last executing test programs: 2.263137085s ago: executing program 2 (id=4506): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002305e20000000000030000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="5953fdfffffffddbdf256b0000000800", @ANYRES32=0x0, @ANYBLOB="0c009900020000007200000010001d800c00008108000d800400038091955cb4603997aae1a70fb1bebc8b4b7e947529b33974ef928d81ff5b6ce0e2f130cac6e8b2641ceceea6e97fda82454960689732f714655c9cb4009cd7c0a74b52b06143260f42ded7c26709a2a32aede5fca312dc20bfe0978b103ca96875c6802902907032e20b9be3a593398fa7dcbdcfe16fa147085732fe47d5baac0d77"], 0x38}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) 1.356946729s ago: executing program 2 (id=4523): semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f00000012c0)=""/4096) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000", 0x4d}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0xffffffffffffffbc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[], 0xfdef) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd']) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)=0x4) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1000) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x10) 911.986166ms ago: executing program 3 (id=4529): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r1}) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1c67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0xe000}, 0x5}], 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r6}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 873.431587ms ago: executing program 3 (id=4530): creat(&(0x7f00000000c0)='./file0\x00', 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000840900000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) lstat(&(0x7f0000000280)='./bus\x00', &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)={0x1, 0xfffffffffffff8f5, 0x0, 0x2, 0x4, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="1800000000e36a24000000000000000095"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r4, 0x0, 0xa}, 0x18) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r6, 0x1, 0x0, 0x0, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x87}}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) open(&(0x7f0000000180)='./file0\x00', 0x40c5, 0x24) dup(r5) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) 805.268648ms ago: executing program 0 (id=4531): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r2}) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1c67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0xe000}, 0x5}], 0x1, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) fsync(r5) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r8, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb6) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r10, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00'}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 763.976549ms ago: executing program 0 (id=4532): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) listen(0xffffffffffffffff, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc, 0x0, 0xff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) 724.653869ms ago: executing program 0 (id=4535): r0 = dup(0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0x2, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) vmsplice(r2, &(0x7f0000000180)=[{&(0x7f0000000080)="a164", 0x2}], 0x1, 0x8) write$binfmt_elf64(r4, &(0x7f00000000c0)=ANY=[], 0x18c6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) statx(r0, 0x0, 0x100, 0x10, &(0x7f00000009c0)) getgid() sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) r6 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x1000, 0xfffffffe, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r8, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x28, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40008043, 0x1}) io_uring_enter(r6, 0x47fa, 0x0, 0x0, 0x0, 0x0) 704.00954ms ago: executing program 1 (id=4536): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {0x0, 0x0, 0x0, 0x805}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0xd8, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4309, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x3, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x4ccc}, {0x7f}, {}, {0x2}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7ff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0xa9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x3d8, 0x0, 0x7}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {0x5}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 672.98356ms ago: executing program 1 (id=4537): mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x9) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x52}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="06b7e5c8b767f211dd6cbb1649d83604547fc9485160789b43b5df4eef2047b9b1e3bf4255e5e8dcde5c41834860072bc925627c75ea8079a717d5711d41ee843a82ad475887d4c11ff15bdd1fa092db8d7ae0bb07df55191dee6bc20773be45fda5", 0x62}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000000140)="6f7219bb6b1312de95576b7ab2284eb7691b19f02bed301363b2e1423b8983257d8d0ad4", 0x24}, {&(0x7f00000002c0)="a156f8e141f41fe898a8832a7044622b4a861a2784992594ec53f1f33f07d516ddc394a4ca7fdbd55672a3e3016e4241af6df6bfa548696392b1722abfe79501ffdb75c101e8d26ad90ffb908796bf7c827e9862eecb9ef3bb9afe1e9fb04628c7464aec8fe062c67200f45d42a4a254fdef29540239e294a77fc879d5604a3aadddc76ad6e998885dabee07f50aa14857d1a99326a64dba4ca3de962fecc0a47365872285f62b12e78b04a427df6c03ac105184b9eb2bb375f355ef4a31ba7fe53c6a5f0245a0fed42fe62912fd6febc6141fdd3f", 0xd5}, {&(0x7f00000003c0)="3aa2b56d812101b33c6f8266dd00c16b588a76c81a5feb1ed94f76bf78169b2b2ee12467952e2c280a6d419f79ea78ec3a7ca79944", 0x35}], 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1400000000000000000000e4a700010000000100000000000000140000000000000000000000020000000300000000000000100000000000000000000000070000001c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB='\x00'/12], 0x60}, 0x8001) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) io_uring_setup(0x1694, &(0x7f0000000080)) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000040)='.\x02\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="636865636b3d7374726963742c756e686964652c63727566742c696f636861727365743d63a08033322c636865636b3d72656c617865642c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f6a6f6c6965742c00"], 0x1, 0x55d, &(0x7f0000000b00)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x112, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigqueueinfo(r4, 0x21, &(0x7f0000000ac0)={0x0, 0x9, 0xfffffffe}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x48, 0x0, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_pktinfo(r7, 0x0, 0x8, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mknodat$loop(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) 587.380801ms ago: executing program 1 (id=4538): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x0) 556.189992ms ago: executing program 1 (id=4540): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) 534.340572ms ago: executing program 1 (id=4541): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) open(&(0x7f00000001c0)='./file1\x00', 0x16f07e, 0x88) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x20, 0x6, 0xc, 0x5, @rand_addr=' \x01\x00', @loopback, 0x1, 0x8000, 0x400, 0xd66}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000004c0)={@private1, 0x0}, &(0x7f0000000500)=0x14) r11 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x14, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)={0x108, r5, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r14, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 496.606913ms ago: executing program 2 (id=4542): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x0) 477.476433ms ago: executing program 4 (id=4543): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r2}) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1c67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0xe000}, 0x5}], 0x1, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) fsync(r5) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r8, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb6) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r10}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 455.299283ms ago: executing program 2 (id=4544): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 454.050103ms ago: executing program 3 (id=4545): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) listen(0xffffffffffffffff, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc, 0x0, 0xff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) 416.182644ms ago: executing program 4 (id=4546): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00'], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000880)='./file0\x00', 0x0, &(0x7f0000000900), 0x1400) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 375.474304ms ago: executing program 0 (id=4547): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001400090500000800fddbdf2502005b00", @ANYRES32, @ANYRES64=0x0], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x2a4, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x274, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x11}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff}}]}}]}, 0x2a4}}, 0x0) socket$inet6(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000001e40)=""/194, 0x32, 0xc2, 0x1}, 0x28) getdents64(0xffffffffffffff9c, &(0x7f0000000380)=""/219, 0xdb) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'geneve0\x00', 0x1}, 0x18) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x61}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) write$binfmt_misc(r6, 0x0, 0x0) finit_module(r6, 0x0, 0x2) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r9, 0x0, 0xfffffffffffffffd}, 0x18) r10 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000680), 0x80c02, 0x0) write$cgroup_int(r10, 0x0, 0x2) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x10, @empty, @empty, 0x0, 0x7}}) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x282200) 374.338344ms ago: executing program 2 (id=4548): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x7, 0x3, 0x0, 0x0, 0x0, 0x83, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x4}, 0x1, 0xa, 0x1, 0x9, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x14) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xad, 0xde}, 0x12100, 0x2b, 0xf, 0x9, 0x31, 0x9, 0xfffe, 0x0, 0x2, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xd) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000e40)='net/raw6\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x40000000000004) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffd, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000340)='cpu~&0&&\t') 317.347136ms ago: executing program 3 (id=4549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xae}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) 245.473637ms ago: executing program 1 (id=4550): semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f00000012c0)=""/4096) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff000000020000", 0x56}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0xffffffffffffffbc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[], 0xfdef) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd']) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)=0x4) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1000) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x10) 237.179686ms ago: executing program 4 (id=4551): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) 209.909537ms ago: executing program 4 (id=4552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_user(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u::bject_r:auth_cache_t r'], 0x27) 200.658857ms ago: executing program 3 (id=4553): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 189.709907ms ago: executing program 0 (id=4554): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_user(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u::bject_r:auth_cache_t r'], 0x27) 165.593058ms ago: executing program 3 (id=4555): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x5, 0x400, 0x9, 0x1}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000000036182d10d8c31f4a62099fa6a8679dbdb32115ab0f5389c0e5bfcd6b7c7fa25fac3e6d42a3641b129acc420235833e22d88e03825ca57219e59191ea6f5377", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00018008000100030000000c000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008810) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000300)={0x4, &(0x7f00000003c0)=[{0x4f5, 0x4, 0x8, 0x8001}, {0x0, 0x60, 0x7, 0x7}, {0x2, 0x7, 0xc, 0x7fffffff}, {0x100, 0x3, 0x1, 0x6}]}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_pts(r10, 0x101) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0xfff3}}}, 0x24}}, 0x0) symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 101.070209ms ago: executing program 0 (id=4556): creat(&(0x7f00000000c0)='./file0\x00', 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000840900000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) lstat(&(0x7f0000000280)='./bus\x00', &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)={0x1, 0xfffffffffffff8f5, 0x0, 0x2, 0x4, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="1800000000e36a24000000000000000095"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r4, 0x0, 0xa}, 0x18) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r5, 0x1, 0x0, 0x0, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x87}}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) open(&(0x7f0000000180)='./file0\x00', 0x40c5, 0x24) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) 100.325409ms ago: executing program 4 (id=4557): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001400090500000800fddbdf2502005b00", @ANYRES32, @ANYRES64=0x0], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x11}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) socket$inet6(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000201400001e576ef65946e0f8b130df762410240014000004004604cc5640657ba2746279d28097dda249246166afa7affddb0a50cf151207000000000000006367950d6064a35c020ef7b330878ace7cdcb6c87b87cf3bb2e8a2a4185ded3186fd5a52886e1cdd799fb7632e63aef10c31447377a3300736e915a6c8c4890e8aa1ee11e2e38af5893df64186658b9b5fc62ac597c8b3ddf87754ab0954499800000000000000000000e7378ac629e1072dcb470cca05de5b0988912790e595037bd14047a159b7c53b6bd4ded29baed7b818dfe2da00000000000000025b"], &(0x7f0000001e40)=""/194, 0x32, 0xc2, 0x1}, 0x28) getdents64(0xffffffffffffff9c, &(0x7f0000000380)=""/219, 0xdb) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'geneve0\x00', 0x1}, 0x18) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x61}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) write$binfmt_misc(r5, 0x0, 0x0) finit_module(r5, 0x0, 0x2) 40.70288ms ago: executing program 2 (id=4558): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00'], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000880)='./file0\x00', 0x0, &(0x7f0000000900), 0x1400) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 4 (id=4559): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000020000000000000084000500ff020000000000000000000000000001000000003300000000000000ffffffff0000000000000000000000000000000000000000ffffffff0000000040000000ac1414bb000000000000000000000000000000003200000000000000fc010000000000000000000000000000000000000500"/244], 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): ve! [ 265.886829][T15037] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 265.908480][T15037] FAT-fs (loop3): Filesystem has been set read-only [ 266.014034][T15046] loop1: detected capacity change from 0 to 512 [ 266.021300][T15046] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 266.066024][T15048] loop4: detected capacity change from 0 to 512 [ 266.085837][T15048] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 266.111997][T15051] loop3: detected capacity change from 0 to 1024 [ 266.121051][T15051] EXT4-fs: Ignoring removed nobh option [ 266.121792][T15046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.126660][T15051] EXT4-fs: inline encryption not supported [ 266.167504][T15046] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.191856][T15051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.192868][T15064] 9pnet_fd: Insufficient options for proto=fd [ 266.242055][T15051] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 266.246574][T15046] netlink: 'syz.1.3776': attribute type 1 has an invalid length. [ 266.264178][T15046] Invalid ELF header magic: != ELF [ 266.279279][T15068] loop4: detected capacity change from 0 to 1024 [ 266.288836][T15068] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 266.299953][T15068] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 266.330489][T15066] IPVS: Error joining to the multicast group [ 266.339416][T13402] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.340412][T15068] JBD2: no valid journal superblock found [ 266.354315][T15068] EXT4-fs (loop4): Could not load journal inode [ 266.405476][T12147] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.442153][T15075] loop3: detected capacity change from 0 to 512 [ 266.466389][T15074] Invalid ELF header magic: != ELF [ 266.477628][T15075] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 266.549157][T15075] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 266.559167][T15075] FAT-fs (loop3): Filesystem has been set read-only [ 266.604660][ T29] kauditd_printk_skb: 1193 callbacks suppressed [ 266.604675][ T29] audit: type=1326 audit(2000000042.760:30785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15086 comm="syz.0.