last executing test programs: 1.955393438s ago: executing program 1 (id=2505): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x4c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0xd87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.84758372s ago: executing program 1 (id=2510): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x80000000}, 0x18) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x3}, 0x18) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 1.309211749s ago: executing program 1 (id=2516): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fstat(r0, &(0x7f0000001240)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x0, 0x0, @dev, @private=0x10000}}}}) getsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'ip_vti0\x00', r2, 0x8000, 0x8, 0x5058, 0x2, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x65, 0x0, 0x7, 0x2f, 0x0, @empty, @local, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18) statx(0xffffffffffffffff, 0x0, 0x2000, 0x400, 0x0) sync() open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x61]}}, 0x0, 0x34}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) 1.260357689s ago: executing program 3 (id=2519): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001a000100000000000000477ddec34cf30a70f591000c953f53ff12a2c3608bb925f96b290c769735520a13826aa4950f6801b116cf50825642f983cf9d69e7ab33fdaaa5ea625bce4fa8c4036c78f4d6a80a82190fd8de6f19"], 0x14}}, 0x0) dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) r2 = socket(0x10, 0x3, 0x9) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB], 0x28}}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) unshare(0x40000000) 1.078461982s ago: executing program 1 (id=2523): r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xe75, 0x55}, {0x8000000000000001, 0x4, 0x6, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x1}, {{@in6=@private0, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7, 0x7ffffe}}, 0xe8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b00)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[], 0x10}}, 0x0) 1.017574953s ago: executing program 2 (id=2524): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000680)='kfree\x00', r1}, 0x18) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 971.467744ms ago: executing program 1 (id=2527): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x80000000}, 0x18) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x3}, 0x18) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 943.737784ms ago: executing program 2 (id=2528): r0 = epoll_create1(0x80000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r3, &(0x7f0000000000)) 924.763555ms ago: executing program 2 (id=2530): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2000000}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x7800, 0x8000, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x0, 0x0, @dev, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'ip_vti0\x00', r2, 0x8000, 0x8, 0x5058, 0x2, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x65, 0x0, 0x7, 0x2f, 0x0, @empty, @local, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdf0, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @broadcast}}}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) statx(0xffffffffffffffff, 0x0, 0x2000, 0x400, 0x0) sync() open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x61]}}, 0x0, 0x34}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) 613.08072ms ago: executing program 0 (id=2540): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x4c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0xd87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 544.769261ms ago: executing program 0 (id=2541): r0 = epoll_create1(0x80000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r3, &(0x7f0000000000)) 521.592941ms ago: executing program 0 (id=2542): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x9, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESOCT=r0, @ANYBLOB="00000000007b8af8ff00000000bfa200000000000007020000060000000600000000000000b7040000000000008500000043", @ANYRES16=r2], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) bind$packet(r3, &(0x7f0000000280)={0x11, 0x0, r4, 0x1, 0x1, 0x6, @local}, 0x14) bind$packet(r3, &(0x7f0000000100)={0x11, 0x3}, 0x14) 467.073162ms ago: executing program 2 (id=2543): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r1}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000280)={0x2}) 459.263102ms ago: executing program 0 (id=2544): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0, 0x0, 0x20000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x5e, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00'}, 0x18) setitimer(0x1, 0x0, &(0x7f0000001500)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) sigaltstack(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3370906f}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}, 0x1, 0x0, 0x0, 0x4718a05f20824a9e}, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) 440.095893ms ago: executing program 1 (id=2545): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r5 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x450302, 0x0, 0x10}, 0x18) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'wg2\x00'}) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4840}, 0x220000a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) fdatasync(r6) memfd_create(0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) exit(0x2) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) readahead(r8, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000017c0)=[{{&(0x7f0000000380)={0xa, 0x4e21, 0x3c8, @private2, 0x9}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000880)="f76b84d5c2c33f3ae0b423031a727e7ddb18d9558ef836c6f44f2629f30c1f9196e22e60e7b99d118e2c0ec0e5c8fd997923ed9c562ea35eb2007c436de6884d80f883e0e889230bb90ae6c5cce34109443692b56b7a0a003fccb1836701b710d697b01743ad931c223e37b4f93b9edb7b1103c9f25f49d018ef5c2b8bd370ef193f0200a4b44c0bd7ab638188934465b0a322b6db50ee732ff172310f4be6b19b90d00baf2104b918", 0xa9}, {&(0x7f0000000400)="1276febf3f3baa5dbcfaf8aa43f4b85347acfc34", 0x14}, {&(0x7f0000000440)="4487d218f361e08b247841455a3aaaedc7e1d60c2ebbda8a7d605feab18d81861d13", 0x22}], 0x3, &(0x7f0000000940)=[@hopopts_2292={{0xf8, 0x29, 0x36, {0x87, 0x1b, '\x00', [@generic={0x8, 0xdd, "81ea852d44e0481333238787df28db4cbbfe15d3e0ba136b9cc460134294f021a8992d7929711fb8a6237716c8a5f9224e6c4a44b80e723f2adbf15c0e5ef56621b2dc23b71c59aec0e6e651224980ee69e1ce1f7c2a6807af5ec40907f611b0917d1ee8eaad26df9f8ec3c3a7022fa907c4220f0a2886b5388617455c6686c788321fb5ebd77a355d45037d8bec3a8c5b091ad26bb2c48763e77697d28e2d24af9cb296cfa41c102930c77037394d2716922f146fe496886a6e9a89cc4c01267d05c34e4dd8f1a8831a44f10d6cecd8bdd171ceb7c8ae167a7d9f9fd8"}]}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x87, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @enc_lim={0x4, 0x1, 0xa}, @ra={0x5, 0x2, 0xf1}, @calipso={0x7, 0x10, {0x1, 0x2, 0x6, 0x8, [0x9]}}, @enc_lim={0x4, 0x1, 0x8}]}}}], 0x130}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a80)="fb33ff218c63e1480b04f233f21444425af7a3d7ca119994705d46db6e8c9a84e09f3b707b5a28b745983a39b22e7ec5d0daa4bccb808dd3616779ec0310eb55268b068b5ae7bdf223d2c498fb47b0a7c948dfcaba50eb723241ec0420a55d7aa69d1935fb656ffc134838fd34a546cf6945a6441f23d9165f2e76d0a077ced669f11ae11a", 0x85}, {&(0x7f0000000800)}, {&(0x7f0000000b40)="d8994cd5e3dffa78bb17503069a6995c9b875d196e66", 0x16}, {&(0x7f0000000b80)="b35828555ee198d6e54e9841054ba010f994439f43fb0247148f84ff2b47ba00cc36a8d5c1cefa439b1e0693bca19f7d4684cf297d4d1fef8cae9b6379fd3dc4405dc25b302d9ed9d3f577081da7590d26eeb6bd5a85222e83819b15205406e475d901db41fa1c5845885dce541e7887f4a556422897286a74376f7fec48be85add640556ffbdba73a583e270567bc4f6d709f9d11b04b1791d7af59cb3881f9994d6b", 0xa3}, {&(0x7f0000000c40)="47c2ff373373dd06b3e1d715e6d3c5048cd804970c10bb0bdccfeb62e919ec5bb20bbdc7c8d4916f4313574ad1ba41cc56ab3c5e81372c77a49caa41d6b63a164ad07e605eb5288c3a9ad084beb92d86c27fe049aa9aede7f1896ba9ce4e529147827b26ecdd320d5c554cba1c4a6568091e8b1ed4b08762b127d782c663552ed27d7d71d5887db733f48c273fc3a82c80becbfe067c2a8f30cda2f52082c04df13bffb6df", 0xa5}, {&(0x7f0000000d00)}], 0x6}}, {{&(0x7f0000000800)={0xa, 0x4e20, 0xffffffff, @mcast1, 0xc}, 0x1c, &(0x7f0000001080)=[{&(0x7f0000000e00)="e0062ec1f2bc33aa72a9f9c2ca6fbf05fc6e2db0b04a457741e08f9092a0270e4a06d6372dd4d916fbc23982ea6da0e51576626ca64b12a929aa9aaddc113ed3eaee9c2fa7dd274045b95df1d7b7387fed49da67085fe2a7e085f65a7633362098574ba973ccdfbe6e800117527b0509d9ba245111d0347019822f1d3714371db3024ec92789123bc1a7d068445a", 0x8e}, {&(0x7f0000000ec0)="90f174e2ccb1abd9571c008f3e966727d8a1927a4c4258babcb730929e663ec4d2ed3ef62ea6d14ab1992691cbff73f44b483e7997994ed27735495abe05190ba1e1e577a24a481dd25ec71c1ce87999182446bdfa54eae314ad4dd30976f783fa7f695d32f9eeee774336750eef73a25b06c727c12e8d2964096c40a33c5de97552c29e0daaf6341a6ef58f007f1c413c8a8848449b788a96354729611255e0e4af02bdcf70929401d004afcd5a3f4f8f7cddad09d7293c520cdba7f869835b48bc114d2064", 0xc6}, {&(0x7f0000000fc0)="fc86880022adb75dc8c7afc7e5907e20db665551da7179d67e5010301c4d2f0d1d13c79d9397e08814f08a93cacdbd884b15dd6576028514de938af411efaa68603be718c92355d3a1ad80bf9c9d0dc370085b4249532ff0ad3201bd5f9aa28c76f8fce949a29d45091ab69acb50132167d33cdc9b7ed3520171cab33269d2913062d01d3de663b53bcfcc682cb6f2eb21b059639e64a085f6565319", 0x9c}], 0x3, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x128}}, {{&(0x7f0000001200)={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000001240)="7dd66760d837c840836c87fe9de117e33ef61bfe573527271c3860f042448670b23557a8085a38f31f98b76c303baa0c62677c23041de73b9262e1aa7a9921ffe17ccd1ba4a3c87401f2235dc1971beaea0ae888285885873f2b7ce88ad742a0e148b5f74873bc53efdb0476542a1e9b7e13050d0eecb0eeefcbc53d411870a296720a5d5c30f1b01c1cecd40496a03572e0a4830adb6c6465bb7fb82eb65c1c17aa8832e9b3836f9edb6da93dd469209b17f8", 0xb3}, {&(0x7f0000001300)="b84a2bfad597f6675c588e6ab39c7cc75baf5d33196e13ad5372e69f19", 0x1d}, {&(0x7f0000001340)="f0e99a81848c4cb297443bfb25f86653055a11c6ab4e9623e338e9f404c9cf536cdd9535d5005e4df013395f7f4f9edc46feb12d1c2cc761a8c4230f6b6930dce7969bc2bb177a7a8e20ba68336e0b33dc1f919f93a8ad5491a6d4ce1bf3a58ee23815cc4f1435f8eb71f1f3e59dfe6a72381604dcb829caa9511b2eabdb39b86a660798d3ab72b222afb5b8c871d33d36eafd41b090c71d6236b1d0f21e58845bd51d1331d71801aadd371c21c87d1748f33842fab5ea74192e02311596", 0xbe}], 0x3, &(0x7f0000001440)=[@dstopts={{0x48, 0x29, 0x37, {0x33, 0x5, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x9, 0x9, [0x8, 0xce, 0x2, 0xffffffffffffe30c]}}, @ra={0x5, 0x2, 0x3}]}}}, @rthdrdstopts={{0x118, 0x29, 0x37, {0x1d, 0x1f, '\x00', [@enc_lim={0x4, 0x1, 0xf1}, @enc_lim={0x4, 0x1, 0x7f}, @jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x7, 0xd1, "31f3faf6af8e2017ecc6bc19219a401374b21336e15965fe95ed191407f69fbc8770e3c02ff9d745c3829526c16022084e5aeec746f3e50c88f577cc09a687fd86fc1c4ec61a32c10846e269e2f4edd8938f76832f79d182a5fbcbd9a015bc0496d266aa5c7aba9c0a4a745d1d3aa31e7e2728838e831301f8eed28e97708d8a9561a5d1b720a6fb6552235d32f3d44d8e156b0879fa7890777b6dd5806112c20e0d44b43f25e66552db561aec744f0b74faaad04cba3a9cc92ecd1c1d7bc9f9093746e84c1c1d706458747ccb19aafb40"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}]}}}, @dstopts={{0xf0, 0x29, 0x37, {0x0, 0x1a, '\x00', [@ra={0x5, 0x2, 0x8000}, @generic={0x9, 0xcc, "db73fdf051e9b28d6ce3ed3f9a55c3334e08b94fec44703b1aab637689f3f5bf95b2cded489e83289941a3878ba129c35e6fa93410c90c552c761e49c0e7efabfe5dfc1515da975dabc033f420b5af94d40e767a34f907e3c0b1d6f52377fb5956581e41c2f742472d6d381b190c8eb77818d1117c847a4cfecc3d603b30a0d9ff63ac18cf32e6fafb56009abc78908ae49c4ce3a13693edbf60fa9793b18ea611ea1bab50cad83fc253831af6f1b706df4766f363e386fc1e895bc88d47bde9b559fd34ff002a523e90589d"}]}}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x2f, 0xc, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x38, {0x1, 0xc, 0x0, 0x61b, [0xe, 0x5, 0x6, 0x4, 0x8001, 0xfff]}}, @jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x1}, @pad1, @pad1]}}}, @dstopts_2292={{0x78, 0x29, 0x4, {0xff, 0xb, '\x00', [@calipso={0x7, 0x50, {0x0, 0x12, 0x9, 0x8, [0x6bae, 0x10, 0x2633, 0xb, 0xfffffffffffffffe, 0x4, 0x5, 0x9, 0x1]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x348}}], 0x4, 0x0) 439.096443ms ago: executing program 4 (id=2546): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x48084) r2 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x400, 0x2}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 384.297394ms ago: executing program 2 (id=2547): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00'}, 0x10) io_setup(0x3, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x448, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000900, r3, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, 0x0, 0x0) r5 = getpid() r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580)='system_u:object_r:tzdata_exec_t:s0\x00', 0x23, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r8, 0x0, 0x200000000800002}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 353.895194ms ago: executing program 3 (id=2548): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f00000002c0)}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5825be57aff9352b356be67ca2746357d1787935", 0x14}], 0x1}}], 0x2, 0x4004040) 303.962825ms ago: executing program 3 (id=2549): r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xe75, 0x55}, {0x8000000000000001, 0x4, 0x6, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x1}, {{@in6=@private0, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7, 0x7ffffe}}, 0xe8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b00)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0x10}}, 0x0) 272.169526ms ago: executing program 4 (id=2550): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000680)='kfree\x00', r1}, 0x18) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 262.767956ms ago: executing program 3 (id=2551): mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0xc2, 0x0) umount2(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x3, 0x400, 0x3, 0x10000000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 227.773316ms ago: executing program 4 (id=2552): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x4c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0xd87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 207.287647ms ago: executing program 3 (id=2553): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000000600)="$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") syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=ANY=[@ANYBLOB="301000003b0007010100000000000000017c00000400fc8018100180"], 0x1030}}, 0x4c000) 159.668697ms ago: executing program 2 (id=2554): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2000000}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) bind$packet(r3, &(0x7f0000000280)={0x11, 0x0, r4, 0x1, 0x1, 0x6, @local}, 0x14) bind$packet(r3, &(0x7f0000000100)={0x11, 0x3}, 0x14) 89.720189ms ago: executing program 3 (id=2556): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x80000000}, 0x18) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x3}, 0x18) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 1.43603ms ago: executing program 4 (id=2557): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@mblk_io_submit}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) fstat(r0, &(0x7f0000001240)) syz_mount_image$ext4(&(0x7f0000000740)='ext3\x00', &(0x7f00000001c0)='./bus\x00', 0x240445, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpquota}, {@noquota}, {@quota}, {@noload}, {@noload}]}, 0x0, 0x50c, &(0x7f0000001440)="$eJzs3c9rHG0dAPDvbHZr06Zv8qoHfcH6o5W0aHeTxrbBQ60geiqo9V5jsgkhm2zIbtomFE3xDxBEVPCkFy+Cf4AgBS8eRSjoWVFRRFs9eNCO7O4kTdPdZNtus2n284HJPM8zM/t9ng0zO8/Mw0wAA+tjEXEjIp6maXoxIkaz8lw2xVZraqz35PH92caURJre+kcSSVa2/VlJNj+dbXYyIr76pYhvJC/GrW1sLs1UKuW1LF+qL6+WahublxaXZxbKC+WVqanJq9PXpq9MT/SknWci4voX/vL97/z0i9d/+em7f7z9twvfbFRrJFu+ux0vKb/fwlbTC83vYvcGa68Y7CjKN1uYGW63xtALJQ/ecJ0AAGivcY7//oj4RERcjNEY2v90FgAAAHgLpZ8bif8mEWl7JzqUAwAAAG+RXHMMbJIrZmMBRiKXKxZbY3g/GKdylWqt/qn56vrKXGus7FgUcvOLlfJENlZ4LApJIz/ZTD/LX96Tn4qIdyPie6PDzXxxtlqZ6/fFDwAAABgQp/f0//892ur/AwAAAMfMWL8rAAAAALxx+v8AAABw/On/AwAAwLH25Zs3G1O6/f7ruTsb60vVO5fmyrWl4vL6bHG2urZaXKhWF5rP7Fs+6PMq1erqZ2Jl/V6pXq7VS7WNzdvL1fWV+u3F516BDQAAAByidz/68PdJRGx9drg5NZzobtMuVwOOqvxOKsnmbXbrP7zTmv/5kCoFHIqhflcA6Jt8vysA9E2h3xUA+i45YHnHwTu/yeYf7219AACA3hv/cOf7/7l9t9zafzFw5NmJYXC5/w+Dq3n/v9uRvE4W4FgpOAOAgffa9/8PlKYvVSEAAKDnRppTkitml/dGIpcrFiPONF8LUEjmFyvliYh4JyJ+N1p4XyM/2dwyObDPAAAAAAAAAAAAAAAAAAAAAAAAAAC0pGkSKQAAAHCsReT+mvyq9Sz/8dHzI3uvD5xI/jMa2StC7/7o1g/uzdTra5ON8n/ulNd/mJVf7scVDAAAABgIL/UC/+1++nY/HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB66cnj+7Pb02HG/fvnI2KsXfx8nGzOT0YhIk79K4n8ru2SiBjqQfzhxp8PtYufNKq1E7Jd/OEexN96sG/8GMu+hXbxT/cgPgyyh43jz409+1+6e432+18+4rn8q+p8/Iud499Qh/3/TJcx3nv081LH+A8i3su3P/5sx086xD/XZfyvf21zs9Oy9McR421/f5LnYpXqy6ul2sbmpcXlmYXyQnllamry6vS16SvTE6X5xUo5+9s2xnc/8oun+7X/VIf4Ywe0/3yX7f/fo3uPP9BKFtrFv3CuTfxf/yRb48X4uey375NZurF8fDu91UrvdvZnvz27X/vnOrT/oP//hS7bf/Er3/5Tl6sCAIegtrG5NFOplNeObaLRSz8C1RjMxI2jUY1OiW/19APTNG32HF/jc5I4Cl9LM9HvIxMAANBrz076+10TAAAAAAAAAAAAAAAAAAAAGFyH8TixvTG3dlJJLx6hDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQE/8PAAD//xaa2hE=") r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x0, 