] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.1532: lblock 2 mapped to illegal pblock 2 (length 1) [ 128.564739][ T29] audit: type=1326 audit(1755046523.108:19018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7702 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331c88ebe9 code=0x7ffc0000 [ 128.564769][ T29] audit: type=1326 audit(1755046523.108:19019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7702 comm="syz.4.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331c88ebe9 code=0x7ffc0000 [ 128.608949][ T7701] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.1532: lblock 0 mapped to illegal pblock 48 (length 1) [ 128.672446][ T7701] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1532: Failed to acquire dquot type 0 [ 128.688008][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.699290][ T7701] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 128.713109][ T7701] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.1532: mark_inode_dirty error [ 128.731667][ T269] hsr_slave_0: left promiscuous mode [ 128.737173][ T7701] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 128.747538][ T269] hsr_slave_1: left promiscuous mode [ 128.749435][ T7707] loop1: detected capacity change from 0 to 512 [ 128.764345][ T7701] EXT4-fs (loop0): 1 orphan inode deleted [ 128.769154][ T269] veth1_macvtap: left promiscuous mode [ 128.772066][ T7701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.775686][ T269] veth0_macvtap: left promiscuous mode [ 128.793589][ T269] veth1_vlan: left promiscuous mode [ 128.798333][ T51] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 128.798832][ T269] veth0_vlan: left promiscuous mode [ 128.819119][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 128.822405][ T7707] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 128.842027][ T7707] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 128.852177][ T7707] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1534: Corrupt directory, running e2fsck is recommended [ 128.870894][ T7707] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 128.880272][ T7707] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1534: corrupted in-inode xattr: invalid ea_ino [ 128.894822][ T7701] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 16: comm syz.0.1532: lblock 0 mapped to illegal pblock 16 (length 1) [ 128.909847][ T7707] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1534: couldn't read orphan inode 15 (err -117) [ 128.921993][ T7701] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.1532: Invalid inode table block 1 in block_group 0 [ 128.937468][ T7707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.938539][ T7701] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 128.959991][ T269] pim6reg (unregistering): left allmulticast mode [ 128.967293][ T7707] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 128.972740][ T7701] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1532: mark_inode_dirty error [ 128.978887][ T7707] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 129.000176][ T7707] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1534: Corrupt directory, running e2fsck is recommended [ 129.033662][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.057543][ T51] smc: removing ib device syz! [ 129.063199][ T2143] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm kworker/u8:6: Invalid inode table block 1 in block_group 0 [ 129.087725][ T269] wg1 (unregistering): left allmulticast mode [ 129.095686][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.105538][ T3301] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 129.118648][ T3301] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 129.128365][ T7712] netlink: 'syz.1.1535': attribute type 10 has an invalid length. [ 129.130073][ T3301] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 129.179390][ T7717] netlink: 'syz.1.1535': attribute type 10 has an invalid length. [ 129.189710][ T7675] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.196819][ T7675] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.238140][ T7675] bridge_slave_0: entered allmulticast mode [ 129.281608][ T7675] bridge_slave_0: entered promiscuous mode [ 129.300030][ T7726] loop0: detected capacity change from 0 to 512 [ 129.340221][ T7675] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.347345][ T7675] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.354868][ T7726] EXT4-fs: Ignoring removed i_version option [ 129.384618][ T7675] bridge_slave_1: entered allmulticast mode [ 129.385112][ T7726] EXT4-fs (loop0): orphan cleanup on readonly fs [ 129.407837][ T7726] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1540: bg 0: block 131: padding at end of block bitmap is not set [ 129.420096][ T7675] bridge_slave_1: entered promiscuous mode [ 129.440465][ T7726] EXT4-fs (loop0): Remounting filesystem read-only [ 129.457750][ T7726] EXT4-fs (loop0): 1 truncate cleaned up [ 129.467259][ T7675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.468160][ T7726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 129.488182][ T7675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.526769][ T7737] loop1: detected capacity change from 0 to 512 [ 129.542996][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.555803][ T7737] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 129.567527][ T7737] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 129.577684][ T7737] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1545: Corrupt directory, running e2fsck is recommended [ 129.592693][ T7737] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 129.602618][ T7737] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1545: corrupted in-inode xattr: invalid ea_ino [ 129.619397][ T7737] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1545: couldn't read orphan inode 15 (err -117) [ 129.633215][ T7675] team0: Port device team_slave_0 added [ 129.642128][ T7737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.653334][ T7675] team0: Port device team_slave_1 added [ 129.675124][ T7737] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 129.686771][ T7737] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 129.696936][ T7737] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1545: Corrupt directory, running e2fsck is recommended [ 129.720045][ T7675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.727193][ T7675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.727709][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.753205][ T7675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.847109][ T7675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.854119][ T7675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.880157][ T7675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.941782][ T7751] hub 6-0:1.0: USB hub found [ 129.943286][ T7675] hsr_slave_0: entered promiscuous mode [ 129.946892][ T7751] hub 6-0:1.0: 8 ports detected [ 129.962928][ T7675] hsr_slave_1: entered promiscuous mode [ 130.010434][ T7756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1554'. [ 130.083892][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1556'. [ 130.108704][ T7762] loop1: detected capacity change from 0 to 1024 [ 130.130811][ T7762] EXT4-fs: Ignoring removed orlov option [ 130.141607][ T7675] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 130.162920][ T7675] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 130.173669][ T7762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.174153][ T7765] SELinux: failed to load policy [ 130.195774][ T7675] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 130.210613][ T7675] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 130.298802][ T7675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.317577][ T7675] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.325696][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1558'. [ 130.354767][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1556'. [ 130.367249][ T7776] loop4: detected capacity change from 0 to 1024 [ 130.377999][ T2143] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.385117][ T2143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.393436][ T7776] EXT4-fs: Ignoring removed orlov option [ 130.413907][ T7776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.443834][ T2143] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.450950][ T2143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.625375][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1558'. [ 130.661939][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.730311][ T7675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.827712][ T7795] loop1: detected capacity change from 0 to 4096 [ 130.837785][ T7795] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.856879][ T7795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.917155][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.027524][ T7817] FAULT_INJECTION: forcing a failure. [ 131.027524][ T7817] name failslab, interval 1, probability 0, space 0, times 0 [ 131.030175][ T7675] veth0_vlan: entered promiscuous mode [ 131.040263][ T7817] CPU: 1 UID: 0 PID: 7817 Comm: syz.0.1569 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 131.040326][ T7817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.040338][ T7817] Call Trace: [ 131.040358][ T7817] [ 131.040366][ T7817] __dump_stack+0x1d/0x30 [ 131.040388][ T7817] dump_stack_lvl+0xe8/0x140 [ 131.040468][ T7817] dump_stack+0x15/0x1b [ 131.040483][ T7817] should_fail_ex+0x265/0x280 [ 131.040505][ T7817] should_failslab+0x8c/0xb0 [ 131.040529][ T7817] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 131.040557][ T7817] ? shmem_alloc_inode+0x34/0x50 [ 131.040607][ T7817] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 131.040684][ T7817] shmem_alloc_inode+0x34/0x50 [ 131.040827][ T7817] alloc_inode+0x3d/0x170 [ 131.040857][ T7817] new_inode+0x1d/0xe0 [ 131.040880][ T7817] shmem_get_inode+0x244/0x750 [ 131.040900][ T7817] ? __se_sys_memfd_create+0x1cc/0x590 [ 131.040923][ T7817] __shmem_file_setup+0x113/0x210 [ 131.041022][ T7817] shmem_file_setup+0x3b/0x50 [ 131.041052][ T7817] __se_sys_memfd_create+0x2c3/0x590 [ 131.041123][ T7817] __x64_sys_memfd_create+0x31/0x40 [ 131.041144][ T7817] x64_sys_call+0x2abe/0x2ff0 [ 131.041195][ T7817] do_syscall_64+0xd2/0x200 [ 131.041220][ T7817] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 131.041288][ T7817] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 131.041312][ T7817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.041333][ T7817] RIP: 0033:0x7f8fac0eebe9 [ 131.041369][ T7817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.041386][ T7817] RSP: 002b:00007f8faab56e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 131.041407][ T7817] RAX: ffffffffffffffda RBX: 000000000000056a RCX: 00007f8fac0eebe9 [ 131.041421][ T7817] RDX: 00007f8faab56ef0 RSI: 0000000000000000 RDI: 00007f8fac1727e8 [ 131.041434][ T7817] RBP: 0000200000000580 R08: 00007f8faab56bb7 R09: 00007f8faab56e40 [ 131.041453][ T7817] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000540 [ 131.041465][ T7817] R13: 00007f8faab56ef0 R14: 00007f8faab56eb0 R15: 0000200000000140 [ 131.041484][ T7817] [ 131.266195][ T7675] veth1_vlan: entered promiscuous mode [ 131.290190][ T7675] veth0_macvtap: entered promiscuous mode [ 131.301174][ T7675] veth1_macvtap: entered promiscuous mode [ 131.302416][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.313031][ T7675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.327464][ T7675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.344259][ T420] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.355943][ T420] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.444374][ T420] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.455092][ T420] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.551364][ T7835] SELinux: failed to load policy [ 131.583280][ T7842] loop2: detected capacity change from 0 to 256 [ 131.609349][ T7842] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1573'. [ 131.930485][ T7864] loop1: detected capacity change from 0 to 512 [ 131.960212][ T7864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.006495][ T7864] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.051382][ T7864] FAULT_INJECTION: forcing a failure. [ 132.051382][ T7864] name failslab, interval 1, probability 0, space 0, times 0 [ 132.064100][ T7864] CPU: 0 UID: 0 PID: 7864 Comm: syz.1.1585 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 132.064135][ T7864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 132.064196][ T7864] Call Trace: [ 132.064204][ T7864] [ 132.064213][ T7864] __dump_stack+0x1d/0x30 [ 132.064238][ T7864] dump_stack_lvl+0xe8/0x140 [ 132.064311][ T7864] dump_stack+0x15/0x1b [ 132.064327][ T7864] should_fail_ex+0x265/0x280 [ 132.064350][ T7864] should_failslab+0x8c/0xb0 [ 132.064379][ T7864] __kmalloc_noprof+0xa5/0x3e0 [ 132.064426][ T7864] ? ext4_find_extent+0x16b/0x7a0 [ 132.064448][ T7864] ext4_find_extent+0x16b/0x7a0 [ 132.064507][ T7864] ext4_move_extents+0x381/0x710 [ 132.064538][ T7864] ext4_ioctl+0x1c07/0x2080 [ 132.064566][ T7864] ? file_ioctl+0x146/0x530 [ 132.064587][ T7864] ? ioctl_has_perm+0x257/0x2a0 [ 132.064614][ T7864] ? do_vfs_ioctl+0x7ca/0xe10 [ 132.064683][ T7864] ? selinux_file_ioctl+0x308/0x3a0 [ 132.064705][ T7864] ? __fget_files+0x184/0x1c0 [ 132.064734][ T7864] ? __pfx_ext4_ioctl+0x10/0x10 [ 132.064760][ T7864] __se_sys_ioctl+0xcb/0x140 [ 132.064835][ T7864] __x64_sys_ioctl+0x43/0x50 [ 132.064937][ T7864] x64_sys_call+0x1816/0x2ff0 [ 132.064962][ T7864] do_syscall_64+0xd2/0x200 [ 132.064993][ T7864] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 132.065021][ T7864] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 132.065101][ T7864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.065126][ T7864] RIP: 0033:0x7f3e0277ebe9 [ 132.065145][ T7864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.065170][ T7864] RSP: 002b:00007f3e011df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.065189][ T7864] RAX: ffffffffffffffda RBX: 00007f3e029a5fa0 RCX: 00007f3e0277ebe9 [ 132.065221][ T7864] RDX: 0000200000000040 RSI: 00000000c028660f RDI: 0000000000000006 [ 132.065255][ T7864] RBP: 00007f3e011df090 R08: 0000000000000000 R09: 0000000000000000 [ 132.065269][ T7864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.065284][ T7864] R13: 00007f3e029a6038 R14: 00007f3e029a5fa0 R15: 00007ffcca3bf468 [ 132.065304][ T7864] [ 132.329446][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.456648][ T7886] random: crng reseeded on system resumption [ 132.462907][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 132.462923][ T29] audit: type=1326 audit(1755046527.158:19215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.0.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fac0eebe9 code=0x7ffc0000 [ 132.492800][ T29] audit: type=1326 audit(1755046527.158:19216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.0.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8fac0eebe9 code=0x7ffc0000 [ 132.500954][ T7885] SELinux: failed to load policy [ 132.516400][ T29] audit: type=1326 audit(1755046527.158:19217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.0.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fac0eebe9 code=0x7ffc0000 [ 132.516437][ T29] audit: type=1326 audit(1755046527.158:19218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.0.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fac0eebe9 code=0x7ffc0000 [ 132.568676][ T29] audit: type=1326 audit(1755046527.158:19219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.0.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fac0eebe9 code=0x7ffc0000 [ 132.592283][ T29] audit: type=1326 audit(1755046527.158:19220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.0.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8fac0eebe9 code=0x7ffc0000 [ 132.615926][ T29] audit: type=1326 audit(1755046527.158:19221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.0.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fac0eebe9 code=0x7ffc0000 [ 132.639472][ T29] audit: type=1326 audit(1755046527.158:19222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.0.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8fac0eebe9 code=0x7ffc0000 [ 132.648064][ T29] audit: type=1326 audit(1755046527.178:19223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.0.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fac0eebe9 code=0x7ffc0000 [ 132.690071][ T29] audit: type=1326 audit(1755046527.178:19224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.0.