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e56ce929 code=0x7ffc0000 [ 266.644889][ T29] audit: type=1326 audit(2000000042.790:30786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15086 comm="syz.0.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89e56ce929 code=0x7ffc0000 [ 266.668608][ T29] audit: type=1326 audit(2000000042.790:30787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15086 comm="syz.0.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e56ce929 code=0x7ffc0000 [ 266.692375][ T29] audit: type=1326 audit(2000000042.790:30788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15086 comm="syz.0.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e56ce929 code=0x7ffc0000 [ 266.716263][ T29] audit: type=1326 audit(2000000042.790:30789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15086 comm="syz.0.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89e56ce929 code=0x7ffc0000 [ 266.740098][ T29] audit: type=1326 audit(2000000042.790:30790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15086 comm="syz.0.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e56ce929 code=0x7ffc0000 [ 266.763702][ T29] audit: type=1326 audit(2000000042.790:30791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15086 comm="syz.0.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89e56ce929 code=0x7ffc0000 [ 266.770720][T15082] Invalid ELF header magic: != ELF [ 266.787497][ T29] audit: type=1326 audit(2000000042.790:30792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15086 comm="syz.0.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e56ce929 code=0x7ffc0000 [ 266.816272][ T29] audit: type=1326 audit(2000000042.790:30793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15086 comm="syz.0.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89e56ce929 code=0x7ffc0000 [ 266.839948][ T29] audit: type=1326 audit(2000000042.790:30794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15086 comm="syz.0.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e56ce929 code=0x7ffc0000 [ 267.000697][T15104] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 267.060886][T15108] FAULT_INJECTION: forcing a failure. [ 267.060886][T15108] name failslab, interval 1, probability 0, space 0, times 0 [ 267.073627][T15108] CPU: 1 UID: 0 PID: 15108 Comm: syz.4.3800 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 267.073699][T15108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 267.073715][T15108] Call Trace: [ 267.073723][T15108] [ 267.073731][T15108] __dump_stack+0x1d/0x30 [ 267.073826][T15108] dump_stack_lvl+0xe8/0x140 [ 267.073851][T15108] dump_stack+0x15/0x1b [ 267.073968][T15108] should_fail_ex+0x265/0x280 [ 267.074068][T15108] should_failslab+0x8c/0xb0 [ 267.074096][T15108] kmem_cache_alloc_noprof+0x50/0x310 [ 267.074155][T15108] ? audit_log_start+0x365/0x6c0 [ 267.074213][T15108] audit_log_start+0x365/0x6c0 [ 267.074250][T15108] audit_seccomp+0x48/0x100 [ 267.074283][T15108] ? __seccomp_filter+0x68c/0x10d0 [ 267.074311][T15108] __seccomp_filter+0x69d/0x10d0 [ 267.074361][T15108] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 267.074393][T15108] ? vfs_write+0x75e/0x8e0 [ 267.074430][T15108] __secure_computing+0x82/0x150 [ 267.074505][T15108] syscall_trace_enter+0xcf/0x1e0 [ 267.074580][T15108] do_syscall_64+0xac/0x200 [ 267.074603][T15108] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 267.074630][T15108] ? clear_bhb_loop+0x40/0x90 [ 267.074651][T15108] ? clear_bhb_loop+0x40/0x90 [ 267.074672][T15108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.074714][T15108] RIP: 0033:0x7f1d1916e929 [ 267.074810][T15108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.074827][T15108] RSP: 002b:00007f1d177cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 267.074845][T15108] RAX: ffffffffffffffda RBX: 00007f1d19395fa0 RCX: 00007f1d1916e929 [ 267.074860][T15108] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 267.074876][T15108] RBP: 00007f1d177cf090 R08: 0000000000000000 R09: 0000000000000000 [ 267.074919][T15108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.074934][T15108] R13: 0000000000000000 R14: 00007f1d19395fa0 R15: 00007fffb8c409c8 [ 267.074959][T15108] [ 267.076412][T15101] Invalid ELF header magic: != ELF [ 267.341093][T15120] loop1: detected capacity change from 0 to 764 [ 267.437795][T15131] 9pnet_fd: Insufficient options for proto=fd [ 267.456372][T15130] Invalid ELF header magic: != ELF [ 267.477399][T15133] 9pnet: Could not find request transport: fd [ 267.524359][T15139] SELinux: syz.2.3812 (15139) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 267.557440][T15142] 9p: Unknown uid 00000000004294967295 [ 267.742416][T15157] loop3: detected capacity change from 0 to 512 [ 267.758992][T15157] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 267.766880][T15157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 267.798607][T15161] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 267.798641][T15161] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 267.798768][T15161] vhci_hcd vhci_hcd.0: Device attached [ 267.807484][T15161] program syz.4.3820 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.818246][T15157] loop7: detected capacity change from 0 to 7 [ 267.840121][ C1] blk_print_req_error: 21 callbacks suppressed [ 267.840136][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.840158][ C1] buffer_io_error: 20 callbacks suppressed [ 267.840167][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 267.841233][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.879130][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 267.887162][T11585] loop7: unable to read partition table [ 267.905422][T15162] vhci_hcd: connection closed [ 267.915061][ T6542] vhci_hcd: stop threads [ 267.915074][ T6542] vhci_hcd: release socket [ 267.915081][ T6542] vhci_hcd: disconnect device [ 267.925062][T15167] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #19: comm syz.3.3819: corrupted inode contents [ 267.926522][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 267.926628][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.926661][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 267.926761][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.926792][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 267.926898][T15157] loop7: unable to read partition table [ 267.926916][T15157] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 267.926950][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.926986][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 267.927119][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.927171][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 267.927362][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.927389][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 267.927524][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.927567][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 267.927729][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.927752][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 267.928726][T15167] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #19: comm syz.3.3819: mark_inode_dirty error [ 267.928922][T15167] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #19: comm syz.3.3819: corrupted inode contents [ 267.929018][T15167] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #19: comm syz.3.3819: mark_inode_dirty error [ 267.929224][T15167] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #19: comm syz.3.3819: mark inode dirty (error -117) [ 267.929447][T15167] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 267.935604][T15157] vlan2: entered allmulticast mode [ 268.161642][T15157] geneve1: entered allmulticast mode [ 268.205921][T13402] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 268.263944][T15174] __nla_validate_parse: 28 callbacks suppressed [ 268.263963][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3824'. [ 268.263986][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3824'. [ 268.264097][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3824'. [ 268.286171][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3824'. [ 268.286195][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3824'. [ 268.286240][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3824'. [ 268.321736][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3824'. [ 268.321761][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3824'. [ 268.321808][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3824'. [ 268.388680][T15180] IPv6: Can't replace route, no match found [ 268.407306][T15182] loop0: detected capacity change from 0 to 512 [ 268.407835][T15182] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 268.423192][T15184] loop1: detected capacity change from 0 to 1024 [ 268.430376][T15184] EXT4-fs: Ignoring removed nobh option [ 268.430405][T15184] EXT4-fs: inline encryption not supported [ 268.475093][T15184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.496449][T15184] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.3827: Allocating blocks 385-513 which overlap fs metadata [ 268.499359][T15184] SELinux: Context  is not valid (left unmapped). [ 268.512736][T15183] EXT4-fs (loop1): pa ffff888106dfed20: logic 16, phys. 129, len 24 [ 268.512768][T15183] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 268.530268][T15186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3828'. [ 268.530334][T15186] IPVS: Error joining to the multicast group [ 268.545226][T12147] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.630350][T15194] loop1: detected capacity change from 0 to 4096 [ 268.654596][T15196] 9p: Unknown uid 00000000004294967295 [ 268.665464][T15194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.670668][T15194] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.849509][T15202] IPVS: Error joining to the multicast group [ 268.956854][T15209] FAULT_INJECTION: forcing a failure. [ 268.956854][T15209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.970137][T15209] CPU: 1 UID: 0 PID: 15209 Comm: syz.0.3837 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 268.970185][T15209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.970202][T15209] Call Trace: [ 268.970209][T15209] [ 268.970218][T15209] __dump_stack+0x1d/0x30 [ 268.970241][T15209] dump_stack_lvl+0xe8/0x140 [ 268.970340][T15209] dump_stack+0x15/0x1b [ 268.970357][T15209] should_fail_ex+0x265/0x280 [ 268.970387][T15209] should_fail+0xb/0x20 [ 268.970421][T15209] should_fail_usercopy+0x1a/0x20 [ 268.970483][T15209] _copy_to_user+0x20/0xa0 [ 268.970509][T15209] simple_read_from_buffer+0xb5/0x130 [ 268.970591][T15209] proc_fail_nth_read+0x100/0x140 [ 268.970624][T15209] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 268.970655][T15209] vfs_read+0x19d/0x6f0 [ 268.970714][T15209] ? __rcu_read_unlock+0x4f/0x70 [ 268.970793][T15209] ? __rcu_read_unlock+0x4f/0x70 [ 268.970884][T15209] ? __fget_files+0x184/0x1c0 [ 268.970962][T15209] ksys_read+0xda/0x1a0 [ 268.970993][T15209] __x64_sys_read+0x40/0x50 [ 268.971022][T15209] x64_sys_call+0x2d77/0x2fb0 [ 268.971123][T15209] do_syscall_64+0xd2/0x200 [ 268.971146][T15209] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 268.971241][T15209] ? clear_bhb_loop+0x40/0x90 [ 268.971333][T15209] ? clear_bhb_loop+0x40/0x90 [ 268.971354][T15209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.971374][T15209] RIP: 0033:0x7f89e56cd33c [ 268.971454][T15209] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 268.971528][T15209] RSP: 002b:00007f89e3d37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 268.971552][T15209] RAX: ffffffffffffffda RBX: 00007f89e58f5fa0 RCX: 00007f89e56cd33c [ 268.971568][T15209] RDX: 000000000000000f RSI: 00007f89e3d370a0 RDI: 0000000000000006 [ 268.971584][T15209] RBP: 00007f89e3d37090 R08: 0000000000000000 R09: 0000000000000000 [ 268.971598][T15209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.971610][T15209] R13: 0000000000000000 R14: 00007f89e58f5fa0 R15: 00007ffc062e6b78 [ 268.971628][T15209] [ 268.971651][T15208] 9pnet: Could not find request transport: fd [ 269.247843][T15218] geneve2: entered promiscuous mode [ 269.253125][T15218] geneve2: entered allmulticast mode [ 269.328021][T15219] Invalid ELF header magic: != ELF [ 269.358354][T15222] FAULT_INJECTION: forcing a failure. [ 269.358354][T15222] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 269.371865][T15222] CPU: 0 UID: 0 PID: 15222 Comm: syz.4.3841 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 269.371973][T15222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 269.371989][T15222] Call Trace: [ 269.371998][T15222] [ 269.372007][T15222] __dump_stack+0x1d/0x30 [ 269.372032][T15222] dump_stack_lvl+0xe8/0x140 [ 269.372104][T15222] dump_stack+0x15/0x1b [ 269.372124][T15222] should_fail_ex+0x265/0x280 [ 269.372162][T15222] should_fail_alloc_page+0xf2/0x100 [ 269.372192][T15222] __alloc_frozen_pages_noprof+0xff/0x360 [ 269.372284][T15222] alloc_pages_mpol+0xb3/0x250 [ 269.372321][T15222] vma_alloc_folio_noprof+0x1aa/0x300 [ 269.372359][T15222] handle_mm_fault+0xec2/0x2be0 [ 269.372393][T15222] ? mas_walk+0xf2/0x120 [ 269.372466][T15222] do_user_addr_fault+0x636/0x1090 [ 269.372596][T15222] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 269.372632][T15222] exc_page_fault+0x62/0xa0 [ 269.372667][T15222] asm_exc_page_fault+0x26/0x30 [ 269.372690][T15222] RIP: 0033:0x7f1d1903ffb6 [ 269.372707][T15222] Code: 00 00 00 00 41 57 31 c0 41 56 49 89 d6 41 55 49 89 f5 48 89 d6 41 54 49 89 fc 48 8d 3d f6 20 1b 00 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 5c e0 fe ff 4d 85 f6 0f 84 46 0a 00 [ 269.372798][T15222] RSP: 002b:00007f1d177ccf70 