last executing test programs: 15.987443186s ago: executing program 0 (id=2922): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x1f5a685a}, 0x4dc8, 0x10000, 0xfffffffc, 0x1, 0x8, 0x20002, 0x20b, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_io_uring_setup(0x4cab, &(0x7f0000000240)={0x0, 0x6862, 0x8, 0x0, 0x1c0}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7.395751715s ago: executing program 1 (id=3091): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x400c84, &(0x7f0000000000)={[{@sysvgroups}]}, 0x1, 0x796, &(0x7f0000000800)="$eJzs3c1rXOUaAPDnTDJJm/be5MKFe+vGgKCB0sTU2CooVFyIYKGga9shmYaaSaZkJqUJAS0iuBFUXAi66cqFH3Xn1o+t/hcuxFI1LVZcSORMzrSTZibN50xsfj84yfue98w85zmf78w5nAlg3xpM/+QijkTEu0lEfzY+iYh8rdQdcWpluttLi+PpkMTy8su/JrVpbi0tjkfDa1KHssr/I+LbtyKO5tbGrcwvTBVKpeJsVh+pTl8cqcwvHLswXZgsThZnToyOjR0/+eTJEzuX6+8/LBy+/t4Lj31x6s83/3ftne+SOBWHs7bGPLbs2dXVwRjMlkk+XYSrPL/tYHtL0ukZYEvSXbNrZS+PI9EfXbUSAPAgez0ilgGAfSZx/geAfab+PcCtpcXx+tDZbyTa68ZzEXFgJf/69c2Vlu7smt2B2nXQvlvJqisjSUQM7ED8wYj4+KtXP0uH2KnrkAAb8MaViDg3MLj2+J+suWdhsx5fp60n+z94z/g0vivQ0B5fp/2fp5r1/3J3+j/RpP/T22Tf3Ypm+/+qEQd3IMg6bnwS8UzDvW23G/LPDHRltX/V+nz55PyFUjE9tv07IoYi35vWR9eJMXTzr5ut2hr7f7+9/9qnafz0/90pcj93965+zUShWthOzo1uXIl4qDtpkn9yZ/0nLfq/ZzYY48Wn3/6oVVuaf5pvfVibf2R3J+2O5asRjzZd/3fvaEvWvT9xpLY5jNQ3iia+/PHDvlbxG9d/OqTx658F2iFd/33r5z+QNN6vWWn5Vj2tGr6/2v9Nq7b75998++9JXlkV9HKhWp0djehJXlo7/vjd114uPJyVVqZP8x96pPn+v972n34mPNdyUazWff2Xz7ee/+5K85/Y1PrffOHa7amuVvE3tv7HaqWhbMxGjn8bncHtLDsAAAAAAAAAAAAAAAAAAAAAAAAA2KhcRByOJDd8p5zLDQ+v/Ib3f6MvVypXqkfPl+dmJqL2W9kDkc/VH3XZ3/A81NHsefj1+vF76k9ExH8i4oPeg0n9OYoTHc4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOoOtfj9/9RPvZ2eOwBg1xzo9AwAAG3n/A8A+4/zPwDsPxs7/3ft+nwAAO3j8z8A7D/O/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyyM6dPp8PyH0uL42l94tL83FT50rGJYmVqeHpufHi8PHtxeLJcniwVh8fL0/d7v1K5fHEsZuYuj1SLlepIZX7h7HR5bqZ69sJ0YbJ4tphvS1YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDmV+YWpQqlUnH3gCz1Zxtt4n/y9Y5b3QF6NhXxEdCR6V7Zw98JCaHsh2RuzscOFDh6UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5B/g4AAP//vWscBg==") creat(&(0x7f0000000300)='./file0\x00', 0x768943b6b926b3ed) 7.359645326s ago: executing program 1 (id=3094): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f00000002c0)='./file0\x00', 0x100080c) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_getoverrun(r4) timer_delete(r4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="0ae427e4f95f8ec4b0180037"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x6}, 0x18) write$binfmt_script(0xffffffffffffffff, 0x0, 0x6f4000) 7.267732998s ago: executing program 1 (id=3097): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}}], 0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x58168000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000001100)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@orlov}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000200)='sched_switch\x00', r6}, 0x18) r7 = syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r8 = socket(0x1d, 0x2, 0x6) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYRESDEC, @ANYRESOCT=r5, @ANYBLOB="070800000000000000000000e4fffffffeffffe0", @ANYBLOB="a4cd3043fa7653ae1c2c6ffb70a04145a5bbebacbfd96c36952c1415bc29f95cd7211e25ff2ee23f08ed5fc7c6b1400bafa99a9552f5a8f815ff8d36783ea803d23207d7055dcba5eb186f7b0215f7bb446aff9b783ea5b5b5602d3009060679dcca9bad1e7823e6170724bb7095ba267258839dae3c69ddb310f791e7b05a0572c468888c39a140e382d5c47b73405a34", @ANYRESOCT=r7, @ANYRES16=r6], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) r11 = socket$netlink(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES8=r12, @ANYBLOB="010000000000fbdbdf25250000080000000000000064057673696d0000000f0002006e657464657673696930000041ce382f16513250b39eb15d0a00000000000000e8bbc6f7ce17f620f6c9c2729fdc3cc65bdd4695d55507d7f250b0e508e492241a71678cff6b68761157517192763a6c068ad1d5"], 0x34}, 0x1, 0x0, 0x0, 