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fac0eebe9 code=0x7ffc0000 [ 132.727599][ T7878] netlink: 'syz.1.1588': attribute type 7 has an invalid length. [ 132.735541][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1588'. [ 132.772497][ T7894] loop1: detected capacity change from 0 to 512 [ 132.780026][ T7894] EXT4-fs: Ignoring removed i_version option [ 132.787159][ T7894] EXT4-fs (loop1): orphan cleanup on readonly fs [ 132.793860][ T7894] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1596: bg 0: block 131: padding at end of block bitmap is not set [ 132.811444][ T7894] EXT4-fs (loop1): Remounting filesystem read-only [ 132.818005][ T7894] EXT4-fs (loop1): 1 truncate cleaned up [ 132.824356][ T7894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.882191][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.984626][ T7900] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1598'. [ 133.103118][ T7900] loop1: detected capacity change from 0 to 8192 [ 133.447978][ T7908] SELinux: failed to load policy [ 133.757198][ T7919] loop1: detected capacity change from 0 to 512 [ 133.775613][ T7919] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 133.787257][ T7919] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 133.797383][ T7919] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1604: Corrupt directory, running e2fsck is recommended [ 133.831995][ T7921] hub 6-0:1.0: USB hub found [ 133.836728][ T7921] hub 6-0:1.0: 8 ports detected [ 133.853122][ T7919] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 133.868957][ T7919] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1604: corrupted in-inode xattr: invalid ea_ino [ 133.908762][ T7919] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1604: couldn't read orphan inode 15 (err -117) [ 133.931823][ T7919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.962887][ T7927] random: crng reseeded on system resumption [ 133.980494][ T7919] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 133.992140][ T7919] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 134.000033][ T7927] netlink: 'syz.5.1606': attribute type 7 has an invalid length. [ 134.002355][ T7919] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1604: Corrupt directory, running e2fsck is recommended [ 134.010120][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1606'. [ 134.078838][ T7924] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 134.097880][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.142554][ T7929] loop1: detected capacity change from 0 to 512 [ 134.159510][ T7929] EXT4-fs: Ignoring removed i_version option [ 134.192632][ T7929] EXT4-fs (loop1): orphan cleanup on readonly fs [ 134.227680][ T7929] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1607: bg 0: block 131: padding at end of block bitmap is not set [ 134.263799][ T7936] netlink: 'syz.5.1609': attribute type 5 has an invalid length. [ 134.276515][ T7935] loop0: detected capacity change from 0 to 4096 [ 134.289011][ T7929] EXT4-fs (loop1): Remounting filesystem read-only [ 134.317496][ T7935] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.325901][ T7929] EXT4-fs (loop1): 1 truncate cleaned up [ 134.352302][ T7929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.371385][ T7935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.550397][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.713953][ T7954] netlink: 'syz.5.1615': attribute type 21 has an invalid length. [ 134.722008][ T7954] netlink: 'syz.5.1615': attribute type 1 has an invalid length. [ 134.729779][ T7954] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1615'. [ 134.741973][ T7945] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1610'. [ 134.862548][ T7954] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.921406][ T7954] loop5: detected capacity change from 0 to 164 [ 134.938670][ T7954] ISOFS: unable to read i-node block [ 134.944069][ T7954] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 135.099867][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.193450][ T7965] random: crng reseeded on system resumption [ 135.206113][ T7965] netlink: 'syz.0.1619': attribute type 7 has an invalid length. [ 135.213936][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1619'. [ 135.319432][ T7973] netlink: 'syz.0.1622': attribute type 5 has an invalid length. [ 135.416144][ T7980] netlink: 'syz.0.1625': attribute type 5 has an invalid length. [ 135.752049][ T7990] hub 6-0:1.0: USB hub found [ 135.756980][ T7990] hub 6-0:1.0: 8 ports detected [ 135.921329][ T8003] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 135.934747][ T8003] netlink: 'syz.2.1635': attribute type 5 has an invalid length. [ 135.975116][ T8008] loop4: detected capacity change from 0 to 128 [ 135.983452][ T8008] msdos: Unknown parameter 'nodo‰3' [ 136.011997][ T8008] loop4: detected capacity change from 0 to 512 [ 136.046491][ T8014] loop0: detected capacity change from 0 to 256 [ 136.054947][ T8008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.078992][ T8008] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.104694][ T8015] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.1639'. [ 136.130766][ T8014] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1633'. [ 136.173766][ T8020] netlink: 'syz.5.1640': attribute type 4 has an invalid length. [ 136.362126][ T8034] random: crng reseeded on system resumption [ 136.758233][ T8047] vlan1: entered allmulticast mode [ 136.758287][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.763702][ T8047] dummy0: entered allmulticast mode [ 136.807688][ T8050] netlink: 'syz.1.1649': attribute type 2 has an invalid length. [ 136.895537][ T8052] loop1: detected capacity change from 0 to 512 [ 136.909215][ T8052] EXT4-fs: Ignoring removed i_version option [ 136.926942][ T8052] EXT4-fs (loop1): orphan cleanup on readonly fs [ 136.939279][ T8052] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1651: bg 0: block 131: padding at end of block bitmap is not set [ 136.969140][ T8052] EXT4-fs (loop1): Remounting filesystem read-only [ 136.975804][ T8052] EXT4-fs (loop1): 1 truncate cleaned up [ 136.999626][ T8052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.046648][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.146661][ T8060] hub 6-0:1.0: USB hub found [ 137.158859][ T8060] hub 6-0:1.0: 8 ports detected [ 137.851696][ T8076] netlink: 'syz.5.1658': attribute type 7 has an invalid length. [ 137.859495][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1658'. [ 137.926694][ T8082] loop5: detected capacity change from 0 to 4096 [ 137.933980][ T8082] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.945032][ T8082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.152945][ T8082] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1661'. [ 138.179369][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 138.179387][ T29] audit: type=1326 audit(1755046532.888:19442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.1.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0277ebe9 code=0x7ffc0000 [ 138.222633][ T29] audit: type=1326 audit(1755046532.918:19443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.1.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0277ebe9 code=0x7ffc0000 [ 138.246253][ T29] audit: type=1326 audit(1755046532.918:19444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.1.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f3e0277ebe9 code=0x7ffc0000 [ 138.269786][ T29] audit: type=1326 audit(1755046532.918:19445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.1.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0277ebe9 code=0x7ffc0000 [ 138.293298][ T29] audit: type=1326 audit(1755046532.918:19446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.1.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0277ebe9 code=0x7ffc0000 [ 138.301323][ T8096] hub 6-0:1.0: USB hub found [ 138.333577][ T8096] hub 6-0:1.0: 8 ports detected [ 138.340119][ T7675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.383604][ T29] audit: type=1326 audit(1755046533.088:19447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.1.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0277ebe9 code=0x7ffc0000 [ 138.433598][ T29] audit: type=1326 audit(1755046533.088:19448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.1.