EFLAGS: 00010202 [ 269.372818][T15222] RAX: 0000000000000000 RBX: 00007f1d19395fa0 RCX: 0000000000000000 [ 269.372835][T15222] RDX: 0000200000000080 RSI: 0000200000000080 RDI: 00007f1d191f20a3 [ 269.372851][T15222] RBP: 00007f1d177cf090 R08: 00007f1d1902e3a0 R09: 0000000000000000 [ 269.372867][T15222] R10: 0000000000000001 R11: 0000200000000080 R12: 0000000000000001 [ 269.372883][T15222] R13: 000000000000003f R14: 0000200000000080 R15: 00007fffb8c409c8 [ 269.372950][T15222] [ 269.372963][T15222] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 269.558418][T15222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.567175][T15222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.606703][T15228] loop3: detected capacity change from 0 to 512 [ 269.615127][T15228] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 269.710322][T15232] loop0: detected capacity change from 0 to 164 [ 269.952333][T15235] loop2: detected capacity change from 0 to 1024 [ 269.959161][T15232] rock: directory entry would overflow storage [ 269.961263][T15235] EXT4-fs: Ignoring removed nobh option [ 269.965449][T15232] rock: sig=0x4f50, size=4, remaining=3 [ 269.970983][T15235] EXT4-fs: inline encryption not supported [ 269.976628][T15232] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 270.003330][T15235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.061879][T15243] loop1: detected capacity change from 0 to 512 [ 270.069825][T15235] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 270.086414][T15243] EXT4-fs: Ignoring removed nobh option [ 270.146197][T15245] IPVS: Error joining to the multicast group [ 270.154373][T15245] 9pnet_fd: Insufficient options for proto=fd [ 270.211724][T15243] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.3847: corrupted inode contents [ 270.260957][T15243] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #3: comm syz.1.3847: mark_inode_dirty error [ 270.288357][T15253] SELinux: syz.0.3851 (15253) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 270.356882][T15255] 9p: Unknown uid 00000000004294967295 [ 270.379338][T15243] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.3847: corrupted inode contents [ 270.397021][T15243] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.3847: mark_inode_dirty error [ 270.405407][T15230] Set syz1 is full, maxelem 65536 reached [ 270.414951][T15243] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3847: Failed to acquire dquot type 0 [ 270.426779][T15243] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3847: corrupted inode contents [ 270.440282][T15243] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.3847: mark_inode_dirty error [ 270.451874][T15243] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3847: corrupted inode contents [ 270.465208][T15243] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.3847: mark_inode_dirty error [ 270.476892][T15243] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3847: corrupted inode contents [ 270.492316][T15243] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 270.501044][T15243] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3847: corrupted inode contents [ 270.517477][T15243] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.3847: mark_inode_dirty error [ 270.529235][T15258] siw: device registration error -23 [ 270.544358][T15243] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 270.562327][T15243] EXT4-fs (loop1): 1 truncate cleaned up [ 270.568825][T15243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.726714][T11551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.739071][T15272] 9pnet: Could not find request transport: fd [ 270.793946][T15276] SELinux: syz.3.3860 (15276) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 271.009090][T12147] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.021588][T15280] IPv6: Can't replace route, no match found [ 271.076674][T15285] loop2: detected capacity change from 0 to 164 [ 271.169191][T15292] rock: directory entry would overflow storage [ 271.175619][T15292] rock: sig=0x4f50, size=4, remaining=3 [ 271.181287][T15292] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 271.286864][T15299] loop2: detected capacity change from 0 to 512 [ 271.301133][T15299] EXT4-fs: Ignoring removed nobh option [ 271.328768][T15299] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.3867: corrupted inode contents [ 271.361117][T15305] loop1: detected capacity change from 0 to 4096 [ 271.365048][T15299] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #3: comm syz.2.3867: mark_inode_dirty error [ 271.395624][T15305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.421417][T15299] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.3867: corrupted inode contents [ 271.444166][T15305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.458591][T15299] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.3867: mark_inode_dirty error [ 271.482278][T15299] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3867: Failed to acquire dquot type 0 [ 271.496500][T15299] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3867: corrupted inode contents [ 271.508650][T15308] wg2: entered promiscuous mode [ 271.511614][T15299] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.3867: mark_inode_dirty error [ 271.513779][T15308] wg2: entered allmulticast mode [ 271.529146][T15299] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3867: corrupted inode contents [ 271.551523][T15299] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.3867: mark_inode_dirty error [ 271.571623][T15310] loop1: detected capacity change from 0 to 1024 [ 271.578318][T15299] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3867: corrupted inode contents [ 271.601825][T15310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.603707][T15299] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 271.625754][ T29] kauditd_printk_skb: 1144 callbacks suppressed [ 271.625770][ T29] audit: type=1400 audit(271.606:31933): avc: denied { mounton } for pid=15309 comm=77DEA105FF07 path="/196/file1/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 271.625995][T15310] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 271.632125][ T29] audit: type=1400 audit(271.606:31934): avc: denied { mount } for pid=15309 comm=77DEA105FF07 name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 271.700703][T12147] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.711934][T15299] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3867: corrupted inode contents [ 271.738260][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 271.745021][ T3035] audit: audit_lost=10 audit_rate_limit=0 audit_backlog_limit=64 [ 271.752798][ T3035] audit: backlog limit exceeded [ 271.757886][ T3035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 271.764445][ T3035] audit: audit_lost=11 audit_rate_limit=0 audit_backlog_limit=64 [ 271.772231][ T3035] audit: backlog limit exceeded [ 271.777859][ T29] audit: type=1400 audit(271.636:31935): avc: denied { relabelto } for pid=15309 comm=77DEA105FF07 name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 271.804335][ T29] audit: type=1400 audit(271.636:31936): avc: denied { associate } for pid=15309 comm=77DEA105FF07 name="/" dev="tmpfs" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 271.804495][T15299] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.3867: mark_inode_dirty error [ 271.845052][T15299] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 271.854560][T15299] EXT4-fs (loop2): 1 truncate cleaned up [ 271.861115][T15299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.964504][T15322] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 272.040500][T15321] loop3: detected capacity change from 0 to 8192 [ 272.206111][T15333] 9pnet_fd: Insufficient options for proto=fd [ 272.285354][T11551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.356342][T15337] Invalid ELF header magic: != ELF [ 272.536624][T15348] Invalid ELF header magic: != ELF [ 272.537489][T15352] IPVS: Error joining to the multicast group [ 272.620240][T15358] loop3: detected capacity change from 0 to 764 [ 272.639659][T15358] FAULT_INJECTION: forcing a failure. [ 272.639659][T15358] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 272.653003][T15358] CPU: 1 UID: 0 PID: 15358 Comm: syz.3.3890 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 272.653040][T15358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 272.653105][T15358] Call Trace: [ 272.653113][T15358] [ 272.653121][T15358] __dump_stack+0x1d/0x30 [ 272.653182][T15358] dump_stack_lvl+0xe8/0x140 [ 272.653201][T15358] dump_stack+0x15/0x1b [ 272.653220][T15358] should_fail_ex+0x265/0x280 [ 272.653258][T15358] should_fail_alloc_page+0xf2/0x100 [ 272.653364][T15358] __alloc_frozen_pages_noprof+0xff/0x360 [ 272.653410][T15358] alloc_pages_mpol+0xb3/0x250 [ 272.653444][T15358] alloc_pages_noprof+0x90/0x130 [ 272.653473][T15358] get_free_pages_noprof+0xc/0x40 [ 272.653586][T15358] isofs_readdir+0x3e/0xb40 [ 272.653610][T15358] ? selinux_file_permission+0x6d/0x320 [ 272.653670][T15358] ? selinux_file_permission+0x1e4/0x320 [ 272.653702][T15358] iterate_dir+0x111/0x330 [ 272.653772][T15358] ? mutex_lock+0xd/0x30 [ 272.653799][T15358] __se_sys_getdents64+0x88/0x1b0 [ 272.653834][T15358] ? __pfx_filldir64+0x10/0x10 [ 272.653873][T15358] __x64_sys_getdents64+0x43/0x50 [ 272.653934][T15358] x64_sys_call+0x1302/0x2fb0 [ 272.653954][T15358] do_syscall_64+0xd2/0x200 [ 272.654025][T15358] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 272.654053][T15358] ? clear_bhb_loop+0x40/0x90 [ 272.654092][T15358] ? clear_bhb_loop+0x40/0x90 [ 272.654120][T15358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.654199][T15358] RIP: 0033:0x7f1fa20ce929 [ 272.654214][T15358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.654235][T15358] RSP: 002b:00007f1fa0737038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 272.654253][T15358] RAX: ffffffffffffffda RBX: 00007f1fa22f5fa0 RCX: 00007f1fa20ce929 [ 272.654265][T15358] RDX: 0000000000001000 RSI: 0000200000000f80 RDI: 0000000000000004 [ 272.654292][T15358] RBP: 00007f1fa0737090 R08: 0000000000000000 R09: 0000000000000000 [ 272.654343][T15358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.654359][T15358] R13: 0000000000000000 R14: 00007f1fa22f5fa0 R15: 00007ffdde4a2258 [ 272.654383][T15358] [ 272.957562][T15367] loop3: detected capacity change from 0 to 764 [ 272.981375][T15368] loop0: detected capacity change from 0 to 512 [ 272.989558][T15368] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 273.002878][T15367] rock: directory entry would overflow storage [ 273.009142][T15367] rock: sig=0x4f50, size=4, remaining=3 [ 273.014760][T15367] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 273.032285][T15370] Invalid ELF header magic: != ELF [ 273.039201][T15367] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 273.064259][T15368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.143447][T15381] SELinux: syz.2.3897 (15381) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 273.203110][T12863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.219585][T15389] loop3: detected capacity change from 0 to 512 [ 273.232472][T15383] IPv6: Can't replace route, no match found [ 273.236308][T15389] EXT4-fs: Ignoring removed nobh option [ 273.266124][T15389] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.3900: corrupted inode contents [ 273.301448][T15394] __nla_validate_parse: 32 callbacks suppressed [ 273.301467][T15394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3901'. [ 273.302067][T15389] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #3: comm syz.3.3900: mark_inode_dirty error [ 273.307872][T15394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3901'. [ 273.315167][T15388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3899'. [ 273.342142][T15394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3901'. [ 273.346040][T15388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3899'. [ 273.358813][T15389] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.3900: corrupted inode contents [ 273.377106][T15389] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.3900: mark_inode_dirty error [ 273.389312][T15400] loop4: detected capacity change from 0 to 512 [ 273.397599][T15389] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3900: Failed to acquire dquot type 0 [ 273.409232][T15394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3901'. [ 273.418284][T15394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3901'. [ 273.429318][T15400] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 273.436552][T15398] IPv6: Can't replace route, no match found [ 273.442536][T15388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3899'. [ 273.444338][T15394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3901'. [ 273.461813][T15389] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3900: corrupted inode contents [ 273.464396][T15402] IPv6: Can't replace route, no match found [ 273.510849][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.518523][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.518756][T15389] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.3900: mark_inode_dirty error [ 273.526130][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.544957][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.552367][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.554180][T15389] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3900: corrupted inode contents [ 273.559900][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.559929][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.559955][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x4 [ 273.560031][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.596003][T15389] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.3900: mark_inode_dirty error [ 273.601614][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.620309][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.627762][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x2 [ 273.633393][T15389] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3900: corrupted inode contents [ 273.635237][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.635267][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.649197][T15389] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 273.654614][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.654646][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.662817][T15389] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3900: corrupted inode contents [ 273.670560][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.670592][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.680138][T15389] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.3900: mark_inode_dirty error [ 273.685402][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.701957][T15389] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 273.704704][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.712925][T15389] EXT4-fs (loop3): 1 truncate cleaned up [ 273.723136][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.723167][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.733299][T15389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.739544][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.739574][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.739602][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.739625][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.739718][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.817735][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.825192][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.832622][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.840167][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.840782][T15394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3901'. [ 