0x0, @dev, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'ip_vti0\x00', r2, 0x8000, 0x8, 0x5058, 0x2, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x65, 0x0, 0x7, 0x2f, 0x0, @empty, @local, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdf0, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @broadcast}}}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) statx(0xffffffffffffffff, 0x0, 0x2000, 0x400, 0x0) sync() open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x61]}}, 0x0, 0x34}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) 709.08µs ago: executing program 0 (id=2558): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r1}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000280)={0x2}) 0s ago: executing program 0 (id=2559): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r5 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x450302, 0x0, 0x10}, 0x18) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'wg2\x00'}) sendmsg$TIPC_CMD_SHOW_PORTS(r5, 0x0, 0x220000a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) fdatasync(r6) memfd_create(0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) exit(0x2) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) readahead(r8, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000017c0)=[{{&(0x7f0000000380)={0xa, 0x4e21, 0x3c8, @private2, 0x9}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000880)="f76b84d5c2c33f3ae0b423031a727e7ddb18d9558ef836c6f44f2629f30c1f9196e22e60e7b99d118e2c0ec0e5c8fd997923ed9c562ea35eb2007c436de6884d80f883e0e889230bb90ae6c5cce34109443692b56b7a0a003fccb1836701b710d697b01743ad931c223e37b4f93b9edb7b1103c9f25f49d018ef5c2b8bd370ef193f0200a4b44c0bd7ab638188934465b0a322b6db50ee732ff172310f4be6b19b90d00baf2104b918", 0xa9}, {&(0x7f0000000400)="1276febf3f3baa5dbcfaf8aa43f4b85347acfc34", 0x14}, {&(0x7f0000000440)="4487d218f361e08b247841455a3aaaedc7e1d60c2ebbda8a7d605feab18d81861d13", 0x22}], 0x3, &(0x7f0000000940)=[@hopopts_2292={{0xf8, 0x29, 0x36, {0x87, 0x1b, '\x00', [@generic={0x8, 0xdd, "81ea852d44e0481333238787df28db4cbbfe15d3e0ba136b9cc460134294f021a8992d7929711fb8a6237716c8a5f9224e6c4a44b80e723f2adbf15c0e5ef56621b2dc23b71c59aec0e6e651224980ee69e1ce1f7c2a6807af5ec40907f611b0917d1ee8eaad26df9f8ec3c3a7022fa907c4220f0a2886b5388617455c6686c788321fb5ebd77a355d45037d8bec3a8c5b091ad26bb2c48763e77697d28e2d24af9cb296cfa41c102930c77037394d2716922f146fe496886a6e9a89cc4c01267d05c34e4dd8f1a8831a44f10d6cecd8bdd171ceb7c8ae167a7d9f9fd8"}]}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x87, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @enc_lim={0x4, 0x1, 0xa}, @ra={0x5, 0x2, 0xf1}, @calipso={0x7, 0x10, {0x1, 0x2, 0x6, 0x8, [0x9]}}, @enc_lim={0x4, 0x1, 0x8}]}}}], 0x130}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a80)="fb33ff218c63e1480b04f233f21444425af7a3d7ca119994705d46db6e8c9a84e09f3b707b5a28b745983a39b22e7ec5d0daa4bccb808dd3616779ec0310eb55268b068b5ae7bdf223d2c498fb47b0a7c948dfcaba50eb723241ec0420a55d7aa69d1935fb656ffc134838fd34a546cf6945a6441f23d9165f2e76d0a077ced669f11ae11a", 0x85}, {&(0x7f0000000800)}, {&(0x7f0000000b40)="d8994cd5e3dffa78bb17503069a6995c9b875d196e66", 0x16}, {&(0x7f0000000b80)="b35828555ee198d6e54e9841054ba010f994439f43fb0247148f84ff2b47ba00cc36a8d5c1cefa439b1e0693bca19f7d4684cf297d4d1fef8cae9b6379fd3dc4405dc25b302d9ed9d3f577081da7590d26eeb6bd5a85222e83819b15205406e475d901db41fa1c5845885dce541e7887f4a556422897286a74376f7fec48be85add640556ffbdba73a583e270567bc4f6d709f9d11b04b1791d7af59cb3881f9994d6b", 0xa3}, {&(0x7f0000000c40)="47c2ff373373dd06b3e1d715e6d3c5048cd804970c10bb0bdccfeb62e919ec5bb20bbdc7c8d4916f4313574ad1ba41cc56ab3c5e81372c77a49caa41d6b63a164ad07e605eb5288c3a9ad084beb92d86c27fe049aa9aede7f1896ba9ce4e529147827b26ecdd320d5c554cba1c4a6568091e8b1ed4b08762b127d782c663552ed27d7d71d5887db733f48c273fc3a82c80becbfe067c2a8f30cda2f52082c04df13bffb6df", 0xa5}, {&(0x7f0000000d00)}], 0x6}}, {{&(0x7f0000001200)={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000001240)="7dd66760d837c840836c87fe9de117e33ef61bfe573527271c3860f042448670b23557a8085a38f31f98b76c303baa0c62677c23041de73b9262e1aa7a9921ffe17ccd1ba4a3c87401f2235dc1971beaea0ae888285885873f2b7ce88ad742a0e148b5f74873bc53efdb0476542a1e9b7e13050d0eecb0eeefcbc53d411870a296720a5d5c30f1b01c1cecd40496a03572e0a4830adb6c6465bb7fb82eb65c1c17aa8832e9b3836f9edb6da93dd469209b17f8", 0xb3}, {&(0x7f0000001300)="b84a2bfad597f6675c588e6ab39c7cc75baf5d33196e13ad5372e69f19", 0x1d}, {0x0}], 0x3, &(0x7f0000001440)=[@dstopts={{0x48, 0x29, 0x37, {0x33, 0x5, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x9, 0x9, [0x8, 0xce, 0x2, 0xffffffffffffe30c]}}, @ra={0x5, 0x2, 0x3}]}}}, @rthdrdstopts={{0x118, 0x29, 0x37, {0x1d, 0x1f, '\x00', [@enc_lim={0x4, 0x1, 0xf1}, @enc_lim={0x4, 0x1, 0x7f}, @jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x7, 0xd1, "31f3faf6af8e2017ecc6bc19219a401374b21336e15965fe95ed191407f69fbc8770e3c02ff9d745c3829526c16022084e5aeec746f3e50c88f577cc09a687fd86fc1c4ec61a32c10846e269e2f4edd8938f76832f79d182a5fbcbd9a015bc0496d266aa5c7aba9c0a4a745d1d3aa31e7e2728838e831301f8eed28e97708d8a9561a5d1b720a6fb6552235d32f3d44d8e156b0879fa7890777b6dd5806112c20e0d44b43f25e66552db561aec744f0b74faaad04cba3a9cc92ecd1c1d7bc9f9093746e84c1c1d706458747ccb19aafb40"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}]}}}, @dstopts={{0xf0, 0x29, 0x37, {0x0, 0x1a, '\x00', [@ra={0x5, 0x2, 0x8000}, @generic={0x9, 0xcc, "db73fdf051e9b28d6ce3ed3f9a55c3334e08b94fec44703b1aab637689f3f5bf95b2cded489e83289941a3878ba129c35e6fa93410c90c552c761e49c0e7efabfe5dfc1515da975dabc033f420b5af94d40e767a34f907e3c0b1d6f52377fb5956581e41c2f742472d6d381b190c8eb77818d1117c847a4cfecc3d603b30a0d9ff63ac18cf32e6fafb56009abc78908ae49c4ce3a13693edbf60fa9793b18ea611ea1bab50cad83fc253831af6f1b706df4766f363e386fc1e895bc88d47bde9b559fd34ff002a523e90589d"}]}}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x2f, 0xc, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x0, 0x61b, [0xe, 0x5, 0x7, 0x6, 0x4, 0x8001, 0xfff]}}, @jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x1}, @pad1, @pad1]}}}, @dstopts_2292={{0x78, 0x29, 0x4, {0xff, 0xb, '\x00', [@calipso={0x7, 0x50, {0x0, 0x12, 0x9, 0x8, [0x6bae, 0x10, 0x2633, 0xb, 0xfffffffffffffffe, 0x4, 0x5, 0x9, 0x1]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x348}}], 0x3, 0x0) kernel console output (not intermixed with test programs): sysadm_t pid=8689 comm="syz.3.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6369b7e929 code=0x7ffc0000 [ 145.343183][ T29] audit: type=1326 audit(1751195137.923:5509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.3.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f6369b7e929 code=0x7ffc0000 [ 145.398545][ T8683] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.409917][ T8683] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.426964][ T8692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.517076][ T8700] loop2: detected capacity change from 0 to 1024 [ 145.521107][ T29] audit: type=1326 audit(1751195138.063:5510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.3.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6369b7e929 code=0x7ffc0000 [ 145.547092][ T29] audit: type=1326 audit(1751195138.063:5511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.3.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6369b7e929 code=0x7ffc0000 [ 145.549240][ T8701] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 4: comm syz.4.1595: lblock 0 mapped to illegal pblock 4 (length 1) [ 145.610333][ T8701] EXT4-fs (loop4): Remounting filesystem read-only [ 145.610987][ T8700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.670461][ T8700] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.721651][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.741863][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.756847][ T8708] xt_CT: You must specify a L4 protocol and not use inversions on it [ 145.824538][ T8716] FAULT_INJECTION: forcing a failure. [ 145.824538][ T8716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.837860][ T8716] CPU: 1 UID: 0 PID: 8716 Comm: syz.3.1603 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 145.837892][ T8716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.837902][ T8716] Call Trace: [ 145.837909][ T8716] [ 145.837917][ T8716] __dump_stack+0x1d/0x30 [ 145.837977][ T8716] dump_stack_lvl+0xe8/0x140 [ 145.838015][ T8716] dump_stack+0x15/0x1b [ 145.838030][ T8716] should_fail_ex+0x265/0x280 [ 145.838108][ T8716] should_fail+0xb/0x20 [ 145.838136][ T8716] should_fail_usercopy+0x1a/0x20 [ 145.838165][ T8716] _copy_to_user+0x20/0xa0 [ 145.838201][ T8716] simple_read_from_buffer+0xb5/0x130 [ 145.838227][ T8716] proc_fail_nth_read+0x100/0x140 [ 145.838253][ T8716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.838280][ T8716] vfs_read+0x19d/0x6f0 [ 145.838336][ T8716] ? __rcu_read_unlock+0x4f/0x70 [ 145.838357][ T8716] ? __rcu_read_unlock+0x4f/0x70 [ 145.838376][ T8716] ? __fget_files+0x184/0x1c0 [ 145.838424][ T8716] ksys_read+0xda/0x1a0 [ 145.838454][ T8716] __x64_sys_read+0x40/0x50 [ 145.838556][ T8716] x64_sys_call+0x2d77/0x2fb0 [ 145.838578][ T8716] do_syscall_64+0xd2/0x200 [ 145.838597][ T8716] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 145.838701][ T8716] ? clear_bhb_loop+0x40/0x90 [ 145.838722][ T8716] ? clear_bhb_loop+0x40/0x90 [ 145.838765][ T8716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.838786][ T8716] RIP: 0033:0x7f6369b7d33c [ 145.838802][ T8716] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 145.838816][ T8716] RSP: 002b:00007f63681e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.838851][ T8716] RAX: ffffffffffffffda RBX: 00007f6369da5fa0 RCX: 00007f6369b7d33c [ 145.838868][ T8716] RDX: 000000000000000f RSI: 00007f63681e70a0 RDI: 0000000000000005 [ 145.838959][ T8716] RBP: 00007f63681e7090 R08: 0000000000000000 R09: 0000000000000000 [ 145.838970][ T8716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.838981][ T8716] R13: 0000000000000000 R14: 00007f6369da5fa0 R15: 00007fffa1fb3318 [ 145.838998][ T8716] [ 146.074662][ T8724] loop3: detected capacity change from 0 to 512 [ 146.107067][ T8724] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 146.114686][ T8724] EXT4-fs (loop3): mount failed [ 146.223775][ T8734] netlink: 'syz.3.1609': attribute type 10 has an invalid length. [ 146.242265][ T8736] loop2: detected capacity change from 0 to 512 [ 146.250329][ T8736] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.257057][ T8734] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.266079][ T8734] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.274986][ T8734] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.283919][ T8734] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.287202][ T8736] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.334299][ T8736] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 146.361845][ T8736] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 146.388555][ T8736] EXT4-fs (loop2): 1 truncate cleaned up [ 146.444310][ T8736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.572199][ T8742] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #2: block 4: comm syz.2.1610: lblock 0 mapped to illegal pblock 4 (length 1) [ 146.609100][ T8742] EXT4-fs (loop2): Remounting filesystem read-only [ 146.626803][ T8744] loop3: detected capacity change from 0 to 128 [ 146.769651][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.856766][ T8750] loop4: detected capacity change from 0 to 164 [ 146.868001][ T8748] loop2: detected capacity change from 0 to 1024 [ 146.877499][ T8750] Unsupported NM flag settings (8) [ 146.884079][ T8750] Unsupported NM flag settings (8) [ 146.916400][ T8748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.931301][ T8748] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.032917][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.044563][ T8759] FAULT_INJECTION: forcing a failure. [ 147.044563][ T8759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.057677][ T8759] CPU: 1 UID: 0 PID: 8759 Comm: syz.1.1611 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 147.057701][ T8759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.057774][ T8759] Call Trace: [ 147.057780][ T8759] [ 147.057787][ T8759] __dump_stack+0x1d/0x30 [ 147.057807][ T8759] dump_stack_lvl+0xe8/0x140 [ 147.057861][ T8759] dump_stack+0x15/0x1b [ 147.057875][ T8759] should_fail_ex+0x265/0x280 [ 147.057901][ T8759] should_fail+0xb/0x20 [ 147.057926][ T8759] should_fail_usercopy+0x1a/0x20 [ 147.057951][ T8759] _copy_from_user+0x1c/0xb0 [ 147.058049][ T8759] ___sys_sendmsg+0xc1/0x1d0 [ 147.058092][ T8759] __x64_sys_sendmsg+0xd4/0x160 [ 147.058128][ T8759] x64_sys_call+0x2999/0x2fb0 [ 147.058229][ T8759] do_syscall_64+0xd2/0x200 [ 147.058291][ T8759] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 147.058318][ T8759] ? clear_bhb_loop+0x40/0x90 [ 147.058339][ T8759] ? clear_bhb_loop+0x40/0x90 [ 147.058362][ T8759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.058457][ T8759] RIP: 0033:0x7f73326be929 [ 147.058527][ T8759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.058541][ T8759] RSP: 002b:00007f7330d27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.058628][ T8759] RAX: ffffffffffffffda RBX: 00007f73328e5fa0 RCX: 00007f73326be929 [ 147.058640][ T8759] RDX: 0000000000000000 RSI: 0000200000004440 RDI: 0000000000000004 [ 147.058654][ T8759] RBP: 00007f7330d27090 R08: 0000000000000000 R09: 0000000000000000 [ 147.058667][ T8759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.058733][ T8759] R13: 0000000000000000 R14: 00007f73328e5fa0 R15: 00007ffe7b60d298 [ 147.058752][ T8759] [ 147.241086][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1616'. [ 147.341541][ T8770] lo speed is unknown, defaulting to 1000 [ 147.347555][ T8769] siw: device registration error -23 [ 147.353073][ T8770] lo speed is unknown, defaulting to 1000 [ 147.359444][ T8770] lo speed is unknown, defaulting to 1000 [ 147.371199][ T8770] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 147.401446][ T8770] lo speed is unknown, defaulting to 1000 [ 147.408291][ T8770] lo speed is unknown, defaulting to 1000 [ 147.414846][ T8770] lo speed is unknown, defaulting to 1000 [ 147.421128][ T8770] lo speed is unknown, defaulting to 1000 [ 147.427420][ T8770] lo speed is unknown, defaulting to 1000 [ 147.454008][ T8770] loop2: detected capacity change from 0 to 512 [ 147.475448][ T8770] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 147.488796][ T8770] System zones: 0-2, 18-18, 34-35 [ 147.502592][ T8770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.522072][ T8770] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.610797][ T8781] loop3: detected capacity change from 0 to 128 [ 147.617747][ T8781] msdos: Bad value for 'gid' [ 147.622441][ T8781] msdos: Bad value for 'gid' [ 147.745617][ T8785] loop3: detected capacity change from 0 to 512 [ 147.752931][ T8785] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.759951][ T8785] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.813276][ T8785] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 147.825110][ T8789] loop4: detected capacity change from 0 to 512 [ 147.826031][ T8785] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 147.852631][ T8785] EXT4-fs (loop3): 1 truncate cleaned up [ 147.859903][ T8789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.863273][ T8785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.872976][ T8789] ext4 filesystem being mounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.909581][ T8789] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1626: corrupted inode contents [ 147.922174][ T8789] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.1626: