last executing test programs: 1m50.332424271s ago: executing program 0 (id=584): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000900000044"], 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x29, 0xe, 0x1, 0x1, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7800, 0x700, 0xc4, 0x7}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@func={0x9, 0x0, 0x0, 0xc, 0x2}, @func={0x10, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x2e, 0x5f, 0x61, 0x2e, 0x0, 0x61, 0x61, 0x5f, 0x61]}}, &(0x7f0000000780)=""/191, 0x3b, 0xbf, 0x1, 0x1}, 0x28) r3 = syz_open_dev$vcsu(&(0x7f00000008c0), 0x9, 0x200) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x1a, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7}, @generic={0x9, 0xc, 0x5, 0x4, 0x2}, @exit, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x338a, 0x87, &(0x7f0000000500)=""/135, 0x40f00, 0x5d, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000880)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1b7e7, r3, 0x5, &(0x7f0000000900)=[r0, r0, r0], &(0x7f0000000940)=[{0x1, 0x5, 0x0, 0x9}, {0x2, 0x3, 0x10, 0x7}, {0x1, 0x2, 0x5, 0x3}, {0x5, 0x5, 0x4, 0x5}, {0x1, 0x4, 0x4, 0x1}], 0x10, 0x8}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x18) r5 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r5, 0x40085203, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001000370427bd7000fcdbdf2500000000", @ANYRES32=r9, @ANYBLOB="890c0400000000003400128009000100697069700000000024000280050005000300000005000a000000000006000f0003000000080002000a0101"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) io_submit(r6, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r5, 0x0}]) sysinfo(&(0x7f0000000000)=""/35) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r10, @ANYRESDEC=r10, @ANYRESOCT=r10, @ANYRESDEC=r10, @ANYRES16=r10, @ANYRES16, @ANYRES16=r10, @ANYRESOCT=r10], 0x5c}, 0x1, 0x0, 0x0, 0x4006}, 0x0) 1m50.223748222s ago: executing program 0 (id=587): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x1e, &(0x7f0000000840)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @alu={0x4, 0x0, 0x8, 0x0, 0x7, 0xfffffffffffffff4, 0x5}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffe}], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@can_delroute={0x164, 0x19, 0x200, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "d8cee9eddcbce189"}, 0x2}}, @CGW_LIM_HOPS={0x5, 0xd, 0x9}, @CGW_LIM_HOPS={0x5, 0xd, 0xa0}, @CGW_LIM_HOPS={0x5, 0xd, 0x4}, @CGW_CS_CRC8={0x11e, 0x6, {0x2f, 0x45, 0x7, 0x0, 0x2, "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", 0x2, "2764bc5e32111d90ec589f3fc2fdf7f427e2d27d"}}]}, 0x164}}, 0x91) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0xc81dde02, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x7, 0xfffff03c}, {0x6, 0x1, 0x0, 0x3ff}]}, 0x10) r6 = syz_open_dev$vcsu(&(0x7f00000000c0), 0xc, 0x200400) io_uring_enter(r6, 0x41cc, 0x7c89, 0x22, &(0x7f0000000100)={[0x2ea6590c]}, 0x8) 1m50.220983592s ago: executing program 0 (id=589): gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m50.220731502s ago: executing program 0 (id=590): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@nomblk_io_submit}]}, 0x1, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0xa0) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file2\x00', 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000600)={0x23e3, 0x0, 0xd, 0x2}) syz_open_dev$usbfs(0x0, 0x77, 0x101301) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xf5, 0x1219, &(0x7f0000002100)="$eJzs3E9rHGUcB/Bf1o1JU/NHrdX2oA948TQ0OXgSJEgKkgWlNkIrCFOz0SVjNmRCYEWsnrz2dXj2JvgOcvE1eMvFYw/iSGYam223VMHdFfv5HDI/nuf55pln2F2YZZ49eefel7s7ZbaTH0ZrZiZa+xHpfooUrTjz+mZzvHV7c73T2biR0vX1m6tvp5SW3vj5k6/nIuLixz8u/TQXxyufnvy29uvx5eMrJ3/c/KJXpl6ZVvqHKU93+v3D/E7RTdu9cjdL6cOim5fd1NsruwdD/TtFf39/kPK97cWF/YNuWaZ8b5B27+UR/XR4MEj553lvL2VZlhYXgieaffqQrR/uV1UVUVWz8XxUVVVdiIW4GC/EYizFtxHxYrwUL8eleCUux6vxWlypR03i9AEAAAAAAAAAAAAAAAAAAODZcX7/f0QM7f9fjhX7/wEAAAAAAAAAAAAAAAAAAGACPrp1e3O909m4kdJ8RPH90dbRVnNs+td3ohdFdONaLMfvUe/+bzT19fc7G9dSbSW+K+4+yN892nquyZ/+Oc2v1j8n8CDfrvvO8qtNPg3n52Lh/PxrsRyXRs+/NjI/H2+9eS6fxXL88ln0o4jteu6H+W9WU3rvg84j+av1OAAAAPg/yNJfRt6/Z9mT+pv83/5+oB2P3F+342p7umsnohx8tZu3iu5BXRRnxfxjLWMrZiNiUnONq5gbbmmNaa7WUy7UzLgW2P6PXGfF48Xpu/jf+D8XYrhl2p9MTMLDl8G0zwQAAAAAAAAAAIB/YszPJ7ZjxJNl705nqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//I6LAUA==") creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x1, 0x9d, 0x62}, 0x2c) close(0xffffffffffffffff) mkdir(&(0x7f0000001740)='./control\x00', 0x0) 1m49.996107995s ago: executing program 0 (id=592): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) (fail_nth: 5) 1m49.765351057s ago: executing program 0 (id=596): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mq_unlink(&(0x7f0000000080)='\x00') 1m49.730673711s ago: executing program 32 (id=596): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mq_unlink(&(0x7f0000000080)='\x00') 1.941758389s ago: executing program 1 (id=2017): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x8000f28, 0x0) splice(r4, 0x0, r3, 0x0, 0x7f, 0xe) write(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r6, 0x2004, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 1.886366224s ago: executing program 3 (id=2018): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.765808086s ago: executing program 3 (id=2022): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)={0x6c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.730864529s ago: executing program 5 (id=2023): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mq_open(0x0, 0x42, 0x0, 0x0) 1.651633107s ago: executing program 5 (id=2024): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000001f) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) close_range(r4, r5, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1e}, @TCA_FQ_ORPHAN_MASK={0x8}, @TCA_FQ_INITIAL_QUANTUM={0x8}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x200}]}}]}, 0x50}}, 0x4048000) 1.650899467s ago: executing program 5 (id=2025): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0xe}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008090}, 0x4000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20702, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r4, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001806005abeef4ba0d5984462732834d1", 0x13}, {&(0x7f0000000100)="37a8a6c51ef711513a5554633f6ecf2512425a", 0x13}], 0x3) request_key(&(0x7f00000002c0)='.request_key_auth\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)='syzkaller0\x00', 0xfffffffffffffff9) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12) close(0x3) close(0x4) 1.506975132s ago: executing program 1 (id=2026): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) 1.494537093s ago: executing program 2 (id=2027): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x45cab649}, 0x18) r2 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r3 = syz_io_uring_setup(0x213e, &(0x7f0000000080)={0x0, 0x81df, 0x400, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/195, 0xc3}, {&(0x7f0000000440)=""/170, 0xaa}, {&(0x7f0000000100)=""/65, 0x41}], 0x3, 0x0, 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="50020000", @ANYRES16, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x4c000) 1.341228578s ago: executing program 3 (id=2028): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(r0, 0x1) 1.236977068s ago: executing program 3 (id=2029): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000180)={0x0, 0x1, 0x2}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x9, 0x8}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff79d}, 0x94) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @loopback}, &(0x7f0000000080)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x94, &(0x7f0000000880), 0x0, 0x10, &(0x7f00000008c0), &(0x7f0000000b40), 0x8, 0xb0, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x0, 0x0, r3, 0x1, '\x00', 0x0, r3, 0x3, 0x2, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xa, 0x32, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff0000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}, @ldst={0x1, 0x0, 0x4, 0x1, 0x7, 0x8, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5ff9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x395, 0x0, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x101, 0x9b, &(0x7f00000005c0)=""/155, 0x0, 0x0, '\x00', r5, @fallback=0x27, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r3, 0x2, &(0x7f0000000280)=[r3, r3, 0xffffffffffffffff, r3, r7], &(0x7f0000000680)=[{0x0, 0x5, 0x2, 0x6}, {0x3, 0x5, 0x8, 0x6}], 0x10, 0x7ecf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c27438ffffffffcb864bd57221bc", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.227979929s ago: executing program 2 (id=2030): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000002140000001100010000000000e90000000000000a"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.179507054s ago: executing program 2 (id=2031): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xae, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700382900000000000000000000f9000000000000ff020000000000000000000000000001"], 0x0) 1.135355678s ago: executing program 2 (id=2032): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="180000004034000000000000080000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_usbip_server_init(0x4) 1.087775933s ago: executing program 4 (id=2033): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.041773147s ago: executing program 1 (id=2034): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x80}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r4, r2, 0x80000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 988.214063ms ago: executing program 4 (id=2035): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20040, 0x1ff) r1 = io_uring_setup(0xc45, &(0x7f0000000880)={0x0, 0xeb7b, 0x2, 0x27, 0x10c, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000280), 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffe, 0xfffffffe, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) geteuid() 870.471224ms ago: executing program 1 (id=2036): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="50020000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x4c000) 802.206241ms ago: executing program 1 (id=2037): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x8000f28, 0x0) splice(r4, 0x0, r3, 0x0, 0x7f, 0xe) write(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r6, 0x2004, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 746.448116ms ago: executing program 4 (id=2038): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x4}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, r2) r6 = add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r5) keyctl$read(0xb, r6, &(0x7f0000000300)=""/50, 0x32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) pwrite64(r0, &(0x7f0000000640)='2', 0x1, 0xe7c) 618.925489ms ago: executing program 4 (id=2039): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(r0, 0x1) 520.351489ms ago: executing program 2 (id=2040): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x45cab649}, 0x18) r2 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r3 = syz_io_uring_setup(0x213e, &(0x7f0000000080)={0x0, 0x81df, 0x400, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/195, 0xc3}, {&(0x7f0000000440)=""/170, 0xaa}, {&(0x7f0000000100)=""/65, 0x41}], 0x3, 0x0, 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="50020000", @ANYRES16, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x4c000) 472.906273ms ago: executing program 4 (id=2041): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 346.553026ms ago: executing program 5 (id=2042): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000100)=0x2, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="292c4606b2e8dcf0d6546af28d880fa54ffc170a99e9faf68986ccbe0dc4771a8a7c46e02d8a88f1ad10e0394a163128a39c7f25db9ff126c60b433edd6c972be2c409af14f3b24ad6281752fa3bb0be56bf2e0654dddcd026628feb76e23e2508404454b083b26cb77a33bb52c03fa70390a72b040769b3e3ca108b125525ebcd0b3870cf11b45110f78f41d07cb7a06c56c40cc2f52487f4ccaa15b3a604c349bd3c4f5562f71b38e500c409d3c66015b3f8a5455cf8", @ANYRESDEC=r1, @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x24084001}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x81080002}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600008c0}, 0x800) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) madvise(&(0x7f0000cd0000/0x4000)=nil, 0xffffffffdf32ffff, 0x16) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000080), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee9, 0x8031, 0xffffffffffffffff, 0x1000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff03000100"/99]) 248.530075ms ago: executing program 3 (id=2043): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 233.882097ms ago: executing program 2 (id=2044): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)={0x6c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 228.403887ms ago: executing program 4 (id=2045): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYBLOB], 0x1060}}, 0x4000) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x109a88, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000006c0)='.\x00', 0x1a4243c, &(0x7f0000000700)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES16, @ANYRES8, @ANYRES32, @ANYRES8, @ANYRES64, @ANYRES8=0x0, @ANYRES64, @ANYRES8], 0x0, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a13dc68a700a1bbfd01daa13ae1f03314477fc02b75b47cfff0a3fbd80fc65742c4f6ec0c555dee21357672386bb838f5d99d51a1270f56244cc764f867c8674b3faa5a41dd6a4af6f7ca755297c24990b37b13e80db63fd065fb70bafeea52e61c051b9833ac5c124a8210191d8a67eb773422bf0960b923605ad7c5820e3c624c08572e888b6af6606b27ef748cfec9f3ec2fa94b3b3d2bf49efa3da1fce066d7001d269ebebc1011e029394d20fce3189beae984d4d84", @ANYBLOB="d4be6e3a95cc19969695c3beffbe7dbc53ca1743a2049d91358103c16ccb3047cc76f1d9be8590ad91da89bcd67e030967546bab1f4aaf1b33bfcb5f77ae62d42fae8fa0451cfc51eb4f8acf739a4a2fb5f11820cb027ae11e60e21f4f5de75f78ebcb2240dd60fc0edb035f1c86b27f388a4cc629bf972150115623cc8c129f0aa64bf810f6fc484728"], 0x54}, 0x1, 0x0, 0x0, 0x20040910}, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 182.408652ms ago: executing program 1 (id=2046): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}]}}) 175.950542ms ago: executing program 3 (id=2047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468"], 0xa8}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0x3}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 64.436863ms ago: executing program 5 (id=2048): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x109a88, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$eJzs28FrXEUcB/BfkqapqclGrdUWxEEvFeTR5OBFL0FSkC4obSO0gvBqXnTJczfkLYEVsXry6t8hggjeBPGml1z8DwRvuXisID7JrrZd3RVWQjfI53PZH8z7zs7ssAuzzBy+8tn7O9tVtp13Y3ZmJmZ3I9LdFClm4y8fxwsvf//DM9dv3rq63mxuXEvpyvqN1ZdSSsvPfvvWh18891337JtfL3+zEAcrbx/+svbzwfmDC4e/33ivVaVWldqdbsrT7U6nm98ui7TVqnaylN4oi7wqUqtdFXtD7dtlZ3e3l/L21tLi7l5RVSlv99JO0UvdTuru9VL+bt5qpyzL0tJiMLlT96rNz+/WdR1R1/NxOuq6rh+JxTgbj8ZSLEcjVuKxeDyeiHPxZJyPp+Lp+OqnL3tHCQAAAAAAAAAAAAAAAAAAAOD4THr//0L/qWmPGgAAAAAAAAAAAAAAAAAAAP5frt+8dXW92dy4ltKZiPLT/c39zcHroH19O1pRRhGXoxG/Rf/2/8CgvvJac+Ny6luJT8o7f+bv7G/ODedXoxEvjs6vDvJpOL8Qiw/m16IR50bl52NtZP5MXHr+gXwWjfjxnehEGVtxlL3//h+tpvTq682/5S/2nxtv7mEsDwAAAByLLN0zcv+eZePaB/kJ/h8Y2l8fZS+emurUiYiq98FOXpbFnmJkcelkDKNfnD7ODucjYrLUr3VdT/9DmFIx/puyEBH/ueeZiDgZE/xHMe1fJh6G+4s+7ZEAAAAAAAAAAAAwibHHABf+7YTg3ETHCac9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YAeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//0AbP3Q==") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 0s ago: executing program 5 (id=2049): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x2000) kernel console output (not intermixed with test programs): 80091][ T8218] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.339993][ T8218] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.411721][ T99] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.454183][ T99] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.482873][ T99] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.526271][ T99] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.560691][ T99] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.604355][ T99] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.619720][ T99] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.628035][ T99] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.671346][ T8230] loop3: detected capacity change from 0 to 512 [ 156.679630][ T8230] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 156.712521][ T8230] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.1429: invalid indirect mapped block 4294967295 (level 0) [ 156.726947][ T8230] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.1429: invalid indirect mapped block 4294967295 (level 1) [ 156.742129][ T8230] EXT4-fs (loop3): 1 orphan inode deleted [ 156.748037][ T8230] EXT4-fs (loop3): 1 truncate cleaned up [ 156.757833][ T8238] x_tables: duplicate underflow at hook 1 [ 156.872485][ T8247] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.890889][ T8240] macvtap0: refused to change device tx_queue_len [ 156.936132][ T8247] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.979911][ T8249] loop2: detected capacity change from 0 to 8192 [ 157.010449][ T8247] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.014515][ T8238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1434'. [ 157.105629][ T8247] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.574194][ T8257] loop4: detected capacity change from 0 to 1024 [ 157.600906][ T8259] x_tables: duplicate underflow at hook 1 [ 157.632334][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 157.632351][ T29] audit: type=1326 audit(1760006338.459:7541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8258 comm="syz.5.