0xc054}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000100)={0x1d, r13, 0x2, {0x3}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r8) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x100}, 0x1, 0x0, 0x0, 0xc4}, 0x20004009) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r4}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000300000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 5.160297999s ago: executing program 4 (id=3130): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX=r0, @ANYBLOB="0000000000000100b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_usb_connect(0x17aff7a88c855ce9, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f0000000040)={[{@i_version}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0x1, 0x50a, &(0x7f0000000480)="$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") syz_mount_image$iso9660(&(0x7f0000001080), &(0x7f00000010c0)='./file0\x00', 0x0, &(0x7f0000000380)={[{@block={'block', 0x3d, 0xc00}}, {@overriderock}, {@nocompress}]}, 0x1, 0x1045, &(0x7f0000001140)="$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") setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v2, 0x14, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) 4.293899066s ago: executing program 4 (id=3142): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@noblock_validity}]}, 0x3, 0x47d, &(0x7f0000000ec0)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x4, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20010006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r0 = socket$kcm(0x2, 0x1, 0x84) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', '', [{0x20, '\xc0z\xa6\xd3\xdb\b\xeb\xa7\x80\xd9\xaf\xb4\xfc\b\t'}, {}]}, 0x15) close(r1) sendmmsg$unix(r1, &(0x7f0000000300)=[{{&(0x7f0000000280)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f00000001c0)="34e14194ca177a94450b203fc7eb24ef9b16363d2e2711a90b959aba198c17", 0x1f}, {&(0x7f0000000400)="6a35758e8dfe56dfe31938cca0ad39ee604968faa3fa2bb0362e125e8f879f4ad5d8f3874c29c5604edfb02fc57cc92f6bf894bc2114be6b614eb4e7950fbe014b9b7dca67df35e086503dc1c58071a0f13a7066affbe7bd50cae281a1c0f766a0873cb6ce6a40b226094c", 0x6b}, {&(0x7f0000000480)="2620c6fb161a8ed27644a9718c932a50716c836bf7c1f5070bb00aed56bdd21f061a9c432594104e389503f9aff10a1d2035dc8549e42e0385eeb1de6b717d061f17604d648fc704bb1276ddadb83b32957f3022653b6fd3136f032d94a355dd969d9281bc8eb63a68432608a4d725db83aacaa4e6da000b4f4b617afebd1227e50a08ef12d79f38d08d8e48bc27d393cf49c15584c963cee65b6921206ce02315226c253bfda704fae5f44e4d49c80012", 0xb1}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000000680)="9f84f77a2838b8c858f6d0ec2014f2557446b01144a30db0c1b3309b7882f355e64aeb6af0e9a1bdda130103dd2e0050ec28af7bceeb18062520efd18e515731129451d13020048e117689b12987fc4f111714ae0dde6ca6b062cb240bb985099880047e565fe14c4da8f3dee6d8ff0acce224755f1652f34f7c40216578d46b7ce102e6a9a444d2f5621ca7366c5a2fcf2ed34085a35df05fd10be45da81e37310dd2499aed9b8639f5d3b6f694", 0xae}, {&(0x7f0000000740)="6172e96676abb3f27d137c384d1b0b11dfa893d0686262533cc3ae09dedfa967a889a50daacd45a45c522967be820cb124c910694865c510414d6019ea299452c989cbf862ba8ad274480f89ef469295d8a38b88a3f12f52e2989b2a57d86fc9965c22245a65f65a6c650f6c8a9a3d26718eb199d03ce1bfcdf5409eacab9e3516c16a9e8bee22f7b4705a5291bd09779ffbfd65c81c5b337e7497197ece69cc0358b6d966e135c2d8656b2947010b8400df9d28aa5a5697c3db3250d9ddeccf77d37431e793ab18586013bad47f3b37dedfeb42fd11d8df15cb8b6f", 0xdc}], 0x6, 0x0, 0x0, 0x20000010}}], 0x1, 0x8851) setsockopt$sock_attach_bpf(r0, 0x84, 0x8, &(0x7f0000000000), 0x8) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @private=0xa010100, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)='a', 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000600)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000640)=[{&(0x7f00000003c0)="ea3f", 0xffe0}], 0x1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) r4 = socket$netlink(0x10, 0x3, 