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f3e0277ebe9 code=0x7ffc0000 [ 138.457149][ T29] audit: type=1326 audit(1755046533.088:19449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.1.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0277ebe9 code=0x7ffc0000 [ 138.480768][ T29] audit: type=1326 audit(1755046533.088:19450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.1.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0277ebe9 code=0x7ffc0000 [ 138.504350][ T29] audit: type=1326 audit(1755046533.118:19451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.1.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0277ebe9 code=0x7ffc0000 [ 138.599393][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1671'. [ 138.630403][ T8114] loop0: detected capacity change from 0 to 512 [ 138.637187][ T8114] EXT4-fs: Ignoring removed i_version option [ 138.644398][ T8114] EXT4-fs (loop0): orphan cleanup on readonly fs [ 138.651677][ T8114] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1674: bg 0: block 131: padding at end of block bitmap is not set [ 138.666269][ T8114] EXT4-fs (loop0): Remounting filesystem read-only [ 138.672917][ T8114] EXT4-fs (loop0): 1 truncate cleaned up [ 138.679290][ T8114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 138.713941][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.834731][ T8126] hub 6-0:1.0: USB hub found [ 138.839938][ T8126] hub 6-0:1.0: 8 ports detected [ 138.920352][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1686'. [ 138.934206][ T8139] loop0: detected capacity change from 0 to 1024 [ 138.940886][ T8139] EXT4-fs: Ignoring removed orlov option [ 138.949047][ T8139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.027778][ T8146] loop5: detected capacity change from 0 to 256 [ 139.040122][ T8146] netlink: 324 bytes leftover after parsing attributes in process `syz.5.1682'. [ 139.081445][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1686'. [ 139.341997][ T8151] validate_nla: 1 callbacks suppressed [ 139.342012][ T8151] netlink: 'syz.2.1687': attribute type 2 has an invalid length. [ 139.699380][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.735850][ T8171] random: crng reseeded on system resumption [ 139.935124][ T8183] rdma_rxe: rxe_newlink: failed to add bond0 [ 140.464507][ T8194] @: renamed from vlan0 [ 140.498835][ T8196] netlink: 'syz.2.1704': attribute type 21 has an invalid length. [ 140.506735][ T8196] netlink: 'syz.2.1704': attribute type 1 has an invalid length. [ 140.514558][ T8196] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1704'. [ 140.793248][ T8206] loop2: detected capacity change from 0 to 256 [ 140.865902][ T8208] netlink: 'syz.1.1710': attribute type 10 has an invalid length. [ 140.912949][ T8203] loop4: detected capacity change from 0 to 8192 [ 140.935811][ T8208] netlink: 'syz.1.1710': attribute type 10 has an invalid length. [ 140.953249][ T8203] msdos: Unknown parameter 'relaxed]ï' [ 141.704310][ T8222] netlink: 'syz.4.1716': attribute type 21 has an invalid length. [ 141.712211][ T8222] netlink: 'syz.4.1716': attribute type 1 has an invalid length. [ 141.720060][ T8222] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1716'. [ 141.758912][ T8225] random: crng reseeded on system resumption [ 141.799039][ T8225] netlink: 'syz.1.1715': attribute type 7 has an invalid length. [ 141.806835][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'. [ 141.901783][ T8232] hub 6-0:1.0: USB hub found [ 141.929392][ T8232] hub 6-0:1.0: 8 ports detected [ 141.945850][ T8235] netlink: 'syz.1.1721': attribute type 10 has an invalid length. [ 141.986407][ T8235] netlink: 'syz.1.1721': attribute type 10 has an invalid length. [ 142.080232][ T8241] random: crng reseeded on system resumption [ 142.278345][ T8254] loop1: detected capacity change from 0 to 512 [ 142.317736][ T8254] EXT4-fs: Ignoring removed i_version option [ 142.375038][ T8254] EXT4-fs (loop1): orphan cleanup on readonly fs [ 142.399694][ T8254] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1728: bg 0: block 131: padding at end of block bitmap is not set [ 142.439594][ T8265] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1731'. [ 142.457881][ T8254] EXT4-fs (loop1): Remounting filesystem read-only [ 142.478961][ T8254] EXT4-fs (loop1): 1 truncate cleaned up [ 142.499090][ T8254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 142.540506][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.042161][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1743'. [ 143.059054][ T8299] loop5: detected capacity change from 0 to 512 [ 143.081079][ T8299] EXT4-fs: Ignoring removed i_version option [ 143.089829][ T8300] loop0: detected capacity change from 0 to 256 [ 143.097729][ T8299] EXT4-fs (loop5): orphan cleanup on readonly fs [ 143.103830][ T8303] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1747'. [ 143.119235][ T8299] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1746: bg 0: block 131: padding at end of block bitmap is not set [ 143.151957][ T8299] EXT4-fs (loop5): Remounting filesystem read-only [ 143.168877][ T8299] EXT4-fs (loop5): 1 truncate cleaned up [ 143.179177][ T8299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.315886][ T7675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.735666][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 143.735686][ T29] audit: type=1326 audit(1755046538.438:19499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8320 comm="syz.1.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0277ebe9 code=0x7ffc0000 [ 143.771755][ T29] audit: type=1326 audit(1755046538.438:19500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8320 comm="syz.1.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0277ebe9 code=0x7ffc0000 [ 143.795338][ T29] audit: type=1326 audit(1755046538.468:19501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8320 comm="syz.1.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f3e0277ebe9 code=0x7ffc0000 [ 143.819065][ T29] audit: type=1326 audit(1755046538.468:19502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8320 comm="syz.1.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0277ebe9 code=0x7ffc0000 [ 143.842703][ T29] audit: type=1326 audit(1755046538.468:19503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8320 comm="syz.1.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0277ebe9 code=0x7ffc0000 [ 143.866223][ T29] audit: type=1326 audit(1755046538.478:19504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8320 comm="syz.1.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3e0277ebe9 code=0x7ffc0000 [ 143.889644][ T29] audit: type=1326 audit(1755046538.478:19505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8320 comm="syz.1.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0277ebe9 code=0x7ffc0000 [ 143.913545][ T29] audit: type=1326 audit(1755046538.478:19506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8320 comm="syz.1.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0277ebe9 code=0x7ffc0000 [ 143.937067][ T29] audit: type=1326 audit(1755046538.478:19507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8320 comm="syz.1.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f3e0277ebe9 code=0x7ffc0000 [ 143.960629][ T29] audit: type=1326 audit(1755046538.478:19508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8320 comm="syz.1.