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2dc2eec9 code=0x7ffc0000 [ 157.662464][ T29] audit: type=1326 audit(1760006338.469:7543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8258 comm="syz.5.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2dc2eec9 code=0x7ffc0000 [ 157.694024][ T29] audit: type=1326 audit(1760006338.529:7544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8258 comm="syz.5.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f2dc2eec9 code=0x7ffc0000 [ 157.718257][ T29] audit: type=1326 audit(1760006338.529:7545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8258 comm="syz.5.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2dc2eec9 code=0x7ffc0000 [ 157.741810][ T29] audit: type=1326 audit(1760006338.529:7546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8258 comm="syz.5.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2dc2eec9 code=0x7ffc0000 [ 157.765595][ T29] audit: type=1326 audit(1760006338.529:7547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8258 comm="syz.5.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f2dc2eec9 code=0x7ffc0000 [ 157.789337][ T29] audit: type=1326 audit(1760006338.529:7548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8258 comm="syz.5.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2dc2eec9 code=0x7ffc0000 [ 157.812840][ T29] audit: type=1326 audit(1760006338.529:7549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8258 comm="syz.5.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2dc2eec9 code=0x7ffc0000 [ 157.836292][ T29] audit: type=1326 audit(1760006338.529:7550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8258 comm="syz.5.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f2dc2eec9 code=0x7ffc0000 [ 157.859930][ T29] audit: type=1326 audit(1760006338.529:7551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8258 comm="syz.5.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2dc2eec9 code=0x7ffc0000 [ 157.903625][ T8267] loop4: detected capacity change from 0 to 164 [ 157.915037][ T8268] loop1: detected capacity change from 0 to 512 [ 157.922108][ T8268] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 157.944608][ T8268] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1445: invalid indirect mapped block 4294967295 (level 0) [ 157.960473][ T8268] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1445: invalid indirect mapped block 4294967295 (level 1) [ 157.975901][ T8268] EXT4-fs (loop1): 1 orphan inode deleted [ 157.981897][ T8268] EXT4-fs (loop1): 1 truncate cleaned up [ 157.994233][ T8259] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1441'. [ 158.025592][ T8277] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 158.032243][ T8277] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 158.039765][ T8277] vhci_hcd vhci_hcd.0: Device attached [ 158.046423][ T8278] vhci_hcd: connection closed [ 158.046717][ T3349] vhci_hcd: stop threads [ 158.046774][ T3349] vhci_hcd: release socket [ 158.046782][ T3349] vhci_hcd: disconnect device [ 158.069090][ T8281] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1449'. [ 158.083015][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1449'. [ 158.095481][ T8283] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1450'. [ 158.105087][ T8283] netlink: 'syz.1.1450': attribute type 9 has an invalid length. [ 158.113146][ T8283] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1450'. [ 158.122386][ T8283] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1450'. [ 158.154495][ T8286] loop1: detected capacity change from 0 to 512 [ 158.162759][ T8286] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 158.174331][ T8286] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 158.184580][ T8286] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1451: Corrupt directory, running e2fsck is recommended [ 158.198060][ T8286] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 158.206534][ T8286] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.1451: corrupted in-inode xattr: invalid ea_ino [ 158.220452][ T8286] EXT4-fs (loop1): Remounting filesystem read-only [ 158.228585][ T8286] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 158.240158][ T8286] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 158.250749][ T8286] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1451: Corrupt directory, running e2fsck is recommended [ 158.264799][ T8286] netlink: 'syz.1.1451': attribute type 10 has an invalid length. [ 158.276601][ T8286] team0: Port device dummy0 added [ 158.283722][ T8286] netlink: 'syz.1.1451': attribute type 10 has an invalid length. [ 158.294721][ T8286] team0: Port device dummy0 removed [ 158.302100][ T8286] dummy0: entered promiscuous mode [ 158.308272][ T8286] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 158.582232][ T8295] loop1: detected capacity change from 0 to 512 [ 158.619042][ T8295] EXT4-fs: Ignoring removed oldalloc option [ 158.650362][ T8299] loop5: detected capacity change from 0 to 512 [ 158.659396][ T8295] EXT4-fs (loop1): 1 truncate cleaned up [ 158.681395][ T8299] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.785900][ T8307] netlink: 'syz.4.1458': attribute type 13 has an invalid length. [ 158.814543][ T8307] gretap0: refused to change device tx_queue_len [ 158.821267][ T8307] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 158.868881][ T8312] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1461'. [ 158.878185][ T8312] netlink: 'syz.4.1461': attribute type 9 has an invalid length. [ 158.885982][ T8312] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1461'. [ 158.895211][ T8312] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1461'. [ 158.929298][ T8314] loop2: detected capacity change from 0 to 164 [ 159.081852][ T8318] loop4: detected capacity change from 0 to 512 [ 159.100375][ T8318] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.236623][ T8328] x_tables: duplicate underflow at hook 1 [ 159.344172][ T8336] loop4: detected capacity change from 0 to 1024 [ 159.359757][ T8336] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.411059][ T8336] Invalid option length (1045175) for dns_resolver key [ 159.419037][ T8336] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.1469: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.441172][ T8336] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 159.453594][ T8336] EXT4-fs (loop4): This should not happen!! Data will be lost [ 159.453594][ T8336] [ 159.493809][ T8340] loop4: detected capacity change from 0 to 512 [ 159.502502][ T8328] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1466'. [ 159.513431][ T8340] ext4 filesystem being mounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.705504][ T8345] syzkaller0: entered promiscuous mode [ 159.711311][ T8345] syzkaller0: entered allmulticast mode [ 159.852203][ T8347] loop4: detected capacity change from 0 to 1024 [ 159.901845][ T8350] loop4: detected capacity change from 0 to 512 [ 159.909947][ T8350] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1473: casefold flag without casefold feature [ 159.923137][ T8350] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1473: couldn't read orphan inode 15 (err -117) [ 159.964125][ T8353] x_tables: duplicate underflow at hook 1 [ 160.121886][ T8359] loop5: detected capacity change from 0 to 512 [ 160.140748][ T8359] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 160.152328][ T8359] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 160.162481][ T8359] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1476: Corrupt directory, running e2fsck is recommended [ 160.175786][ T8359] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 160.184150][ T8359] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.1476: corrupted in-inode xattr: invalid ea_ino [ 160.197809][ T8359] EXT4-fs (loop5): Remounting filesystem read-only [ 160.211548][ T8359] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 160.223324][ T8359] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 160.233558][ T8359] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1476: Corrupt directory, running e2fsck is recommended [ 160.295970][ T8365] netlink: 'syz.5.1476': attribute type 10 has an invalid length. [ 160.306078][ T8365] bond0: (slave dummy0): Releasing backup interface [ 160.328602][ T8365] dummy0: left promiscuous mode [ 160.334854][ T8365] team0: Port device dummy0 added [ 160.358940][ T4752] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.370591][ T8359] netlink: 'syz.5.1476': attribute type 10 has an invalid length. [ 160.384627][ T4752] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.403401][ T4752] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.418896][ T8359] team0: Port device dummy0 removed [ 160.429406][ T8370] loop2: detected capacity change from 0 to 512 [ 160.431338][ T8359] dummy0: entered promiscuous mode [ 160.443199][ T8359] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 160.452328][ T4752] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.463481][ T8370] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.498634][ T8370] usb usb1: check_ctrlrecip: process 8370 (syz.2.1480) requesting ep 01 but needs 81 [ 160.508213][ T8370] usb usb1: usbfs: process 8370 (syz.2.1480) did not claim interface 0 before use [ 160.604939][ T8385] loop5: detected capacity change from 0 to 1024 [ 160.845345][ T8410] FAULT_INJECTION: forcing a failure. [ 160.845345][ T8410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.858580][ T8410] CPU: 0 UID: 0 PID: 8410 Comm: syz.2.1493 Not tainted syzkaller #0 PREEMPT(voluntary) [ 160.858614][ T8410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 160.858630][ T8410] Call Trace: [ 160.858638][ T8410] [ 160.858647][ T8410] __dump_stack+0x1d/0x30 [ 160.858679][ T8410] dump_stack_lvl+0xe8/0x140 [ 160.858725][ T8410] dump_stack+0x15/0x1b [ 160.858746][ T8410] should_fail_ex+0x265/0x280 [ 160.858788][ T8410] should_fail+0xb/0x20 [ 160.858825][ T8410] should_fail_usercopy+0x1a/0x20 [ 160.858853][ T8410] _copy_from_iter+0xd2/0xe80 [ 160.858882][ T8410] ? __build_skb_around+0x1ab/0x200 [ 160.858914][ T8410] ? __alloc_skb+0x223/0x320 [ 160.858944][ T8410] pfkey_sendmsg+0x126/0x900 [ 160.859041][ T8410] ? avc_has_perm+0xf7/0x180 [ 160.859098][ T8410] ? selinux_socket_sendmsg+0x175/0x1b0 [ 160.859131][ T8410] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 160.859168][ T8410] __sock_sendmsg+0x142/0x180 [ 160.859193][ T8410] ____sys_sendmsg+0x31e/0x4e0 [ 160.859302][ T8410] ___sys_sendmsg+0x17b/0x1d0 [ 160.859355][ T8410] __x64_sys_sendmsg+0xd4/0x160 [ 160.859396][ T8410] x64_sys_call+0x191e/0x3000 [ 160.859482][ T8410] do_syscall_64+0xd2/0x200 [ 160.859575][ T8410] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 160.859608][ T8410] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 160.859634][ T8410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.859661][ T8410] RIP: 0033:0x7f93897eeec9 [ 160.859687][ T8410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.859716][ T8410] RSP: 002b:00007f9388257038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.859739][ T8410] RAX: ffffffffffffffda RBX: 00007f9389a45fa0 RCX: 00007f93897eeec9 [ 160.859755][ T8410] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 160.859770][ T8410] RBP: 00007f9388257090 R08: 0000000000000000 R09: 0000000000000000 [ 160.859785][ T8410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.859800][ T8410] R13: 00007f9389a46038 R14: 00007f9389a45fa0 R15: 00007ffe6674e9b8 [ 160.859825][ T8410] [ 160.890607][ T8407] loop3: detected capacity change from 0 to 8192 [ 160.892468][ T8410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.098748][ T8410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.219551][ T8430] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 161.226203][ T8430] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 161.233887][ T8430] vhci_hcd vhci_hcd.0: Device attached [ 161.240533][ T8431] vhci_hcd: connection closed [ 161.240712][ T3349] vhci_hcd: stop threads [ 161.249922][ T3349] vhci_hcd: release socket [ 161.254415][ T3349] vhci_hcd: disconnect device [ 161.406333][ T8436] loop2: detected capacity change from 0 to 512 [ 161.413310][ T8436] ext4: Unknown parameter 'bsddf"data' [ 161.431853][ T8436] netlink: '+}[@': attribute type 1 has an invalid length. [ 161.654895][ T8446] x_tables: duplicate underflow at hook 1 [ 161.694037][ T8449] loop5: detected capacity change from 0 to 1024 [ 161.730779][ T8452] loop2: detected capacity change from 0 to 164 [ 161.738628][ T955] page_pool_release_retry() stalled pool shutdown: id 57, 1 inflight 60 sec [ 161.839577][ T8454] loop3: detected capacity change from 0 to 8192 [ 162.022862][ T8481] netlink: 'syz.4.1517': attribute type 13 has an invalid length. [ 162.054671][ T8478] loop5: detected capacity change from 0 to 8192 [ 162.063272][ T8481] gretap0: refused to change device tx_queue_len [ 162.069756][ T8481] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 162.158766][ T8488] FAULT_INJECTION: forcing a failure. [ 162.158766][ T8488] name failslab, interval 1, probability 0, space 0, times 0 [ 162.171720][ T8488] CPU: 1 UID: 0 PID: 8488 Comm: syz.3.1518 Not tainted syzkaller #0 PREEMPT(voluntary) [ 162.171748][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 162.171761][ T8488] Call Trace: [ 162.171770][ T8488] [ 162.171779][ T8488] __dump_stack+0x1d/0x30 [ 162.171827][ T8488] dump_stack_lvl+0xe8/0x140 [ 162.171853][ T8488] dump_stack+0x15/0x1b [ 162.171876][ T8488] should_fail_ex+0x265/0x280 [ 162.172012][ T8488] should_failslab+0x8c/0xb0 [ 162.172039][ T8488] __kvmalloc_node_noprof+0x12e/0x670 [ 162.172075][ T8488] ? bpf_test_run_xdp_live+0xf2/0x1050 [ 162.172141][ T8488] ? __cond_resched+0x4e/0x90 [ 162.172183][ T8488] bpf_test_run_xdp_live+0xf2/0x1050 [ 162.172217][ T8488] ? cpus_read_unlock+0x6e/0xc0 [ 162.172285][ T8488] ? __static_call_update+0x37c/0x3b0 [ 162.172313][ T8488] ? bpf_dispatcher_xdp+0x800/0x1000 [ 162.172341][ T8488] ? bpf_dispatcher_xdp+0x800/0x1000 [ 162.172363][ T8488] ? bpf_dispatcher_xdp+0x800/0x1000 [ 162.172455][ T8488] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 162.172491][ T8488] ? bpf_dispatcher_xdp+0x800/0x1000 [ 162.172528][ T8488] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 162.172641][ T8488] bpf_prog_test_run_xdp+0x59a/0x970 [ 162.172715][ T8488] ? __rcu_read_unlock+0x4f/0x70 [ 162.172753][ T8488] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 162.172833][ T8488] bpf_prog_test_run+0x227/0x390 [ 162.172856][ T8488] __sys_bpf+0x4c0/0x7c0 [ 162.172900][ T8488] __x64_sys_bpf+0x41/0x50 [ 162.172987][ T8488] x64_sys_call+0x2aee/0x3000 [ 162.173010][ T8488] do_syscall_64+0xd2/0x200 [ 162.173033][ T8488] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 162.173116][ T8488] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 162.173145][ T8488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.173167][ T8488] RIP: 0033:0x7f7343aaeec9 [ 162.173183][ T8488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.173209][ T8488] RSP: 002b:00007f73424f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 162.173288][ T8488] RAX: ffffffffffffffda RBX: 00007f7343d06090 RCX: 00007f7343aaeec9 [ 162.173304][ T8488] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 162.173321][ T8488] RBP: 00007f73424f6090 R08: 0000000000000000 R09: 0000000000000000 [ 162.173347][ T8488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.173359][ T8488] R13: 00007f7343d06128 R14: 00007f7343d06090 R15: 00007ffc897df428 [ 162.173378][ T8488] [ 162.430902][ T8489] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 162.437490][ T8489] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 162.445178][ T8489] vhci_hcd vhci_hcd.0: Device attached [ 162.465443][ T8490] vhci_hcd: connection closed [ 162.465718][ T4752] vhci_hcd: stop threads [ 162.474914][ T4752] vhci_hcd: release socket [ 162.479502][ T4752] vhci_hcd: disconnect device [ 162.729437][ T8509] loop1: detected capacity change from 0 to 512 [ 162.750464][ T8509] EXT4-fs mount: 34 callbacks suppressed [ 162.750485][ T8509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.769257][ T8509] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.819806][ T8515] loop2: detected capacity change from 0 to 8192 [ 162.965155][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.287842][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 163.287859][ T29] audit: type=1326 audit(1760006344.119:7853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.4.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 163.317723][ T29] audit: type=1326 audit(1760006344.119:7854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.4.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 163.384290][ T8592] loop1: detected capacity change from 0 to 8192 [ 163.403838][ T29] audit: type=1326 audit(1760006344.179:7855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.4.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 163.427468][ T29] audit: type=1326 audit(1760006344.179:7856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.4.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 163.451152][ T29] audit: type=1326 audit(1760006344.179:7857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.4.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 163.475306][ T29] audit: type=1326 audit(1760006344.179:7858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.4.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 163.498932][ T29] audit: type=1326 audit(1760006344.179:7859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.4.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 163.522381][ T29] audit: type=1326 audit(1760006344.179:7860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.4.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 163.545988][ T29] audit: type=1326 audit(1760006344.179:7861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.4.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 163.569753][ T29] audit: type=1326 audit(1760006344.179:7862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.4.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 163.653644][ T8600] loop5: detected capacity change from 0 to 1024 [ 163.669147][ T8603] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 163.675851][ T8603] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 163.679417][ T8600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.683418][ T8603] vhci_hcd vhci_hcd.0: Device attached [ 163.724360][ T8604] vhci_hcd: connection closed [ 163.724505][ T4765] vhci_hcd: stop threads [ 163.733575][ T4765] vhci_hcd: release socket [ 163.738014][ T4765] vhci_hcd: disconnect device [ 163.762071][ T5417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.801007][ T8614] __nla_validate_parse: 12 callbacks suppressed [ 163.801022][ T8614] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1551'. [ 163.816480][ T8614] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1551'. [ 163.839878][ T8614] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8614 comm=syz.5.1551 [ 163.852444][ T8614] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8614 comm=syz.5.1551 [ 163.867949][ T8614] tipc: Enabling of bearer rejected, failed to enable media [ 163.877354][ T8614] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=8614 comm=syz.5.1551 [ 163.907268][ T8621] loop3: detected capacity change from 0 to 8192 [ 163.948533][ T8626] loop5: detected capacity change from 0 to 512 [ 163.957232][ T8628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1558'. [ 163.991964][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1560'. [ 164.003433][ T8633] bridge0: entered promiscuous mode [ 164.009927][ T8633] bridge0: port 3(macvlan2) entered blocking state [ 164.016572][ T8633] bridge0: port 3(macvlan2) entered disabled state [ 164.023350][ T8633] macvlan2: entered allmulticast mode [ 164.028843][ T8633] bridge0: entered allmulticast mode [ 164.034661][ T8633] macvlan2: left allmulticast mode [ 164.039967][ T8633] bridge0: left allmulticast mode [ 164.045557][ T8633] bridge0: left promiscuous mode [ 164.057456][ T8629] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.159381][ T8629] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.246975][ T8629] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.304935][ T8629] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.466060][ T8647] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1565'. [ 164.498512][ T8645] loop4: detected capacity change from 0 to 1024 [ 164.509823][ T8645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.538549][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1568'. [ 164.563738][ T4762] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.581888][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.623340][ T8657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1570'. [ 164.635629][ T8660] FAULT_INJECTION: forcing a failure. [ 164.635629][ T8660] name failslab, interval 1, probability 0, space 0, times 0 [ 164.648457][ T8660] CPU: 0 UID: 0 PID: 8660 Comm: syz.4.1569 Not tainted syzkaller #0 PREEMPT(voluntary) [ 164.648522][ T8660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 164.648537][ T8660] Call Trace: [ 164.648542][ T8660] [ 164.648551][ T8660] __dump_stack+0x1d/0x30 [ 164.648578][ T8660] dump_stack_lvl+0xe8/0x140 [ 164.648603][ T8660] dump_stack+0x15/0x1b [ 164.648692][ T8660] should_fail_ex+0x265/0x280 [ 164.648809][ T8660] should_failslab+0x8c/0xb0 [ 164.648846][ T8660] kmem_cache_alloc_noprof+0x50/0x480 [ 164.648881][ T8660] ? getname_flags+0x80/0x3b0 [ 164.648919][ T8660] getname_flags+0x80/0x3b0 [ 164.649002][ T8660] start_creating_user_path+0x27/0x130 [ 164.649032][ T8660] bpf_obj_pin_user+0xe0/0x230 [ 164.649102][ T8660] bpf_obj_pin+0xac/0xd0 [ 164.649126][ T8660] __sys_bpf+0x6d6/0x7c0 [ 164.649300][ T8660] __x64_sys_bpf+0x41/0x50 [ 164.649345][ T8660] x64_sys_call+0x2aee/0x3000 [ 164.649370][ T8660] do_syscall_64+0xd2/0x200 [ 164.649474][ T8660] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 164.649511][ T8660] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 164.649540][ T8660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.649568][ T8660] RIP: 0033:0x7f1382cdeec9 [ 164.649621][ T8660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.649645][ T8660] RSP: 002b:00007f1381747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 164.649670][ T8660] RAX: ffffffffffffffda RBX: 00007f1382f35fa0 RCX: 00007f1382cdeec9 [ 164.649687][ T8660] RDX: 0000000000000018 RSI: 0000200000000300 RDI: 0000000000000006 [ 164.649704][ T8660] RBP: 00007f1381747090 R08: 0000000000000000 R09: 0000000000000000 [ 164.649717][ T8660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.649743][ T8660] R13: 00007f1382f36038 R14: 00007f1382f35fa0 R15: 00007ffc4e5c6b38 [ 164.649769][ T8660] [ 164.650566][ T8658] netlink: 'syz.5.1571': attribute type 13 has an invalid length. [ 164.865651][ T8666] loop2: detected capacity change from 0 to 1024 [ 164.873835][ T4762] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.874115][ T8666] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.889784][ T8658] gretap0: refused to change device tx_queue_len [ 164.896319][ T8658] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 164.917061][ T4762] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.935814][ T4762] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.958631][ T8670] loop4: detected capacity change from 0 to 512 [ 164.965746][ T8670] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 164.978075][ T8670] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.1575: invalid indirect mapped block 4294967295 (level 0) [ 164.992384][ T8670] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.1575: invalid indirect mapped block 4294967295 (level 1) [ 165.007383][ T8670] EXT4-fs (loop4): 1 orphan inode deleted [ 165.013248][ T8670] EXT4-fs (loop4): 1 truncate cleaned up [ 165.019576][ T8670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.041912][ T8668] loop1: detected capacity change from 0 to 512 [ 165.041924][ T8666] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 165.041958][ T8666] System zones: 0-1, 3-12 [ 165.062143][ T8666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.081665][ T8668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.094518][ T8668] ext4 filesystem being mounted at /292/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.106458][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.107471][ T8678] netlink: 'syz.5.1577': attribute type 1 has an invalid length. [ 165.153459][ T8678] 8021q: adding VLAN 0 to HW filter on device bond5 [ 165.164046][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1577'. [ 165.176189][ T8678] bond5 (unregistering): Released all slaves [ 165.236725][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.302759][ T8689] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1582'. [ 165.319024][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.333220][ T8693] loop2: detected capacity change from 0 to 512 [ 165.350910][ T8693] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 165.362830][ T8693] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 165.373158][ T8693] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1579: Corrupt directory, running e2fsck is recommended [ 165.386654][ T8693] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 165.400088][ T8693] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.1579: corrupted in-inode xattr: invalid ea_ino [ 165.417094][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1583'. [ 165.423012][ T8693] EXT4-fs (loop2): Remounting filesystem read-only [ 165.434761][ T8693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.448713][ T8701] bridge0: port 3(macvlan0) entered blocking state [ 165.455284][ T8701] bridge0: port 3(macvlan0) entered disabled state [ 165.463622][ T8701] macvlan0: entered allmulticast mode [ 165.469084][ T8701] bridge0: entered allmulticast mode [ 165.476957][ T8693] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 165.488973][ T8693] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 165.495927][ T8706] loop4: detected capacity change from 0 to 1024 [ 165.499186][ T8693] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1579: Corrupt directory, running e2fsck is recommended [ 165.509876][ T8693] netlink: 'syz.2.1579': attribute type 10 has an invalid length. [ 165.521777][ T8706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.526854][ T8701] macvlan0: left allmulticast mode [ 165.544366][ T8701] bridge0: left allmulticast mode [ 165.567216][ T8693] bond0: (slave dummy0): Releasing backup interface [ 165.569181][ T8712] netlink: 'syz.2.1579': attribute type 10 has an invalid length. [ 165.582317][ T8693] dummy0: left promiscuous mode [ 165.589335][ T8693] team0: Port device dummy0 added [ 165.609332][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.626043][ T8712] team0: Port device dummy0 removed [ 165.631680][ T8710] loop5: detected capacity change from 0 to 8192 [ 165.633467][ T8712] dummy0: entered promiscuous mode [ 165.668780][ T8712] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 165.736750][ T8714] loop4: detected capacity change from 0 to 1024 [ 165.782762][ T8714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.803280][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.843239][ T8720] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 165.849813][ T8720] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 165.857297][ T8720] vhci_hcd vhci_hcd.0: Device attached [ 165.863756][ T8721] vhci_hcd: connection closed [ 165.864067][ T4765] vhci_hcd: stop threads [ 165.873165][ T4765] vhci_hcd: release socket [ 165.877738][ T4765] vhci_hcd: disconnect device [ 165.883706][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.906371][ T8724] netlink: 'syz.4.1591': attribute type 1 has an invalid length. [ 165.914350][ T8717] loop2: detected capacity change from 0 to 8192 [ 165.921551][ T8724] 8021q: adding VLAN 0 to HW filter on device bond8 [ 165.932659][ T8724] bond8 (unregistering): Released all slaves [ 166.248676][ T8734] loop3: detected capacity change from 0 to 512 [ 166.270930][ T8734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.283585][ T8734] ext4 filesystem being mounted at /314/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.445605][ T8752] hsr_slave_1 (unregistering): left promiscuous mode [ 166.484458][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.512956][ T8756] loop3: detected capacity change from 0 to 512 [ 166.519432][ T8753] loop5: detected capacity change from 0 to 2048 [ 166.526941][ T8756] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 166.538543][ T8756] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 166.548701][ T8756] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1600: Corrupt directory, running