273.847600][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.847630][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.847652][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.878823][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.886251][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.893693][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.901124][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.908608][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.916138][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.923674][ T7143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 273.932598][T15412] IPVS: Error joining to the multicast group [ 273.932726][ T7143] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz0] on syz1 [ 273.965913][T15415] fido_id[15415]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 274.128010][T13402] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.196893][T15432] loop4: detected capacity change from 0 to 512 [ 274.208431][T15432] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 274.229032][T15437] pim6reg1: entered promiscuous mode [ 274.234424][T15437] pim6reg1: entered allmulticast mode [ 274.256238][T15432] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 274.266285][T15432] FAT-fs (loop4): Filesystem has been set read-only [ 274.386146][T15442] siw: device registration error -23 [ 274.394217][T15447] loop2: detected capacity change from 0 to 512 [ 274.412509][T15447] EXT4-fs: Ignoring removed orlov option [ 274.429014][T15449] IPVS: Error joining to the multicast group [ 274.462527][T15452] SELinux: syz.4.3922 (15452) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 274.476811][T15447] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 274.487857][T15447] EXT4-fs (loop2): orphan cleanup on readonly fs [ 274.504707][T15447] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3919: bg 0: block 248: padding at end of block bitmap is not set [ 274.524763][T15447] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3919: Failed to acquire dquot type 1 [ 274.545792][T15447] EXT4-fs (loop2): 1 truncate cleaned up [ 274.560110][T15447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 274.655856][T15458] Invalid ELF header magic: != ELF [ 274.708595][T15463] Invalid ELF header magic: != ELF [ 274.740513][T11551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.846359][T15479] loop2: detected capacity change from 0 to 512 [ 274.863485][T15479] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 274.904932][T15479] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 274.914969][T15479] FAT-fs (loop2): Filesystem has been set read-only [ 274.970127][T15471] IPv6: Can't replace route, no match found [ 275.129325][T15489] loop2: detected capacity change from 0 to 256 [ 275.135464][T15490] 9pnet: Could not find request transport: fd [ 275.194901][T15493] SELinux: syz.4.3933 (15493) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 275.230751][T15489] FAT-fs (loop2): codepage cp865 not found [ 275.307340][T15498] IPVS: Error joining to the multicast group [ 275.326703][T15500] loop4: detected capacity change from 0 to 1024 [ 275.335137][T15500] EXT4-fs: Ignoring removed nobh option [ 275.340785][T15500] EXT4-fs: inline encryption not supported [ 275.386218][T15500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.427063][T15500] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 275.515453][T15504] loop2: detected capacity change from 0 to 512 [ 275.522255][T15504] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 275.570402][T12508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.692652][T15512] loop4: detected capacity change from 0 to 512 [ 275.701399][T15512] EXT4-fs: Ignoring removed nobh option [ 275.829283][T15515] 9pnet_fd: Insufficient options for proto=fd [ 275.869238][T15512] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.3939: corrupted inode contents [ 275.883136][T15512] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #3: comm syz.4.3939: mark_inode_dirty error [ 275.894702][T15518] loop2: detected capacity change from 0 to 512 [ 275.902257][T15482] Set syz1 is full, maxelem 65536 reached [ 275.926675][T15518] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 275.987348][T15512] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.3939: corrupted inode contents [ 276.024109][T15518] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 276.034212][T15518] FAT-fs (loop2): Filesystem has been set read-only [ 276.041161][T15512] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.3939: mark_inode_dirty error [ 276.093650][T15512] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3939: Failed to acquire dquot type 0 [ 276.113992][T15512] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3939: corrupted inode contents [ 276.135320][T15512] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.3939: mark_inode_dirty error [ 276.167472][T15512] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3939: corrupted inode contents [ 276.180448][T15529] IPv6: Can't replace route, no match found [ 276.218237][T15512] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.3939: mark_inode_dirty error [ 276.252803][T15535] loop2: detected capacity change from 0 to 4096 [ 276.284867][T15541] 9pnet_fd: Insufficient options for proto=fd [ 276.291917][T15512] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3939: corrupted inode contents [ 276.320693][T15535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.359319][T15512] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 276.384340][T15512] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3939: corrupted inode contents [ 276.410205][T15535] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.441184][T15512] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.3939: mark_inode_dirty error [ 276.469153][T15547] loop0: detected capacity change from 0 to 4096 [ 276.491844][T15512] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 276.514440][T15512] EXT4-fs (loop4): 1 truncate cleaned up [ 276.534303][T15512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.553453][T15547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.593111][T15552] IPVS: Error joining to the multicast group [ 276.637583][T15547] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.676169][ T29] kauditd_printk_skb: 769 callbacks suppressed [ 276.676184][ T29] audit: type=1326 audit(276.656:32700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15551 comm="syz.1.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9838e929 code=0x7ffc0000 [ 276.705608][ T29] audit: type=1326 audit(276.656:32701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15551 comm="syz.1.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9838e929 code=0x7ffc0000 [ 276.729028][ T29] audit: type=1326 audit(276.656:32702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15551 comm="syz.1.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f7b9838e929 code=0x7ffc0000 [ 276.752192][ T29] audit: type=1326 audit(276.656:32703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15551 comm="syz.1.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9838e929 code=0x7ffc0000 [ 276.775349][ T29] audit: type=1326 audit(276.656:32704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15551 comm="syz.1.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9838e929 code=0x7ffc0000 [ 276.883265][T12508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.968615][T15568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15568 comm=syz.4.3962 [ 277.066770][T15580] 9pnet: Could not find request transport: fd [ 277.076761][T15583] IPv6: Can't replace route, no match found [ 277.098754][T15586] netlink: 'syz.4.3971': attribute type 3 has an invalid length. [ 277.133045][ T29] audit: type=1326 audit(277.106:32705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15584 comm="syz.4.3971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1916e929 code=0x7ffc0000 [ 277.156348][ T29] audit: type=1326 audit(277.106:32706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15584 comm="syz.4.3971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1d1916e929 code=0x7ffc0000 [ 277.161249][T15590] SELinux: syz.2.3972 (15590) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 277.179273][ T29] audit: type=1326 audit(277.106:32707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15584 comm="syz.4.3971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1916e929 code=0x7ffc0000 [ 277.216010][ T29] audit: type=1326 audit(277.106:32708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15584 comm="syz.4.3971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d1916e929 code=0x7ffc0000 [ 277.239113][ T29] audit: type=1326 audit(277.106:32709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15584 comm="syz.4.3971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1916e929 code=0x7ffc0000 [ 277.304635][T15592] 9pnet: Could not find request transport: fd [ 277.333902][T15603] 9pnet_fd: Insufficient options for proto=fd [ 277.335060][T15586] loop4: detected capacity change from 0 to 512 [ 277.347707][T15586] EXT4-fs: Mount option(s) incompatible with ext2 [ 277.473078][T15619] IPv6: Can't replace route, no match found [ 277.550398][T15632] netlink: 'syz.4.3984': attribute type 4 has an invalid length. [ 277.562326][T15632] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 277.786749][T15655] loop2: detected capacity change from 0 to 4096 [ 277.798178][T15655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.812140][T15655] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.048833][T15680] siw: device registration error -23 [ 278.122881][T15678] IPv6: Can't replace route, no match found [ 278.152242][T15687] 9pnet_fd: Insufficient options for proto=fd [ 278.202487][T15693] loop2: detected capacity change from 0 to 512 [ 278.209553][T15693] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 278.231314][T15693] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 278.241411][T15693] FAT-fs (loop2): Filesystem has been set read-only [ 278.398789][T15700] loop2: detected capacity change from 0 to 512 [ 278.411767][T15700] EXT4-fs: Ignoring removed nobh option [ 278.435029][T15700] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.4014: corrupted inode contents [ 278.467377][T15700] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #3: comm syz.2.4014: mark_inode_dirty error [ 278.479813][T15700] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.4014: corrupted inode contents [ 278.494444][T15700] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.4014: mark_inode_dirty error [ 278.515878][T15700] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4014: Failed to acquire dquot type 0 [ 278.554950][T15700] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.4014: corrupted inode contents [ 278.568750][T15700] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.4014: mark_inode_dirty error [ 278.588165][T15700] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.4014: corrupted inode contents [ 278.600713][T15716] 9pnet_fd: Insufficient options for proto=fd [ 278.601596][T15700] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.4014: mark_inode_dirty error [ 278.626473][T15700] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.4014: corrupted inode contents [ 278.664890][T15700] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 278.675615][T15721] loop4: detected capacity change from 0 to 164 [ 278.675633][T15700] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.4014: corrupted inode contents [ 278.732745][T15723] siw: device registration error -23 [ 278.732774][T15700] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.4014: mark_inode_dirty error [ 278.751406][T15700] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 278.761800][T15700] EXT4-fs (loop2): 1 truncate cleaned up [ 278.774745][T15700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.800426][T15721] rock: directory entry would overflow storage [ 278.806789][T15721] rock: sig=0x4f50, size=4, remaining=3 [ 278.812479][T15721] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 278.893307][T15737] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 278.911830][T15742] 9pnet: Could not find request transport: fd [ 278.942885][T15749] SELinux: syz.4.4033 (15749) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 278.995726][T11551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.114325][T15767] loop4: detected capacity change from 0 to 164 [ 279.114627][T15759] __nla_validate_parse: 44 callbacks suppressed [ 279.114711][T15759] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4036'. [ 279.120916][T15768] IPv6: Can't replace route, no match found [ 279.131008][T15759] Invalid ELF header magic: != ELF [ 279.226084][T15776] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4044'. [ 279.241494][T15775] rock: directory entry would overflow storage [ 279.246082][T15777] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 279.247831][T15775] rock: sig=0x4f50, size=4, remaining=3 [ 279.262753][T15775] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 279.319911][T15783] 9pnet: Could not find request transport: fd [ 279.342156][T15786] pim6reg1: entered promiscuous mode [ 279.347694][T15786] pim6reg1: entered allmulticast mode [ 279.390520][T15790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4051'. [ 279.417615][T15788] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4049'. [ 279.428876][T15788] Invalid ELF header magic: != ELF [ 279.471312][T15797] FAULT_INJECTION: forcing a failure. [ 279.471312][T15797] name failslab, interval 1, probability 0, space 0, times 0 [ 279.484324][T15797] CPU: 0 UID: 0 PID: 15797 Comm: +}[@ Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 279.484358][T15797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 279.484433][T15797] Call Trace: [ 279.484441][T15797] [ 279.484449][T15797] __dump_stack+0x1d/0x30 [ 279.484475][T15797] dump_stack_lvl+0xe8/0x140 [ 279.484550][T15797] dump_stack+0x15/0x1b [ 279.484572][T15797] should_fail_ex+0x265/0x280 [ 279.484691][T15797] should_failslab+0x8c/0xb0 [ 279.484714][T15797] kmem_cache_alloc_noprof+0x50/0x310 [ 279.484739][T15797] ? security_inode_alloc+0x37/0x100 [ 279.484846][T15797] security_inode_alloc+0x37/0x100 [ 279.484941][T15797] inode_init_always_gfp+0x4b7/0x500 [ 279.484976][T15797] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 279.485025][T15797] alloc_inode+0x58/0x170 [ 279.485056][T15797] new_inode+0x1d/0xe0 [ 279.485074][T15797] shmem_get_inode+0x244/0x750 [ 279.485109][T15797] __shmem_file_setup+0x113/0x210 [ 279.485193][T15797] shmem_file_setup+0x3b/0x50 [ 279.485222][T15797] __se_sys_memfd_create+0x2c3/0x590 [ 279.485265][T15797] __x64_sys_memfd_create+0x31/0x40 [ 279.485295][T15797] x64_sys_call+0x122f/0x2fb0 [ 279.485318][T15797] do_syscall_64+0xd2/0x200 [ 279.485336][T15797] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 279.485395][T15797] ? clear_bhb_loop+0x40/0x90 [ 279.485417][T15797] ? clear_bhb_loop+0x40/0x90 [ 279.485439][T15797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.485484][T15797] RIP: 0033:0x7f57989be929 [ 279.485499][T15797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.485517][T15797] RSP: 002b:00007f5797026e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 279.485536][T15797] RAX: ffffffffffffffda RBX: 0000000000000217 RCX: 00007f57989be929 [ 279.485549][T15797] RDX: 00007f5797026ef0 RSI: 0000000000000000 RDI: 00007f5798a41634 [ 279.485606][T15797] RBP: 