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0277ebe9 code=0x7ffc0000 [ 144.296247][ T8339] SELinux: failed to load policy [ 144.381876][ T8345] validate_nla: 9 callbacks suppressed [ 144.381897][ T8345] netlink: 'syz.1.1759': attribute type 4 has an invalid length. [ 145.220055][ T8351] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1766'. [ 145.377363][ T8360] netlink: 'syz.4.1767': attribute type 4 has an invalid length. [ 145.471850][ T8363] loop5: detected capacity change from 0 to 512 [ 145.478463][ T8363] EXT4-fs: Ignoring removed i_version option [ 145.535327][ T8363] EXT4-fs (loop5): orphan cleanup on readonly fs [ 145.559241][ T8363] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1771: bg 0: block 131: padding at end of block bitmap is not set [ 145.599925][ T8363] EXT4-fs (loop5): Remounting filesystem read-only [ 145.606679][ T8363] EXT4-fs (loop5): 1 truncate cleaned up [ 145.639413][ T8363] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.734210][ T7675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.942460][ T8375] random: crng reseeded on system resumption [ 146.550148][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1786'. [ 146.577536][ T8407] loop2: detected capacity change from 0 to 1024 [ 146.587157][ T8407] EXT4-fs: Ignoring removed orlov option [ 146.600441][ T8407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.742071][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1786'. [ 146.946187][ T8421] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1790'. [ 146.956294][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.016505][ T8429] netlink: 'syz.2.1794': attribute type 2 has an invalid length. [ 147.837347][ T8465] SELinux: failed to load policy [ 147.875129][ T8469] netlink: 'syz.1.1812': attribute type 10 has an invalid length. [ 147.883433][ T8469] netlink: 'syz.1.1812': attribute type 10 has an invalid length. [ 147.893599][ T8469] siw: device registration error -23 [ 147.936598][ T8475] netlink: 'syz.1.1815': attribute type 21 has an invalid length. [ 147.944485][ T8475] netlink: 'syz.1.1815': attribute type 1 has an invalid length. [ 147.952387][ T8475] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1815'. [ 148.007471][ T8484] netlink: 'syz.1.1819': attribute type 2 has an invalid length. [ 148.070749][ T8496] netlink: 'syz.1.1825': attribute type 10 has an invalid length. [ 148.079226][ T8496] netlink: 'syz.1.1825': attribute type 10 has an invalid length. [ 148.087493][ T8496] siw: device registration error -23 [ 148.222443][ T8502] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1827'. [ 148.246182][ T8504] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1828'. [ 148.360168][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1832'. [ 148.890480][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 148.890495][ T29] audit: type=1326 audit(1755046543.598:19607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.5.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ddeeebe9 code=0x7ffc0000 [ 148.922371][ T29] audit: type=1326 audit(1755046543.598:19608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.5.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ddeeebe9 code=0x7ffc0000 [ 148.946096][ T29] audit: type=1326 audit(1755046543.598:19609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.5.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f35ddeeebe9 code=0x7ffc0000 [ 148.969541][ T29] audit: type=1326 audit(1755046543.598:19610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.5.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ddeeebe9 code=0x7ffc0000 [ 149.041894][ T8547] hub 6-0:1.0: USB hub found [ 149.046820][ T8547] hub 6-0:1.0: 8 ports detected [ 149.104930][ T8550] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 149.116486][ T29] audit: type=1326 audit(1755046543.818:19611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8549 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1efeebe9 code=0x7ffc0000 [ 149.161897][ T29] audit: type=1326 audit(1755046543.818:19612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8549 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1efeebe9 code=0x7ffc0000 [ 149.185551][ T29] audit: type=1326 audit(1755046543.818:19613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8549 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f0d1efeebe9 code=0x7ffc0000 [ 149.209160][ T29] audit: type=1326 audit(1755046543.818:19614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8549 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1efeebe9 code=0x7ffc0000 [ 149.232710][ T29] audit: type=1326 audit(1755046543.818:19615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8549 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1efeebe9 code=0x7ffc0000 [ 149.256404][ T29] audit: type=1326 audit(1755046543.818:19616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8549 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0d1efeebe9 code=0x7ffc0000 [ 149.313596][ T8556] SELinux: failed to load policy [ 149.340401][ T8562] random: crng reseeded on system resumption [ 149.411386][ T8568] random: crng reseeded on system resumption [ 149.423213][ T8568] validate_nla: 7 callbacks suppressed [ 149.423231][ T8568] netlink: 'syz.0.1856': attribute type 7 has an invalid length. [ 149.436679][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1856'. [ 149.505487][ T8575] hub 6-0:1.0: USB hub found [ 149.519026][ T8575] hub 6-0:1.0: 8 ports detected [ 149.585220][ T8592] random: crng reseeded on system resumption [ 149.694409][ T8605] random: crng reseeded on system resumption [ 149.836941][ T8611] hub 6-0:1.0: USB hub found [ 149.847571][ T8611] hub 6-0:1.0: 8 ports detected [ 149.958947][ T8623] loop4: detected capacity change from 0 to 4096 [ 149.965598][ T8623] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.987060][ T8625] hub 6-0:1.0: USB hub found [ 149.992167][ T8625] hub 6-0:1.0: 8 ports detected [ 150.007287][ T8623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.115497][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1886'. [ 150.155291][ T8637] loop5: detected capacity change from 0 to 1024 [ 150.162361][ T8637] EXT4-fs: Ignoring removed orlov option [ 150.172402][ T8637] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.246984][ T8634] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1881'. [ 150.312696][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1886'. [ 150.346282][ T8649] random: crng reseeded on system resumption [ 150.601142][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.668349][ T8655] netlink: 'syz.4.1891': attribute type 5 has an invalid length. [ 150.688520][ T7675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.741497][ T8665] netlink: 'syz.0.1896': attribute type 10 has an invalid length. [ 150.750127][ T8665] netlink: 'syz.0.1896': attribute type 10 has an invalid length. [ 151.581919][ T8694] netlink: 'syz.1.1908': attribute type 2 has an invalid length. [ 151.718720][ T8703] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 151.730541][ T8706] loop4: detected capacity change from 0 to 512 [ 151.747701][ T8703] netlink: 'syz.2.1911': attribute type 5 has an invalid length. [ 151.755761][ T8706] EXT4-fs: Ignoring removed i_version option [ 151.773364][ T8706] EXT4-fs (loop4): orphan cleanup on readonly fs [ 151.801195][ T8706] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1913: bg 0: block 131: padding at end of block bitmap is not set [ 151.862892][ T8706] EXT4-fs (loop4): Remounting filesystem read-only [ 151.885737][ T8706] EXT4-fs (loop4): 1 truncate cleaned up [ 151.899273][ T8706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.929563][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.034420][ T8728] random: crng reseeded on system resumption [ 152.053654][ T8729] random: crng reseeded on system resumption [ 152.064402][ T8723] netlink: 'syz.0.1919': attribute type 7 has an invalid length. [ 152.072317][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1919'. [ 152.182428][ T8732] hub 6-0:1.0: USB hub found [ 152.190855][ T8732] hub 6-0:1.0: 8 ports detected [ 152.212463][ T8736] netlink: 'syz.4.1922': attribute type 2 has an invalid length. [ 152.394777][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1927'. [ 152.411951][ T8748] loop5: detected capacity change from 0 to 1024 [ 152.419032][ T8748] EXT4-fs: Ignoring removed orlov option [ 152.427406][ T8748] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.524188][ T8752] netlink: 'syz.1.1928': attribute type 5 has an invalid length. [ 152.550015][ T8754] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1927'. [ 152.615438][ T8758] netlink: 'syz.1.1930': attribute type 10 has an invalid length. [ 152.624892][ T8758] siw: device registration error -23 [ 152.694915][ T8763] loop4: detected capacity change from 0 to 1024 [ 152.703782][ T8763] EXT4-fs: Ignoring removed orlov option [ 152.715938][ T8763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.764264][ T7675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.847306][ T8774] hub 6-0:1.0: USB hub found [ 152.858909][ T8774] hub 6-0:1.0: 8 ports detected [ 153.039455][ T8787] random: crng reseeded on system resumption [ 