e2fsck is recommended [ 166.562006][ T8756] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 166.568970][ T8753] loop5: p2 p3 < > p4 < p5 > [ 166.574881][ T8753] loop5: partition table partially beyond EOD, truncated [ 166.582452][ T8756] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.1600: corrupted in-inode xattr: invalid ea_ino [ 166.609843][ T8753] loop5: p2 start 53543428 is beyond EOD, truncated [ 166.616488][ T8753] loop5: p3 start 4284289 is beyond EOD, truncated [ 166.623761][ T8753] loop5: p5 start 53543428 is beyond EOD, truncated [ 166.628526][ T8756] EXT4-fs (loop3): Remounting filesystem read-only [ 166.639366][ T8756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.653660][ T8756] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 166.665282][ T8756] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 166.675493][ T8756] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1600: Corrupt directory, running e2fsck is recommended [ 166.708310][ T8756] netlink: 'syz.3.1600': attribute type 10 has an invalid length. [ 166.727995][ T8764] netlink: 'syz.1.1603': attribute type 1 has an invalid length. [ 166.736257][ T8760] loop5: detected capacity change from 0 to 512 [ 166.740905][ T8756] bond0: (slave dummy0): Releasing backup interface [ 166.755292][ T8756] team0: Port device dummy0 added [ 166.762281][ T8765] netlink: 'syz.3.1600': attribute type 10 has an invalid length. [ 166.762746][ T8760] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.783034][ T8760] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.795051][ T8764] 8021q: adding VLAN 0 to HW filter on device bond11 [ 166.807076][ T8760] usb usb1: check_ctrlrecip: process 8760 (syz.5.1601) requesting ep 01 but needs 81 [ 166.816801][ T8760] usb usb1: usbfs: process 8760 (syz.5.1601) did not claim interface 0 before use [ 166.830410][ T8768] bond11 (unregistering): Released all slaves [ 166.854489][ T5417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.874616][ T8765] team0: Port device dummy0 removed [ 166.883146][ T8765] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 166.905615][ T8773] loop2: detected capacity change from 0 to 1024 [ 166.926003][ T8773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.932905][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.958668][ T8782] x_tables: duplicate underflow at hook 1 [ 166.997201][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.007826][ T8787] netlink: 'syz.3.1611': attribute type 4 has an invalid length. [ 167.018931][ T8787] .`: renamed from bond0 [ 167.064942][ T8792] loop5: detected capacity change from 0 to 2048 [ 167.089492][ T8792] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.118138][ T8792] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.158845][ T8796] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.192685][ T8794] loop1: detected capacity change from 0 to 8192 [ 167.227144][ T8803] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1613: bg 0: block 345: padding at end of block bitmap is not set [ 167.245137][ T8803] EXT4-fs (loop5): Remounting filesystem read-only [ 167.252895][ T4765] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 167.272248][ T8805] loop2: detected capacity change from 0 to 512 [ 167.294637][ T8796] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.307729][ T8805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.320443][ T8805] ext4 filesystem being mounted at /307/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.382988][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.383576][ T5417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.417172][ T8812] FAULT_INJECTION: forcing a failure. [ 167.417172][ T8812] name failslab, interval 1, probability 0, space 0, times 0 [ 167.430156][ T8812] CPU: 1 UID: 0 PID: 8812 Comm: syz.5.1618 Not tainted syzkaller #0 PREEMPT(voluntary) [ 167.430193][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 167.430211][ T8812] Call Trace: [ 167.430219][ T8812] [ 167.430229][ T8812] __dump_stack+0x1d/0x30 [ 167.430257][ T8812] dump_stack_lvl+0xe8/0x140 [ 167.430280][ T8812] dump_stack+0x15/0x1b [ 167.430305][ T8812] should_fail_ex+0x265/0x280 [ 167.430344][ T8812] should_failslab+0x8c/0xb0 [ 167.430377][ T8812] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 167.430415][ T8812] ? __alloc_skb+0x101/0x320 [ 167.430526][ T8812] __alloc_skb+0x101/0x320 [ 167.430559][ T8812] netlink_alloc_large_skb+0xbf/0xf0 [ 167.430589][ T8812] netlink_sendmsg+0x3cf/0x6b0 [ 167.430627][ T8812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.430733][ T8812] __sock_sendmsg+0x142/0x180 [ 167.430759][ T8812] ____sys_sendmsg+0x31e/0x4e0 [ 167.430791][ T8812] ___sys_sendmsg+0x17b/0x1d0 [ 167.430901][ T8812] __x64_sys_sendmsg+0xd4/0x160 [ 167.430936][ T8812] x64_sys_call+0x191e/0x3000 [ 167.431013][ T8812] do_syscall_64+0xd2/0x200 [ 167.431045][ T8812] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 167.431099][ T8812] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 167.431121][ T8812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.431152][ T8812] RIP: 0033:0x7f1f2dc2eec9 [ 167.431168][ T8812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.431193][ T8812] RSP: 002b:00007f1f2c68f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.431218][ T8812] RAX: ffffffffffffffda RBX: 00007f1f2de85fa0 RCX: 00007f1f2dc2eec9 [ 167.431234][ T8812] RDX: 0000000060044084 RSI: 0000200000000000 RDI: 0000000000000005 [ 167.431295][ T8812] RBP: 00007f1f2c68f090 R08: 0000000000000000 R09: 0000000000000000 [ 167.431312][ T8812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.431328][ T8812] R13: 00007f1f2de86038 R14: 00007f1f2de85fa0 R15: 00007ffd680db458 [ 167.431354][ T8812] [ 167.657817][ T8814] loop2: detected capacity change from 0 to 512 [ 167.667113][ T8814] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 167.676440][ T8796] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.678835][ T8814] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 167.678900][ T8814] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1619: Corrupt directory, running e2fsck is recommended [ 167.685070][ T8814] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 167.722738][ T8814] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.1619: corrupted in-inode xattr: invalid ea_ino [ 167.748713][ T8814] EXT4-fs (loop2): Remounting filesystem read-only [ 167.782144][ T8814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.797124][ T8814] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 167.808929][ T8814] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 167.819075][ T8814] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1619: Corrupt directory, running e2fsck is recommended [ 167.846529][ T8814] netlink: 'syz.2.1619': attribute type 10 has an invalid length. [ 167.892198][ T8796] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.903088][ T8826] netlink: 'syz.2.1619': attribute type 10 has an invalid length. [ 167.911322][ T8825] x_tables: duplicate underflow at hook 1 [ 167.951200][ T8814] bond0: (slave dummy0): Releasing backup interface [ 167.959605][ T8814] dummy0: left promiscuous mode [ 167.970559][ T8814] team0: Port device dummy0 added [ 167.977545][ T8829] FAULT_INJECTION: forcing a failure. [ 167.977545][ T8829] name failslab, interval 1, probability 0, space 0, times 0 [ 167.990314][ T8829] CPU: 0 UID: 0 PID: 8829 Comm: syz.5.1626 Not tainted syzkaller #0 PREEMPT(voluntary) [ 167.990346][ T8829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 167.990362][ T8829] Call Trace: [ 167.990369][ T8829] [ 167.990377][ T8829] __dump_stack+0x1d/0x30 [ 167.990433][ T8829] dump_stack_lvl+0xe8/0x140 [ 167.990458][ T8829] dump_stack+0x15/0x1b [ 167.990476][ T8829] should_fail_ex+0x265/0x280 [ 167.990521][ T8829] should_failslab+0x8c/0xb0 [ 167.990597][ T8829] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 167.990635][ T8829] ? __get_vm_area_node+0x106/0x1d0 [ 167.990671][ T8829] __get_vm_area_node+0x106/0x1d0 [ 167.990700][ T8829] __vmalloc_node_range_noprof+0x28c/0xed0 [ 167.990766][ T8829] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 167.990804][ T8829] ? __rcu_read_unlock+0x4f/0x70 [ 167.990839][ T8829] ? cred_has_capability+0x210/0x280 [ 167.990934][ T8829] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 167.990973][ T8829] __vmalloc_noprof+0x83/0xc0 [ 167.991003][ T8829] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 167.991091][ T8829] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 167.991129][ T8829] ? bpf_prog_alloc+0x2a/0x150 [ 167.991205][ T8829] bpf_prog_alloc+0x3c/0x150 [ 167.991278][ T8829] bpf_prog_load+0x506/0x1100 [ 167.991370][ T8829] ? security_bpf+0x2b/0x90 [ 167.991404][ T8829] __sys_bpf+0x469/0x7c0 [ 167.991519][ T8829] __x64_sys_bpf+0x41/0x50 [ 167.991557][ T8829] x64_sys_call+0x2aee/0x3000 [ 167.991583][ T8829] do_syscall_64+0xd2/0x200 [ 167.991642][ T8829] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 167.991674][ T8829] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 167.991721][ T8829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.991746][ T8829] RIP: 0033:0x7f1f2dc2eec9 [ 167.991766][ T8829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.991789][ T8829] RSP: 002b:00007f1f2c68f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 167.991815][ T8829] RAX: ffffffffffffffda RBX: 00007f1f2de85fa0 RCX: 00007f1f2dc2eec9 [ 167.991889][ T8829] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 167.991913][ T8829] RBP: 00007f1f2c68f090 R08: 0000000000000000 R09: 0000000000000000 [ 167.991929][ T8829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.991944][ T8829] R13: 00007f1f2de86038 R14: 00007f1f2de85fa0 R15: 00007ffd680db458 [ 167.991966][ T8829] [ 167.991975][ T8829] syz.5.1626: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 168.115340][ T8833] loop1: detected capacity change from 0 to 8192 [ 168.118897][ T8829] ,cpuset=/,mems_allowed=0 [ 168.118941][ T8829] CPU: 0 UID: 0 PID: 8829 Comm: syz.5.1626 Not tainted syzkaller #0 PREEMPT(voluntary) [ 168.118973][ T8829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 168.119045][ T8829] Call Trace: [ 168.119055][ T8829] [ 168.119068][ T8829] __dump_stack+0x1d/0x30 [ 168.119099][ T8829] dump_stack_lvl+0xe8/0x140 [ 168.119132][ T8829] dump_stack+0x15/0x1b [ 168.119157][ T8829] warn_alloc+0x12b/0x1a0 [ 168.119206][ T8829] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 168.119254][ T8829] ? __rcu_read_unlock+0x4f/0x70 [ 168.119302][ T8829] ? cred_has_capability+0x210/0x280 [ 168.119415][ T8829] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 168.119460][ T8829] __vmalloc_noprof+0x83/0xc0 [ 168.119504][ T8829] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 168.119549][ T8829] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 168.119658][ T8829] ? bpf_prog_alloc+0x2a/0x150 [ 168.119702][ T8829] bpf_prog_alloc+0x3c/0x150 [ 168.119775][ T8829] bpf_prog_load+0x506/0x1100 [ 168.119813][ T8829] ? security_bpf+0x2b/0x90 [ 168.119848][ T8829] __sys_bpf+0x469/0x7c0 [ 168.119934][ T8829] __x64_sys_bpf+0x41/0x50 [ 168.119976][ T8829] x64_sys_call+0x2aee/0x3000 [ 168.120006][ T8829] do_syscall_64+0xd2/0x200 [ 168.120097][ T8829] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 168.120135][ T8829] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 168.120165][ T8829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.120197][ T8829] RIP: 0033:0x7f1f2dc2eec9 [ 168.120218][ T8829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.120269][ T8829] RSP: 002b:00007f1f2c68f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 168.120295][ T8829] RAX: ffffffffffffffda RBX: 00007f1f2de85fa0 RCX: 00007f1f2dc2eec9 [ 168.120313][ T8829] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 168.120331][ T8829] RBP: 00007f1f2c68f090 R08: 0000000000000000 R09: 0000000000000000 [ 168.120402][ T8829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.120420][ T8829] R13: 00007f1f2de86038 R14: 00007f1f2de85fa0 R15: 00007ffd680db458 [ 168.120449][ T8829] [ 168.120494][ T8829] Mem-Info: [ 168.320054][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 168.320075][ T29] audit: type=1326 audit(1760006349.149:7958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8824 comm="syz.4.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 168.322441][ T8829] active_anon:5267 inactive_anon:0 isolated_anon:0 [ 168.322441][ T8829] active_file:18977 inactive_file:2340 isolated_file:0 [ 168.322441][ T8829] unevictable:0 dirty:575 writeback:0 [ 168.322441][ T8829] slab_reclaimable:3410 slab_unreclaimable:17348 [ 168.322441][ T8829] mapped:30570 shmem:1324 pagetables:1203 [ 168.322441][ T8829] sec_pagetables:0 bounce:0 [ 168.322441][ T8829] kernel_misc_reclaimable:0 [ 168.322441][ T8829] free:1852502 free_pcp:39510 free_cma:0 [ 168.329865][ T29] audit: type=1326 audit(1760006349.159:7959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8824 comm="syz.4.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 168.332706][ T8829] Node 0 active_anon:21068kB inactive_anon:0kB active_file:75908kB inactive_file:9360kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122280kB dirty:2300kB writeback:0kB shmem:5296kB kernel_stack:5424kB pagetables:4812kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 168.348694][ T29] audit: type=1326 audit(1760006349.169:7960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8824 comm="syz.4.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 168.352549][ T8829] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 168.357080][ T29] audit: type=1326 audit(1760006349.169:7961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8824 comm="syz.4.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 168.361402][ T8829] lowmem_reserve[]: 0 [ 168.365850][ T29] audit: type=1326 audit(1760006349.169:7962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8824 comm="syz.4.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 168.370539][ T8829] 2883 [ 168.375041][ T29] audit: type=1326 audit(1760006349.169:7963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8824 comm="syz.4.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 168.381149][ T8829] 7862 7862 [ 168.381170][ T8829] Node 0 DMA32 free:2949160kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2952692kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 168.386958][ T29] audit: type=1326 audit(1760006349.169:7964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8824 comm="syz.4.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 168.392996][ T8829] lowmem_reserve[]: 0 0 [ 168.397452][ T29] audit: type=1326 audit(1760006349.169:7965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8824 comm="syz.4.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 168.417298][ T8829] 4978 4978 [ 168.820621][ T8829] Node 0 Normal free:4453428kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21172kB inactive_anon:0kB active_file:75908kB inactive_file:9700kB unevictable:0kB writepending:2696kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:146020kB local_pcp:34752kB free_cma:0kB [ 168.854036][ T8829] lowmem_reserve[]: 0 0 0 0 [ 168.858741][ T8829] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 168.871512][ T8829] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 6*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949160kB [ 168.887852][ T8829] Node 0 Normal: 862*4kB (UME) 258*8kB (UM) 187*16kB (UME) 84*32kB (UME) 7*64kB (UE) 44*128kB (UME) 65*256kB (UME) 26*512kB (UM) 15*1024kB (UME) 14*2048kB (UM) 1065*4096kB (UM) = 4453496kB [ 168.907010][ T8829] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 168.916569][ T8829] 22727 total pagecache pages [ 168.921289][ T8829] 0 pages in swap cache [ 168.925469][ T8829] Free swap = 124996kB [ 168.929785][ T8829] Total swap = 124996kB [ 168.933953][ T8829] 2097051 pages RAM [ 168.937916][ T8829] 0 pages HighMem/MovableOnly [ 168.942617][ T8829] 80478 pages reserved [ 168.947027][ T8826] team0: Port device dummy0 removed [ 168.958993][ T29] audit: type=1326 audit(1760006349.789:7966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8824 comm="syz.4.