0000200000001980 R08: 00007f5797026bb7 R09: 00007f5797026e40 [ 279.485638][T15797] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 279.485650][T15797] R13: 00007f5797026ef0 R14: 00007f5797026eb0 R15: 0000200000000880 [ 279.485671][T15797] [ 279.732501][T15802] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 279.742517][T15799] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4054'. [ 279.762959][T15799] Invalid ELF header magic: != ELF [ 279.797123][T15807] wg2: entered promiscuous mode [ 279.802114][T15807] wg2: entered allmulticast mode [ 279.917003][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4065'. [ 279.984859][T15829] loop2: detected capacity change from 0 to 2048 [ 280.012650][T15829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.035688][T11551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.082668][T15838] wg2: entered promiscuous mode [ 280.086590][T15840] siw: device registration error -23 [ 280.087692][T15838] wg2: entered allmulticast mode [ 280.103405][T15838] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4071'. [ 280.163081][T15850] siw: device registration error -23 [ 280.315859][T15864] loop3: detected capacity change from 0 to 512 [ 280.331499][T15864] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 280.372212][T15864] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 280.382313][T15864] FAT-fs (loop3): Filesystem has been set read-only [ 280.467287][T15879] wg2: left promiscuous mode [ 280.472094][T15879] wg2: left allmulticast mode [ 280.492305][T15879] wg2: entered promiscuous mode [ 280.497304][T15879] wg2: entered allmulticast mode [ 280.540753][T15887] 9pnet_fd: Insufficient options for proto=fd [ 280.559149][T15883] Invalid ELF header magic: != ELF [ 280.662138][T15896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4094'. [ 280.742742][T15902] loop0: detected capacity change from 0 to 736 [ 280.763713][T15902] rock: directory entry would overflow storage [ 280.763723][T15902] rock: sig=0x3b10, size=4, remaining=3 [ 280.885274][T15912] loop2: detected capacity change from 0 to 512 [ 280.902693][T15912] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 280.906157][T15912] EXT4-fs (loop2): 1 truncate cleaned up [ 280.906592][T15912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.908357][T15912] netlink: 'syz.2.4098': attribute type 4 has an invalid length. [ 280.912706][T15912] EXT4-fs error (device loop2): __ext4_iget:5379: inode #12: block 2: comm syz.2.4098: invalid block [ 280.913154][T15912] EXT4-fs error (device loop2): __ext4_iget:5379: inode #12: block 2: comm syz.2.4098: invalid block [ 281.049152][T15918] pim6reg1: entered promiscuous mode [ 281.049175][T15918] pim6reg1: entered allmulticast mode [ 281.094264][T11551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.134504][T15927] 9pnet_fd: Insufficient options for proto=fd [ 281.349261][T15943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4111'. [ 281.358383][T15943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4111'. [ 281.438648][T15943] IPv6: Can't replace route, no match found [ 281.486289][T15950] loop4: detected capacity change from 0 to 512 [ 281.522640][T15950] EXT4-fs: Ignoring removed nobh option [ 281.592216][T15950] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.4112: corrupted inode contents [ 281.605345][T15950] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #3: comm syz.4.4112: mark_inode_dirty error [ 281.617567][T15950] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.4112: corrupted inode contents [ 281.630656][T15950] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.4112: mark_inode_dirty error [ 281.642348][T15950] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4112: Failed to acquire dquot type 0 [ 281.656101][T15950] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.4112: corrupted inode contents [ 281.669296][T15950] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.4112: mark_inode_dirty error [ 281.682002][T15950] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.4112: corrupted inode contents [ 281.695086][T15950] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.4112: mark_inode_dirty error [ 281.706559][T15950] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.4112: corrupted inode contents [ 281.719857][T15950] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 281.728576][T15950] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.4112: corrupted inode contents [ 281.741937][T15950] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.4112: mark_inode_dirty error [ 281.753498][T15950] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 281.791849][T15950] EXT4-fs (loop4): 1 truncate cleaned up [ 281.798142][T15950] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.975172][T15956] siw: device registration error -23 [ 282.051874][ T29] kauditd_printk_skb: 942 callbacks suppressed [ 282.051892][ T29] audit: type=1326 audit(282.026:33646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.3.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa20ce929 code=0x7ffc0000 [ 282.081661][ T29] audit: type=1326 audit(282.026:33647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.3.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fa20ce929 code=0x7ffc0000 [ 282.104687][ T29] audit: type=1326 audit(282.026:33648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.3.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa20ce929 code=0x7ffc0000 [ 282.127719][ T29] audit: type=1326 audit(282.026:33649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.3.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fa20ce929 code=0x7ffc0000 [ 282.150694][ T29] audit: type=1326 audit(282.026:33650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.3.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa20ce929 code=0x7ffc0000 [ 282.173816][ T29] audit: type=1326 audit(282.026:33651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.3.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fa20ce929 code=0x7ffc0000 [ 282.197058][ T29] audit: type=1326 audit(282.026:33652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.3.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa20ce929 code=0x7ffc0000 [ 282.220170][ T29] audit: type=1326 audit(282.026:33653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.3.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fa20ce929 code=0x7ffc0000 [ 282.243390][ T29] audit: type=1326 audit(282.026:33654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.3.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa20ce929 code=0x7ffc0000 [ 282.266389][ T29] audit: type=1326 audit(282.026:33655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.3.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa20ce929 code=0x7ffc0000 [ 282.418318][T12508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.508019][T15952] Set syz1 is full, maxelem 65536 reached [ 282.681948][T15975] loop3: detected capacity change from 0 to 512 [ 282.689834][T15967] Invalid ELF header magic: != ELF [ 282.713384][T15975] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 282.737419][T15973] Invalid ELF header magic: != ELF [ 282.781421][T15975] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 282.791524][T15975] FAT-fs (loop3): Filesystem has been set read-only [ 283.073758][T15964] Set syz1 is full, maxelem 65536 reached [ 283.121516][T15986] siw: device registration error -23 [ 283.139625][T15988] loop0: detected capacity change from 0 to 164 [ 283.229459][T15993] rock: directory entry would overflow storage [ 283.229471][T15993] rock: sig=0x4f50, size=4, remaining=3 [ 283.229515][T15993] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 283.266302][T15996] loop3: detected capacity change from 0 to 4096 [ 283.286094][T15996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.310334][T15996] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.315236][T15994] 9pnet: Could not find request transport: fd [ 283.785201][T16016] siw: device registration error -23 [ 284.057602][T16035] SELinux: syz.2.4144 (16035) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 284.275802][T16037] IPv6: Can't replace route, no match found [ 284.380697][T16053] __nla_validate_parse: 18 callbacks suppressed [ 284.380717][T16053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4150'. [ 284.812181][T16007] syz.3.4132 (16007) used greatest stack depth: 7000 bytes left [ 285.016809][T16058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4151'. [ 285.057818][T16057] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4152'. [ 285.068415][T16057] Invalid ELF header magic: != ELF [ 285.126354][T16061] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4153'. [ 285.243716][T16021] Set syz1 is full, maxelem 65536 reached [ 285.251550][T16061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4153'. [ 285.271687][T16073] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 285.300249][T16074] wg2: left promiscuous mode [ 285.305082][T16074] wg2: left allmulticast mode [ 285.309423][T16077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4159'. [ 285.319179][T16074] wg2: entered promiscuous mode [ 285.324137][T16074] wg2: entered allmulticast mode [ 285.332818][T16074] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4158'. [ 285.613957][T16100] 9pnet: Could not find request transport: fd [ 285.659559][T16107] loop4: detected capacity change from 0 to 512 [ 285.676887][T16098] Invalid ELF header magic: != ELF [ 285.682863][T16107] EXT4-fs: Ignoring removed nobh option [ 285.695929][T16109] wg2: left promiscuous mode [ 285.695946][T16109] wg2: left allmulticast mode [ 285.702251][T16109] wg2: entered promiscuous mode [ 285.702336][T16109] wg2: entered allmulticast mode [ 285.723254][T16107] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.4170: corrupted inode contents [ 285.724394][T16107] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #3: comm syz.4.4170: mark_inode_dirty error [ 285.724834][T16107] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.4170: corrupted inode contents [ 285.725071][T16107] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.4170: mark_inode_dirty error [ 285.731870][T16107] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4170: Failed to acquire dquot type 0 [ 285.866733][T16107] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.4170: corrupted inode contents [ 285.866868][T16107] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.4170: mark_inode_dirty error [ 285.867103][T16107] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.4170: corrupted inode contents [ 285.883571][T16107] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.4170: mark_inode_dirty error [ 285.923918][T16107] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.4170: corrupted inode contents [ 285.924040][T16107] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 285.924198][T16107] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.4170: corrupted inode contents [ 285.937910][T16107] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.4170: mark_inode_dirty error [ 285.938276][T16107] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 285.938753][T16107] EXT4-fs (loop4): 1 truncate cleaned up [ 285.939323][T16107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.114198][T16133] loop2: detected capacity change from 0 to 512 [ 286.114935][T16133] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 286.207490][T16133] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 286.207526][T16133] FAT-fs (loop2): Filesystem has been set read-only [ 286.227145][T16127] loop3: detected capacity change from 0 to 128 [ 286.273160][T16127] syz.3.4176: attempt to access beyond end of device [ 286.273160][T16127] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 286.342189][T12508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.444849][ T6518] kworker/u8:17: attempt to access beyond end of device [ 286.444849][ T6518] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 286.447364][T16142] 9pnet: Could not find request transport: fd [ 286.484937][T16146] IPv6: Can't replace route, no match found [ 286.564376][T16150] siw: device registration error -23 [ 286.677177][T16152] loop3: detected capacity change from 0 to 1024 [ 286.722670][T16152] EXT4-fs: Ignoring removed nobh option [ 286.728400][T16152] EXT4-fs: inline encryption not supported [ 286.816398][T16152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.901363][T16170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4190'. [ 286.916827][T16152] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 287.003583][T16177] wg2: entered promiscuous mode [ 287.008541][T16177] wg2: entered allmulticast mode [ 287.029882][T16177] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4193'. [ 287.212350][T16186] loop3: detected capacity change from 0 to 4096 [ 287.256011][T16189] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4197'. [ 287.271059][T16189] Invalid ELF header magic: != ELF [ 287.432785][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 287.432802][ T29] audit: type=1326 audit(287.406:33951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.2.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57989be929 code=0x7ffc0000 [ 287.462496][ T29] audit: type=1326 audit(287.406:33952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.2.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57989be929 code=0x7ffc0000 [ 287.485946][ T29] audit: type=1326 audit(287.406:33953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.2.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57989be929 code=0x7ffc0000 [ 287.509171][ T29] audit: type=1326 audit(287.406:33954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.2.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57989be929 code=0x7ffc0000 [ 287.532481][ T29] audit: type=1326 audit(287.406:33955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.2.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57989be929 code=0x7ffc0000 [ 287.578019][T16198] Invalid ELF header magic: != ELF [ 287.644570][ T29] audit: type=1326 audit(287.516:33956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.2.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f57989be929 code=0x7ffc0000 [ 287.667583][ T29] audit: type=1326 audit(287.516:33957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.2.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57989be929 code=0x7ffc0000 [ 287.690632][ T29] audit: type=1326 audit(287.516:33958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.2.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57989be929 code=0x7ffc0000 [ 287.708036][T16207] loop4: detected capacity change from 0 to 1024 [ 287.713619][ T29] audit: type=1326 audit(287.616:33959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16206 comm="syz.4.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1916e929 code=0x7ffc0000 [ 287.743047][ T29] audit: type=1326 audit(287.616:33960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16206 comm="syz.4.