mark_inode_dirty error [ 147.933867][ T8789] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1626: corrupted inode contents [ 147.949555][ T8789] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1626: corrupted inode contents [ 147.963265][ T8789] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.1626: mark_inode_dirty error [ 147.975313][ T8789] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1626: corrupted inode contents [ 147.988710][ T8789] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1626: mark_inode_dirty error [ 148.000907][ T8789] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1626: corrupted inode contents [ 148.014377][ T8796] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #2: block 4: comm syz.3.1624: lblock 0 mapped to illegal pblock 4 (length 1) [ 148.029211][ T8796] EXT4-fs (loop3): Remounting filesystem read-only [ 148.039553][ T8789] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.1626: mark_inode_dirty error [ 148.076345][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.226616][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.245327][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.459042][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1639'. [ 148.490661][ T8825] netlink: 'syz.0.1639': attribute type 13 has an invalid length. [ 148.548651][ T8825] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.673206][ T8832] FAULT_INJECTION: forcing a failure. [ 148.673206][ T8832] name failslab, interval 1, probability 0, space 0, times 0 [ 148.685922][ T8832] CPU: 0 UID: 0 PID: 8832 Comm: syz.4.1642 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 148.685946][ T8832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.686031][ T8832] Call Trace: [ 148.686036][ T8832] [ 148.686043][ T8832] __dump_stack+0x1d/0x30 [ 148.686063][ T8832] dump_stack_lvl+0xe8/0x140 [ 148.686082][ T8832] dump_stack+0x15/0x1b [ 148.686163][ T8832] should_fail_ex+0x265/0x280 [ 148.686189][ T8832] should_failslab+0x8c/0xb0 [ 148.686262][ T8832] kmem_cache_alloc_noprof+0x50/0x310 [ 148.686288][ T8832] ? skb_clone+0x151/0x1f0 [ 148.686336][ T8832] skb_clone+0x151/0x1f0 [ 148.686351][ T8832] nfnetlink_rcv+0x305/0x1690 [ 148.686374][ T8832] ? __account_obj_stock+0x211/0x350 [ 148.686416][ T8832] ? should_fail_ex+0x30/0x280 [ 148.686442][ T8832] ? xas_load+0x413/0x430 [ 148.686472][ T8832] ? xas_load+0x413/0x430 [ 148.686496][ T8832] ? __rcu_read_unlock+0x4f/0x70 [ 148.686586][ T8832] ? xa_load+0xb1/0xe0 [ 148.686601][ T8832] ? __account_obj_stock+0x211/0x350 [ 148.686626][ T8832] ? obj_cgroup_charge_account+0x122/0x1a0 [ 148.686652][ T8832] ? should_fail_ex+0x30/0x280 [ 148.686708][ T8832] ? __rcu_read_unlock+0x4f/0x70 [ 148.686741][ T8832] ? should_fail_ex+0xdb/0x280 [ 148.686769][ T8832] netlink_unicast+0x59e/0x670 [ 148.686837][ T8832] netlink_sendmsg+0x58b/0x6b0 [ 148.686854][ T8832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.686870][ T8832] __sock_sendmsg+0x145/0x180 [ 148.686951][ T8832] ____sys_sendmsg+0x31e/0x4e0 [ 148.687018][ T8832] ___sys_sendmsg+0x17b/0x1d0 [ 148.687054][ T8832] __x64_sys_sendmsg+0xd4/0x160 [ 148.687143][ T8832] x64_sys_call+0x2999/0x2fb0 [ 148.687164][ T8832] do_syscall_64+0xd2/0x200 [ 148.687180][ T8832] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 148.687206][ T8832] ? clear_bhb_loop+0x40/0x90 [ 148.687254][ T8832] ? clear_bhb_loop+0x40/0x90 [ 148.687324][ T8832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.687401][ T8832] RIP: 0033:0x7f6eece9e929 [ 148.687414][ T8832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.687428][ T8832] RSP: 002b:00007f6eeb507038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.687511][ T8832] RAX: ffffffffffffffda RBX: 00007f6eed0c5fa0 RCX: 00007f6eece9e929 [ 148.687524][ T8832] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 148.687544][ T8832] RBP: 00007f6eeb507090 R08: 0000000000000000 R09: 0000000000000000 [ 148.687557][ T8832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.687570][ T8832] R13: 0000000000000000 R14: 00007f6eed0c5fa0 R15: 00007fff45710518 [ 148.687589][ T8832] [ 149.346325][ T8845] loop2: detected capacity change from 0 to 1024 [ 149.377485][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 149.377499][ T29] audit: type=1326 audit(1751195142.013:5727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 149.421184][ T8849] loop3: detected capacity change from 0 to 1024 [ 149.427991][ T29] audit: type=1326 audit(1751195142.013:5728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 149.451508][ T29] audit: type=1326 audit(1751195142.023:5729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 149.475040][ T29] audit: type=1326 audit(1751195142.023:5730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 149.476815][ T8845] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.498487][ T29] audit: type=1326 audit(1751195142.023:5731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 149.498515][ T29] audit: type=1326 audit(1751195142.023:5732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 149.498556][ T29] audit: type=1326 audit(1751195142.023:5733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 149.498578][ T29] audit: type=1326 audit(1751195142.023:5734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 149.602347][ T29] audit: type=1326 audit(1751195142.023:5735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 149.626071][ T29] audit: type=1326 audit(1751195142.023:5736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 149.710344][ T8858] can0: slcan on ttyS3. [ 149.772035][ T8858] can0 (unregistered): slcan off ttyS3. [ 149.889269][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1658'. [ 149.907624][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1655'. [ 149.919855][ T8885] netlink: 'syz.3.1658': attribute type 13 has an invalid length. [ 149.950486][ T8885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.959320][ T8885] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.975796][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1655'. [ 149.984958][ T8872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1655'. [ 150.000699][ T8885] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.077561][ T8903] netlink: 'syz.0.1656': attribute type 7 has an invalid length. [ 150.118484][ T8906] xt_hashlimit: max too large, truncated to 1048576 [ 150.222834][ T8913] loop4: detected capacity change from 0 to 1024 [ 150.285253][ T8913] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.628504][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1671'. [ 150.702278][ T8946] lo speed is unknown, defaulting to 1000 [ 150.708713][ T8946] lo speed is unknown, defaulting to 1000 [ 150.882017][ T8940] netlink: 'syz.4.1671': attribute type 13 has an invalid length. [ 151.000588][ T8940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.053035][ T8940] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.066323][ T8940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.066568][ T8956] loop2: detected capacity change from 0 to 128 [ 151.175094][ T8971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1680'. [ 151.689701][ T8985] lo speed is unknown, defaulting to 1000 [ 151.695863][ T8985] lo speed is unknown, defaulting to 1000 [ 151.816088][ T8997] random: crng reseeded on system resumption [ 151.866917][ T8997] loop3: detected capacity change from 0 to 4096 [ 151.907398][ T8997] loop3: detected capacity change from 0 to 512 [ 152.035014][ T8997] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.053472][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1689'. [ 152.081752][ T9002] netlink: 'syz.2.1689': attribute type 13 has an invalid length. [ 152.151954][ T9002] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.167473][ T3427] lo speed is unknown, defaulting to 1000 [ 152.220910][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1690'. [ 152.245881][ T9006] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 152.252137][ T9011] vhci_hcd: invalid port number 96 [ 152.258444][ T9011] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 152.373723][ T9020] FAULT_INJECTION: forcing a failure. [ 152.373723][ T9020] name failslab, interval 1, probability 0, space 0, times 0 [ 152.386392][ T9020] CPU: 0 UID: 0 PID: 9020 Comm: syz.3.1696 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 152.386421][ T9020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.386433][ T9020] Call Trace: [ 152.386440][ T9020] [ 152.386447][ T9020] __dump_stack+0x1d/0x30 [ 152.386539][ T9020] dump_stack_lvl+0xe8/0x140 [ 152.386555][ T9020] dump_stack+0x15/0x1b [ 152.386568][ T9020] should_fail_ex+0x265/0x280 [ 152.386592][ T9020] ? tcf_block_get_ext+0xcf/0xb30 [ 152.386616][ T9020] should_failslab+0x8c/0xb0 [ 152.386676][ T9020] __kmalloc_cache_noprof+0x4c/0x320 [ 152.386705][ T9020] tcf_block_get_ext+0xcf/0xb30 [ 152.386805][ T9020] ? get_state_synchronize_rcu+0x1a/0x40 [ 152.386836][ T9020] clsact_init+0x549/0x6c0 [ 152.386856][ T9020] ? __pfx_clsact_init+0x10/0x10 [ 152.386944][ T9020] qdisc_create+0x591/0x9e0 [ 152.386973][ T9020] tc_modify_qdisc+0x9bd/0x1380 [ 152.387001][ T9020] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 152.387078][ T9020] rtnetlink_rcv_msg+0x657/0x6d0 [ 152.387105][ T9020] netlink_rcv_skb+0x123/0x220 [ 152.387168][ T9020] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 152.387197][ T9020] rtnetlink_rcv+0x1c/0x30 [ 152.387261][ T9020] netlink_unicast+0x59e/0x670 [ 152.387351][ T9020] netlink_sendmsg+0x58b/0x6b0 [ 152.387428][ T9020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.387446][ T9020] __sock_sendmsg+0x145/0x180 [ 152.387467][ T9020] ____sys_sendmsg+0x31e/0x4e0 [ 152.387495][ T9020] ___sys_sendmsg+0x17b/0x1d0 [ 152.387571][ T9020] __x64_sys_sendmsg+0xd4/0x160 [ 152.387608][ T9020] x64_sys_call+0x2999/0x2fb0 [ 152.387628][ T9020] do_syscall_64+0xd2/0x200 [ 152.387684][ T9020] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 152.387710][ T9020] ? clear_bhb_loop+0x40/0x90 [ 152.387729][ T9020] ? clear_bhb_loop+0x40/0x90 [ 152.387817][ T9020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.387838][ T9020] RIP: 0033:0x7f6369b7e929 [ 152.387854][ T9020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.387869][ T9020] RSP: 002b:00007f63681e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.387889][ T9020] RAX: ffffffffffffffda RBX: 00007f6369da5fa0 RCX: 00007f6369b7e929 [ 152.387952][ T9020] RDX: 00000000200009d4 RSI: 00002000000012c0 RDI: 0000000000000003 [ 152.387967][ T9020] RBP: 00007f63681e7090 R08: 0000000000000000 R09: 0000000000000000 [ 152.387980][ T9020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 152.387993][ T9020] R13: 0000000000000000 R14: 00007f6369da5fa0 R15: 00007fffa1fb3318 [ 152.388012][ T9020] [ 152.787375][ T9046] loop3: detected capacity change from 0 to 1024 [ 152.805901][ T9047] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 152.805901][ T9047] The task syz.4.1702 (9047) triggered the difference, watch for misbehavior. [ 152.836044][ T9046] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 152.846694][ T9047] 9pnet: Could not find request transport: 0xffffffffffffffff [ 152.878884][ T9046] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.1701: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 152.907171][ T9046] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.1701: Bad quota inode: 3, type: 0 [ 152.924222][ T9046] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 152.947529][ T9046] EXT4-fs (loop3): mount failed [ 152.971733][ T9053] netlink: 'syz.1.1704': attribute type 10 has an invalid length. [ 153.018965][ T9062] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1705'. [ 153.028584][ T9062] gretap0: entered promiscuous mode [ 153.037002][ T9062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1705'. [ 153.055222][ T9062] ip6gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 153.105100][ T3413] IPVS: starting estimator thread 0... [ 153.178289][ T9082] autofs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬( IrÝ\•žu}ibˆŒÞêT0;´Œmy´[Gc¯î#Ï>QkÏübYü&“àÌ#“w„@/VV¼Lë~1ƒ2§÷lÿh–O„h'®ÈûrK1‚\kU{!e½úó¬Üš7»ßß [ 153.178289][ T9082] ÄUúeâ[¦ÓÎ%#s' [ 153.202142][ T9072] IPVS: using max 2592 ests per chain, 129600 per kthread [ 153.573529][ T9115] loop4: detected capacity change from 0 to 128 [ 153.580577][ T9115] EXT4-fs: test_dummy_encryption option not supported [ 153.598432][ T6878] udevd[6878]: incorrect ext4 checksum on /dev/loop4 [ 154.471526][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 154.471540][ T29] audit: type=1400 audit(1751195147.103:6022): avc: denied { write } for pid=9114 comm="syz.4.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.471881][ T9106] lo speed is unknown, defaulting to 1000 [ 154.503762][ T9106] lo speed is unknown, defaulting to 1000 [ 154.589156][ T29] audit: type=1400 audit(1751195147.223:6023): avc: denied { mount } for pid=9125 comm="syz.1.1728" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 154.651919][ T29] audit: type=1400 audit(1751195147.293:6024): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 154.669492][ T9138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.691863][ T9138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.981276][ T29] audit: type=1400 audit(1751195147.613:6025): avc: denied { bind } for pid=9157 comm="syz.2.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 155.011390][ T9158] __nla_validate_parse: 5 callbacks suppressed [ 155.011406][ T9158] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1736'. [ 155.200336][ T9176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1737'. [ 155.232342][ T9179] netlink: 'syz.1.1742': attribute type 10 has an invalid length. [ 155.255810][ T29] audit: type=1326 audit(1751195147.893:6026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73326be929 code=0x7ffc0000 [ 155.279252][ T29] audit: type=1326 audit(1751195147.893:6027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73326be929 code=0x7ffc0000 [ 155.338015][ T29] audit: type=1326 audit(1751195147.893:6028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f73326be929 code=0x7ffc0000 [ 155.361582][ T29] audit: type=1326 audit(1751195147.993:6029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73326be929 code=0x7ffc0000 [ 155.385123][ T29] audit: type=1326 audit(1751195147.993:6030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73326be929 code=0x7ffc0000 [ 155.410826][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1745'. [ 155.420117][ T9189] netlink: 'syz.4.1745': attribute type 13 has an invalid length. [ 155.441030][ T9189] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.553676][ T9199] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1748'. [ 155.571792][ T9199] hsr_slave_0 (unregistering): left promiscuous mode [ 155.592658][ T9206] loop3: detected capacity change from 0 to 1024 [ 155.633428][ T9206] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.771241][ T9228] loop4: detected capacity change from 0 to 128 [ 155.863967][ T9236] netlink: 1 bytes leftover after parsing attributes in process `+}[@'. [ 155.887847][ T29] audit: type=1326 audit(1751195148.503:6031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9233 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288eaae929 code=0x7ffc0000 [ 155.953457][ T9241] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1767'. [ 155.967999][ T9241] IPv6: Can't replace route, no match found [ 156.016238][ T9249] loop3: detected capacity change from 0 to 1024 [ 156.024873][ T9243] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1768'. [ 156.044549][ T9249] EXT4-fs mount: 10 callbacks suppressed [ 156.044565][ T9249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.064609][ T9249] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.131700][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.175974][ T9266] sctp: [Deprecated]: syz.1.1777 (pid 9266) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.175974][ T9266] Use struct sctp_sack_info instead [ 156.198787][ T9266] FAULT_INJECTION: forcing a failure. [ 156.198787][ T9266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.212260][ T9266] CPU: 0 UID: 0 PID: 9266 Comm: syz.1.1777 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 156.212288][ T9266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.212298][ T9266] Call Trace: [ 156.212304][ T9266] [ 156.212311][ T9266] __dump_stack+0x1d/0x30 [ 156.212344][ T9266] dump_stack_lvl+0xe8/0x140 [ 156.212361][ T9266] dump_stack+0x15/0x1b [ 156.212431][ T9266] should_fail_ex+0x265/0x280 [ 156.212456][ T9266] should_fail+0xb/0x20 [ 156.212477][ T9266] should_fail_usercopy+0x1a/0x20 [ 156.212577][ T9266] _copy_to_user+0x20/0xa0 [ 156.212595][ T9266] simple_read_from_buffer+0xb5/0x130 [ 156.212693][ T9266] proc_fail_nth_read+0x100/0x140 [ 156.212820][ T9266] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.212927][ T9266] vfs_read+0x19d/0x6f0 [ 156.213000][ T9266] ? __rcu_read_unlock+0x4f/0x70 [ 156.213047][ T9266] ? __fget_files+0x184/0x1c0 [ 156.213065][ T9266] ksys_read+0xda/0x1a0 [ 156.213151][ T9266] __x64_sys_read+0x40/0x50 [ 156.213183][ T9266] x64_sys_call+0x2d77/0x2fb0 [ 156.213205][ T9266] do_syscall_64+0xd2/0x200 [ 156.213221][ T9266] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 156.213248][ T9266] ? clear_bhb_loop+0x40/0x90 [ 156.213320][ T9266] ? clear_bhb_loop+0x40/0x90 [ 156.213337][ T9266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.213357][ T9266] RIP: 0033:0x7f73326bd33c [ 156.213373][ T9266] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 156.213391][ T9266] RSP: 002b:00007f7330d27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.213409][ T9266] RAX: ffffffffffffffda RBX: 00007f73328e5fa0 RCX: 00007f73326bd33c [ 156.213420][ T9266] RDX: 000000000000000f RSI: 00007f7330d270a0 RDI: 0000000000000004 [ 156.213449][ T9266] RBP: 00007f7330d27090 R08: 0000000000000000 R09: 0000000000000000 [ 156.213462][ T9266] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 156.213503][ T9266] R13: 0000000000000000 R14: 00007f73328e5fa0 R15: 00007ffe7b60d298 [ 156.213518][ T9266] [ 156.455809][ T9278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1781'. [ 156.469548][ T9278] 9pnet_fd: Insufficient options for proto=fd [ 156.706651][ T9306] netlink: 'syz.0.1792': attribute type 1 has an invalid length. [ 156.714566][ T9306] netlink: 'syz.0.1792': attribute type 1 has an invalid length. [ 156.722304][ T9306] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1792'. [ 156.731302][ T9306] NCSI netlink: No device for ifindex 65300 [ 156.806772][ T9312] netlink: 'syz.4.1794': attribute type 10 has an invalid length. [ 156.839929][ T9312] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.848550][ T9312] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.856974][ T9312] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.865400][ T9312] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.884267][ T9321] sctp: [Deprecated]: syz.1.1797 (pid 9321) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.884267][ T9321] Use struct sctp_sack_info instead [ 157.013904][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1799'. [ 157.041698][ T9327] netlink: 'syz.1.1799': attribute type 13 has an invalid length. [ 157.054584][ T9327] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.096488][ T9331] netlink: 'syz.3.1801': attribute type 30 has an invalid length. [ 157.154221][ T9338] loop2: detected capacity change from 0 to 128 [ 157.273871][ T9338] bio_check_eod: 8400 callbacks suppressed [ 157.273888][ T9338] syz.2.1804: attempt to access beyond end of device [ 157.273888][ T9338] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 157.293536][ T9338] syz.2.1804: attempt to access beyond end of device [ 157.293536][ T9338] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 157.307276][ T9338] syz.2.1804: attempt to access beyond end of device [ 157.307276][ T9338] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 157.321182][ T9347] FAULT_INJECTION: forcing a failure. [ 157.321182][ T9347] name failslab, interval 1, probability 0, space 0, times 0 [ 157.323500][ T9355] tc_dump_action: action bad kind [ 157.334092][ T9347] CPU: 1 UID: 0 PID: 9347 Comm: syz.1.1808 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 157.334193][ T9347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.334205][ T9347] Call Trace: [ 157.334212][ T9347] [ 157.334219][ T9347] __dump_stack+0x1d/0x30 [ 157.334240][ T9347] dump_stack_lvl+0xe8/0x140 [ 157.334260][ T9347] dump_stack+0x15/0x1b [ 157.334276][ T9347] should_fail_ex+0x265/0x280 [ 157.334346][ T9347] should_failslab+0x8c/0xb0 [ 157.334406][ T9347] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 157.334432][ T9347] ? sock_alloc_inode+0x34/0xa0 [ 157.334463][ T9347] ? __pfx_sock_alloc_inode+0x10/0x10 [ 157.334522][ T9347] sock_alloc_inode+0x34/0xa0 [ 157.334544][ T9347] alloc_inode+0x3d/0x170 [ 157.334609][ T9347] __sock_create+0x122/0x5b0 [ 157.334715][ T9347] __sys_socketpair+0x1bc/0x430 [ 157.334789][ T9347] __x64_sys_socketpair+0x52/0x60 [ 157.334815][ T9347] x64_sys_call+0x23f2/0x2fb0 [ 157.334835][ T9347] do_syscall_64+0xd2/0x200 [ 157.334853][ T9347] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 157.334878][ T9347] ? clear_bhb_loop+0x40/0x90 [ 157.334943][ T9347] ? clear_bhb_loop+0x40/0x90 [ 157.334964][ T9347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.334984][ T9347] RIP: 0033:0x7f73326be929 [ 157.334999][ T9347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.335058][ T9347] RSP: 002b:00007f7330d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 157.335076][ T9347] RAX: ffffffffffffffda RBX: 00007f73328e5fa0 RCX: 00007f73326be929 [ 157.335089][ T9347] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 157.335173][ T9347] RBP: 00007f7330d27090 R08: 0000000000000000 R09: 0000000000000000 [ 157.335185][ T9347] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000001 [ 157.335198][ T9347] R13: 0000000000000000 R14: 00007f73328e5fa0 R15: 00007ffe7b60d298 [ 157.335216][ T9347] [ 157.335225][ T9347] socket: no more sockets [ 157.345499][ T9338] syz.2.1804: attempt to access beyond end of device [ 157.345499][ T9338] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 157.555106][ T9338] syz.2.1804: attempt to access beyond end of device [ 157.555106][ T9338] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 157.569304][ T9338] syz.2.1804: attempt to access beyond end of device [ 157.569304][ T9338] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 157.582922][ T9338] syz.2.1804: attempt to access beyond end of device [ 157.582922][ T9338] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 157.609027][ T9338] syz.2.1804: attempt to access beyond end of device [ 157.609027][ T9338] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 157.637477][ T9366] netlink: 'syz.4.1825': attribute type 10 has an invalid length. [ 157.665928][ T9364] 9pnet: Could not find request transport: xen [ 157.691388][ T9338] syz.2.1804: attempt to access beyond end of device [ 157.691388][ T9338] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 157.707749][ T9338] syz.2.1804: attempt to access beyond end of device [ 157.707749][ T9338] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 157.744164][ T9374] lo speed is unknown, defaulting to 1000 [ 157.754129][ T9374] lo speed is unknown, defaulting to 1000 [ 157.858040][ T9389] FAULT_INJECTION: forcing a failure. [ 157.858040][ T9389] name failslab, interval 1, probability 0, space 0, times 0 [ 157.870908][ T9389] CPU: 0 UID: 0 PID: 9389 Comm: syz.3.1823 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 157.870938][ T9389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.870951][ T9389] Call Trace: [ 157.870958][ T9389] [ 157.870965][ T9389] __dump_stack+0x1d/0x30 [ 157.870984][ T9389] dump_stack_lvl+0xe8/0x140 [ 157.871070][ T9389] dump_stack+0x15/0x1b [ 157.871088][ T9389] should_fail_ex+0x265/0x280 [ 157.871117][ T9389] should_failslab+0x8c/0xb0 [ 157.871140][ T9389] kmem_cache_alloc_noprof+0x50/0x310 [ 157.871201][ T9389] ? skb_clone+0x151/0x1f0 [ 157.871222][ T9389] skb_clone+0x151/0x1f0 [ 157.871240][ T9389] __netlink_deliver_tap+0x2c9/0x500 [ 157.871279][ T9389] netlink_unicast+0x64c/0x670 [ 157.871360][ T9389] netlink_sendmsg+0x58b/0x6b0 [ 157.871381][ T9389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.871444][ T9389] __sock_sendmsg+0x145/0x180 [ 157.871524][ T9389] ____sys_sendmsg+0x31e/0x4e0 [ 157.871553][ T9389] ___sys_sendmsg+0x17b/0x1d0 [ 157.871639][ T9389] __x64_sys_sendmsg+0xd4/0x160 [ 157.871671][ T9389] x64_sys_call+0x2999/0x2fb0 [ 157.871692][ T9389] do_syscall_64+0xd2/0x200 [ 157.871718][ T9389] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 157.871739][ T9389] ? clear_bhb_loop+0x40/0x90 [ 157.871799][ T9389] ? clear_bhb_loop+0x40/0x90 [ 157.871821][ T9389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.871892][ T9389] RIP: 0033:0x7f6369b7e929 [ 157.871905][ T9389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.871919][ T9389] RSP: 002b:00007f63681e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.871936][ T9389] RAX: ffffffffffffffda RBX: 00007f6369da5fa0 RCX: 00007f6369b7e929 [ 157.871947][ T9389] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000004 [ 157.871957][ T9389] RBP: 00007f63681e7090 R08: 0000000000000000 R09: 0000000000000000 [ 157.871969][ T9389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.871982][ T9389] R13: 0000000000000000 R14: 00007f6369da5fa0 R15: 00007fffa1fb3318 [ 157.871997][ T9389] [ 158.097860][ T9389] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 158.198033][ T9410] pim6reg: entered allmulticast mode [ 158.205379][ T9410] pim6reg: left allmulticast mode [ 158.386146][ T9428] lo speed is unknown, defaulting to 1000 [ 158.399898][ T9428] lo speed is unknown, defaulting to 1000 [ 158.561624][ T9428] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 158.629703][ T9441] lo speed is unknown, defaulting to 1000 [ 158.641745][ T9441] lo speed is unknown, defaulting to 1000 [ 158.833101][ T9448] lo speed is unknown, defaulting to 1000 [ 158.839406][ T9448] lo speed is unknown, defaulting to 1000 [ 159.155206][ T9462] pim6reg: entered allmulticast mode [ 159.161876][ T9462] pim6reg: left allmulticast mode [ 159.224810][ T9473] loop4: detected capacity change from 0 to 4096 [ 159.235216][ T9473] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 159.255034][ T9473] netlink: 'syz.4.1853': attribute type 1 has an invalid length. [ 159.268292][ T9473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.279852][ T9473] vlan0: entered allmulticast mode [ 159.285313][ T9473] bond1: entered allmulticast mode [ 159.506859][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 159.506875][ T29] audit: type=1400 audit(1751195152.143:6219): avc: denied { create } for pid=9501 comm="syz.0.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 159.532818][ T29] audit: type=1400 audit(1751195152.143:6220): avc: denied { bind } for pid=9501 comm="syz.0.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 159.554865][ T29] audit: type=1400 audit(1751195152.143:6221): avc: denied { setopt } for pid=9501 comm="syz.0.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 159.575146][ T29] audit: type=1400 audit(1751195152.153:6222): avc: denied { ioctl } for pid=9501 comm="syz.0.1865" path="socket:[23871]" dev="sockfs" ino=23871 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 159.604441][ T9507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=9507 comm=syz.0.1867 [ 159.820018][ T9519] loop3: detected capacity change from 0 to 1024 [ 159.832848][ T9519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.845197][ T9519] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.878507][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.994261][ T29] audit: type=1400 audit(1751195152.633:6223): avc: denied { create } for pid=9527 comm="syz.2.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 160.033014][ T29] audit: type=1326 audit(1751195152.673:6224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9535 comm="syz.4.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 160.057352][ T29] audit: type=1326 audit(1751195152.673:6225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9535 comm="syz.4.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 160.080864][ T29] audit: type=1326 audit(1751195152.673:6226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9535 comm="syz.4.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 160.104279][ T29] audit: type=1326 audit(1751195152.673:6227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9535 comm="syz.4.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 160.127892][ T29] audit: type=1326 audit(1751195152.673:6228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9535 comm="syz.4.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 160.342081][ T9559] pim6reg: entered allmulticast mode [ 160.348085][ T9559] pim6reg: left allmulticast mode [ 160.397464][ T9565] __nla_validate_parse: 4 callbacks suppressed [ 160.397553][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1887'. [ 160.413109][ T9565] netlink: 'syz.3.1887': attribute type 13 has an invalid length. [ 160.425497][ T9565] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.689402][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1899'. [ 160.699651][ T9599] netlink: 'syz.2.1899': attribute type 13 has an invalid length. [ 160.716106][ T9599] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.741471][ T9595] lo speed is unknown, defaulting to 1000 [ 160.747829][ T9595] lo speed is unknown, defaulting to 1000 [ 161.024383][ T9613] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 161.222088][ T9620] loop4: detected capacity change from 0 to 128 [ 161.250134][ T9622] loop2: detected capacity change from 0 to 512 [ 161.265362][ T9622] EXT4-fs (loop2): 1 orphan inode deleted [ 161.271936][ T9622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.284815][ T4413] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 1 [ 161.285521][ T9622] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.330932][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.350255][ T9628] netlink: 'syz.2.1909': attribute type 298 has an invalid length. [ 161.412057][ T9636] loop2: detected capacity change from 0 to 164 [ 161.419390][ T9636] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 161.436474][ T9636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1911'. [ 161.493319][ T9641] FAULT_INJECTION: forcing a failure. [ 161.493319][ T9641] name failslab, interval 1, probability 0, space 0, times 0 [ 161.506036][ T9641] CPU: 1 UID: 0 PID: 9641 Comm: syz.0.1912 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 161.506068][ T9641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.506080][ T9641] Call Trace: [ 161.506144][ T9641] [ 161.506151][ T9641] __dump_stack+0x1d/0x30 [ 161.506170][ T9641] dump_stack_lvl+0xe8/0x140 [ 161.506221][ T9641] dump_stack+0x15/0x1b [ 161.506238][ T9641] should_fail_ex+0x265/0x280 [ 161.506266][ T9641] should_failslab+0x8c/0xb0 [ 161.506285][ T9641] kmem_cache_alloc_node_noprof+0x57/0x320 [ 161.506321][ T9641] ? __alloc_skb+0x101/0x320 [ 161.506352][ T9641] __alloc_skb+0x101/0x320 [ 161.506456][ T9641] netlink_alloc_large_skb+0xba/0xf0 [ 161.506483][ T9641] netlink_sendmsg+0x3cf/0x6b0 [ 161.506501][ T9641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.506517][ T9641] __sock_sendmsg+0x145/0x180 [ 161.506570][ T9641] ____sys_sendmsg+0x31e/0x4e0 [ 161.506606][ T9641] ___sys_sendmsg+0x17b/0x1d0 [ 161.506733][ T9641] __x64_sys_sendmsg+0xd4/0x160 [ 161.506817][ T9641] x64_sys_call+0x2999/0x2fb0 [ 161.506835][ T9641] do_syscall_64+0xd2/0x200 [ 161.506850][ T9641] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 161.506949][ T9641] ? clear_bhb_loop+0x40/0x90 [ 161.506970][ T9641] ? clear_bhb_loop+0x40/0x90 [ 161.507003][ T9641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.507020][ T9641] RIP: 0033:0x7f288eaae929 [ 161.507034][ T9641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.507050][ T9641] RSP: 002b:00007f288d117038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.507068][ T9641] RAX: ffffffffffffffda RBX: 00007f288ecd5fa0 RCX: 00007f288eaae929 [ 161.507118][ T9641] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 161.507128][ T9641] RBP: 00007f288d117090 R08: 0000000000000000 R09: 0000000000000000 [ 161.507138][ T9641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.507225][ T9641] R13: 0000000000000000 R14: 00007f288ecd5fa0 R15: 00007ffee929bca8 [ 161.507366][ T9641] [ 161.913325][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1915'. [ 162.139758][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1918'. [ 162.149039][ T9663] netlink: 'syz.0.1918': attribute type 13 has an invalid length. [ 162.174917][ T9663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.305566][ T9671] netlink: 