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 168.963935][ T8826] dummy0: entered promiscuous mode [ 168.982615][ T29] audit: type=1326 audit(1760006349.789:7967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8824 comm="syz.4.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 169.012523][ T8826] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 169.038243][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.074103][ T8843] loop2: detected capacity change from 0 to 512 [ 169.090099][ T8843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.103057][ T8843] ext4 filesystem being mounted at /309/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.129714][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.176784][ T8863] __nla_validate_parse: 11 callbacks suppressed [ 169.176809][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1633'. [ 169.204768][ T8865] loop2: detected capacity change from 0 to 1024 [ 169.220222][ T8865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 169.232620][ T8865] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.284823][ T8865] Invalid option length (1045175) for dns_resolver key [ 169.292811][ T8865] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.1634: lblock 3 mapped to illegal pblock 3 (length 1) [ 169.307219][ T8865] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 169.319632][ T8865] EXT4-fs (loop2): This should not happen!! Data will be lost [ 169.319632][ T8865] [ 169.352139][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 169.401652][ T8876] loop1: detected capacity change from 0 to 8192 [ 169.483729][ T8885] netlink: 'syz.2.1641': attribute type 1 has an invalid length. [ 169.498300][ T8885] 8021q: adding VLAN 0 to HW filter on device bond5 [ 169.508188][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1641'. [ 169.522695][ T8885] bond5 (unregistering): Released all slaves [ 169.571299][ T8889] loop4: detected capacity change from 0 to 2048 [ 169.579504][ T8889] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 2 [ 169.658499][ T293] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.666828][ T293] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.683117][ T4736] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.698978][ T4736] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.715572][ T8897] bridge: RTM_NEWNEIGH with invalid ether address [ 169.754853][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1647'. [ 169.863632][ T8908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1649'. [ 169.966609][ T8910] loop2: detected capacity change from 0 to 8192 [ 170.269832][ T8925] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.291673][ T8927] FAULT_INJECTION: forcing a failure. [ 170.291673][ T8927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.304942][ T8927] CPU: 0 UID: 0 PID: 8927 Comm: syz.3.1656 Not tainted syzkaller #0 PREEMPT(voluntary) [ 170.304979][ T8927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 170.305003][ T8927] Call Trace: [ 170.305011][ T8927] [ 170.305062][ T8927] __dump_stack+0x1d/0x30 [ 170.305090][ T8927] dump_stack_lvl+0xe8/0x140 [ 170.305114][ T8927] dump_stack+0x15/0x1b [ 170.305129][ T8927] should_fail_ex+0x265/0x280 [ 170.305201][ T8927] should_fail+0xb/0x20 [ 170.305274][ T8927] should_fail_usercopy+0x1a/0x20 [ 170.305293][ T8927] _copy_from_user+0x1c/0xb0 [ 170.305314][ T8927] bpf_test_init+0xb9/0x140 [ 170.305339][ T8927] bpf_prog_test_run_skb+0x161/0xbf0 [ 170.305363][ T8927] ? __rcu_read_unlock+0x4f/0x70 [ 170.305453][ T8927] ? __fget_files+0x184/0x1c0 [ 170.305479][ T8927] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 170.305527][ T8927] bpf_prog_test_run+0x227/0x390 [ 170.305628][ T8927] __sys_bpf+0x4c0/0x7c0 [ 170.305665][ T8927] __x64_sys_bpf+0x41/0x50 [ 170.305713][ T8927] x64_sys_call+0x2aee/0x3000 [ 170.305733][ T8927] do_syscall_64+0xd2/0x200 [ 170.305756][ T8927] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 170.305836][ T8927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.305929][ T8927] RIP: 0033:0x7f7343aaeec9 [ 170.305943][ T8927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.305960][ T8927] RSP: 002b:00007f7342517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.305977][ T8927] RAX: ffffffffffffffda RBX: 00007f7343d05fa0 RCX: 00007f7343aaeec9 [ 170.305989][ T8927] RDX: 000000000000001e RSI: 0000200000000080 RDI: 000000000000000a [ 170.306008][ T8927] RBP: 00007f7342517090 R08: 0000000000000000 R09: 0000000000000000 [ 170.306019][ T8927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.306037][ T8927] R13: 00007f7343d06038 R14: 00007f7343d05fa0 R15: 00007ffc897df428 [ 170.306055][ T8927] [ 170.505177][ T8925] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.531626][ T8933] x_tables: duplicate underflow at hook 1 [ 170.565239][ T8925] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.640413][ T8925] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.709383][ T8939] loop4: detected capacity change from 0 to 512 [ 170.721947][ T8939] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 170.733705][ T8939] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 170.743959][ T8939] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1660: Corrupt directory, running e2fsck is recommended [ 170.759849][ T293] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.768604][ T8939] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 170.779686][ T8939] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.1660: corrupted in-inode xattr: invalid ea_ino [ 170.793419][ T8939] EXT4-fs (loop4): Remounting filesystem read-only [ 170.800687][ T8939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.816067][ T8933] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1658'. [ 170.816649][ T8939] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 170.837615][ T8939] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 170.847834][ T8939] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1660: Corrupt directory, running e2fsck is recommended [ 170.854000][ T293] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.864996][ T8939] netlink: 'syz.4.1660': attribute type 10 has an invalid length. [ 170.870119][ T8942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1661'. [ 170.885989][ T293] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.908869][ T8939] bond0: (slave dummy0): Releasing backup interface [ 170.923614][ T8939] team0: Port device dummy0 added [ 170.931854][ T8939] netlink: 'syz.4.1660': attribute type 10 has an invalid length. [ 170.938626][ T293] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.953211][ T8939] team0: Port device dummy0 removed [ 170.960278][ T8939] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 171.003098][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.005507][ T8945] syzkaller0: entered promiscuous mode [ 171.017705][ T8945] syzkaller0: entered allmulticast mode [ 171.164444][ T8955] syzkaller0: entered promiscuous mode [ 171.170067][ T8955] syzkaller0: entered allmulticast mode [ 171.211423][ T8953] loop5: detected capacity change from 0 to 512 [ 171.221720][ T8962] loop1: detected capacity change from 0 to 1024 [ 171.230619][ T8962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.240466][ T8953] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.255917][ T8953] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.285882][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.436228][ T5417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.519199][ T8977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1673'. [ 171.538768][ T8971] loop5: detected capacity change from 0 to 8192 [ 171.570074][ T8981] loop1: detected capacity change from 0 to 512 [ 171.582649][ T8981] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 171.594247][ T8981] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 171.604617][ T8981] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1675: Corrupt directory, running e2fsck is recommended [ 171.625906][ T8981] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 171.636369][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1674'. [ 171.646256][ T8981] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.1675: corrupted in-inode xattr: invalid ea_ino [ 171.660392][ T8979] loop3: detected capacity change from 0 to 512 [ 171.668569][ T8981] EXT4-fs (loop1): Remounting filesystem read-only [ 171.676233][ T8981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.691167][ T8981] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 171.703622][ T8981] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 171.713895][ T8981] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1675: Corrupt directory, running e2fsck is recommended [ 171.727985][ T8981] netlink: 'syz.1.1675': attribute type 10 has an invalid length. [ 171.778989][ T8991] netlink: 'syz.1.1675': attribute type 10 has an invalid length. [ 171.790002][ T8981] bond0: (slave dummy0): Releasing backup interface [ 171.797852][ T8981] dummy0: left promiscuous mode [ 171.805153][ T8981] team0: Port device dummy0 added [ 171.838060][ T8991] team0: Port device dummy0 removed [ 171.854401][ T8993] netlink: 'syz.3.1677': attribute type 13 has an invalid length. [ 171.863028][ T8991] dummy0: entered promiscuous mode [ 171.869681][ T8991] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 171.903219][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.923541][ T8993] gretap0: refused to change device tx_queue_len [ 171.930744][ T8993] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 172.013160][ T8995] syzkaller0: entered promiscuous mode [ 172.018876][ T8995] syzkaller0: entered allmulticast mode [ 172.186441][ T9002] loop2: detected capacity change from 0 to 512 [ 172.201862][ T9002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.214524][ T9002] ext4 filesystem being mounted at /324/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.416095][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.508804][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1687'. [ 172.544614][ T9022] loop2: detected capacity change from 0 to 512 [ 172.554751][ T9022] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 172.566587][ T9022] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 172.576785][ T9022] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1688: Corrupt directory, running e2fsck is recommended [ 172.590318][ T9022] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 172.598720][ T9022] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.1688: corrupted in-inode xattr: invalid ea_ino [ 172.613420][ T9022] EXT4-fs (loop2): Remounting filesystem read-only [ 172.613766][ T9026] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.620613][ T9022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.651736][ T9022] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 172.663403][ T9022] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 172.673670][ T9022] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1688: Corrupt directory, running e2fsck is recommended [ 172.690960][ T9022] netlink: 'syz.2.1688': attribute type 10 has an invalid length. [ 172.715666][ T9022] bond0: (slave dummy0): Releasing backup interface [ 172.727042][ T9022] dummy0: left promiscuous mode [ 172.739476][ T9022] team0: Port device dummy0 added [ 172.754393][ T9022] netlink: 'syz.2.1688': attribute type 10 has an invalid length. [ 172.766076][ T9022] team0: Port device dummy0 removed [ 172.775247][ T9022] dummy0: entered promiscuous mode [ 172.781004][ T9022] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 172.796644][ T9034] loop5: detected capacity change from 0 to 8192 [ 172.814013][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.876178][ T9045] loop3: detected capacity change from 0 to 512 [ 172.891852][ T9050] netlink: 'syz.2.1700': attribute type 13 has an invalid length. [ 172.901532][ T9050] gretap0: refused to change device tx_queue_len [ 172.908580][ T9050] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 172.940514][ T9045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.953347][ T9045] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.956486][ T9055] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.984724][ T9055] FAULT_INJECTION: forcing a failure. [ 172.984724][ T9055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.998017][ T9055] CPU: 1 UID: 0 PID: 9055 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 172.998068][ T9055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 172.998085][ T9055] Call Trace: [ 172.998093][ T9055] [ 172.998102][ T9055] __dump_stack+0x1d/0x30 [ 172.998129][ T9055] dump_stack_lvl+0xe8/0x140 [ 172.998210][ T9055] dump_stack+0x15/0x1b [ 172.998231][ T9055] should_fail_ex+0x265/0x280 [ 172.998273][ T9055] should_fail+0xb/0x20 [ 172.998327][ T9055] should_fail_usercopy+0x1a/0x20 [ 172.998352][ T9055] _copy_from_user+0x1c/0xb0 [ 172.998453][ T9055] scsi_ioctl+0x116f/0x14d0 [ 172.998499][ T9055] ? avc_has_perm+0xf7/0x180 [ 172.998548][ T9055] ? file_has_perm+0x35c/0x3a0 [ 172.998609][ T9055] ? do_vfs_ioctl+0x866/0xe10 [ 172.998629][ T9055] sg_ioctl+0xdf6/0x1360 [ 172.998658][ T9055] ? __pfx_sg_ioctl+0x10/0x10 [ 172.998681][ T9055] __se_sys_ioctl+0xcb/0x140 [ 172.998775][ T9055] __x64_sys_ioctl+0x43/0x50 [ 172.998817][ T9055] x64_sys_call+0x1816/0x3000 [ 172.998845][ T9055] do_syscall_64+0xd2/0x200 [ 172.998898][ T9055] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 172.998933][ T9055] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 172.998960][ T9055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.999050][ T9055] RIP: 0033:0x7f93897eeec9 [ 172.999069][ T9055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.999093][ T9055] RSP: 002b:00007f9388257038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.999153][ T9055] RAX: ffffffffffffffda RBX: 00007f9389a45fa0 RCX: 00007f93897eeec9 [ 172.999169][ T9055] RDX: 00002000000000c0 RSI: 0000000000000001 RDI: 0000000000000006 [ 172.999185][ T9055] RBP: 00007f9388257090 R08: 0000000000000000 R09: 0000000000000000 [ 172.999201][ T9055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.999274][ T9055] R13: 00007f9389a46038 R14: 00007f9389a45fa0 R15: 00007ffe6674e9b8 [ 172.999300][ T9055] [ 173.103089][ T9059] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1702'. [ 173.218483][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.356001][ T9077] x_tables: duplicate underflow at hook 1 [ 173.362536][ T9072] loop3: detected capacity change from 0 to 8192 [ 173.362976][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 173.363059][ T29] audit: type=1326 audit(1760006354.199:8111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9076 comm="syz.2.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93897eeec9 code=0x7ffc0000 [ 173.406385][ T29] audit: type=1326 audit(1760006354.239:8112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9076 comm="syz.2.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93897eeec9 code=0x7ffc0000 [ 173.430279][ T29] audit: type=1326 audit(1760006354.239:8113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9076 comm="syz.2.