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1916e929 code=0x7ffc0000 [ 287.767352][T16207] EXT4-fs: Ignoring removed nobh option [ 287.773021][T16207] EXT4-fs: inline encryption not supported [ 287.794700][T16212] loop2: detected capacity change from 0 to 164 [ 287.870389][T16212] rock: directory entry would overflow storage [ 287.876635][T16212] rock: sig=0x4f50, size=4, remaining=3 [ 287.882220][T16212] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 287.911086][T16207] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 287.923623][T16218] wg2: left promiscuous mode [ 287.928297][T16218] wg2: left allmulticast mode [ 287.943796][T16218] wg2: entered promiscuous mode [ 287.948707][T16218] wg2: entered allmulticast mode [ 288.125090][T16227] loop2: detected capacity change from 0 to 4096 [ 288.184473][T16227] EXT4-fs mount: 5 callbacks suppressed [ 288.184489][T16227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.235693][T16227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.280593][T16232] Invalid ELF header magic: != ELF [ 288.414542][T16242] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.517818][T16248] netlink: 'syz.2.4217': attribute type 1 has an invalid length. [ 288.530489][T16248] cgroup: No subsys list or none specified [ 288.547107][T16248] Invalid ELF header magic: != ELF [ 288.556740][T16242] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.636230][T16242] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.758036][T16252] loop0: detected capacity change from 0 to 1024 [ 288.776555][T16252] EXT4-fs: Ignoring removed nobh option [ 288.782199][T16252] EXT4-fs: inline encryption not supported [ 288.865731][T16252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.878186][T16242] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.894800][T16230] Set syz1 is full, maxelem 65536 reached [ 288.948002][T16242] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.967694][T16259] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 288.967807][T16242] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.012064][T16242] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.056321][T16242] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.092598][T16265] SELinux: syz.3.4222 (16265) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 289.093749][T12863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.209396][T16269] loop3: detected capacity change from 0 to 4096 [ 289.237656][T16269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.293271][T16269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.317319][T16280] SELinux: syz.4.4229 (16280) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 289.413716][T16277] Invalid ELF header magic: != ELF [ 289.441006][T16283] __nla_validate_parse: 3 callbacks suppressed [ 289.441030][T16283] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4231'. [ 289.460949][T16283] Invalid ELF header magic: != ELF [ 289.490824][T16292] SELinux: syz.3.4234 (16292) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 289.568752][T16298] IPv6: Can't replace route, no match found [ 289.601981][T16300] pim6reg1: entered promiscuous mode [ 289.607495][T16300] pim6reg1: entered allmulticast mode [ 289.674979][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.682441][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.689991][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.697500][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.705064][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.710257][T16311] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4243'. [ 289.712459][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.725304][T16311] Invalid ELF header magic: != ELF [ 289.728967][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.741760][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x4 [ 289.742101][T16310] 9pnet_fd: Insufficient options for proto=fd [ 289.749383][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.762856][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.770330][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.777779][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x2 [ 289.785479][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.793044][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.800492][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.807983][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.815492][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.819568][T16314] IPv6: Can't replace route, no match found [ 289.822937][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.822968][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.843914][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.851334][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.858931][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.866385][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.873897][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.881335][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.888851][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.896309][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.904592][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.912046][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.919564][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.927156][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.934621][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.942040][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.949577][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.957082][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.964536][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.971968][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.979552][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.987003][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 289.994491][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 290.001931][ T2959] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 290.012881][ T2959] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz0] on syz1 [ 290.026817][T16320] FAULT_INJECTION: forcing a failure. [ 290.026817][T16320] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 290.040203][T16320] CPU: 0 UID: 0 PID: 16320 Comm: syz.3.4246 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 290.040231][T16320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.040246][T16320] Call Trace: [ 290.040253][T16320] [ 290.040262][T16320] __dump_stack+0x1d/0x30 [ 290.040310][T16320] dump_stack_lvl+0xe8/0x140 [ 290.040334][T16320] dump_stack+0x15/0x1b [ 290.040355][T16320] should_fail_ex+0x265/0x280 [ 290.040393][T16320] should_fail_alloc_page+0xf2/0x100 [ 290.040485][T16320] __alloc_frozen_pages_noprof+0xff/0x360 [ 290.040518][T16320] alloc_pages_mpol+0xb3/0x250 [ 290.040547][T16320] alloc_pages_noprof+0x90/0x130 [ 290.040635][T16320] get_zeroed_page_noprof+0x1a/0x40 [ 290.040818][T16320] simple_transaction_get+0x4c/0x130 [ 290.040855][T16320] selinux_transaction_write+0x9d/0x110 [ 290.040902][T16320] ? __pfx_selinux_transaction_write+0x10/0x10 [ 290.040935][T16320] vfs_write+0x269/0x8e0 [ 290.040968][T16320] ? __rcu_read_unlock+0x4f/0x70 [ 290.041024][T16320] ? __fget_files+0x184/0x1c0 [ 290.041044][T16320] ksys_write+0xda/0x1a0 [ 290.041104][T16320] __x64_sys_write+0x40/0x50 [ 290.041168][T16320] x64_sys_call+0x2cdd/0x2fb0 [ 290.041195][T16320] do_syscall_64+0xd2/0x200 [ 290.041222][T16320] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 290.041255][T16320] ? clear_bhb_loop+0x40/0x90 [ 290.041279][T16320] ? clear_bhb_loop+0x40/0x90 [ 290.041300][T16320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.041401][T16320] RIP: 0033:0x7f1fa20ce929 [ 290.041416][T16320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.041433][T16320] RSP: 002b:00007f1fa0737038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 290.041524][T16320] RAX: ffffffffffffffda RBX: 00007f1fa22f5fa0 RCX: 00007f1fa20ce929 [ 290.041536][T16320] RDX: 0000000000000056 RSI: 00002000000004c0 RDI: 0000000000000005 [ 290.041548][T16320] RBP: 00007f1fa0737090 R08: 0000000000000000 R09: 0000000000000000 [ 290.041560][T16320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.041572][T16320] R13: 0000000000000000 R14: 00007f1fa22f5fa0 R15: 00007ffdde4a2258 [ 290.041594][T16320] [ 290.277037][T16324] fido_id[16324]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 290.316468][T16327] SELinux: syz.0.4248 (16327) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 290.372679][T16331] IPv6: Can't replace route, no match found [ 290.436180][T16333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4251'. [ 290.445261][T16333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4251'. [ 290.475824][T16333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4251'. [ 290.509333][T16333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4251'. [ 290.518406][T16333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4251'. [ 290.540220][T16337] IPv6: Can't replace route, no match found [ 290.546780][T16333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4251'. [ 290.568873][T16339] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4253'. [ 290.580577][T16333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4251'. [ 290.597306][T16341] loop3: detected capacity change from 0 to 512 [ 290.604390][T16341] ext4: Unknown parameter 'measure' [ 290.615375][T16341] syz.3.4254 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 290.683347][T16347] wg2: left promiscuous mode [ 290.688120][T16347] wg2: left allmulticast mode [ 290.722485][T16347] wg2: entered promiscuous mode [ 290.727434][T16347] wg2: entered allmulticast mode [ 290.759916][T16354] FAULT_INJECTION: forcing a failure. [ 290.759916][T16354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.773176][T16354] CPU: 0 UID: 0 PID: 16354 Comm: syz.0.4259 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 290.773211][T16354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.773279][T16354] Call Trace: [ 290.773285][T16354] [ 290.773295][T16354] __dump_stack+0x1d/0x30 [ 290.773320][T16354] dump_stack_lvl+0xe8/0x140 [ 290.773355][T16354] dump_stack+0x15/0x1b [ 290.773375][T16354] should_fail_ex+0x265/0x280 [ 290.773405][T16354] should_fail+0xb/0x20 [ 290.773430][T16354] should_fail_usercopy+0x1a/0x20 [ 290.773464][T16354] _copy_from_user+0x1c/0xb0 [ 290.773607][T16354] dev_ethtool+0x52/0x1650 [ 290.773627][T16354] ? full_name_hash+0x92/0xe0 [ 290.773655][T16354] ? strcmp+0x22/0x50 [ 290.773681][T16354] dev_ioctl+0x2e0/0x960 [ 290.773704][T16354] sock_do_ioctl+0x197/0x220 [ 290.773742][T16354] sock_ioctl+0x41b/0x610 [ 290.773763][T16354] ? __pfx_sock_ioctl+0x10/0x10 [ 290.773795][T16354] __se_sys_ioctl+0xcb/0x140 [ 290.773868][T16354] __x64_sys_ioctl+0x43/0x50 [ 290.773924][T16354] x64_sys_call+0x19a8/0x2fb0 [ 290.773951][T16354] do_syscall_64+0xd2/0x200 [ 290.773967][T16354] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 290.773992][T16354] ? clear_bhb_loop+0x40/0x90 [ 290.774012][T16354] ? clear_bhb_loop+0x40/0x90 [ 290.774161][T16354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.774195][T16354] RIP: 0033:0x7f89e56ce929 [ 290.774212][T16354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.774235][T16354] RSP: 002b:00007f89e3d37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.774257][T16354] RAX: ffffffffffffffda RBX: 00007f89e58f5fa0 RCX: 00007f89e56ce929 [ 290.774272][T16354] RDX: 0000200000000100 RSI: 0000000000008946 RDI: 0000000000000004 [ 290.774286][T16354] RBP: 00007f89e3d37090 R08: 0000000000000000 R09: 0000000000000000 [ 290.774314][T16354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.774329][T16354] R13: 0000000000000000 R14: 00007f89e58f5fa0 R15: 00007ffc062e6b78 [ 290.774354][T16354] [ 291.081745][T16366] Invalid ELF header magic: != ELF [ 291.180877][T16375] loop0: detected capacity change from 0 to 164 [ 291.240706][T16378] 9pnet: Could not find request transport: fd [ 291.245372][T16382] rock: directory entry would overflow storage [ 291.253394][T16382] rock: sig=0x4f50, size=4, remaining=3 [ 291.259050][T16382] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 291.396383][T16391] IPv6: Can't replace route, no match found [ 291.515684][T16398] Invalid ELF header magic: != ELF [ 291.517302][T16400] loop0: detected capacity change from 0 to 4096 [ 291.530009][T16400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.530837][T16400] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.540710][T16406] wg2: left promiscuous mode [ 291.540731][T16406] wg2: left allmulticast mode [ 291.543133][T16406] wg2: entered promiscuous mode [ 291.543152][T16406] wg2: entered allmulticast mode [ 291.654778][T16416] Invalid ELF header magic: != ELF [ 291.945218][T16431] FAULT_INJECTION: forcing a failure. [ 291.945218][T16431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.945326][T16431] CPU: 0 UID: 0 PID: 16431 Comm: syz.0.4281 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 291.945368][T16431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 291.945384][T16431] Call Trace: [ 291.945393][T16431] [ 291.945401][T16431] __dump_stack+0x1d/0x30 [ 291.945474][T16431] dump_stack_lvl+0xe8/0x140 [ 291.945502][T16431] dump_stack+0x15/0x1b [ 291.945584][T16431] should_fail_ex+0x265/0x280 [ 291.945627][T16431] should_fail+0xb/0x20 [ 291.945663][T16431] should_fail_usercopy+0x1a/0x20 [ 291.945727][T16431] _copy_from_user+0x1c/0xb0 [ 291.945761][T16431] get_nodes+0x1d9/0x290 [ 291.945807][T16431] __se_sys_mbind+0x108/0xac0 [ 291.945842][T16431] ? vfs_write+0x75e/0x8e0 [ 291.945891][T16431] ? __fget_files+0x184/0x1c0 [ 291.945919][T16431] ? fput+0x8f/0xc0 [ 291.945953][T16431] __x64_sys_mbind+0x78/0x90 [ 291.945988][T16431] x64_sys_call+0x14af/0x2fb0 [ 291.946069][T16431] do_syscall_64+0xd2/0x200 [ 291.946123][T16431] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 291.946167][T16431] ? clear_bhb_loop+0x40/0x90 [ 291.946196][T16431] ? clear_bhb_loop+0x40/0x90 [ 291.946287][T16431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.946315][T16431] RIP: 0033:0x7f89e56ce929 [ 291.946337][T16431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.946361][T16431] RSP: 002b:00007f89e3cf5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 291.946387][T16431] RAX: ffffffffffffffda RBX: 00007f89e58f6160 RCX: 00007f89e56ce929 [ 291.946405][T16431] RDX: 0000000000004003 RSI: 0000000000004000 RDI: 0000200000000000 [ 291.946422][T16431] RBP: 00007f89e3cf5090 R08: 0000000000000006 R09: 0000000000000002 [ 291.946482][T16431] R10: 0000200000000c00 R11: 0000000000000246 R12: 0000000000000001 [ 291.946540][T16431] R13: 0000000000000000 R14: 00007f89e58f6160 R15: 00007ffc062e6b78 [ 291.946567][T16431] [ 292.103756][T16445] wg2: left promiscuous mode [ 292.103778][T16445] wg2: left allmulticast mode [ 292.111107][T16445] wg2: entered promiscuous mode [ 292.111124][T16445] wg2: entered allmulticast mode [ 292.157096][T16446] Invalid ELF header magic: != ELF [ 292.333384][T16460] IPVS: Error joining to the multicast group [ 292.343470][T16460] 9pnet_fd: Insufficient options for proto=fd [ 292.481477][ T29] kauditd_printk_skb: 394 callbacks suppressed [ 292.481497][ T29] audit: type=1326 audit(292.436:34355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16462 comm="syz.2.4301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57989be929 code=0x7ffc0000 [ 292.510678][ T29] audit: type=1326 audit(292.436:34356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16462 comm="syz.2.4301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57989be929 code=0x7ffc0000 [ 292.531619][T16472] Invalid ELF header magic: != ELF [ 292.533741][ T29] audit: type=1326 audit(292.436:34357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16462 comm="syz.2.4301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57989be929 code=0x7ffc0000 [ 292.562162][ T29] audit: type=1326 audit(292.436:34358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16462 comm="syz.2.4301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f57989be929 code=0x7ffc0000 [ 292.586235][ T29] audit: type=1326 audit(292.506:34359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16462 comm="syz.2.4301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57989be929 code=0x7ffc0000 [ 292.609303][ T29] audit: type=1326 audit(292.506:34360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16462 comm="syz.2.4301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57989be929 code=0x7ffc0000 [ 292.674926][T16476] wg2: left promiscuous mode [ 292.679595][T16476] wg2: left allmulticast mode [ 292.722067][T16476] wg2: entered promiscuous mode [ 292.727153][T16476] wg2: entered allmulticast mode [ 292.727718][T16485] 9pnet_fd: Insufficient options for proto=fd [ 292.846426][ T29] audit: type=1400 audit(292.826:34361): avc: denied { create } for pid=16494 comm="syz.2.4313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 292.884196][ T29] audit: type=1326 audit(292.846:34362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16494 comm="syz.2.