153.464307][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.556331][ T8801] __nla_validate_parse: 2 callbacks suppressed [ 153.556459][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1945'. [ 153.616727][ T8801] loop1: detected capacity change from 0 to 1024 [ 153.643740][ T8801] EXT4-fs: Ignoring removed orlov option [ 153.661424][ T8801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.861851][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1945'. [ 154.175779][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 154.175798][ T29] audit: type=1326 audit(1755046548.878:19740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8824 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331c88ebe9 code=0x7ffc0000 [ 154.264726][ T29] audit: type=1326 audit(1755046548.878:19741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8824 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331c88ebe9 code=0x7ffc0000 [ 154.288380][ T29] audit: type=1326 audit(1755046548.878:19742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8824 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f331c88ebe9 code=0x7ffc0000 [ 154.311968][ T29] audit: type=1326 audit(1755046548.878:19743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8824 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331c88ebe9 code=0x7ffc0000 [ 154.335461][ T29] audit: type=1326 audit(1755046548.878:19744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8824 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331c88ebe9 code=0x7ffc0000 [ 154.471874][ T8829] loop5: detected capacity change from 0 to 256 [ 154.511636][ T29] audit: type=1326 audit(1755046549.218:19745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.4.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331c88ebe9 code=0x7ffc0000 [ 154.535431][ T29] audit: type=1326 audit(1755046549.218:19746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.4.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331c88ebe9 code=0x7ffc0000 [ 154.560814][ T29] audit: type=1326 audit(1755046549.268:19747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.4.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f331c88ebe9 code=0x7ffc0000 [ 154.760962][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.377136][ T29] audit: type=1326 audit(1755046550.078:19748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8850 comm="syz.4.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331c88ebe9 code=0x7ffc0000 [ 155.400704][ T29] audit: type=1326 audit(1755046550.078:19749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8850 comm="syz.4.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331c88ebe9 code=0x7ffc0000 [ 155.478660][ T8855] random: crng reseeded on system resumption [ 155.664576][ T8864] vlan1: entered allmulticast mode [ 155.669986][ T8864] dummy0: entered allmulticast mode [ 155.938870][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1971'. [ 156.059122][ T8884] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 156.077071][ T8885] loop2: detected capacity change from 0 to 256 [ 156.260103][ T8899] random: crng reseeded on system resumption [ 156.768512][ T8909] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 156.842364][ T8909] SELinux: failed to load policy [ 157.360828][ T8915] random: crng reseeded on system resumption [ 157.374998][ T8898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1982'. [ 157.479977][ T8919] random: crng reseeded on system resumption [ 157.644377][ T8925] loop2: detected capacity change from 0 to 4096 [ 157.659774][ T8925] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.677884][ T8927] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 157.697964][ T8925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.889678][ T8940] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1991'. [ 157.943537][ T8942] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 158.314356][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.345831][ T8955] validate_nla: 2 callbacks suppressed [ 158.345857][ T8955] netlink: 'syz.2.2002': attribute type 10 has an invalid length. [ 158.381848][ T8955] netlink: 'syz.2.2002': attribute type 10 has an invalid length. [ 158.401501][ T8955] siw: device registration error -23 [ 158.426832][ T8959] @: renamed from vlan0 [ 158.448538][ T8960] netlink: 'syz.0.2003': attribute type 7 has an invalid length. [ 158.456513][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2003'. [ 158.541828][ T8969] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 158.559683][ T8969] netlink: 'syz.2.2008': attribute type 5 has an invalid length. [ 158.624018][ T8974] random: crng reseeded on system resumption [ 158.766257][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2015'. [ 158.800952][ T8985] loop2: detected capacity change from 0 to 1024 [ 158.814538][ T8985] EXT4-fs: Ignoring removed orlov option [ 158.832257][ T8985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.993165][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2015'. [ 159.050968][ T9002] netlink: 'syz.5.2017': attribute type 7 has an invalid length. [ 159.058805][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2017'. [ 159.207041][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 159.207059][ T29] audit: type=1326 audit(1755046553.908:19817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9015 comm="syz.4.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331c88ebe9 code=0x7ffc0000 [ 159.237678][ T29] audit: type=1326 audit(1755046553.938:19818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9015 comm="syz.4.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f331c88ebe9 code=0x7ffc0000 [ 159.513705][ T9021] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 159.753524][ T29] audit: type=1326 audit(1755046554.428:19819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.0.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fac0eebe9 code=0x7ffc0000 [ 159.777179][ T29] audit: type=1326 audit(1755046554.428:19820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.0.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fac0eebe9 code=0x7ffc0000 [ 159.800734][ T29] audit: type=1326 audit(1755046554.428:19821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.0.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f8fac0eebe9 code=0x7ffc0000 [ 159.824153][ T29] audit: type=1326 audit(1755046554.428:19822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.0.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fac0eebe9 code=0x7ffc0000 [ 159.847781][ T29] audit: type=1326 audit(1755046554.428:19823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.0.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fac0eebe9 code=0x7ffc0000 [ 159.880241][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.923114][ T29] audit: type=1326 audit(1755046554.628:19824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.5.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ddeeebe9 code=0x7ffc0000 [ 159.951911][ T29] audit: type=1326 audit(1755046554.648:19825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.5.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35ddeeebe9 code=0x7ffc0000 [ 159.975542][ T29] audit: type=1326 audit(1755046554.648:19826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.5.