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f93897eeec9 code=0x7ffc0000 [ 173.454012][ T29] audit: type=1326 audit(1760006354.239:8114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9076 comm="syz.2.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93897eeec9 code=0x7ffc0000 [ 173.477573][ T29] audit: type=1326 audit(1760006354.239:8115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz.2.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9389821785 code=0x7ffc0000 [ 173.501189][ T29] audit: type=1326 audit(1760006354.239:8116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9076 comm="syz.2.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f93897eeec9 code=0x7ffc0000 [ 173.524900][ T29] audit: type=1326 audit(1760006354.239:8117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9076 comm="syz.2.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93897eeec9 code=0x7ffc0000 [ 173.548447][ T29] audit: type=1326 audit(1760006354.239:8118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9076 comm="syz.2.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93897eeec9 code=0x7ffc0000 [ 173.572264][ T29] audit: type=1326 audit(1760006354.239:8119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9076 comm="syz.2.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93897eeec9 code=0x7ffc0000 [ 173.595782][ T29] audit: type=1326 audit(1760006354.239:8120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9076 comm="syz.2.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93897eeec9 code=0x7ffc0000 [ 173.661346][ T9082] 9pnet_fd: Insufficient options for proto=fd [ 173.850406][ T9090] loop4: detected capacity change from 0 to 512 [ 173.860034][ T9090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.872831][ T9090] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.899682][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.983660][ T9104] loop4: detected capacity change from 0 to 164 [ 174.092706][ T9108] loop4: detected capacity change from 0 to 8192 [ 174.127371][ T9111] 9pnet_fd: Insufficient options for proto=fd [ 174.156000][ T9113] loop5: detected capacity change from 0 to 1024 [ 174.166246][ T9113] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.211945][ T5417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.282004][ T9120] __nla_validate_parse: 4 callbacks suppressed [ 174.282022][ T9120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1724'. [ 174.344202][ T9124] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1723'. [ 174.439863][ T9130] loop2: detected capacity change from 0 to 512 [ 174.460752][ T9130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.473387][ T9130] ext4 filesystem being mounted at /338/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.509007][ T9134] loop3: detected capacity change from 0 to 1024 [ 174.517837][ T9134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.575386][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.588902][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1730'. [ 174.622589][ T9139] FAULT_INJECTION: forcing a failure. [ 174.622589][ T9139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.635791][ T9139] CPU: 0 UID: 0 PID: 9139 Comm: syz.3.1729 Not tainted syzkaller #0 PREEMPT(voluntary) [ 174.635827][ T9139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 174.635844][ T9139] Call Trace: [ 174.635852][ T9139] [ 174.635863][ T9139] __dump_stack+0x1d/0x30 [ 174.635891][ T9139] dump_stack_lvl+0xe8/0x140 [ 174.635944][ T9139] dump_stack+0x15/0x1b [ 174.635960][ T9139] should_fail_ex+0x265/0x280 [ 174.636005][ T9139] should_fail+0xb/0x20 [ 174.636053][ T9139] should_fail_usercopy+0x1a/0x20 [ 174.636079][ T9139] _copy_from_iter+0xd2/0xe80 [ 174.636105][ T9139] ? should_failslab+0x8c/0xb0 [ 174.636142][ T9139] ? __build_skb_around+0x1ab/0x200 [ 174.636185][ T9139] ? __build_skb+0x59/0x70 [ 174.636206][ T9139] ? is_vmalloc_addr+0x37/0x90 [ 174.636291][ T9139] netlink_sendmsg+0x471/0x6b0 [ 174.636326][ T9139] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.636372][ T9139] __sock_sendmsg+0x142/0x180 [ 174.636446][ T9139] ____sys_sendmsg+0x31e/0x4e0 [ 174.636489][ T9139] ___sys_sendmsg+0x17b/0x1d0 [ 174.636596][ T9139] __x64_sys_sendmsg+0xd4/0x160 [ 174.636642][ T9139] x64_sys_call+0x191e/0x3000 [ 174.636729][ T9139] do_syscall_64+0xd2/0x200 [ 174.636761][ T9139] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 174.636799][ T9139] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 174.636828][ T9139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.636850][ T9139] RIP: 0033:0x7f7343aaeec9 [ 174.636920][ T9139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.636940][ T9139] RSP: 002b:00007f7342517038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.636965][ T9139] RAX: ffffffffffffffda RBX: 00007f7343d05fa0 RCX: 00007f7343aaeec9 [ 174.636982][ T9139] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 174.636998][ T9139] RBP: 00007f7342517090 R08: 0000000000000000 R09: 0000000000000000 [ 174.637088][ T9139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.637104][ T9139] R13: 00007f7343d06038 R14: 00007f7343d05fa0 R15: 00007ffc897df428 [ 174.637193][ T9139] [ 174.888614][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.901980][ T9141] 9pnet_fd: Insufficient options for proto=fd [ 174.991126][ T9151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1734'. [ 175.017301][ T9155] loop3: detected capacity change from 0 to 1024 [ 175.025938][ T9145] loop1: detected capacity change from 0 to 8192 [ 175.040667][ T9155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.171655][ T9162] loop5: detected capacity change from 0 to 1024 [ 175.181298][ T9162] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.219114][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.269303][ T5417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.317642][ T9175] loop3: detected capacity change from 0 to 512 [ 175.330977][ T9175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.343933][ T9175] ext4 filesystem being mounted at /343/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.345449][ T9170] lo speed is unknown, defaulting to 1000 [ 175.537776][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.551850][ T9182] loop5: detected capacity change from 0 to 8192 [ 175.674823][ T9197] netlink: 'syz.3.1751': attribute type 13 has an invalid length. [ 175.764738][ T9197] gretap0: refused to change device tx_queue_len [ 175.796160][ T9197] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 175.814567][ T9201] loop2: detected capacity change from 0 to 512 [ 175.830802][ T9201] ext4 filesystem being mounted at /342/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.058610][ T9210] loop2: detected capacity change from 0 to 1024 [ 176.070552][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1755'. [ 176.172399][ T9217] loop4: detected capacity change from 0 to 512 [ 176.223845][ T9219] pim6reg: entered allmulticast mode [ 176.230033][ T9217] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 176.263314][ T9217] EXT4-fs (loop4): 1 truncate cleaned up [ 176.285192][ T9224] loop2: detected capacity change from 0 to 1024 [ 176.342023][ T9217] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz.4.1758: invalid fast symlink length 39 [ 176.354017][ T9217] EXT4-fs (loop4): Remounting filesystem read-only [ 176.448485][ T9240] loop3: detected capacity change from 0 to 1024 [ 176.529379][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1770'. [ 176.541140][ T9237] loop4: detected capacity change from 0 to 512 [ 176.551731][ T9245] netlink: 'syz.1.1769': attribute type 1 has an invalid length. [ 176.569632][ T9237] ext4 filesystem being mounted at /359/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.569709][ T9245] 8021q: adding VLAN 0 to HW filter on device bond11 [ 176.607185][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1769'. [ 176.632449][ T9255] bond11 (unregistering): Released all slaves [ 176.687689][ T9253] loop3: detected capacity change from 0 to 8192 [ 176.936126][ T9269] loop1: detected capacity change from 0 to 512 [ 176.970007][ T9269] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.013818][ T9280] FAULT_INJECTION: forcing a failure. [ 177.013818][ T9280] name failslab, interval 1, probability 0, space 0, times 0 [ 177.013871][ T9280] CPU: 0 UID: 0 PID: 9280 Comm: syz.1.1780 Not tainted syzkaller #0 PREEMPT(voluntary) [ 177.013912][ T9280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 177.013971][ T9280] Call Trace: [ 177.013981][ T9280] [ 177.013991][ T9280] __dump_stack+0x1d/0x30 [ 177.014018][ T9280] dump_stack_lvl+0xe8/0x140 [ 177.014041][ T9280] dump_stack+0x15/0x1b [ 177.014058][ T9280] should_fail_ex+0x265/0x280 [ 177.014098][ T9280] should_failslab+0x8c/0xb0 [ 177.014166][ T9280] __kmalloc_noprof+0xa5/0x570 [ 177.014193][ T9280] ? vc_do_resize+0x20e/0xd70 [ 177.014229][ T9280] vc_do_resize+0x20e/0xd70 [ 177.014307][ T9280] ? finish_task_switch+0xad/0x2b0 [ 177.014339][ T9280] ? __schedule+0x6b9/0xb30 [ 177.014386][ T9280] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 177.014415][ T9280] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 177.014446][ T9280] ? vgacon_set_cursor_size+0x2b3/0x310 [ 177.014476][ T9280] __vc_resize+0x3c/0x50 [ 177.014580][ T9280] vgacon_adjust_height+0x3cb/0x450 [ 177.014616][ T9280] vgacon_font_set+0x191/0x1b0 [ 177.014643][ T9280] ? __pfx_vgacon_font_set+0x10/0x10 [ 177.014748][ T9280] con_font_op+0x8b6/0x930 [ 177.014772][ T9280] ? selinux_capable+0x31/0x40 [ 177.014826][ T9280] vt_ioctl+0x153d/0x18a0 [ 177.014847][ T9280] tty_ioctl+0x7d5/0xb80 [ 177.014881][ T9280] ? __pfx_tty_ioctl+0x10/0x10 [ 177.014905][ T9280] __se_sys_ioctl+0xcb/0x140 [ 177.014943][ T9280] __x64_sys_ioctl+0x43/0x50 [ 177.015045][ T9280] x64_sys_call+0x1816/0x3000 [ 177.015074][ T9280] do_syscall_64+0xd2/0x200 [ 177.015111][ T9280] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 177.015143][ T9280] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 177.015164][ T9280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.015189][ T9280] RIP: 0033:0x7fee1361eec9 [ 177.015270][ T9280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.015377][ T9280] RSP: 002b:00007fee1207f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.015398][ T9280] RAX: ffffffffffffffda RBX: 00007fee13875fa0 RCX: 00007fee1361eec9 [ 177.015410][ T9280] RDX: 0000200000000100 RSI: 0000000000004b72 RDI: 0000000000000004 [ 177.015426][ T9280] RBP: 00007fee1207f090 R08: 0000000000000000 R09: 0000000000000000 [ 177.015443][ T9280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.015459][ T9280] R13: 00007fee13876038 R14: 00007fee13875fa0 R15: 00007fff04daae28 [ 177.015479][ T9280] [ 177.211544][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1782'. [ 177.404498][ T9295] loop5: detected capacity change from 0 to 2048 [ 177.522875][ T9295] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1784: bg 0: block 234: padding at end of block bitmap is not set [ 177.566492][ T9295] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1784'. [ 177.624926][ T9304] loop5: detected capacity change from 0 to 164 [ 177.784293][ T9308] loop3: detected capacity change from 0 to 1024 [ 177.827983][ T9313] loop1: detected capacity change from 0 to 1024 [ 177.841709][ T9314] loop2: detected capacity change from 0 to 512 [ 177.861220][ T9313] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.882754][ T9314] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.906251][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1793'. [ 177.954096][ T9326] loop3: detected capacity change from 0 to 1024 [ 177.964401][ T9313] Invalid option length (1045175) for dns_resolver key [ 177.974889][ T9313] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.1791: lblock 3 mapped to illegal pblock 3 (length 1) [ 177.991366][ T9313] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 178.003885][ T9313] EXT4-fs (loop1): This should not happen!! Data will be lost [ 178.003885][ T9313] [ 178.055818][ T9338] netlink: 'syz.4.1800': attribute type 13 has an invalid length. [ 178.067856][ T9338] gretap0: refused to change device tx_queue_len [ 178.074382][ T9338] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 178.181478][ T9349] loop5: detected capacity change from 0 to 512 [ 178.205899][ T9353] loop4: detected capacity change from 0 to 512 [ 178.214538][ T9357] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 178.221099][ T9357] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 178.228626][ T9357] vhci_hcd vhci_hcd.0: Device attached [ 178.235351][ T9349] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.278495][ T9358] vhci_hcd: connection closed [ 178.279324][ T4737] vhci_hcd: stop threads [ 178.288305][ T4737] vhci_hcd: release socket [ 178.292791][ T4737] vhci_hcd: disconnect device [ 178.338011][ T9367] loop5: detected capacity change from 0 to 1024 [ 178.345594][ T9365] loop2: detected capacity change from 0 to 1024 [ 178.361286][ T9367] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.416559][ T9367] Invalid option length (1045175) for dns_resolver key [ 178.424569][ T9367] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.1809: lblock 3 mapped to illegal pblock 3 (length 1) [ 178.438819][ T9367] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 178.451152][ T9367] EXT4-fs (loop5): This should not happen!! Data will be lost [ 178.451152][ T9367] [ 178.459935][ T9379] netlink: 'syz.2.1811': attribute type 13 has an invalid length. [ 178.469601][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 178.469614][ T29] audit: type=1326 audit(1760006359.309:8250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 178.499342][ T29] audit: type=1326 audit(1760006359.309:8251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 178.523275][ T29] audit: type=1326 audit(1760006359.309:8252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 178.523288][ T9379] gretap0: refused to change device tx_queue_len [ 178.523995][ T9379] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 178.546844][ T29] audit: type=1326 audit(1760006359.309:8253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 178.546884][ T29] audit: type=1326 audit(1760006359.309:8254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 178.546920][ T29] audit: type=1326 audit(1760006359.309:8255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 178.553475][ T3429] page_pool_release_retry() stalled pool shutdown: id 65, 1 inflight 60 sec [ 178.569380][ T29] audit: type=1326 audit(1760006359.309:8256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 178.671837][ T29] audit: type=1326 audit(1760006359.309:8257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 178.695404][ T29] audit: type=1326 audit(1760006359.309:8258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 178.719269][ T29] audit: type=1326 audit(1760006359.309:8259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 178.750919][ T9377] FAULT_INJECTION: forcing a failure. [ 178.750919][ T9377] name failslab, interval 1, probability 0, space 0, times 0 [ 178.763737][ T9377] CPU: 1 UID: 0 PID: 9377 Comm: syz.4.1813 Not tainted syzkaller #0 PREEMPT(voluntary) [ 178.763772][ T9377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 178.763818][ T9377] Call Trace: [ 178.763825][ T9377] [ 178.763909][ T9377] __dump_stack+0x1d/0x30 [ 178.763937][ T9377] dump_stack_lvl+0xe8/0x140 [ 178.763963][ T9377] dump_stack+0x15/0x1b [ 178.764028][ T9377] should_fail_ex+0x265/0x280 [ 178.764062][ T9377] ? audit_log_d_path+0x8d/0x150 [ 178.764081][ T9377] should_failslab+0x8c/0xb0 [ 178.764137][ T9377] __kmalloc_cache_noprof+0x4c/0x4a0 [ 178.764170][ T9377] audit_log_d_path+0x8d/0x150 [ 178.764196][ T9377] audit_log_d_path_exe+0x42/0x70 [ 178.764240][ T9377] audit_log_task+0x1e9/0x250 [ 178.764272][ T9377] ? kstrtouint+0x76/0xc0 [ 178.764309][ T9377] audit_seccomp+0x61/0x100 [ 178.764400][ T9377] ? __seccomp_filter+0x82d/0x1250 [ 178.764435][ T9377] __seccomp_filter+0x83e/0x1250 [ 178.764467][ T9377] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 178.764582][ T9377] ? vfs_write+0x7e8/0x960 [ 178.764609][ T9377] __secure_computing+0x82/0x150 [ 178.764637][ T9377] syscall_trace_enter+0xcf/0x1e0 [ 178.764776][ T9377] do_syscall_64+0xac/0x200 [ 178.764803][ T9377] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 178.764839][ T9377] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 178.764876][ T9377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.764905][ T9377] RIP: 0033:0x7f1382cdeec9 [ 178.764925][ T9377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.764947][ T9377] RSP: 002b:00007f1381747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000026 [ 178.764966][ T9377] RAX: ffffffffffffffda RBX: 00007f1382f35fa0 RCX: 00007f1382cdeec9 [ 178.764979][ T9377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 178.764998][ T9377] RBP: 00007f1381747090 R08: 0000000000000000 R09: 0000000000000000 [ 178.765015][ T9377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.765030][ T9377] R13: 00007f1382f36038 R14: 00007f1382f35fa0 R15: 00007ffc4e5c6b38 [ 178.765124][ T9377] [ 178.765171][ T9377] syz.4.1813 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 178.929641][ T9387] loop3: detected capacity change from 0 to 512 [ 178.955657][ T9389] netlink: 'syz.5.1814': attribute type 10 has an invalid length. [ 179.005672][ T9383] loop2: detected capacity change from 0 to 512 [ 179.013223][ T9391] netlink: 'syz.5.1814': attribute type 10 has an invalid length. [ 179.026013][ T9391] loop5: detected capacity change from 0 to 128 [ 179.030411][ T9387] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.050097][ T9383] ext4 filesystem being mounted at /355/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.076110][ T9389] bond0: (slave dummy0): Releasing backup interface [ 179.248697][ T9389] dummy0: left promiscuous mode [ 179.256225][ T9389] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 179.270420][ T9389] team0: Failed to send options change via netlink (err -105) [ 179.278006][ T9389] team0: Port device dummy0 added [ 179.310735][ T9401] __nla_validate_parse: 3 callbacks suppressed [ 179.310756][ T9401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1821'. [ 179.358856][ T9401] loop1: detected capacity change from 0 to 512 [ 179.435873][ T9409] loop3: detected capacity change from 0 to 512 [ 179.445893][ T9407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1823'. [ 179.469968][ T9409] ext4 filesystem being mounted at /362/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.575790][ T9422] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1825'. [ 179.608567][ T9416] loop4: detected capacity change from 0 to 8192 [ 179.653922][ T9429] loop5: detected capacity change from 0 to 1024 [ 179.849804][ T9442] loop3: detected capacity change from 0 to 512 [ 179.986006][ T9440] loop2: detected capacity change from 0 to 512 [ 179.999016][ T9442] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.015121][ T9440] ext4 filesystem being mounted at /358/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.318103][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1836'. [ 180.330354][ T9462] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1837'. [ 180.366312][ T9460] loop3: detected capacity change from 0 to 512 [ 180.435943][ T9465] loop2: detected capacity change from 0 to 8192 [ 180.455382][ T9475] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1839'. [ 180.536239][ T9483] loop5: detected capacity change from 0 to 1024 [ 180.634588][ T9491] loop3: detected capacity change from 0 to 8192 [ 180.652202][ T9486] loop4: detected capacity change from 0 to 512 [ 180.670803][ T9486] ext4 filesystem being mounted at /376/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.803153][ T9504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1851'. [ 180.821352][ T9504] bridge0: port 3(macvlan2) entered blocking state [ 180.828234][ T9504] bridge0: port 3(macvlan2) entered disabled state [ 180.848554][ T9504] macvlan2: entered allmulticast mode [ 180.854038][ T9504] bridge0: entered allmulticast mode [ 180.881852][ T9504] macvlan2: left allmulticast mode [ 180.887280][ T9504] bridge0: left allmulticast mode [ 181.226048][ T9514] loop2: detected capacity change from 0 to 8192 [ 181.276633][ T9518] loop1: detected capacity change from 0 to 512 [ 181.285573][ T9518] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 181.299701][ T9518] EXT4-fs (loop1): 1 truncate cleaned up [ 181.351457][ T9525] FAULT_INJECTION: forcing a failure. [ 181.351457][ T9525] name failslab, interval 1, probability 0, space 0, times 0 [ 181.364256][ T9525] CPU: 0 UID: 0 PID: 9525 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 181.364292][ T9525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 181.364306][ T9525] Call Trace: [ 181.364338][ T9525] [ 181.364349][ T9525] __dump_stack+0x1d/0x30 [ 181.364374][ T9525] dump_stack_lvl+0xe8/0x140 [ 181.364396][ T9525] dump_stack+0x15/0x1b [ 181.364412][ T9525] should_fail_ex+0x265/0x280 [ 181.364516][ T9525] ? bcm_rx_setup+0x2b1/0xe10 [ 181.364536][ T9525] should_failslab+0x8c/0xb0 [ 181.364570][ T9525] __kmalloc_cache_noprof+0x4c/0x4a0 [ 181.364606][ T9525] bcm_rx_setup+0x2b1/0xe10 [ 181.364684][ T9525] ? selinux_socket_sendmsg+0x175/0x1b0 [ 181.364709][ T9525] bcm_sendmsg+0x1b2/0x480 [ 181.364736][ T9525] ? __pfx_bcm_sendmsg+0x10/0x10 [ 181.364755][ T9525] __sock_sendmsg+0x142/0x180 [ 181.364819][ T9525] ____sys_sendmsg+0x31e/0x4e0 [ 181.364855][ T9525] ___sys_sendmsg+0x17b/0x1d0 [ 181.364933][ T9525] __x64_sys_sendmsg+0xd4/0x160 [ 181.364972][ T9525] x64_sys_call+0x191e/0x3000 [ 181.364994][ T9525] do_syscall_64+0xd2/0x200 [ 181.365017][ T9525] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 181.365062][ T9525] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 181.365091][ T9525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.365119][ T9525] RIP: 0033:0x7fee1361eec9 [ 181.365136][ T9525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.365167][ T9525] RSP: 002b:00007fee1207f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.365186][ T9525] RAX: ffffffffffffffda RBX: 00007fee13875fa0 RCX: 00007fee1361eec9 [ 181.365256][ T9525] RDX: 0000000024000895 RSI: 0000200000000640 RDI: 0000000000000003 [ 181.365272][ T9525] RBP: 00007fee1207f090 R08: 0000000000000000 R09: 0000000000000000 [ 181.365287][ T9525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.365304][ T9525] R13: 00007fee13876038 R14: 00007fee13875fa0 R15: 00007fff04daae28 [ 181.365362][ T9525] [ 181.390078][ T9526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1858'. [ 181.416918][ T9528] loop1: detected capacity change from 0 to 1024 [ 181.428252][ T9526] loop2: detected capacity change from 0 to 512 [ 181.723917][ T9533] loop1: detected capacity change from 0 to 512 [ 181.750259][ T9533] ext4 filesystem being mounted at /336/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.874344][ T9554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1870'. [ 181.976893][ T9552] loop3: detected capacity change from 0 to 8192 [ 181.987398][ T9563] loop1: detected capacity change from 0 to 512 [ 181.995249][ T9563] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 182.016530][ T9563] EXT4-fs (loop1): 1 truncate cleaned up [ 182.134858][ T9579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1880'. [ 182.239101][ T9581] loop1: detected capacity change from 0 to 512 [ 182.268302][ T9581] ext4 filesystem being mounted at /339/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.435695][ T9605] loop3: detected capacity change from 0 to 512 [ 182.444125][ T9605] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 182.456038][ T9605] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 182.466578][ T9605] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1891: Corrupt directory, running e2fsck is recommended [ 182.482822][ T9605] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 182.491520][ T9605] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.1891: corrupted in-inode xattr: invalid ea_ino [ 182.505504][ T9605] EXT4-fs (loop3): Remounting filesystem read-only [ 182.521484][ T9605] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 182.533200][ T9605] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 182.538279][ T9609] loop5: detected capacity change from 0 to 512 [ 182.543444][ T9605] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1891: Corrupt directory, running e2fsck is recommended [ 182.550919][ T9605] netlink: 'syz.3.1891': attribute type 10 has an invalid length. [ 182.586472][ T9605] .`: (slave dummy0): Releasing backup interface [ 182.600661][ T9605] team0: Port device dummy0 added [ 182.616351][ T9614] netlink: 'syz.3.1891': attribute type 10 has an invalid length. [ 182.627788][ T9614] team0: Port device dummy0 removed [ 182.640436][ T9609] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.646584][ T9614] .`: (slave dummy0): Enslaving as an active interface with an up link [ 182.703736][ T9622] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 182.710454][ T9622] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 182.718008][ T9622] vhci_hcd vhci_hcd.0: Device attached [ 182.727341][ T9623] vhci_hcd: connection closed [ 182.727664][ T293] vhci_hcd: stop threads [ 182.736789][ T293] vhci_hcd: release socket [ 182.741362][ T293] vhci_hcd: disconnect device [ 182.916011][ T9634] loop3: detected capacity change from 0 to 512 [ 182.940275][ T9634] ext4 filesystem being mounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 183.100888][ T9646] loop1: detected capacity change from 0 to 8192 [ 183.412460][ T9668] loop4: detected capacity change from 0 to 512 [ 183.427650][ T9668] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 183.598565][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 183.598583][ T29] audit: type=1326 audit(1760006364.429:8528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.4.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 183.628307][ T29] audit: type=1326 audit(1760006364.429:8529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.4.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 183.661382][ T9677] loop5: detected capacity change from 0 to 512 [ 183.683135][ T9678] loop4: detected capacity change from 0 to 2048 [ 183.700804][ T9677] ext4 filesystem being mounted at /275/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 183.748795][ T9678] loop4: p1 < > p4 [ 183.778693][ T9678] loop4: p4 size 8388608 extends beyond EOD, truncated [ 183.819123][ T29] audit: type=1326 audit(1760006364.639:8530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.4.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 183.842791][ T29] audit: type=1326 audit(1760006364.639:8531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.4.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 183.866313][ T29] audit: type=1326 audit(1760006364.639:8532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.4.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 183.889879][ T29] audit: type=1326 audit(1760006364.639:8533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.4.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 183.913387][ T29] audit: type=1326 audit(1760006364.639:8534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.4.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382cdeec9 code=0x7ffc0000 [ 184.029671][ T9699] loop4: detected capacity change from 0 to 512 [ 184.069326][ T9699] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 184.096858][ T9699] EXT4-fs (loop4): 1 truncate cleaned up [ 184.149640][ T29] audit: type=1326 audit(1760006364.979:8535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9706 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1361eec9 code=0x7ffc0000 [ 184.173230][ T29] audit: type=1326 audit(1760006364.979:8536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9706 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee1361eec9 code=0x7ffc0000 [ 184.197016][ T29] audit: type=1326 audit(1760006364.979:8537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9706 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1361eec9 code=0x7ffc0000 [ 184.224131][ T9710] x_tables: duplicate underflow at hook 1 [ 184.467640][ T9710] __nla_validate_parse: 7 callbacks suppressed [ 184.467660][ T9710] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1925'. [ 184.518108][ T9737] netlink: 'syz.4.1936': attribute type 1 has an invalid length. [ 184.523986][ T9739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1940'. [ 184.544219][ T9737] 8021q: adding VLAN 0 to HW filter on device bond8 [ 184.557983][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1936'. [ 184.570719][ T9737] bond8 (unregistering): Released all slaves [ 184.718142][ T9750] netlink: 'syz.4.1944': attribute type 1 has an invalid length. [ 184.729410][ T9751] loop5: detected capacity change from 0 to 1024 [ 184.742484][ T9750] 8021q: adding VLAN 0 to HW filter on device bond8 [ 184.755729][ T9750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1944'. [ 184.774032][ T9750] bond8 (unregistering): Released all slaves [ 184.799399][ T9751] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.813371][ T9760] FAULT_INJECTION: forcing a failure. [ 184.813371][ T9760] name failslab, interval 1, probability 0, space 0, times 0 [ 184.826187][ T9760] CPU: 1 UID: 0 PID: 9760 Comm: syz.3.1947 Not tainted syzkaller #0 PREEMPT(voluntary) [ 184.826215][ T9760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 184.826307][ T9760] Call Trace: [ 184.826315][ T9760] [ 184.826326][ T9760] __dump_stack+0x1d/0x30 [ 184.826382][ T9760] dump_stack_lvl+0xe8/0x140 [ 184.826403][ T9760] dump_stack+0x15/0x1b [ 184.826425][ T9760] should_fail_ex+0x265/0x280 [ 184.826538][ T9760] should_failslab+0x8c/0xb0 [ 184.826569][ T9760] __kmalloc_noprof+0xa5/0x570 [ 184.826668][ T9760] ? security_sk_alloc+0x52/0x120 [ 184.826696][ T9760] ? should_failslab+0x8c/0xb0 [ 184.826728][ T9760] security_sk_alloc+0x52/0x120 [ 184.826754][ T9760] sk_prot_alloc+0xc2/0x190 [ 184.826786][ T9760] sk_alloc+0x34/0x360 [ 184.826825][ T9760] bpf_prog_test_run_skb+0x251/0xbf0 [ 184.826861][ T9760] ? __rcu_read_unlock+0x4f/0x70 [ 184.826970][ T9760] ? __fget_files+0x184/0x1c0 [ 184.827004][ T9760] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 184.827036][ T9760] bpf_prog_test_run+0x227/0x390 [ 184.827125][ T9760] __sys_bpf+0x4c0/0x7c0 [ 184.827172][ T9760] __x64_sys_bpf+0x41/0x50 [ 184.827210][ T9760] x64_sys_call+0x2aee/0x3000 [ 184.827239][ T9760] do_syscall_64+0xd2/0x200 [ 184.827341][ T9760] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 184.827369][ T9760] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 184.827397][ T9760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.827497][ T9760] RIP: 0033:0x7f7343aaeec9 [ 184.827516][ T9760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.827545][ T9760] RSP: 002b:00007f7342517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 184.827627][ T9760] RAX: ffffffffffffffda RBX: 00007f7343d05fa0 RCX: 00007f7343aaeec9 [ 