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57989be929 code=0x7ffc0000 [ 292.884281][ T29] audit: type=1326 audit(292.846:34363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16494 comm="syz.2.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57989be929 code=0x7ffc0000 [ 292.884362][ T29] audit: type=1326 audit(292.846:34364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16494 comm="syz.2.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57989be929 code=0x7ffc0000 [ 292.935722][T16493] loop0: detected capacity change from 0 to 1024 [ 292.966163][T16493] EXT4-fs: Ignoring removed nobh option [ 292.966216][T16493] EXT4-fs: inline encryption not supported [ 292.975521][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.975557][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.975586][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.975615][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.975660][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.975681][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.975781][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.975806][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x4 [ 292.975834][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.975870][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.975900][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.975927][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x2 [ 292.975953][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.975974][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.975995][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.976055][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.976076][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.976100][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.976128][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.976155][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.976240][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.976260][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.976283][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.976312][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.976340][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.976505][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.976527][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.976548][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.976570][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.976597][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.976623][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.976650][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.976675][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.976704][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.976731][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.976759][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.976785][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.976819][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.976850][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.976921][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.976945][ T3429] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 292.977555][ T3429] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz0] on syz1 [ 293.025568][T16493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.038041][T16502] fido_id[16502]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 293.078574][T16493] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 293.525746][T12863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.588242][T16533] SELinux: syz.4.4327 (16533) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 293.668299][T16540] loop0: detected capacity change from 0 to 164 [ 293.728254][T16545] Invalid ELF header magic: != ELF [ 293.737058][T16553] rock: directory entry would overflow storage [ 293.743438][T16553] rock: sig=0x4f50, size=4, remaining=3 [ 293.749082][T16553] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 293.904104][T16565] netlink: 'syz.3.4338': attribute type 1 has an invalid length. [ 293.922427][T16565] cgroup: No subsys list or none specified [ 293.929795][T16565] Invalid ELF header magic: != ELF [ 294.042471][T16577] loop4: detected capacity change from 0 to 512 [ 294.046147][T16577] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 294.113492][T16577] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 294.113622][T16577] FAT-fs (loop4): Filesystem has been set read-only [ 294.141393][T16568] IPv6: Can't replace route, no match found [ 294.296489][T16588] loop4: detected capacity change from 0 to 512 [ 294.317500][T16588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.319742][T16588] EXT4-fs warning (device loop4): verify_group_input:156: Last group not full [ 294.666151][T16588] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.4349: iget: bad i_size value: 2533274857506816 [ 294.915454][T12508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.930314][T16603] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 294.934012][T16584] Set syz1 is full, maxelem 65536 reached [ 294.947691][T16604] wg2: left promiscuous mode [ 294.947713][T16604] wg2: left allmulticast mode [ 294.960911][T16604] wg2: entered promiscuous mode [ 294.960931][T16604] wg2: entered allmulticast mode [ 295.034662][T16606] __nla_validate_parse: 38 callbacks suppressed [ 295.034680][T16606] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4355'. [ 295.042331][T16606] Invalid ELF header magic: != ELF [ 295.094039][T16613] 9pnet: Could not find request transport: fd [ 295.119414][T16612] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4358'. [ 295.120951][T16612] Invalid ELF header magic: != ELF [ 295.229550][T16616] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4359'. [ 295.230943][T16616] Invalid ELF header magic: != ELF [ 295.361649][T16622] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4361'. [ 295.363337][T16622] Invalid ELF header magic: != ELF [ 295.388499][T16628] siw: device registration error -23 [ 295.453235][T16633] loop4: detected capacity change from 0 to 1024 [ 295.454350][T16633] EXT4-fs: Ignoring removed nobh option [ 295.465721][T16633] EXT4-fs: inline encryption not supported [ 295.529211][T16633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.556060][T16633] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 295.602745][T16641] IPv6: Can't replace route, no match found [ 295.639113][T16643] loop2: detected capacity change from 0 to 164 [ 295.646213][T12508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.711744][T16647] loop0: detected capacity change from 0 to 512 [ 295.720941][T16647] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 295.734093][T16650] rock: directory entry would overflow storage [ 295.740339][T16650] rock: sig=0x4f50, size=4, remaining=3 [ 295.745979][T16650] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 295.766510][T16647] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 295.768318][T16652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4374'. [ 295.776629][T16647] FAT-fs (loop0): Filesystem has been set read-only [ 295.793231][T16652] FAULT_INJECTION: forcing a failure. [ 295.793231][T16652] name failslab, interval 1, probability 0, space 0, times 0 [ 295.806056][T16652] CPU: 0 UID: 0 PID: 16652 Comm: syz.3.4374 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 295.806099][T16652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 295.806112][T16652] Call Trace: [ 295.806119][T16652] [ 295.806126][T16652] __dump_stack+0x1d/0x30 [ 295.806147][T16652] dump_stack_lvl+0xe8/0x140 [ 295.806165][T16652] dump_stack+0x15/0x1b [ 295.806227][T16652] should_fail_ex+0x265/0x280 [ 295.806257][T16652] should_failslab+0x8c/0xb0 [ 295.806284][T16652] kmem_cache_alloc_node_noprof+0x57/0x320 [ 295.806369][T16652] ? __alloc_skb+0x101/0x320 [ 295.806399][T16652] __alloc_skb+0x101/0x320 [ 295.806434][T16652] netlink_alloc_large_skb+0xba/0xf0 [ 295.806473][T16652] netlink_sendmsg+0x3cf/0x6b0 [ 295.806523][T16652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.806548][T16652] __sock_sendmsg+0x145/0x180 [ 295.806579][T16652] ____sys_sendmsg+0x31e/0x4e0 [ 295.806649][T16652] ___sys_sendmsg+0x17b/0x1d0 [ 295.806728][T16652] __x64_sys_sendmsg+0xd4/0x160 [ 295.806775][T16652] x64_sys_call+0x2999/0x2fb0 [ 295.806799][T16652] do_syscall_64+0xd2/0x200 [ 295.806816][T16652] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 295.806848][T16652] ? clear_bhb_loop+0x40/0x90 [ 295.806937][T16652] ? clear_bhb_loop+0x40/0x90 [ 295.806967][T16652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.806992][T16652] RIP: 0033:0x7f1fa20ce929 [ 295.807011][T16652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.807031][T16652] RSP: 002b:00007f1fa0737038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.807061][T16652] RAX: ffffffffffffffda RBX: 00007f1fa22f5fa0 RCX: 00007f1fa20ce929 [ 295.807078][T16652] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000009 [ 295.807094][T16652] RBP: 00007f1fa0737090 R08: 0000000000000000 R09: 0000000000000000 [ 295.807110][T16652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.807125][T16652] R13: 0000000000000000 R14: 00007f1fa22f5fa0 R15: 00007ffdde4a2258 [ 295.807195][T16652] [ 295.828022][T16654] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4375'. [ 295.890595][T16656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4376'. [ 296.007325][T16659] Invalid ELF header magic: != ELF [ 296.011804][T16656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4376'. [ 296.047223][T16656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4376'. [ 296.087300][T16662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4377'. [ 296.115271][T16662] IPVS: Error joining to the multicast group [ 296.141550][T16656] IPv6: Can't replace route, no match found [ 296.191707][T16673] SELinux: syz.0.4381 (16673) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 296.236196][T16677] IPv6: Can't replace route, no match found [ 296.270214][T16681] 9pnet_fd: Insufficient options for proto=fd [ 296.372175][T16695] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 296.388876][T16690] Invalid ELF header magic: != ELF [ 296.425039][T16699] Invalid ELF header magic: != ELF [ 296.442734][T16701] siw: device registration error -23 [ 296.559629][T16712] IPv6: Can't replace route, no match found [ 296.572635][T16703] IPv6: Can't replace route, no match found [ 296.794453][T16726] Invalid ELF header magic: != ELF [ 296.832235][T16728] loop3: detected capacity change from 0 to 4096 [ 296.850344][T16728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.850883][T16728] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.005622][T16738] netlink: 'syz.3.4409': attribute type 1 has an invalid length. [ 297.005907][T16738] cgroup: No subsys list or none specified [ 297.218491][T16743] IPv6: Can't replace route, no match found [ 297.300701][T16749] loop0: detected capacity change from 0 to 4096 [ 297.354823][T16749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.381286][T16749] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.454164][T16762] Invalid ELF header magic: != ELF [ 297.508822][ T29] kauditd_printk_skb: 396 callbacks suppressed [ 297.508838][ T29] audit: type=1326 audit(297.486:34761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.1.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9838e929 code=0x7ffc0000 [ 297.553601][T16766] loop4: detected capacity change from 0 to 4096 [ 297.564101][ T29] audit: type=1326 audit(297.496:34762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.1.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7b9838e929 code=0x7ffc0000 [ 297.587184][ T29] audit: type=1326 audit(297.496:34763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.1.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9838e929 code=0x7ffc0000 [ 297.610360][ T29] audit: type=1326 audit(297.496:34764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.1.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9838e929 code=0x7ffc0000 [ 297.637109][ T29] audit: type=1326 audit(297.586:34765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.1.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7b983907bc code=0x7ffc0000 [ 297.660201][ T29] audit: type=1326 audit(297.586:34766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.1.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9838e929 code=0x7ffc0000 [ 297.683357][ T29] audit: type=1326 audit(297.586:34767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.1.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9838e929 code=0x7ffc0000 [ 297.694754][T16766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.706359][ T29] audit: type=1326 audit(297.586:34768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.1.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b9838e929 code=0x7ffc0000 [ 297.706422][ T29] audit: type=1326 audit(297.586:34769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.1.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9838e929 code=0x7ffc0000 [ 297.764983][ T29] audit: type=1326 audit(297.586:34770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.1.