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ddeeebe9 code=0x7ffc0000 [ 160.107741][ T9037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2034'. [ 160.117170][ T9049] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 160.285438][ T9055] loop1: detected capacity change from 0 to 512 [ 160.300485][ T9055] EXT4-fs: Ignoring removed i_version option [ 160.318547][ T9058] loop0: detected capacity change from 0 to 256 [ 160.366701][ T9055] EXT4-fs (loop1): orphan cleanup on readonly fs [ 160.374632][ T9055] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2042: bg 0: block 131: padding at end of block bitmap is not set [ 160.390481][ T9055] EXT4-fs (loop1): Remounting filesystem read-only [ 160.397268][ T9055] EXT4-fs (loop1): 1 truncate cleaned up [ 160.404209][ T9055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.500194][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.705367][ T9073] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 160.970245][ T9079] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 160.993086][ T9079] netlink: 'syz.2.2052': attribute type 5 has an invalid length. [ 161.064241][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2054'. [ 161.083496][ T9084] loop2: detected capacity change from 0 to 1024 [ 161.090314][ T9084] EXT4-fs: Ignoring removed orlov option [ 161.098575][ T9084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.289089][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2054'. [ 161.365078][ T9095] random: crng reseeded on system resumption [ 161.442304][ T9107] netlink: 'syz.4.2062': attribute type 2 has an invalid length. [ 161.809441][ T9114] loop5: detected capacity change from 0 to 512 [ 161.829390][ T9114] EXT4-fs: Ignoring removed i_version option [ 161.835904][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.846852][ T9114] EXT4-fs (loop5): orphan cleanup on readonly fs [ 161.859062][ T9114] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2066: bg 0: block 131: padding at end of block bitmap is not set [ 161.875016][ T9114] EXT4-fs (loop5): Remounting filesystem read-only [ 161.889150][ T9114] EXT4-fs (loop5): 1 truncate cleaned up [ 161.901766][ T9114] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 161.920245][ T9124] vlan1: entered allmulticast mode [ 161.925554][ T9124] dummy0: entered allmulticast mode [ 161.948122][ T9114] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2066'. [ 161.980743][ T7675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.019951][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2073'. [ 162.047339][ T9131] loop2: detected capacity change from 0 to 1024 [ 162.055573][ T9130] random: crng reseeded on system resumption [ 162.068037][ T9131] EXT4-fs: Ignoring removed orlov option [ 162.086932][ T9131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.221492][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2076'. [ 162.280803][ T9141] loop1: detected capacity change from 0 to 1024 [ 162.297631][ T9141] EXT4-fs: Ignoring removed orlov option [ 162.328205][ T9141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.507732][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2076'. [ 162.615443][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.633955][ T9154] loop5: detected capacity change from 0 to 512 [ 162.653278][ T9154] EXT4-fs: Ignoring removed i_version option [ 162.673249][ T9156] loop2: detected capacity change from 0 to 512 [ 162.686986][ T9154] EXT4-fs (loop5): orphan cleanup on readonly fs [ 162.689000][ T9156] EXT4-fs: Ignoring removed i_version option [ 162.700171][ T9157] rdma_rxe: rxe_newlink: failed to add bond0 [ 162.709526][ T9154] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2081: bg 0: block 131: padding at end of block bitmap is not set [ 162.719625][ T9156] EXT4-fs (loop2): orphan cleanup on readonly fs [ 162.741530][ T9156] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2080: bg 0: block 131: padding at end of block bitmap is not set [ 162.781842][ T9154] EXT4-fs (loop5): Remounting filesystem read-only [ 162.808575][ T9154] EXT4-fs (loop5): 1 truncate cleaned up [ 162.816114][ T9156] EXT4-fs (loop2): Remounting filesystem read-only [ 162.829723][ T9154] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.846570][ T9156] EXT4-fs (loop2): 1 truncate cleaned up [ 162.852755][ T9156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.925109][ T7675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.934898][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.960693][ T9165] netlink: 'syz.5.2084': attribute type 2 has an invalid length. [ 162.997484][ T9169] vlan1: entered allmulticast mode [ 163.023803][ T9167] random: crng reseeded on system resumption [ 163.038190][ T9171] netlink: 'syz.0.2086': attribute type 5 has an invalid length. [ 163.052623][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.092063][ T9175] netlink: 'syz.1.2089': attribute type 5 has an invalid length. [ 163.144480][ T9178] SELinux: failed to load policy [ 163.171012][ T9180] loop0: detected capacity change from 0 to 4096 [ 163.177986][ T9180] EXT4-fs: Ignoring removed nomblk_io_submit option [ 163.194298][ T9180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.312877][ T9190] loop5: detected capacity change from 0 to 512 [ 163.336265][ T9190] EXT4-fs: Ignoring removed i_version option [ 163.362588][ T9190] EXT4-fs (loop5): orphan cleanup on readonly fs [ 163.373660][ T9190] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2094: bg 0: block 131: padding at end of block bitmap is not set [ 163.389543][ T9190] EXT4-fs (loop5): Remounting filesystem read-only [ 163.399470][ T9190] EXT4-fs (loop5): 1 truncate cleaned up [ 163.412127][ T9190] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.443258][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.459460][ T7675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.493684][ T9198] loop4: detected capacity change from 0 to 1024 [ 163.501049][ T9198] EXT4-fs: Ignoring removed orlov option [ 163.511646][ T9202] netlink: 'syz.0.2096': attribute type 10 has an invalid length. [ 163.520870][ T9202] netlink: 'syz.0.2096': attribute type 10 has an invalid length. [ 163.540350][ T9198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.611182][ T9205] random: crng reseeded on system resumption [ 163.645128][ T9210] vlan1: entered allmulticast mode [ 163.650436][ T9210] dummy0: entered allmulticast mode [ 163.904444][ T9224] loop5: detected capacity change from 0 to 512 [ 163.911138][ T9224] EXT4-fs: Ignoring removed i_version option [ 163.920469][ T9224] EXT4-fs (loop5): orphan cleanup on readonly fs [ 163.927380][ T9224] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2106: bg 0: block 131: padding at end of block bitmap is not set [ 163.946870][ T9224] EXT4-fs (loop5): Remounting filesystem read-only [ 163.953545][ T9224] EXT4-fs (loop5): 1 truncate cleaned up [ 163.954393][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.959596][ T9224] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.017995][ T7675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.038469][ T9235] netlink: 'syz.2.2110': attribute type 10 has an invalid length. [ 164.056176][ T9235] netlink: 'syz.2.2110': attribute type 10 has an invalid length. [ 164.068929][ T9235] siw: device registration error -23 [ 164.285846][ T9257] __nla_validate_parse: 5 callbacks suppressed [ 164.285864][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2120'. [ 164.307504][ T9257] loop1: detected capacity change from 0 to 1024 [ 164.315363][ T9257] EXT4-fs: Ignoring removed orlov option [ 164.324887][ T9257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.433881][ T9264] hub 6-0:1.0: USB hub found [ 164.438628][ T9264] hub 6-0:1.0: 8 ports detected [ 164.454348][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2120'. [ 164.519984][ T9272] netlink: 'syz.2.2126': attribute type 10 has an invalid length. [ 164.528826][ T9272] netlink: 'syz.2.2126': attribute type 10 has an invalid length. [ 164.537617][ T9272] siw: device registration error -23 [ 164.621121][ T9282] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 164.633822][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 164.633840][ T29] audit: type=1326 audit(1755046559.338:19933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.2.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1efeebe9 code=0x7ffc0000 [ 164.634248][ T9282] netlink: 'syz.2.2131': attribute type 5 has an invalid length. [ 164.646548][ T29] audit: type=1326 audit(1755046559.338:19934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.2.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f0d1efeebe9 code=0x7ffc0000 [ 164.695083][ T29] audit: type=1326 audit(1755046559.338:19935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.2.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1efeebe9 code=0x7ffc0000 [ 164.718634][ T29] audit: type=1326 audit(1755046559.338:19936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.2.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0d1efeebe9 code=0x7ffc0000 [ 164.742826][ T29] audit: type=1326 audit(1755046559.368:19937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.2.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1efeebe9 code=0x7ffc0000 [ 164.766390][ T29] audit: type=1326 audit(1755046559.368:19938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.2.