184.827641][ T9760] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 184.827655][ T9760] RBP: 00007f7342517090 R08: 0000000000000000 R09: 0000000000000000 [ 184.827671][ T9760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.827688][ T9760] R13: 00007f7343d06038 R14: 00007f7343d05fa0 R15: 00007ffc897df428 [ 184.827761][ T9760] [ 185.065934][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1949'. [ 185.077813][ T9764] bridge0: entered promiscuous mode [ 185.084479][ T9764] bridge0: port 3(macvlan2) entered blocking state [ 185.091226][ T9764] bridge0: port 3(macvlan2) entered disabled state [ 185.103236][ T9764] macvlan2: entered allmulticast mode [ 185.108815][ T9764] bridge0: entered allmulticast mode [ 185.118655][ T9764] macvlan2: left allmulticast mode [ 185.124018][ T9764] bridge0: left allmulticast mode [ 185.145968][ T9764] bridge0: left promiscuous mode [ 185.157874][ T9751] Invalid option length (1045175) for dns_resolver key [ 185.179311][ T9751] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.1945: lblock 3 mapped to illegal pblock 3 (length 1) [ 185.198470][ T9751] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 185.210805][ T9751] EXT4-fs (loop5): This should not happen!! Data will be lost [ 185.210805][ T9751] [ 185.258862][ T9771] netlink: 'syz.1.1951': attribute type 1 has an invalid length. [ 185.289129][ T9771] 8021q: adding VLAN 0 to HW filter on device bond11 [ 185.311207][ T9774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1951'. [ 185.338585][ T9776] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1952'. [ 185.391940][ T9774] bond11 (unregistering): Released all slaves [ 185.392093][ T9778] loop4: detected capacity change from 0 to 1024 [ 185.566336][ T9791] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1958'. [ 185.578716][ T9791] netlink: 'syz.1.1958': attribute type 9 has an invalid length. [ 185.586695][ T9791] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1958'. [ 185.595925][ T9791] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1958'. [ 185.872685][ T9801] loop2: detected capacity change from 0 to 512 [ 185.959477][ T9801] ext4 filesystem being mounted at /380/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.098982][ T9810] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 186.105551][ T9810] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 186.113078][ T9810] vhci_hcd vhci_hcd.0: Device attached [ 186.128516][ T9811] vhci_hcd: connection closed [ 186.128745][ T4765] vhci_hcd: stop threads [ 186.137760][ T4765] vhci_hcd: release socket [ 186.142369][ T4765] vhci_hcd: disconnect device [ 186.214440][ T9816] loop4: detected capacity change from 0 to 512 [ 186.231634][ T9816] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 186.243208][ T9816] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 186.253444][ T9816] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1965: Corrupt directory, running e2fsck is recommended [ 186.318202][ T9816] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 186.349036][ T9816] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.1965: corrupted in-inode xattr: invalid ea_ino [ 186.382775][ T9816] EXT4-fs (loop4): Remounting filesystem read-only [ 186.391850][ T9822] loop1: detected capacity change from 0 to 1024 [ 186.400087][ T9816] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 186.411939][ T9816] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 186.422222][ T9816] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1965: Corrupt directory, running e2fsck is recommended [ 186.450780][ T9816] netlink: 'syz.4.1965': attribute type 10 has an invalid length. [ 186.460904][ T9816] bond0: (slave dummy0): Releasing backup interface [ 186.470465][ T9816] team0: Port device dummy0 added [ 186.476711][ T9816] netlink: 'syz.4.1965': attribute type 10 has an invalid length. [ 186.486503][ T9816] team0: Port device dummy0 removed [ 186.494800][ T9816] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 186.517277][ T9833] netlink: 'syz.1.1973': attribute type 1 has an invalid length. [ 186.531711][ T9833] 8021q: adding VLAN 0 to HW filter on device bond11 [ 186.545904][ T9833] bond11 (unregistering): Released all slaves [ 186.770165][ T9848] loop3: detected capacity change from 0 to 512 [ 186.874888][ T9852] loop2: detected capacity change from 0 to 512 [ 186.896298][ T9852] ext4 filesystem being mounted at /384/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.278148][ T9869] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 187.284800][ T9869] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 187.292395][ T9869] vhci_hcd vhci_hcd.0: Device attached [ 187.309314][ T9872] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 187.342600][ T9870] vhci_hcd: connection closed [ 187.342855][ T4736] vhci_hcd: stop threads [ 187.352118][ T4736] vhci_hcd: release socket [ 187.356554][ T4736] vhci_hcd: disconnect device [ 187.395048][ T9874] loop3: detected capacity change from 0 to 512 [ 187.410815][ T9874] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 187.422375][ T9874] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 187.432536][ T9874] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1985: Corrupt directory, running e2fsck is recommended [ 187.464963][ T9874] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 187.482860][ T9874] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.1985: corrupted in-inode xattr: invalid ea_ino [ 187.496636][ T9874] EXT4-fs (loop3): Remounting filesystem read-only [ 187.507422][ T9874] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 187.518996][ T9874] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 187.529157][ T9874] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1985: Corrupt directory, running e2fsck is recommended [ 187.584225][ T9882] netlink: 'syz.3.1985': attribute type 10 has an invalid length. [ 187.614679][ T9882] .`: (slave dummy0): Releasing backup interface [ 187.624556][ T9882] team0: Port device dummy0 added [ 187.631726][ T9874] netlink: 'syz.3.1985': attribute type 10 has an invalid length. [ 187.643091][ T9874] team0: Port device dummy0 removed [ 187.666746][ T9874] .`: (slave dummy0): Enslaving as an active interface with an up link [ 187.905290][ T9890] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.950286][ T9890] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.037009][ T9890] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.134520][ T9890] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.190801][ T4737] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.202252][ T4737] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.223795][ T9899] loop3: detected capacity change from 0 to 1024 [ 188.223928][ T4737] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.239133][ T4737] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.296342][ T9907] loop4: detected capacity change from 0 to 512 [ 188.310645][ T9907] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 188.322364][ T9907] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 188.332519][ T9907] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1999: Corrupt directory, running e2fsck is recommended [ 188.368583][ T9907] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 188.378023][ T9907] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.1999: corrupted in-inode xattr: invalid ea_ino [ 188.397213][ T9907] EXT4-fs (loop4): Remounting filesystem read-only [ 188.422879][ T9907] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 188.434718][ T9907] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 188.444914][ T9907] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1999: Corrupt directory, running e2fsck is recommended [ 188.459120][ T9907] netlink: 'syz.4.1999': attribute type 10 has an invalid length. [ 188.478893][ T9907] bond0: (slave dummy0): Releasing backup interface [ 188.501833][ T9907] team0: Port device dummy0 added [ 188.508314][ T9907] netlink: 'syz.4.1999': attribute type 10 has an invalid length. [ 188.531736][ T9907] team0: Port device dummy0 removed [ 188.539636][ T9907] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 188.561139][ T9927] serio: Serial port ptm0 [ 188.584800][ T9932] loop4: detected capacity change from 0 to 1024 [ 188.600451][ T9932] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.618179][ T9932] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.2007: lblock 3 mapped to illegal pblock 3 (length 1) [ 188.635449][ T9932] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 188.648035][ T9932] EXT4-fs (loop4): This should not happen!! Data will be lost [ 188.648035][ T9932] [ 188.749256][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 188.749329][ T29] audit: type=1326 audit(1760006369.589:8662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.1.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1361eec9 code=0x7ffc0000 [ 188.781449][ T29] audit: type=1326 audit(1760006369.589:8663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.1.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1361eec9 code=0x7ffc0000 [ 188.846216][ T9949] 9pnet_fd: Insufficient options for proto=fd [ 188.867853][ T9954] netlink: 'syz.5.2016': attribute type 1 has an invalid length. [ 188.886197][ T9954] 8021q: adding VLAN 0 to HW filter on device bond5 [ 188.896447][ T9954] bond5 (unregistering): Released all slaves [ 189.021272][ T9968] loop5: detected capacity change from 0 to 512 [ 189.041981][ T9968] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.071184][ T9972] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.131735][ T9972] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.193076][ T9972] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.223660][ T9979] syzkaller0: entered promiscuous mode [ 189.229331][ T9979] syzkaller0: entered allmulticast mode [ 189.255461][ T9972] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.257882][ T29] audit: type=1326 audit(1760006370.089:8664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9919 comm="syz.2.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93897eeec9 code=0x7ffc0000 [ 189.288830][ T29] audit: type=1326 audit(1760006370.089:8665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9919 comm="syz.2.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93897eeec9 code=0x7ffc0000 [ 189.318498][ T9981] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.377019][ T4765] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.391299][ T4765] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.402327][ T4765] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.413275][ T9981] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.427379][ T293] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.460195][ T9981] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.562334][ T9981] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.604110][ T9992] __nla_validate_parse: 8 callbacks suppressed [ 189.604125][ T9992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2030'. [ 189.649659][ T4765] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.663601][ T4765] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.698757][ T9998] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 189.705407][ T9998] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 189.713010][ T9998] vhci_hcd vhci_hcd.0: Device attached [ 189.723152][ T4765] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.723906][ T9999] vhci_hcd: connection closed [ 189.737715][ T4765] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.738774][ T293] vhci_hcd: stop threads [ 189.755111][ T293] vhci_hcd: release socket [ 189.759593][ T293] vhci_hcd: disconnect device [ 189.957159][T10008] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2036'. [ 189.972012][T10008] netlink: 'syz.1.2036': attribute type 9 has an invalid length. [ 189.979826][T10008] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2036'. [ 189.989005][T10008] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2036'. [ 190.084251][T10014] loop4: detected capacity change from 0 to 1024 [ 190.100227][T10014] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.117587][T10014] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.2038: lblock 3 mapped to illegal pblock 3 (length 1) [ 190.132484][T10014] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 190.144817][T10014] EXT4-fs (loop4): This should not happen!! Data will be lost [ 190.144817][T10014] [ 190.481729][T10028] loop5: detected capacity change from 0 to 512 [ 190.528963][T10028] ext4 filesystem being mounted at /301/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.612169][T10035] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.675540][T10036] loop4: detected capacity change from 0 to 8192 [ 190.772242][T10035] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.784982][T10042] loop5: detected capacity change from 0 to 8192 [ 190.820532][ T5417] ================================================================== [ 190.828755][ T5417] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 190.836533][ T5417] [ 190.838876][ T5417] read-write to 0xffff888237c26fd0 of 8 bytes by task 10045 on cpu 0: [ 190.847055][ T5417] find_get_block_common+0x4f0/0x960 [ 190.852390][ T5417] bdev_getblk+0x83/0x3b0 [ 190.856743][ T5417] __ext4_get_inode_loc+0x303/0x930 [ 190.861974][ T5417] ext4_reserve_inode_write+0xd7/0x250 [ 190.867459][ T5417] __ext4_mark_inode_dirty+0x8c/0x3f0 [ 190.872870][ T5417] ext4_dirty_inode+0x92/0xc0 [ 190.877650][ T5417] __mark_inode_dirty+0x15f/0x750 [ 190.882702][ T5417] file_update_time+0x288/0x2b0 [ 190.887584][ T5417] ext4_page_mkwrite+0x18c/0xb90 [ 190.892552][ T5417] handle_mm_fault+0x15cb/0x2be0 [ 190.897524][ T5417] do_user_addr_fault+0x630/0x1080 [ 190.902647][ T5417] exc_page_fault+0x62/0xa0 [ 190.907197][ T5417] asm_exc_page_fault+0x26/0x30 [ 190.912113][ T5417] [ 190.914538][ T5417] read to 0xffff888237c26fd0 of 8 bytes by task 5417 on cpu 1: [ 190.922100][ T5417] has_bh_in_lru+0x35/0x1f0 [ 190.926653][ T5417] smp_call_function_many_cond+0x2a6/0xc60 [ 190.932569][ T5417] on_each_cpu_cond_mask+0x3c/0x80 [ 190.937693][ T5417] invalidate_bh_lrus+0x2a/0x30 [ 190.942692][ T5417] blkdev_flush_mapping+0x9a/0x1a0 [ 190.947906][ T5417] bdev_release+0x2bf/0x3d0 [ 190.952544][ T5417] blkdev_release+0x15/0x20 [ 190.957176][ T5417] __fput+0x298/0x650 [ 190.961620][ T5417] ____fput+0x1c/0x30 [ 190.965712][ T5417] task_work_run+0x12e/0x1a0 [ 190.970321][ T5417] exit_to_user_mode_loop+0xed/0x110 [ 190.975619][ T5417] do_syscall_64+0x1d6/0x200 [ 190.980224][ T5417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.986261][ T5417] [ 190.988680][ T5417] value changed: 0xffff88811a134208 -> 0xffff8881007e3e38 [ 190.995911][ T5417] [ 190.998236][ T5417] Reported by Kernel Concurrency Sanitizer on: [ 191.004434][ T5417] CPU: 1 UID: 0 PID: 5417 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 191.014442][ T5417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 191.024522][ T5417] ================================================================== [ 191.037024][T10035] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.067717][T10049] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2049'. [ 191.090393][T10035] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.013737][ T4737] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.025199][ T4737] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.036262][ T4737] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.047654][ T4737] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0