20 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 162.314329][ T9671] netlink: 20 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 162.372085][ T9675] loop3: detected capacity change from 0 to 1024 [ 162.389166][ T9675] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.579978][ T9675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.663250][ T9671] netlink: 20 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 162.663882][ T9697] process 'syz.4.1926' launched '/dev/fd/8' with NULL argv: empty string added [ 162.672198][ T9671] netlink: 20 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 162.866342][ T9671] netlink: 20 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 162.918311][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.950307][ T9716] lo speed is unknown, defaulting to 1000 [ 162.956629][ T9716] lo speed is unknown, defaulting to 1000 [ 163.173597][ T9723] netlink: 'syz.0.1935': attribute type 13 has an invalid length. [ 163.204544][ T9723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.427907][ T9755] netlink: 'syz.0.1948': attribute type 13 has an invalid length. [ 163.444227][ T9755] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.574248][ T9770] FAULT_INJECTION: forcing a failure. [ 163.574248][ T9770] name failslab, interval 1, probability 0, space 0, times 0 [ 163.586941][ T9770] CPU: 1 UID: 0 PID: 9770 Comm: syz.0.1953 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 163.586968][ T9770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.587043][ T9770] Call Trace: [ 163.587049][ T9770] [ 163.587055][ T9770] __dump_stack+0x1d/0x30 [ 163.587081][ T9770] dump_stack_lvl+0xe8/0x140 [ 163.587099][ T9770] dump_stack+0x15/0x1b [ 163.587112][ T9770] should_fail_ex+0x265/0x280 [ 163.587137][ T9770] should_failslab+0x8c/0xb0 [ 163.587178][ T9770] __kvmalloc_node_noprof+0x123/0x4e0 [ 163.587206][ T9770] ? alloc_fdtable+0xa5/0x1b0 [ 163.587238][ T9770] ? __kmalloc_cache_noprof+0x22e/0x320 [ 163.587340][ T9770] alloc_fdtable+0xa5/0x1b0 [ 163.587373][ T9770] dup_fd+0x4c7/0x540 [ 163.587417][ T9770] ? _raw_spin_unlock+0x26/0x50 [ 163.587437][ T9770] ksys_unshare+0x346/0x6d0 [ 163.587483][ T9770] ? trace_sys_enter+0xd0/0x110 [ 163.587508][ T9770] __x64_sys_unshare+0x1f/0x30 [ 163.587537][ T9770] x64_sys_call+0x2d4b/0x2fb0 [ 163.587599][ T9770] do_syscall_64+0xd2/0x200 [ 163.587614][ T9770] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 163.587637][ T9770] ? clear_bhb_loop+0x40/0x90 [ 163.587660][ T9770] ? clear_bhb_loop+0x40/0x90 [ 163.587682][ T9770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.587704][ T9770] RIP: 0033:0x7f288eaae929 [ 163.587718][ T9770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.587735][ T9770] RSP: 002b:00007f288d117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 163.587808][ T9770] RAX: ffffffffffffffda RBX: 00007f288ecd5fa0 RCX: 00007f288eaae929 [ 163.587899][ T9770] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042020600 [ 163.587912][ T9770] RBP: 00007f288d117090 R08: 0000000000000000 R09: 0000000000000000 [ 163.587977][ T9770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.587990][ T9770] R13: 0000000000000000 R14: 00007f288ecd5fa0 R15: 00007ffee929bca8 [ 163.588010][ T9770] [ 163.946159][ T9783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.964044][ T9783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.062215][ T9793] loop2: detected capacity change from 0 to 128 [ 164.073060][ T9793] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.086127][ T9793] ext4 filesystem being mounted at /347/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 164.182070][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.196492][ T9801] loop4: detected capacity change from 0 to 1024 [ 164.258315][ T9809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.265892][ T9809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.276701][ T9809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.284374][ T9809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.305861][ T9801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.318552][ T9801] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.344540][ T9813] wg2: entered promiscuous mode [ 164.349772][ T9813] wg2: entered allmulticast mode [ 164.368216][ T9817] pim6reg: entered allmulticast mode [ 164.378952][ T9817] pim6reg: left allmulticast mode [ 164.419939][ T9818] lo speed is unknown, defaulting to 1000 [ 164.426143][ T9818] lo speed is unknown, defaulting to 1000 [ 164.466926][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.003745][ T29] kauditd_printk_skb: 522 callbacks suppressed [ 165.003761][ T29] audit: type=1326 audit(1751195157.643:6750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9851 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6369b7e929 code=0x7ffc0000 [ 165.066564][ T29] audit: type=1326 audit(1751195157.643:6751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9851 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6369b7e929 code=0x7ffc0000 [ 165.090078][ T29] audit: type=1326 audit(1751195157.643:6752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9851 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6369b7e929 code=0x7ffc0000 [ 165.113543][ T29] audit: type=1326 audit(1751195157.643:6753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9851 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f6369b7e929 code=0x7ffc0000 [ 165.136852][ T29] audit: type=1326 audit(1751195157.643:6754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9851 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6369b7e929 code=0x7ffc0000 [ 165.160308][ T29] audit: type=1326 audit(1751195157.643:6755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9851 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6369b7e929 code=0x7ffc0000 [ 165.183830][ T29] audit: type=1326 audit(1751195157.643:6756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9851 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6369b7e929 code=0x7ffc0000 [ 165.207238][ T29] audit: type=1326 audit(1751195157.643:6757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9851 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f6369b7e929 code=0x7ffc0000 [ 165.230690][ T29] audit: type=1326 audit(1751195157.643:6758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9851 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6369b7e929 code=0x7ffc0000 [ 165.254243][ T29] audit: type=1326 audit(1751195157.643:6759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9851 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6369b7e929 code=0x7ffc0000 [ 165.303244][ T9859] lo speed is unknown, defaulting to 1000 [ 165.309313][ T9859] lo speed is unknown, defaulting to 1000 [ 165.317242][ T9859] lo speed is unknown, defaulting to 1000 [ 165.323745][ T9859] infiniband s…z0: RDMA CMA: cma_listen_on_dev, error -98 [ 165.338717][ T9859] lo speed is unknown, defaulting to 1000 [ 165.345066][ T9859] lo speed is unknown, defaulting to 1000 [ 165.351259][ T9859] lo speed is unknown, defaulting to 1000 [ 165.357887][ T9859] lo speed is unknown, defaulting to 1000 [ 165.364145][ T9859] lo speed is unknown, defaulting to 1000 [ 165.370488][ T9859] lo speed is unknown, defaulting to 1000 [ 165.382971][ T9865] 9pnet_fd: Insufficient options for proto=fd [ 165.445350][ T9871] __nla_validate_parse: 4 callbacks suppressed [ 165.445365][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1988'. [ 165.468378][ T9871] netlink: 'syz.2.1988': attribute type 13 has an invalid length. [ 165.492862][ T9871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.560124][ T9884] netlink: 'syz.0.1992': attribute type 298 has an invalid length. [ 165.610425][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1990'. [ 165.653270][ T9888] netlink: 'syz.3.1993': attribute type 298 has an invalid length. [ 165.723073][ T9894] netlink: 'syz.0.1994': attribute type 10 has an invalid length. [ 165.878240][ T9909] netlink: 'syz.4.2002': attribute type 10 has an invalid length. [ 165.891116][ T9909] veth0_vlan: entered allmulticast mode [ 165.899188][ T9909] veth0_vlan: left promiscuous mode [ 165.911477][ T9909] veth0_vlan: entered promiscuous mode [ 165.931444][ T9909] team0: Device veth0_vlan failed to register rx_handler [ 165.956119][ T9918] netlink: 'syz.0.2005': attribute type 298 has an invalid length. [ 166.168536][ T9943] FAULT_INJECTION: forcing a failure. [ 166.168536][ T9943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.181820][ T9943] CPU: 0 UID: 0 PID: 9943 Comm: syz.1.2014 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 166.181848][ T9943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.181870][ T9943] Call Trace: [ 166.181877][ T9943] [ 166.181884][ T9943] __dump_stack+0x1d/0x30 [ 166.181958][ T9943] dump_stack_lvl+0xe8/0x140 [ 166.181974][ T9943] dump_stack+0x15/0x1b [ 166.181997][ T9943] should_fail_ex+0x265/0x280 [ 166.182086][ T9943] should_fail+0xb/0x20 [ 166.182133][ T9943] should_fail_usercopy+0x1a/0x20 [ 166.182175][ T9943] _copy_from_user+0x1c/0xb0 [ 166.182195][ T9943] rds_rdma_extra_size+0xe2/0x270 [ 166.182225][ T9943] ? krealloc_noprof+0x136/0x2d0 [ 166.182248][ T9943] rds_rm_size+0x326/0x490 [ 166.182286][ T9943] rds_sendmsg+0x842/0x14a0 [ 166.182312][ T9943] ? __pfx_rds_sendmsg+0x10/0x10 [ 166.182336][ T9943] __sock_sendmsg+0x145/0x180 [ 166.182429][ T9943] ____sys_sendmsg+0x31e/0x4e0 [ 166.182504][ T9943] ___sys_sendmsg+0x17b/0x1d0 [ 166.182544][ T9943] __x64_sys_sendmsg+0xd4/0x160 [ 166.182579][ T9943] x64_sys_call+0x2999/0x2fb0 [ 166.182597][ T9943] do_syscall_64+0xd2/0x200 [ 166.182650][ T9943] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 166.182686][ T9943] ? clear_bhb_loop+0x40/0x90 [ 166.182769][ T9943] ? clear_bhb_loop+0x40/0x90 [ 166.182790][ T9943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.182812][ T9943] RIP: 0033:0x7f73326be929 [ 166.182828][ T9943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.182869][ T9943] RSP: 002b:00007f7330d27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.182886][ T9943] RAX: ffffffffffffffda RBX: 00007f73328e5fa0 RCX: 00007f73326be929 [ 166.182897][ T9943] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 166.182910][ T9943] RBP: 00007f7330d27090 R08: 0000000000000000 R09: 0000000000000000 [ 166.182922][ T9943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.182935][ T9943] R13: 0000000000000000 R14: 00007f73328e5fa0 R15: 00007ffe7b60d298 [ 166.182951][ T9943] [ 166.332290][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2011'. [ 166.502759][ T9957] FAULT_INJECTION: forcing a failure. [ 166.502759][ T9957] name failslab, interval 1, probability 0, space 0, times 0 [ 166.515450][ T9957] CPU: 1 UID: 0 PID: 9957 Comm: syz.1.2017 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 166.515548][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.515560][ T9957] Call Trace: [ 166.515566][ T9957] [ 166.515573][ T9957] __dump_stack+0x1d/0x30 [ 166.515599][ T9957] dump_stack_lvl+0xe8/0x140 [ 166.515619][ T9957] dump_stack+0x15/0x1b [ 166.515636][ T9957] should_fail_ex+0x265/0x280 [ 166.515690][ T9957] should_failslab+0x8c/0xb0 [ 166.515714][ T9957] __kmalloc_noprof+0xa5/0x3e0 [ 166.515802][ T9957] ? security_inode_init_security+0xc5/0x330 [ 166.515884][ T9957] ? current_umask+0x2f/0x40 [ 166.515904][ T9957] security_inode_init_security+0xc5/0x330 [ 166.515928][ T9957] ? __pfx_shmem_initxattrs+0x10/0x10 [ 166.515953][ T9957] shmem_mknod+0xad/0x180 [ 166.516003][ T9957] shmem_create+0x34/0x50 [ 166.516025][ T9957] vfs_create+0x194/0x2b0 [ 166.516053][ T9957] do_mknodat+0x2af/0x610 [ 166.516113][ T9957] __x64_sys_mknodat+0x5e/0x70 [ 166.516139][ T9957] x64_sys_call+0x2355/0x2fb0 [ 166.516157][ T9957] do_syscall_64+0xd2/0x200 [ 166.516173][ T9957] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 166.516250][ T9957] ? clear_bhb_loop+0x40/0x90 [ 166.516271][ T9957] ? clear_bhb_loop+0x40/0x90 [ 166.516291][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.516390][ T9957] RIP: 0033:0x7f73326be929 [ 166.516406][ T9957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.516424][ T9957] RSP: 002b:00007f7330d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 166.516444][ T9957] RAX: ffffffffffffffda RBX: 00007f73328e5fa0 RCX: 00007f73326be929 [ 166.516458][ T9957] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000005 [ 166.516471][ T9957] RBP: 00007f7330d27090 R08: 0000000000000000 R09: 0000000000000000 [ 166.516484][ T9957] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000001 [ 166.516548][ T9957] R13: 0000000000000000 R14: 00007f73328e5fa0 R15: 00007ffe7b60d298 [ 166.516569][ T9957] [ 166.767535][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2019'. [ 166.944755][ T9967] netlink: 'syz.3.2020': attribute type 298 has an invalid length. [ 167.119422][ T9978] loop2: detected capacity change from 0 to 128 [ 167.366835][ T9991] lo speed is unknown, defaulting to 1000 [ 167.374374][ T9991] lo speed is unknown, defaulting to 1000 [ 167.381244][ T9991] lo speed is unknown, defaulting to 1000 [ 167.899519][ T9995] FAULT_INJECTION: forcing a failure. [ 167.899519][ T9995] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 167.912960][ T9995] CPU: 0 UID: 0 PID: 9995 Comm: syz.1.2031 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 167.912986][ T9995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.912996][ T9995] Call Trace: [ 167.913070][ T9995] [ 167.913076][ T9995] __dump_stack+0x1d/0x30 [ 167.913094][ T9995] dump_stack_lvl+0xe8/0x140 [ 167.913110][ T9995] dump_stack+0x15/0x1b [ 167.913124][ T9995] should_fail_ex+0x265/0x280 [ 167.913167][ T9995] should_fail_alloc_page+0xf2/0x100 [ 167.913188][ T9995] __alloc_frozen_pages_noprof+0xff/0x360 [ 167.913217][ T9995] alloc_pages_mpol+0xb3/0x250 [ 167.913245][ T9995] folio_alloc_mpol_noprof+0x39/0x80 [ 167.913273][ T9995] shmem_get_folio_gfp+0x3cf/0xd60 [ 167.913306][ T9995] shmem_fault+0xf6/0x250 [ 167.913406][ T9995] __do_fault+0xbc/0x200 [ 167.913432][ T9995] handle_mm_fault+0xd69/0x2be0 [ 167.913451][ T9995] ? __rcu_read_lock+0x37/0x50 [ 167.913494][ T9995] ? trace_reschedule_exit+0xd/0xc0 [ 167.913524][ T9995] ? trace_reschedule_exit+0xd/0xc0 [ 167.913555][ T9995] __get_user_pages+0x1036/0x1fb0 [ 167.913588][ T9995] __gup_longterm_locked+0x638/0x1010 [ 167.913665][ T9995] ? ___pte_offset_map+0xea/0x150 [ 167.913733][ T9995] gup_fast_fallback+0x1f9/0x1730 [ 167.913766][ T9995] pin_user_pages_fast+0x5f/0x90 [ 167.913791][ T9995] io_pin_pages+0xb5/0x170 [ 167.913811][ T9995] io_sqe_buffer_register+0x184/0x1430 [ 167.913843][ T9995] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 167.913872][ T9995] ? __kvmalloc_node_noprof+0x398/0x4e0 [ 167.913947][ T9995] io_sqe_buffers_register+0x2ac/0x530 [ 167.913974][ T9995] __se_sys_io_uring_register+0xa9f/0xeb0 [ 167.914001][ T9995] ? __bpf_trace_sys_enter+0x10/0x30 [ 167.914062][ T9995] ? __traceiter_sys_enter+0x5c/0x80 [ 167.914084][ T9995] ? trace_sys_enter+0xd0/0x110 [ 167.914102][ T9995] __x64_sys_io_uring_register+0x55/0x70 [ 167.914153][ T9995] x64_sys_call+0xc91/0x2fb0 [ 167.914244][ T9995] do_syscall_64+0xd2/0x200 [ 167.914259][ T9995] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 167.914363][ T9995] ? clear_bhb_loop+0x40/0x90 [ 167.914385][ T9995] ? clear_bhb_loop+0x40/0x90 [ 167.914405][ T9995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.914423][ T9995] RIP: 0033:0x7f73326be929 [ 167.914461][ T9995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.914479][ T9995] RSP: 002b:00007f7330d27038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 167.914499][ T9995] RAX: ffffffffffffffda RBX: 00007f73328e5fa0 RCX: 00007f73326be929 [ 167.914512][ T9995] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000006 [ 167.914523][ T9995] RBP: 00007f7330d27090 R08: 0000000000000000 R09: 0000000000000000 [ 167.914561][ T9995] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000002 [ 167.914574][ T9995] R13: 0000000000000000 R14: 00007f73328e5fa0 R15: 00007ffe7b60d298 [ 167.914591][ T9995] [ 168.411638][T10001] FAULT_INJECTION: forcing a failure. [ 168.411638][T10001] name failslab, interval 1, probability 0, space 0, times 0 [ 168.424333][T10001] CPU: 0 UID: 0 PID: 10001 Comm: syz.1.2034 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 168.424441][T10001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 168.424455][T10001] Call Trace: [ 168.424463][T10001] [ 168.424472][T10001] __dump_stack+0x1d/0x30 [ 