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f0d1efeebe9 code=0x7ffc0000 [ 164.789940][ T29] audit: type=1326 audit(1755046559.368:19939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.2.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1efeebe9 code=0x7ffc0000 [ 164.813540][ T29] audit: type=1326 audit(1755046559.368:19940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.2.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1efeebe9 code=0x7ffc0000 [ 164.837149][ T29] audit: type=1326 audit(1755046559.368:19941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.2.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0d1efeebe9 code=0x7ffc0000 [ 164.862552][ T29] audit: type=1326 audit(1755046559.568:19942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9281 comm="syz.2.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1efeebe9 code=0x7ffc0000 [ 164.909757][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.928455][ T9296] netlink: 'syz.2.2137': attribute type 10 has an invalid length. [ 164.936923][ T9296] netlink: 'syz.2.2137': attribute type 10 has an invalid length. [ 164.947485][ T9296] siw: device registration error -23 [ 165.059535][ T9307] hub 6-0:1.0: USB hub found [ 165.070905][ T9307] hub 6-0:1.0: 8 ports detected [ 165.079083][ T9310] rdma_rxe: rxe_newlink: failed to add bond0 [ 165.173999][ T9313] random: crng reseeded on system resumption [ 165.251617][ T9311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2138'. [ 165.341927][ T9322] loop4: detected capacity change from 0 to 1024 [ 165.348826][ T9322] EXT4-fs: Ignoring removed orlov option [ 165.357119][ T9322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.492190][ T9330] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 165.501660][ T9330] netlink: 'syz.2.2147': attribute type 5 has an invalid length. [ 165.579822][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.600534][ T9337] siw: device registration error -23 [ 165.623725][ T9341] loop4: detected capacity change from 0 to 512 [ 165.630702][ T9341] EXT4-fs: Ignoring removed i_version option [ 165.637578][ T9341] EXT4-fs (loop4): orphan cleanup on readonly fs [ 165.645230][ T9341] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2154: bg 0: block 131: padding at end of block bitmap is not set [ 165.660014][ T9341] EXT4-fs (loop4): Remounting filesystem read-only [ 165.666597][ T9341] EXT4-fs (loop4): 1 truncate cleaned up [ 165.672862][ T9341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 165.690426][ T9341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2154'. [ 165.699501][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2154'. [ 165.717120][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.740212][ T9344] vlan0: entered allmulticast mode [ 165.745376][ T9344] dummy0: entered allmulticast mode [ 165.796091][ T9346] vlan0: entered allmulticast mode [ 165.963197][ T9367] vlan0: entered allmulticast mode [ 166.002281][ T9374] vlan0: entered allmulticast mode [ 166.113357][ T9381] random: crng reseeded on system resumption [ 166.213245][ T9388] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 166.244426][ T9390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2177'. [ 166.261611][ T9390] loop4: detected capacity change from 0 to 1024 [ 166.268283][ T9390] EXT4-fs: Ignoring removed orlov option [ 166.276665][ T9390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.399512][ T9405] vlan0: entered allmulticast mode [ 166.419787][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2177'. [ 166.476321][ T9417] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 166.766625][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.930479][ T9451] loop4: detected capacity change from 0 to 4096 [ 166.937787][ T9451] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.955863][ T9451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.172362][ T9468] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2203'. [ 167.236588][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.292116][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2209'. [ 167.308571][ T9476] loop0: detected capacity change from 0 to 1024 [ 167.317196][ T9476] EXT4-fs: Ignoring removed orlov option [ 167.326653][ T9476] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.452658][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2209'. [ 167.709598][ T9497] random: crng reseeded on system resumption [ 168.037253][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.183207][ T9520] loop2: detected capacity change from 0 to 1024 [ 168.197800][ T9520] EXT4-fs: Ignoring removed orlov option [ 168.211309][ T9520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.324800][ T9534] vlan0: entered allmulticast mode [ 168.787132][ T9543] random: crng reseeded on system resumption [ 169.054809][ T9549] loop0: detected capacity change from 0 to 1024 [ 169.070278][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.090462][ T9549] EXT4-fs: Ignoring removed orlov option [ 169.115588][ T9557] validate_nla: 4 callbacks suppressed [ 169.115604][ T9557] netlink: 'syz.1.2244': attribute type 10 has an invalid length. [ 169.131389][ T9557] netlink: 'syz.1.2244': attribute type 10 has an invalid length. [ 169.135407][ T9549] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.140310][ T9557] siw: device registration error -23 [ 169.237654][ T9562] hub 6-0:1.0: USB hub found [ 169.261925][ T9562] hub 6-0:1.0: 8 ports detected [ 169.267236][ T9567] rdma_rxe: rxe_newlink: failed to add bond0 [ 169.379857][ T9573] random: crng reseeded on system resumption [ 169.430697][ T9564] ================================================================== [ 169.438842][ T9564] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 169.438878][ T9564] [ 169.438883][ T9564] write to 0xffff888100690a50 of 4 bytes by task 9549 on cpu 1: [ 169.438902][ T9564] writeback_single_inode+0x14a/0x3e0 [ 169.438930][ T9564] sync_inode_metadata+0x5b/0x90 [ 169.438958][ T9564] generic_buffers_fsync_noflush+0xd9/0x120 [ 169.438982][ T9564] ext4_sync_file+0x1ab/0x690 [ 169.439012][ T9564] vfs_fsync_range+0x10d/0x130 [ 169.482796][ T9564] ext4_buffered_write_iter+0x34f/0x3c0 [ 169.482836][ T9564] ext4_file_write_iter+0x383/0xf00 [ 169.482869][ T9564] iter_file_splice_write+0x666/0x9e0 [ 169.482890][ T9564] direct_splice_actor+0x153/0x2a0 [ 169.482910][ T9564] splice_direct_to_actor+0x30f/0x680 [ 169.482931][ T9564] do_splice_direct+0xda/0x150 [ 169.482951][ T9564] do_sendfile+0x380/0x650 [ 169.482980][ T9564] __x64_sys_sendfile64+0x105/0x150 [ 169.483007][ T9564] x64_sys_call+0x2bb0/0x2ff0 [ 169.483029][ T9564] do_syscall_64+0xd2/0x200 [ 169.483056][ T9564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.483078][ T9564] [ 169.483085][ T9564] read to 0xffff888100690a50 of 4 bytes by task 9564 on cpu 0: [ 169.483101][ T9564] __mark_inode_dirty+0x52/0x760 [ 169.483123][ T9564] ext4_write_inline_data_end+0x3e5/0x5f0 [ 169.559592][ T9564] ext4_write_end+0x3d7/0x720 [ 169.564275][ T9564] generic_perform_write+0x312/0x490 [ 169.569561][ T9564] ext4_buffered_write_iter+0x1ee/0x3c0 [ 169.575122][ T9564] ext4_file_write_iter+0x383/0xf00 [ 169.580333][ T9564] iter_file_splice_write+0x666/0x9e0 [ 169.585704][ T9564] direct_splice_actor+0x153/0x2a0 [ 169.590822][ T9564] splice_direct_to_actor+0x30f/0x680 [ 169.596195][ T9564] do_splice_direct+0xda/0x150 [ 169.600960][ T9564] do_sendfile+0x380/0x650 [ 169.605415][ T9564] __x64_sys_sendfile64+0x105/0x150 [ 169.610634][ T9564] x64_sys_call+0x2bb0/0x2ff0 [ 169.615322][ T9564] do_syscall_64+0xd2/0x200 [ 169.619840][ T9564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.625742][ T9564] [ 169.628063][ T9564] value changed: 0x00000008 -> 0x00000002 [ 169.633777][ T9564] [ 169.636095][ T9564] Reported by Kernel Concurrency Sanitizer on: [ 169.642238][ T9564] CPU: 0 UID: 0 PID: 9564 Comm: syz.0.2239 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 169.654652][ T9564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.664707][ T9564] ================================================================== [ 169.905753][ T9575] __nla_validate_parse: 8 callbacks suppressed [ 169.905820][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2249'. [ 169.934046][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.