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9838e929 code=0x7ffc0000 [ 297.789281][T16776] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 297.804095][T16766] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.838218][T16768] IPv6: Can't replace route, no match found [ 297.963129][T16791] 9pnet: Could not find request transport: fd [ 297.989201][T16794] 9pnet: Could not find request transport: fd [ 297.990974][T16786] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 298.089819][T16803] Invalid ELF header magic: != ELF [ 298.310346][T16816] loop0: detected capacity change from 0 to 4096 [ 298.320746][T16816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.337010][T16816] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.441898][T16830] IPVS: Error joining to the multicast group [ 298.451093][T16830] 9pnet_fd: Insufficient options for proto=fd [ 298.521324][T16834] Invalid ELF header magic: != ELF [ 298.544278][T16838] Invalid ELF header magic: != ELF [ 298.598156][T16842] bond_slave_0: entered promiscuous mode [ 298.603927][T16842] bond_slave_1: entered promiscuous mode [ 298.620915][T16845] siw: device registration error -23 [ 298.666938][T16851] wg2: entered promiscuous mode [ 298.672300][T16851] wg2: entered allmulticast mode [ 298.755721][T16863] SELinux: syz.4.4452 (16863) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 298.804155][T16870] loop2: detected capacity change from 0 to 164 [ 298.833025][T16873] loop4: detected capacity change from 0 to 512 [ 298.841778][T16875] netlink: '+}[@': attribute type 1 has an invalid length. [ 298.899425][T16873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.913382][T16877] rock: directory entry would overflow storage [ 298.919667][T16877] rock: sig=0x4f50, size=4, remaining=3 [ 298.920084][T16873] EXT4-fs warning (device loop4): verify_group_input:156: Last group not full [ 298.925309][T16877] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 299.190550][T16873] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.4456: iget: bad i_size value: 2533274857506816 [ 299.216269][T16899] IPVS: Error joining to the multicast group [ 299.240480][T16900] 9pnet: Could not find request transport: fd [ 299.256384][T16898] loop3: detected capacity change from 0 to 4096 [ 299.287827][T16898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.316804][T16898] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.327599][T12508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.520661][T16911] IPv6: Can't replace route, no match found [ 299.579970][T16927] loop4: detected capacity change from 0 to 164 [ 299.651861][T16927] rock: directory entry would overflow storage [ 299.658166][T16927] rock: sig=0x4f50, size=4, remaining=3 [ 299.663786][T16927] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 299.723852][T16935] SELinux: syz.4.4475 (16935) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 299.749215][T16938] wg2: left promiscuous mode [ 299.753943][T16938] wg2: left allmulticast mode [ 299.764658][T16938] wg2: entered promiscuous mode [ 299.769787][T16938] wg2: entered allmulticast mode [ 299.805794][T16946] siw: device registration error -23 [ 299.961199][T16955] FAULT_INJECTION: forcing a failure. [ 299.961199][T16955] name failslab, interval 1, probability 0, space 0, times 0 [ 299.961250][T16955] CPU: 0 UID: 0 PID: 16955 Comm: syz.2.4482 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 299.961360][T16955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.961376][T16955] Call Trace: [ 299.961385][T16955] [ 299.961395][T16955] __dump_stack+0x1d/0x30 [ 299.961421][T16955] dump_stack_lvl+0xe8/0x140 [ 299.961482][T16955] dump_stack+0x15/0x1b [ 299.961563][T16955] should_fail_ex+0x265/0x280 [ 299.961600][T16955] should_failslab+0x8c/0xb0 [ 299.961810][T16955] kmem_cache_alloc_node_noprof+0x57/0x320 [ 299.961851][T16955] ? dup_task_struct+0x70/0x6a0 [ 299.961931][T16955] dup_task_struct+0x70/0x6a0 [ 299.961963][T16955] ? _parse_integer+0x27/0x40 [ 299.962001][T16955] copy_process+0x399/0x1f90 [ 299.962076][T16955] ? kstrtouint+0x76/0xc0 [ 299.962198][T16955] ? kstrtouint_from_user+0x9f/0xf0 [ 299.962239][T16955] ? __rcu_read_unlock+0x4f/0x70 [ 299.962273][T16955] kernel_clone+0x16c/0x5b0 [ 299.962362][T16955] ? vfs_write+0x75e/0x8e0 [ 299.962407][T16955] __x64_sys_clone+0xe6/0x120 [ 299.962507][T16955] x64_sys_call+0x2c59/0x2fb0 [ 299.962537][T16955] do_syscall_64+0xd2/0x200 [ 299.962572][T16955] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 299.962637][T16955] ? clear_bhb_loop+0x40/0x90 [ 299.962684][T16955] ? clear_bhb_loop+0x40/0x90 [ 299.962714][T16955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.962743][T16955] RIP: 0033:0x7f57989be929 [ 299.962770][T16955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.962811][T16955] RSP: 002b:00007f5797026fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 299.962837][T16955] RAX: ffffffffffffffda RBX: 00007f5798be5fa0 RCX: 00007f57989be929 [ 299.962855][T16955] RDX: 0000000000000000 RSI: 0000000000009000 RDI: 0000000004021400 [ 299.962873][T16955] RBP: 00007f5797027090 R08: 0000000000000000 R09: 0000000000000000 [ 299.962890][T16955] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 299.962906][T16955] R13: 0000000000000000 R14: 00007f5798be5fa0 R15: 00007ffc3e823c98 [ 299.962960][T16955] [ 300.022912][T16959] loop0: detected capacity change from 0 to 1024 [ 300.023647][T16959] EXT4-fs: Ignoring removed nobh option [ 300.023669][T16959] EXT4-fs: inline encryption not supported [ 300.055810][T16962] siw: device registration error -23 [ 300.064855][T16959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.164644][T12863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.233645][T16974] wg2: left promiscuous mode [ 300.233670][T16974] wg2: left allmulticast mode [ 300.237484][T16974] __nla_validate_parse: 60 callbacks suppressed [ 300.237499][T16974] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4489'. [ 300.323426][T16981] pim6reg1: entered promiscuous mode [ 300.323462][T16981] pim6reg1: entered allmulticast mode [ 300.404496][T16979] FAULT_INJECTION: forcing a failure. [ 300.404496][T16979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.447537][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4493'. [ 300.455099][T16979] CPU: 1 UID: 0 PID: 16979 Comm: syz.2.4488 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 300.455142][T16979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 300.455161][T16979] Call Trace: [ 300.455172][T16979] [ 300.455182][T16979] __dump_stack+0x1d/0x30 [ 300.455213][T16979] dump_stack_lvl+0xe8/0x140 [ 300.455318][T16979] dump_stack+0x15/0x1b [ 300.455342][T16979] should_fail_ex+0x265/0x280 [ 300.455382][T16979] should_fail+0xb/0x20 [ 300.455418][T16979] should_fail_usercopy+0x1a/0x20 [ 300.455467][T16979] _copy_to_user+0x20/0xa0 [ 300.455495][T16979] simple_read_from_buffer+0xb5/0x130 [ 300.455657][T16979] proc_fail_nth_read+0x100/0x140 [ 300.455764][T16979] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.455809][T16979] vfs_read+0x19d/0x6f0 [ 300.455850][T16979] ? __rcu_read_unlock+0x4f/0x70 [ 300.455991][T16979] ? __fget_files+0x184/0x1c0 [ 300.456020][T16979] ksys_read+0xda/0x1a0 [ 300.456064][T16979] __x64_sys_read+0x40/0x50 [ 300.456200][T16979] x64_sys_call+0x2d77/0x2fb0 [ 300.456230][T16979] do_syscall_64+0xd2/0x200 [ 300.456293][T16979] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 300.456337][T16979] ? clear_bhb_loop+0x40/0x90 [ 300.456367][T16979] ? clear_bhb_loop+0x40/0x90 [ 300.456390][T16979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.456416][T16979] RIP: 0033:0x7f57989bd33c [ 300.456434][T16979] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 300.456460][T16979] RSP: 002b:00007f5797006030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 300.456549][T16979] RAX: ffffffffffffffda RBX: 00007f5798be6080 RCX: 00007f57989bd33c [ 300.456567][T16979] RDX: 000000000000000f RSI: 00007f57970060a0 RDI: 0000000000000006 [ 300.456585][T16979] RBP: 00007f5797006090 R08: 0000000000000000 R09: 0000000000000000 [ 300.456604][T16979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.456657][T16979] R13: 0000000000000001 R14: 00007f5798be6080 R15: 00007ffc3e823c98 [ 300.456741][T16979] [ 300.675488][T16990] 9pnet: Could not find request transport: fd [ 300.682910][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4493'. [ 300.683232][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4493'. [ 300.737158][T16986] IPv6: Can't replace route, no match found [ 300.783095][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4493'. [ 300.792076][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4493'. [ 300.890727][T17000] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 300.904968][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4493'. [ 300.919869][T17001] loop4: detected capacity change from 0 to 512 [ 300.955428][T17001] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 300.996279][T17001] EXT4-fs (loop4): mount failed [ 301.027046][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4493'. [ 301.036107][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4493'. [ 301.045382][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4493'. [ 301.296757][T17013] SELinux: syz.4.4500 (17013) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 301.344773][T16983] Set syz1 is full, maxelem 65536 reached [ 301.411859][T17022] IPVS: Error joining to the multicast group [ 301.498690][T17027] siw: device registration error -23 [ 301.618273][T17033] loop4: detected capacity change from 0 to 1024 [ 301.619313][T17033] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 301.635954][T17033] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 301.670906][T17033] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 301.689085][T17033] EXT4-fs (loop4): orphan cleanup on readonly fs [ 301.703652][T17033] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.4510: Inode bitmap for bg 0 marked uninitialized [ 301.715304][T17033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 301.972284][T12508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.054582][T17051] 9pnet: Could not find request transport: fd [ 302.407493][T17065] Invalid ELF header magic: != ELF [ 302.449781][T17068] 9pnet: Could not find request transport: fd [ 302.474582][T17045] Set syz1 is full, maxelem 65536 reached [ 302.517543][ T29] kauditd_printk_skb: 529 callbacks suppressed [ 302.517558][ T29] audit: type=1326 audit(302.496:35297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.4.4519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d191658e7 code=0x7ffc0000 [ 302.573669][T17077] IPv6: Can't replace route, no match found [ 302.614935][ T29] audit: type=1326 audit(302.536:35298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.4.4519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d1910ab19 code=0x7ffc0000 [ 302.637922][ T29] audit: type=1326 audit(302.536:35299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.4.4519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d191658e7 code=0x7ffc0000 [ 302.660909][ T29] audit: type=1326 audit(302.536:35300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.4.4519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d1910ab19 code=0x7ffc0000 [ 302.683843][ T29] audit: type=1326 audit(302.536:35301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.4.4519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1d1916e929 code=0x7ffc0000 [ 302.706770][ T29] audit: type=1326 audit(302.536:35302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.4.4519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d191658e7 code=0x7ffc0000 [ 302.729679][ T29] audit: type=1326 audit(302.536:35303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.4.4519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d1910ab19 code=0x7ffc0000 [ 302.752635][ T29] audit: type=1326 audit(302.536:35304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.4.4519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1d1916e929 code=0x7ffc0000 [ 302.775529][ T29] audit: type=1326 audit(302.546:35305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.4.4519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d191658e7 code=0x7ffc0000 [ 302.798796][ T29] audit: type=1326 audit(302.546:35306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.4.4519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d1910ab19 code=0x7ffc0000 [ 302.853448][T17086] loop3: detected capacity change from 0 to 512 [ 302.896782][T17086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.911689][T17086] EXT4-fs warning (device loop3): verify_group_input:156: Last group not full [ 302.966882][T17095] loop4: detected capacity change from 0 to 164 [ 303.051049][T17102] rock: directory entry would overflow storage [ 303.057331][T17102] rock: sig=0x4f50, size=4, remaining=3 [ 303.063054][T17102] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 303.146002][T17086] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.4530: iget: bad i_size value: 2533274857506816 [ 303.261350][T13402] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.317971][T17125] wg2: left promiscuous mode [ 303.322647][T17125] wg2: left allmulticast mode [ 303.365186][T17125] wg2: entered promiscuous mode [ 303.370232][T17125] wg2: entered allmulticast mode [ 303.409058][T17126] Invalid ELF header magic: != ELF [ 303.486001][T17142] siw: device registration error -23 [ 303.540700][T17146] 9pnet: Could not find request transport: fd [ 303.550124][T17149] SELinux: syz.4.4552 (17149) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 303.567919][T17150] SELinux: syz.0.4554 (17150) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 303.594732][T17152] bridge_slave_1: left allmulticast mode [ 303.600441][T17152] bridge_slave_1: left promiscuous mode [ 303.606221][T17152] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.625143][T17152] bridge_slave_0: left allmulticast mode [ 303.630883][T17152] bridge_slave_0: left promiscuous mode [ 303.636965][T17152] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.677673][T17155] loop0: detected capacity change from 0 to 512 [ 303.694509][T17157] Invalid ELF header magic: != ELF [ 303.743741][T17161] wg2: left promiscuous mode [ 303.748434][T17155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.748535][T17161] ================================================================== [ 303.748578][T17161] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 303.762173][T17155] EXT4-fs warning (device loop0): verify_group_input:156: Last group not full [ 303.769078][T17161] [ 303.769088][T17161] write to 0xffffffff86881248 of 8 bytes by task 17155 on cpu 0: [ 303.769108][T17161] data_alloc+0x271/0x2b0 [ 303.769147][T17161] prb_reserve+0x808/0xaf0 [ 303.803787][T17161] vprintk_store+0x56d/0x860 [ 303.808407][T17161] vprintk_emit+0x178/0x650 [ 303.812949][T17161] vprintk_default+0x26/0x30 [ 303.817568][T17161] vprintk+0x1d/0x30 [ 303.821495][T17161] _printk+0x79/0xa0 [ 303.825429][T17161] __ext4_msg+0x18f/0x1a0 [ 303.829803][T17161] ext4_fill_super+0x2d05/0x34e0 [ 303.834773][T17161] get_tree_bdev_flags+0x28e/0x300 [ 303.839918][T17161] get_tree_bdev+0x1f/0x30 [ 303.844407][T17161] ext4_get_tree+0x1c/0x30 [ 303.848865][T17161] vfs_get_tree+0x57/0x1d0 [ 303.853332][T17161] do_new_mount+0x207/0x680 [ 303.857878][T17161] path_mount+0x4a4/0xb20 [ 303.862243][T17161] __se_sys_mount+0x28f/0x2e0 [ 303.866994][T17161] __x64_sys_mount+0x67/0x80 [ 303.871643][T17161] x64_sys_call+0xd36/0x2fb0 [ 303.876256][T17161] do_syscall_64+0xd2/0x200 [ 303.880790][T17161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.886708][T17161] [ 303.889060][T17161] read to 0xffffffff86881248 of 16 bytes by task 17161 on cpu 1: [ 303.896796][T17161] _prb_read_valid+0x1bc/0x920 [ 303.901613][T17161] prb_read_valid+0x3c/0x60 [ 303.906158][T17161] console_unlock+0x164/0x330 [ 303.910854][T17161] vprintk_emit+0x388/0x650 [ 303.915377][T17161] vprintk_default+0x26/0x30 [ 303.919986][T17161] vprintk+0x1d/0x30 [ 303.923955][T17161] _printk+0x79/0xa0 [ 303.927874][T17161] __netdev_printk+0x321/0x3e0 [ 303.932659][T17161] netdev_info+0x9b/0xd0 [ 303.936923][T17161] __dev_set_promiscuity+0x233/0x450 [ 303.942237][T17161] __dev_change_flags+0x2c6/0x400 [ 303.947286][T17161] netif_change_flags+0x5a/0xd0 [ 303.952159][T17161] dev_change_flags+0xce/0x180 [ 303.956941][T17161] dev_ifsioc+0x44b/0xaa0 [ 303.961280][T17161] dev_ioctl+0x70a/0x960 [ 303.965533][T17161] sock_do_ioctl+0x197/0x220 [ 303.970141][T17161] sock_ioctl+0x41b/0x610 [ 303.974484][T17161] __se_sys_ioctl+0xcb/0x140 [ 303.979098][T17161] __x64_sys_ioctl+0x43/0x50 [ 303.983715][T17161] x64_sys_call+0x19a8/0x2fb0 [ 303.988412][T17161] do_syscall_64+0xd2/0x200 [ 303.992926][T17161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.998838][T17161] [ 304.001178][T17161] Reported by Kernel Concurrency Sanitizer on: [ 304.007343][T17161] CPU: 1 UID: 0 PID: 17161 Comm: syz.2.4558 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 304.019857][T17161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 304.029931][T17161] ================================================================== [ 304.038440][T17161] wg2: left allmulticast mode [ 304.073991][T17161] wg2: entered promiscuous mode [ 304.078918][T17161] wg2: entered allmulticast mode [ 304.121881][T17155] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.4556: iget: bad i_size value: 2533274857506816 [ 304.182706][T12863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.