168.424494][T10001] dump_stack_lvl+0xe8/0x140 [ 168.424552][T10001] dump_stack+0x15/0x1b [ 168.424569][T10001] should_fail_ex+0x265/0x280 [ 168.424605][T10001] should_failslab+0x8c/0xb0 [ 168.424668][T10001] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 168.424695][T10001] ? cond_bools_copy+0x30/0x80 [ 168.424726][T10001] ? __pfx_cond_bools_destroy+0x10/0x10 [ 168.424803][T10001] kmemdup_noprof+0x2b/0x70 [ 168.424827][T10001] ? __pfx_cond_bools_destroy+0x10/0x10 [ 168.424863][T10001] cond_bools_copy+0x30/0x80 [ 168.424950][T10001] ? __pfx_cond_bools_destroy+0x10/0x10 [ 168.425026][T10001] hashtab_duplicate+0x11b/0x360 [ 168.425085][T10001] ? __pfx_cond_bools_copy+0x10/0x10 [ 168.425109][T10001] cond_policydb_dup+0xd2/0x4e0 [ 168.425156][T10001] security_set_bools+0xa0/0x340 [ 168.425183][T10001] sel_commit_bools_write+0x1ea/0x270 [ 168.425213][T10001] vfs_writev+0x406/0x8b0 [ 168.425274][T10001] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 168.425302][T10001] ? mutex_lock+0xd/0x30 [ 168.425401][T10001] do_writev+0xe7/0x210 [ 168.425425][T10001] __x64_sys_writev+0x45/0x50 [ 168.425443][T10001] x64_sys_call+0x2006/0x2fb0 [ 168.425515][T10001] do_syscall_64+0xd2/0x200 [ 168.425533][T10001] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 168.425554][T10001] ? clear_bhb_loop+0x40/0x90 [ 168.425581][T10001] ? clear_bhb_loop+0x40/0x90 [ 168.425610][T10001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.425640][T10001] RIP: 0033:0x7f73326be929 [ 168.425673][T10001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.425762][T10001] RSP: 002b:00007f7330d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 168.425842][T10001] RAX: ffffffffffffffda RBX: 00007f73328e5fa0 RCX: 00007f73326be929 [ 168.425855][T10001] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000003 [ 168.425868][T10001] RBP: 00007f7330d27090 R08: 0000000000000000 R09: 0000000000000000 [ 168.425881][T10001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 168.425894][T10001] R13: 0000000000000000 R14: 00007f73328e5fa0 R15: 00007ffe7b60d298 [ 168.425913][T10001] [ 169.540283][T10021] loop4: detected capacity change from 0 to 1024 [ 169.565583][T10021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.588182][T10021] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.626323][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.704131][T10033] netlink: 'syz.4.2044': attribute type 10 has an invalid length. [ 170.126107][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 170.126122][ T29] audit: type=1326 audit(1751195162.764:6964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10035 comm="syz.0.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288eaae929 code=0x7ffc0000 [ 170.298484][ T29] audit: type=1326 audit(1751195162.764:6965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10035 comm="syz.0.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288eaae929 code=0x7ffc0000 [ 170.322312][ T29] audit: type=1326 audit(1751195162.774:6966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10035 comm="syz.0.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f288eaae929 code=0x7ffc0000 [ 170.345812][ T29] audit: type=1326 audit(1751195162.774:6967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10035 comm="syz.0.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288eaae929 code=0x7ffc0000 [ 170.369572][ T29] audit: type=1326 audit(1751195162.774:6968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10035 comm="syz.0.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288eaae929 code=0x7ffc0000 [ 170.393179][ T29] audit: type=1326 audit(1751195162.774:6969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10035 comm="syz.0.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f288eaae929 code=0x7ffc0000 [ 170.416812][ T29] audit: type=1326 audit(1751195162.774:6970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10035 comm="syz.0.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288eaae929 code=0x7ffc0000 [ 170.440386][ T29] audit: type=1326 audit(1751195162.774:6971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10035 comm="syz.0.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288eaae929 code=0x7ffc0000 [ 170.463899][ T29] audit: type=1326 audit(1751195162.774:6972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10035 comm="syz.0.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f288eaae929 code=0x7ffc0000 [ 170.467701][T10060] lo speed is unknown, defaulting to 1000 [ 170.487372][ T29] audit: type=1326 audit(1751195162.774:6973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10035 comm="syz.0.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288eaae929 code=0x7ffc0000 [ 170.516951][T10060] lo speed is unknown, defaulting to 1000 [ 170.523122][T10060] lo speed is unknown, defaulting to 1000 [ 170.785338][T10062] loop3: detected capacity change from 0 to 1024 [ 170.993794][T10062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.010079][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2057'. [ 171.045714][T10068] netlink: 'syz.0.2057': attribute type 13 has an invalid length. [ 171.142865][T10062] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.173001][T10076] netlink: 'syz.1.2060': attribute type 10 has an invalid length. [ 171.196556][T10068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.303647][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.421447][T10091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2061'. [ 171.587905][T10097] loop3: detected capacity change from 0 to 128 [ 171.683435][T10099] bio_check_eod: 82 callbacks suppressed [ 171.683457][T10099] syz.3.2066: attempt to access beyond end of device [ 171.683457][T10099] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 171.825111][T10099] syz.3.2066: attempt to access beyond end of device [ 171.825111][T10099] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 171.870922][T10099] syz.3.2066: attempt to access beyond end of device [ 171.870922][T10099] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 171.961319][T10099] syz.3.2066: attempt to access beyond end of device [ 171.961319][T10099] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 172.029898][T10099] syz.3.2066: attempt to access beyond end of device [ 172.029898][T10099] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 172.047022][T10116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2075'. [ 172.056661][T10116] netlink: 'syz.4.2075': attribute type 13 has an invalid length. [ 172.077451][T10120] loop2: detected capacity change from 0 to 128 [ 172.098937][T10099] syz.3.2066: attempt to access beyond end of device [ 172.098937][T10099] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 172.115700][T10099] syz.3.2066: attempt to access beyond end of device [ 172.115700][T10099] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 172.129315][T10116] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.146990][T10099] syz.3.2066: attempt to access beyond end of device [ 172.146990][T10099] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 172.191088][T10099] syz.3.2066: attempt to access beyond end of device [ 172.191088][T10099] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 172.221846][T10125] loop4: detected capacity change from 0 to 512 [ 172.230968][T10125] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.237723][T10125] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.245603][T10099] syz.3.2066: attempt to access beyond end of device [ 172.245603][T10099] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 172.261884][T10125] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 172.269158][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2077'. [ 172.270011][T10125] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 172.288274][T10125] EXT4-fs (loop4): 1 truncate cleaned up [ 172.294558][T10125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.464323][T10134] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 4: comm syz.4.2078: lblock 0 mapped to illegal pblock 4 (length 1) [ 172.496251][T10134] EXT4-fs (loop4): Remounting filesystem read-only [ 172.582082][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.965994][T10160] loop2: detected capacity change from 0 to 1024 [ 172.994145][T10160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.026353][T10160] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.101886][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.169892][T10169] loop2: detected capacity change from 0 to 512 [ 173.186767][T10169] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.195891][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2089'. [ 173.206376][T10169] EXT4-fs: Ignoring removed mblk_io_submit option [ 173.214685][T10169] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 173.230349][T10169] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 173.250990][T10169] EXT4-fs (loop2): 1 truncate cleaned up [ 173.273528][T10169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.335981][T10176] pim6reg: entered allmulticast mode [ 173.342030][T10176] pim6reg: left allmulticast mode [ 173.393266][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2094'. [ 173.402568][T10182] netlink: 'syz.1.2094': attribute type 13 has an invalid length. [ 173.411093][T10183] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #2: block 4: comm syz.2.2091: lblock 0 mapped to illegal pblock 4 (length 1) [ 173.429608][T10182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 173.436812][T10183] EXT4-fs (loop2): Remounting filesystem read-only [ 173.471589][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.677019][T10199] lo speed is unknown, defaulting to 1000 [ 173.683168][T10199] lo speed is unknown, defaulting to 1000 [ 173.689253][T10199] lo speed is unknown, defaulting to 1000 [ 174.195887][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2107'. [ 174.205115][T10215] netlink: 'syz.3.2107': attribute type 13 has an invalid length. [ 174.217421][T10215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.232969][ T10] lo speed is unknown, defaulting to 1000 [ 174.451272][T10237] loop2: detected capacity change from 0 to 128 [ 174.503634][T10240] lo speed is unknown, defaulting to 1000 [ 174.510433][T10240] lo speed is unknown, defaulting to 1000 [ 174.517303][T10240] lo speed is unknown, defaulting to 1000 [ 174.623498][T10243] loop3: detected capacity change from 0 to 1024 [ 174.723041][T10243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.792793][T10243] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.878342][T10253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2120'. [ 174.928216][T10253] netlink: 'syz.4.2120': attribute type 13 has an invalid length. [ 174.958034][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.987367][T10253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.343707][T10266] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2124'. [ 175.391820][T10271] netlink: 'syz.0.2129': attribute type 10 has an invalid length. [ 175.404449][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 175.404469][ T29] audit: type=1326 audit(1751195168.044:7170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10270 comm="syz.0.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288eaae929 code=0x7ffc0000 [ 175.472790][ T29] audit: type=1326 audit(1751195168.074:7171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10270 comm="syz.0.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f288eaae929 code=0x7ffc0000 [ 175.503465][T10276] loop2: detected capacity change from 0 to 1024 [ 175.515009][ T29] audit: type=1326 audit(1751195168.144:7172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10270 comm="syz.0.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288eaae929 code=0x7ffc0000 [ 175.538567][ T29] audit: type=1326 audit(1751195168.144:7173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10270 comm="syz.0.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288eaae929 code=0x7ffc0000 [ 175.541711][T10276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.575056][T10276] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.667045][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.697637][T10295] loop4: detected capacity change from 0 to 128 [ 175.718583][T10297] loop2: detected capacity change from 0 to 1024 [ 175.772308][T10297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.785198][T10297] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.888022][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.003418][T10309] lo speed is unknown, defaulting to 1000 [ 176.010010][T10309] lo speed is unknown, defaulting to 1000 [ 176.017059][T10309] lo speed is unknown, defaulting to 1000 [ 176.113061][ T29] audit: type=1326 audit(1751195168.734:7174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.4.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 176.136729][ T29] audit: type=1326 audit(1751195168.734:7175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.4.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 176.160304][ T29] audit: type=1326 audit(1751195168.734:7176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.4.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 176.183636][ T29] audit: type=1326 audit(1751195168.734:7177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.4.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 176.207213][ T29] audit: type=1326 audit(1751195168.734:7178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.4.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 176.230738][ T29] audit: type=1326 audit(1751195168.734:7179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.4.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 176.812378][T10318] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2144'. [ 176.816294][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2143'. [ 176.846743][T10329] netlink: 'syz.1.2147': attribute type 10 has an invalid length. [ 176.874143][T10332] loop3: detected capacity change from 0 to 1024 [ 176.902199][T10332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.916795][T10332] ext4 filesystem being mounted at /444/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.988631][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.078885][T10349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2152'. [ 177.094201][T10349] netlink: 'syz.3.2152': attribute type 13 has an invalid length. [ 177.125386][T10349] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.207827][T10361] pim6reg: entered allmulticast mode [ 177.214560][T10361] pim6reg: left allmulticast mode [ 177.428458][T10382] lo speed is unknown, defaulting to 1000 [ 177.434929][T10382] lo speed is unknown, defaulting to 1000 [ 177.441432][T10382] lo speed is unknown, defaulting to 1000 [ 177.701010][T10390] lo speed is unknown, defaulting to 1000 [ 177.707338][T10390] lo speed is unknown, defaulting to 1000 [ 177.713902][T10390] lo speed is unknown, defaulting to 1000 [ 177.945901][T10393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2166'. [ 177.955493][T10393] netlink: 'syz.1.2166': attribute type 13 has an invalid length. [ 177.968553][T10393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.152222][T10415] loop4: detected capacity change from 0 to 128 [ 178.409763][T10429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2179'. [ 178.440672][T10429] netlink: 'syz.3.2179': attribute type 13 has an invalid length. [ 178.462911][T10429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.600218][T10441] pim6reg: entered allmulticast mode [ 178.649590][T10447] loop2: detected capacity change from 0 to 512 [ 178.656821][T10447] EXT4-fs: Ignoring removed nomblk_io_submit option [ 178.663952][T10447] EXT4-fs: Ignoring removed mblk_io_submit option [ 178.672362][T10447] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 178.681063][T10441] pim6reg: left allmulticast mode [ 178.687226][T10447] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 178.696161][T10447] EXT4-fs (loop2): 1 truncate cleaned up [ 178.702486][T10447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.803594][T10456] lo speed is unknown, defaulting to 1000 [ 178.810166][T10456] lo speed is unknown, defaulting to 1000 [ 178.816701][T10456] lo speed is unknown, defaulting to 1000 [ 178.864653][T10457] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #2: block 4: comm syz.2.2188: lblock 0 mapped to illegal pblock 4 (length 1) [ 178.885418][T10457] EXT4-fs (loop2): Remounting filesystem read-only [ 178.921054][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.533616][T10492] netlink: 'syz.0.2200': attribute type 10 has an invalid length. [ 179.550511][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2196'. [ 179.736231][T10501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2203'. [ 179.930925][T10512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2206'. [ 179.957793][T10512] netlink: 'syz.2.2206': attribute type 13 has an invalid length. [ 179.988595][T10512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.060575][T10518] pim6reg: entered allmulticast mode [ 180.066584][T10518] pim6reg: left allmulticast mode [ 180.113669][T10520] loop2: detected capacity change from 0 to 128 [ 180.164422][T10527] loop3: detected capacity change from 0 to 512 [ 180.171781][T10527] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.178443][T10527] EXT4-fs: Ignoring removed mblk_io_submit option [ 180.187921][T10527] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 180.197010][T10529] bio_check_eod: 11111 callbacks suppressed [ 180.197022][T10529] syz.2.2210: attempt to access beyond end of device [ 180.197022][T10529] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 180.200113][T10527] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 180.203089][T10529] syz.2.2210: attempt to access beyond end of device [ 180.203089][T10529] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 180.231152][T10527] EXT4-fs (loop3): 1 truncate cleaned up [ 180.238320][T10529] syz.2.2210: attempt to access beyond end of device [ 180.238320][T10529] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 180.253323][T10527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.264412][T10529] syz.2.2210: attempt to access beyond end of device [ 180.264412][T10529] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 180.292693][T10529] syz.2.2210: attempt to access beyond end of device [ 180.292693][T10529] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 180.306693][T10529] syz.2.2210: attempt to access beyond end of device [ 180.306693][T10529] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 180.320543][T10529] syz.2.2210: attempt to access beyond end of device [ 180.320543][T10529] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 180.334681][T10529] syz.2.2210: attempt to access beyond end of device [ 180.334681][T10529] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 180.356402][T10529] syz.2.2210: attempt to access beyond end of device [ 180.356402][T10529] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 180.371562][T10529] syz.2.2210: attempt to access beyond end of device [ 180.371562][T10529] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 180.428471][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 180.428484][ T29] audit: type=1326 audit(1751195173.064:7414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.3.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6369b7e929 code=0x7ffc0000 [ 180.458238][ T29] audit: type=1326 audit(1751195173.064:7415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.3.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6369b7e929 code=0x7ffc0000 [ 180.460770][T10527] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #2: block 4: comm syz.3.2212: lblock 0 mapped to illegal pblock 4 (length 1) [ 180.482662][ T29] audit: type=1326 audit(1751195173.094:7416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.3.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6369b7e929 code=0x7ffc0000 [ 180.511737][T10527] EXT4-fs (loop3): Remounting filesystem read-only [ 180.553854][ T29] audit: type=1326 audit(1751195173.184:7417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.3.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6369b7e929 code=0x7ffc0000 [ 180.577428][ T29] audit: type=1326 audit(1751195173.184:7418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.3.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6369b7e929 code=0x7ffc0000 [ 180.602885][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.664217][ T29] audit: type=1326 audit(1751195173.304:7419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.3.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6369b7e929 code=0x7ffc0000 [ 180.687931][ T29] audit: type=1326 audit(1751195173.304:7420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.3.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6369b7e929 code=0x7ffc0000 [ 180.712869][ T29] audit: type=1326 audit(1751195173.304:7421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.3.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f6369b7e929 code=0x7ffc0000 [ 180.736483][ T29] audit: type=1326 audit(1751195173.304:7422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.3.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6369b7e929 code=0x7ffc0000 [ 180.760533][ T29] audit: type=1326 audit(1751195173.304:7423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.3.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6369b7e929 code=0x7ffc0000 [ 180.858173][T10549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2219'. [ 180.867951][T10549] netlink: 'syz.3.2219': attribute type 13 has an invalid length. [ 180.881456][T10549] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.023171][T10560] loop4: detected capacity change from 0 to 128 [ 181.039567][T10562] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2225'. [ 181.059462][T10564] loop2: detected capacity change from 0 to 1024 [ 181.084785][T10564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.098075][T10564] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.133467][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.161436][T10577] pim6reg: entered allmulticast mode [ 181.167467][T10577] pim6reg: left allmulticast mode [ 182.009777][T10609] loop4: detected capacity change from 0 to 1024 [ 182.110811][T10609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.127390][T10618] netlink: 'syz.1.2241': attribute type 10 has an invalid length. [ 182.144369][T10609] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.165839][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.392688][T10634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2248'. [ 182.436482][T10634] netlink: 'syz.1.2248': attribute type 13 has an invalid length. [ 182.474599][T10634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.549756][T10639] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2250'. [ 182.628493][T10647] pim6reg: entered allmulticast mode [ 182.635222][T10647] pim6reg: left allmulticast mode [ 182.645278][T10645] loop3: detected capacity change from 0 to 1024 [ 182.692122][T10645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.714770][T10645] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.766282][T10656] loop2: detected capacity change from 0 to 1024 [ 182.781406][T10656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.794799][T10656] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.813579][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.036284][T10665] lo speed is unknown, defaulting to 1000 [ 183.042652][T10665] lo speed is unknown, defaulting to 1000 [ 183.049027][T10665] lo speed is unknown, defaulting to 1000 [ 183.573081][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.976081][T10674] Set syz1 is full, maxelem 65536 reached [ 184.020497][T10708] loop2: detected capacity change from 0 to 128 [ 184.051722][T10705] lo speed is unknown, defaulting to 1000 [ 184.058101][T10705] lo speed is unknown, defaulting to 1000 [ 184.064469][T10705] lo speed is unknown, defaulting to 1000 [ 184.543378][T10715] pim6reg: entered allmulticast mode [ 184.549430][T10715] pim6reg: left allmulticast mode [ 185.165492][T10749] lo speed is unknown, defaulting to 1000 [ 185.171896][T10749] lo speed is unknown, defaulting to 1000 [ 185.178332][T10749] lo speed is unknown, defaulting to 1000 [ 185.235036][T10748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2281'. [ 185.267048][T10748] netlink: 'syz.2.2281': attribute type 13 has an invalid length. [ 185.308884][T10748] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.328004][T10753] loop4: detected capacity change from 0 to 512 [ 185.335798][T10753] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.342845][T10753] EXT4-fs: Ignoring removed mblk_io_submit option [ 185.420528][T10753] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 185.446129][T10753] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 185.455904][T10753] EXT4-fs (loop4): 1 truncate cleaned up [ 185.467938][T10753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.484042][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 185.484056][ T29] audit: type=1326 audit(1751195178.125:7598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10752 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 185.514887][ T29] audit: type=1326 audit(1751195178.135:7599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10752 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 185.539221][ T29] audit: type=1326 audit(1751195178.155:7600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10752 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 185.563012][ T29] audit: type=1326 audit(1751195178.155:7601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10752 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 185.586547][ T29] audit: type=1326 audit(1751195178.155:7602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10752 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 185.610276][ T29] audit: type=1326 audit(1751195178.155:7603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10752 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 185.633680][ T29] audit: type=1326 audit(1751195178.155:7604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10752 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 185.657276][ T29] audit: type=1326 audit(1751195178.155:7605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10752 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 185.681131][ T29] audit: type=1326 audit(1751195178.155:7606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10752 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6eece9e963 code=0x7ffc0000 [ 185.705004][ T29] audit: type=1326 audit(1751195178.155:7607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10752 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6eece9d3df code=0x7ffc0000 [ 185.731167][T10772] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 4: comm syz.4.2283: lblock 0 mapped to illegal pblock 4 (length 1) [ 185.747470][T10772] EXT4-fs (loop4): Remounting filesystem read-only [ 185.762730][T10753] Set syz1 is full, maxelem 65536 reached [ 185.783348][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.850985][T10779] pim6reg: entered allmulticast mode [ 185.858251][T10779] pim6reg: left allmulticast mode [ 186.448386][T10799] pim6reg: entered allmulticast mode [ 186.454957][T10799] pim6reg: left allmulticast mode [ 186.794273][T10821] netlink: 'syz.4.2301': attribute type 10 has an invalid length. [ 186.946996][T10832] loop3: detected capacity change from 0 to 128 [ 186.993134][T10836] loop4: detected capacity change from 0 to 128 [ 187.002962][T10838] loop2: detected capacity change from 0 to 512 [ 187.022303][T10838] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.040838][T10838] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.044333][T10842] netlink: 'syz.0.2309': attribute type 298 has an invalid length. [ 187.080457][T10838] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 187.102452][T10848] bio_check_eod: 58 callbacks suppressed [ 187.102468][T10848] syz.4.2307: attempt to access beyond end of device [ 187.102468][T10848] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 187.130209][T10838] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 187.138910][T10838] EXT4-fs (loop2): 1 truncate cleaned up [ 187.152432][T10850] pim6reg: entered allmulticast mode [ 187.164869][T10850] pim6reg: left allmulticast mode [ 187.170097][T10848] syz.4.2307: attempt to access beyond end of device [ 187.170097][T10848] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 187.194436][T10838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.219315][T10848] syz.4.2307: attempt to access beyond end of device [ 187.219315][T10848] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 187.273790][ T1746] kworker/u8:6: attempt to access beyond end of device [ 187.273790][ T1746] loop4: rw=1, sector=217, nr_sectors = 8 limit=128 [ 187.292041][T10848] syz.4.2307: attempt to access beyond end of device [ 187.292041][T10848] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 187.305879][ T1746] kworker/u8:6: attempt to access beyond end of device [ 187.305879][ T1746] loop4: rw=1, sector=233, nr_sectors = 8 limit=128 [ 187.320257][T10863] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #2: block 4: comm syz.2.2304: lblock 0 mapped to illegal pblock 4 (length 1) [ 187.334639][T10848] syz.4.2307: attempt to access beyond end of device [ 187.334639][T10848] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 187.351081][ T1746] kworker/u8:6: attempt to access beyond end of device [ 187.351081][ T1746] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 187.365150][T10848] syz.4.2307: attempt to access beyond end of device [ 187.365150][T10848] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 187.382024][ T1746] kworker/u8:6: attempt to access beyond end of device [ 187.382024][ T1746] loop4: rw=1, sector=297, nr_sectors = 8 limit=128 [ 187.398602][T10863] EXT4-fs (loop2): Remounting filesystem read-only [ 187.497724][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.941683][T10878] netlink: 'syz.4.2318': attribute type 10 has an invalid length. [ 188.123920][T10884] netlink: 'syz.4.2322': attribute type 298 has an invalid length. [ 188.270202][T10895] loop3: detected capacity change from 0 to 512 [ 188.277239][T10895] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.284152][T10895] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.321047][T10897] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2325'. [ 188.350422][T10895] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 188.360796][T10895] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 188.377898][T10895] EXT4-fs (loop3): 1 truncate cleaned up [ 188.384785][T10895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.494385][T10911] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #2: block 4: comm syz.3.2320: lblock 0 mapped to illegal pblock 4 (length 1) [ 188.531054][T10913] pim6reg: entered allmulticast mode [ 188.540378][T10911] EXT4-fs (loop3): Remounting filesystem read-only [ 188.554052][T10913] pim6reg: left allmulticast mode [ 188.594201][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.621689][T10919] loop3: detected capacity change from 0 to 1024 [ 188.643551][T10919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.663279][T10919] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.031694][T10932] lo speed is unknown, defaulting to 1000 [ 189.037877][T10932] lo speed is unknown, defaulting to 1000 [ 189.043901][T10932] lo speed is unknown, defaulting to 1000 [ 189.223393][T10934] netlink: 'syz.0.2333': attribute type 10 has an invalid length. [ 189.369629][T10936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2334'. [ 189.378898][T10936] netlink: 'syz.0.2334': attribute type 13 has an invalid length. [ 189.388120][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.406549][T10936] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 189.475320][T10953] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2337'. [ 189.681231][T10972] pim6reg: entered allmulticast mode [ 189.687179][T10972] pim6reg: left allmulticast mode [ 189.774607][T10979] loop4: detected capacity change from 0 to 512 [ 189.781643][T10979] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.788369][T10979] EXT4-fs: Ignoring removed mblk_io_submit option [ 189.796395][T10979] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 189.805229][T10979] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 189.820323][T10979] EXT4-fs (loop4): 1 truncate cleaned up [ 189.826474][T10979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.893549][T10979] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 4: comm syz.4.2347: lblock 0 mapped to illegal pblock 4 (length 1) [ 189.907749][T10979] EXT4-fs (loop4): Remounting filesystem read-only [ 189.927024][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.947650][T10985] loop4: detected capacity change from 0 to 1024 [ 189.961224][T10985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.973632][T10985] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.070395][T10990] netlink: 'syz.1.2349': attribute type 10 has an invalid length. [ 190.249033][T10995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2351'. [ 190.258285][T10995] netlink: 'syz.1.2351': attribute type 13 has an invalid length. [ 190.272601][T10995] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.298254][T10997] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2352'. [ 190.530173][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.565912][T11010] lo speed is unknown, defaulting to 1000 [ 190.571985][T11010] lo speed is unknown, defaulting to 1000 [ 190.578132][T11010] lo speed is unknown, defaulting to 1000 [ 190.648238][T11025] loop2: detected capacity change from 0 to 512 [ 190.659609][T11022] netlink: 'syz.1.2360': attribute type 298 has an invalid length. [ 190.670981][T11025] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 190.691692][T11025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.708724][T11025] ext4 filesystem being mounted at /417/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.802355][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2361'. [ 190.805181][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 190.805194][ T29] audit: type=1400 audit(1751195183.445:7872): avc: denied { read write } for pid=11024 comm="syz.2.2364" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 190.840353][ T29] audit: type=1400 audit(1751195183.445:7873): avc: denied { open } for pid=11024 comm="syz.2.2364" path="/417/bus/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 190.904161][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.978631][T11035] lo speed is unknown, defaulting to 1000 [ 190.985031][T11035] lo speed is unknown, defaulting to 1000 [ 190.991542][T11035] lo speed is unknown, defaulting to 1000 [ 191.170592][T11043] loop2: detected capacity change from 0 to 1024 [ 191.203460][T11045] pim6reg: entered allmulticast mode [ 191.211288][T11045] pim6reg: left allmulticast mode [ 191.296916][T11043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.309207][T11043] ext4 filesystem being mounted at /420/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.764300][ T29] audit: type=1326 audit(1751195184.405:7874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11068 comm="syz.1.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73326be929 code=0x7ffc0000 [ 191.767333][T11069] ip6gre1: entered allmulticast mode [ 191.809923][ T29] audit: type=1326 audit(1751195184.405:7875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11068 comm="syz.1.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73326be929 code=0x7ffc0000 [ 191.833516][ T29] audit: type=1326 audit(1751195184.405:7876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11068 comm="syz.1.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73326be929 code=0x7ffc0000 [ 191.850930][T11073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2378'. [ 191.857161][ T29] audit: type=1326 audit(1751195184.405:7877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11068 comm="syz.1.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f73326be929 code=0x7ffc0000 [ 191.889572][ T29] audit: type=1326 audit(1751195184.405:7878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11068 comm="syz.1.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73326be929 code=0x7ffc0000 [ 191.913076][ T29] audit: type=1326 audit(1751195184.405:7879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11068 comm="syz.1.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f73326be929 code=0x7ffc0000 [ 191.928062][T11074] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2379'. [ 191.936481][ T29] audit: type=1326 audit(1751195184.405:7880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11068 comm="syz.1.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73326be929 code=0x7ffc0000 [ 191.936507][ T29] audit: type=1326 audit(1751195184.405:7881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11068 comm="syz.1.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f73326be929 code=0x7ffc0000 [ 192.064558][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.081759][T11080] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2382'. [ 192.183396][T11099] loop4: detected capacity change from 0 to 512 [ 192.209186][T11099] EXT4-fs: Ignoring removed nomblk_io_submit option [ 192.222051][T11099] EXT4-fs: Ignoring removed mblk_io_submit option [ 192.230117][T11099] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 192.238138][T11099] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 192.244205][T11110] pim6reg: entered allmulticast mode [ 192.253026][T11110] pim6reg: left allmulticast mode [ 192.259545][T11099] EXT4-fs (loop4): 1 truncate cleaned up [ 192.265816][T11099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.319132][T11099] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 4: comm syz.4.2390: lblock 0 mapped to illegal pblock 4 (length 1) [ 192.333438][T11099] EXT4-fs (loop4): Remounting filesystem read-only [ 192.354650][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.449430][T11132] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2402'. [ 192.578029][T11139] netlink: 'syz.4.2405': attribute type 10 has an invalid length. [ 192.757922][T11144] loop4: detected capacity change from 0 to 1024 [ 192.771176][T11144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.783323][T11144] ext4 filesystem being mounted at /487/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.111324][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.226115][T11171] netlink: 'syz.4.2417': attribute type 10 has an invalid length. [ 193.292172][T11177] pim6reg: entered allmulticast mode [ 193.300061][T11177] pim6reg: left allmulticast mode [ 193.564800][T11208] loop4: detected capacity change from 0 to 128 [ 193.622467][T11208] bio_check_eod: 74 callbacks suppressed [ 193.622480][T11208] syz.4.2428: attempt to access beyond end of device [ 193.622480][T11208] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 193.641821][T11208] syz.4.2428: attempt to access beyond end of device [ 193.641821][T11208] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 193.655295][T11208] syz.4.2428: attempt to access beyond end of device [ 193.655295][T11208] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 193.668891][T11208] syz.4.2428: attempt to access beyond end of device [ 193.668891][T11208] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 193.682435][T11208] syz.4.2428: attempt to access beyond end of device [ 193.682435][T11208] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 193.696033][T11208] syz.4.2428: attempt to access beyond end of device [ 193.696033][T11208] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 193.709536][T11208] syz.4.2428: attempt to access beyond end of device [ 193.709536][T11208] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 193.723049][T11208] syz.4.2428: attempt to access beyond end of device [ 193.723049][T11208] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 193.736503][T11208] syz.4.2428: attempt to access beyond end of device [ 193.736503][T11208] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 193.750028][T11208] syz.4.2428: attempt to access beyond end of device [ 193.750028][T11208] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 193.923919][T11214] __nla_validate_parse: 1 callbacks suppressed [ 193.923930][T11214] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2430'. [ 194.047265][T11216] pim6reg: entered allmulticast mode [ 194.054228][T11216] pim6reg: left allmulticast mode [ 194.376172][T11249] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2442'. [ 194.611142][T11258] netlink: 'syz.1.2445': attribute type 10 has an invalid length. [ 194.747161][T11260] pim6reg: entered allmulticast mode [ 194.753241][T11260] pim6reg: left allmulticast mode [ 194.932264][T11286] loop2: detected capacity change from 0 to 128 [ 195.234537][T11297] netlink: 'syz.3.2457': attribute type 10 has an invalid length. [ 195.452632][T11308] loop4: detected capacity change from 0 to 128 [ 195.547465][T11314] pim6reg: entered allmulticast mode [ 195.556787][T11314] pim6reg: left allmulticast mode [ 196.256166][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 196.256181][ T29] audit: type=1326 audit(1751195188.895:8072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11353 comm="syz.0.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288eaae929 code=0x7ffc0000 [ 196.286022][ T29] audit: type=1326 audit(1751195188.895:8073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11353 comm="syz.0.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f288eaae929 code=0x7ffc0000 [ 196.309506][ T29] audit: type=1326 audit(1751195188.895:8074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11353 comm="syz.0.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288eaae929 code=0x7ffc0000 [ 196.333197][ T29] audit: type=1326 audit(1751195188.895:8075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11353 comm="syz.0.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f288eaae929 code=0x7ffc0000 [ 196.356845][ T29] audit: type=1326 audit(1751195188.895:8076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11353 comm="syz.0.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288eaae929 code=0x7ffc0000 [ 196.380521][ T29] audit: type=1326 audit(1751195188.895:8077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11353 comm="syz.0.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f288eaae929 code=0x7ffc0000 [ 196.404211][ T29] audit: type=1326 audit(1751195188.895:8078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11353 comm="syz.0.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288eaae929 code=0x7ffc0000 [ 196.427838][ T29] audit: type=1326 audit(1751195188.895:8079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11353 comm="syz.0.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288eaae929 code=0x7ffc0000 [ 196.642531][T11382] netlink: 'syz.4.2487': attribute type 298 has an invalid length. [ 196.698334][T11390] loop2: detected capacity change from 0 to 128 [ 197.470910][T11429] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2504'. [ 197.489547][T11439] loop4: detected capacity change from 0 to 512 [ 197.496337][T11439] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.503341][T11439] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.538405][T11439] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 197.556456][T11439] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 197.579823][T11439] EXT4-fs (loop4): 1 truncate cleaned up [ 197.592524][T11439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.639331][ T29] audit: type=1326 audit(1751195190.285:8080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.4.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 197.663141][ T29] audit: type=1326 audit(1751195190.285:8081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.4.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eece9e929 code=0x7ffc0000 [ 197.800915][T11439] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 4: comm syz.4.2508: lblock 0 mapped to illegal pblock 4 (length 1) [ 197.865056][T11439] EXT4-fs (loop4): Remounting filesystem read-only [ 198.065602][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.175381][T11478] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2520'. [ 198.312634][T11485] lo speed is unknown, defaulting to 1000 [ 198.318761][T11485] lo speed is unknown, defaulting to 1000 [ 198.324823][T11485] lo speed is unknown, defaulting to 1000 [ 198.522486][T11517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2532'. [ 198.531847][T11517] netlink: 'syz.4.2532': attribute type 13 has an invalid length. [ 198.544450][T11517] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.648082][T11525] loop4: detected capacity change from 0 to 512 [ 198.654812][T11525] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.662413][T11525] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.672305][T11525] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 198.684011][T11525] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 198.707966][T11525] EXT4-fs (loop4): 1 truncate cleaned up [ 198.738208][T11525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.884015][T11525] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 4: comm syz.4.2536: lblock 0 mapped to illegal pblock 4 (length 1) [ 198.898870][T11525] EXT4-fs (loop4): Remounting filesystem read-only [ 198.934526][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.956822][T11552] netlink: 'syz.2.2547': attribute type 10 has an invalid length. [ 199.186363][T11568] loop3: detected capacity change from 0 to 1024 [ 199.223210][T11568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.253515][T11568] ext4 filesystem being mounted at /526/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.297244][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.358062][T11578] loop4: detected capacity change from 0 to 512 [ 199.365671][T11578] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.372489][T11578] EXT4-fs: Ignoring removed mblk_io_submit option [ 199.438033][T11578] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 199.446810][T11578] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 199.455768][T11578] EXT4-fs (loop4): 1 truncate cleaned up [ 199.462313][T11578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.557346][T11593] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 4: comm syz.4.2557: lblock 0 mapped to illegal pblock 4 (length 1) [ 199.578282][T11593] EXT4-fs (loop4): Remounting filesystem read-only [ 199.626590][ T51] ================================================================== [ 199.634699][ T51] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 199.641984][ T51] [ 199.644290][ T51] read-write to 0xffff888125c0bfd0 of 8 bytes by task 11571 on cpu 1: [ 199.652433][ T51] xas_clear_mark+0x91/0x180 [ 199.657193][ T51] __folio_start_writeback+0x2ce/0x440 [ 199.662642][ T51] __block_write_full_folio+0x53a/0x8f0 [ 199.668200][ T51] block_write_full_folio+0x2c2/0x2e0 [ 199.673553][ T51] blkdev_writepages+0x88/0x100 [ 199.678399][ T51] do_writepages+0x1c6/0x310 [ 199.682989][ T51] filemap_write_and_wait_range+0x144/0x340 [ 199.688873][ T51] bdev_release+0xeb/0x3d0 [ 199.693277][ T51] blkdev_release+0x15/0x20 [ 199.697761][ T51] __fput+0x29b/0x650 [ 199.701729][ T51] ____fput+0x1c/0x30 [ 199.705697][ T51] task_work_run+0x12e/0x1a0 [ 199.710285][ T51] exit_to_user_mode_loop+0xe4/0x100 [ 199.715552][ T51] do_syscall_64+0x1d6/0x200 [ 199.720217][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.726103][ T51] [ 199.728415][ T51] read to 0xffff888125c0bfd0 of 8 bytes by task 51 on cpu 0: [ 199.735771][ T51] xas_find_marked+0x218/0x620 [ 199.740529][ T51] find_get_entry+0x5d/0x380 [ 199.745192][ T51] filemap_get_folios_tag+0x13b/0x210 [ 199.750559][ T51] writeback_iter+0x4bb/0x820 [ 199.755218][ T51] blkdev_writepages+0xa7/0x100 [ 199.760057][ T51] do_writepages+0x1c6/0x310 [ 199.764657][ T51] __writeback_single_inode+0x80/0x7c0 [ 199.770102][ T51] writeback_sb_inodes+0x480/0xa20 [ 199.775200][ T51] __writeback_inodes_wb+0x94/0x1a0 [ 199.780407][ T51] wb_writeback+0x266/0x5c0 [ 199.784979][ T51] wb_workfn+0x4c9/0x910 [ 199.789211][ T51] process_scheduled_works+0x4ce/0x9d0 [ 199.794654][ T51] worker_thread+0x582/0x770 [ 199.799236][ T51] kthread+0x486/0x510 [ 199.803285][ T51] ret_from_fork+0xda/0x150 [ 199.807765][ T51] ret_from_fork_asm+0x1a/0x30 [ 199.812513][ T51] [ 199.814815][ T51] value changed: 0xffe0000000000000 -> 0xff80000000000000 [ 199.821901][ T51] [ 199.824207][ T51] Reported by Kernel Concurrency Sanitizer on: [ 199.830344][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u8:3 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 199.842748][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.852797][ T51] Workqueue: writeback wb_workfn (flush-7:8) [ 199.858781][ T51] ================================================================== [ 199.896486][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.