0x8000000004) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x161fc2, 0x1f1) 4.0885514s ago: executing program 1 (id=3147): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f00000002c0)='./file0\x00', 0x100080c) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_delete(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="0ae427e4f95f8ec4b0180037"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x6}, 0x18) write$binfmt_script(r5, 0x0, 0x6f4000) 4.031674761s ago: executing program 1 (id=3148): r0 = getuid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'caif0\x00', @multicast}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@user_xattr}, {@mblk_io_submit}, {@resuid={'resuid', 0x3d, r0}}, {@norecovery}]}, 0x8, 0x44d, &(0x7f0000000cc0)="$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") r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) sendto$inet6(r2, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write$P9_RREAD(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="a000000075020095000000e34a888bad6c22dcb43a375185af1585651f6bf8b50adacd3ad1844943de54cd643c0c39c6d9bc2cc024e7099e09acff7bcd803a6887c09ac5aaadf5a75c5b20161ae4a7a129844322662fc865be98b6891a5b3e2127ef1bc89e9c525d2726db1158ffe5985a81b78ae27296557ec6f206c958fa6b76f9e943987e5962ad9a6509bae99f27c3c09f0bb01c2fecdb1f"], 0xa0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r6, 0x0, 0xf7}, 0x18) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r7, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r7, 0x1) sendfile(r4, r3, 0x0, 0x3ffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_emit_ethernet(0x2a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 4.006269801s ago: executing program 1 (id=3150): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f000000000000005504000017ffff162500000017ffff17ce040000000000007b0a00fe000000002d04000000000000c6200000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a6106"], 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x4, 0x7fe1, 0x1, 0x20061, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, 0x0, &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) memfd_secret(0x80000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x6}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x662, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='percpu_alloc_percpu_fail\x00', r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x2) readv(r7, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) 3.242626376s ago: executing program 4 (id=3154): r0 = io_uring_setup(0x25ee, &(0x7f0000000000)={0x0, 0xb07c, 0x7e, 0x3}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000fa461aa0fbe8ab80679467df91c09e8a722e34d7e484893ffa560200130011186809fc071200000f0023ff3f210000001770faf047145bc79e0b9971bcbedac0eead3374b1f10b97acf10fcb34894d37f5d3f6c760a735be8b7297778664a552281b96d5a7d7f3875f05e487baf067da3f28852a08c19ab0bbea9c89c1a4ecff2194f01dab19545076990660e40558de7765", 0x95}], 0x1) r1 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) setreuid(0x0, 0xee00) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000001240)=ANY=[@ANYRESDEC, @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYRES64, @ANYRESOCT=r0, @ANYRESDEC, @ANYBLOB="0ffe05", @ANYRES8, @ANYBLOB="e8fa88e70da1b9c76cfaf3d80659ae68eb29563234049e665da79cebc620be16778776225013943b37faa22e2cf1c8182f9f145839b2c310bbb276b81cf5e8f79bbcdaca26dc11e2aac8f915fd6f248216e714865dc635d6f0f3b375b0dbba056bdf18a7f200de6a9e995dca5fa8beda1ef93e1a9b24164063", @ANYBLOB="8e992400028447ab6903d457b10100c104a0b14ac8f07d96cff44ef489440101", @ANYRESOCT, @ANYRES32=0xee00, @ANYRES8, @ANYBLOB="7d81dae7d77fcb0de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b6649266", @ANYRESDEC, @ANYRESOCT, @ANYRES8=r1, @ANYRES32=0xffffffffffffffff, @ANYRESDEC=0x0, @ANYBLOB="0800047f475279a75e8bab650100000022965a91f6491b57075b13751d", @ANYRES16], 0x94, 0x1) r3 = getuid() r4 = socket(0x1f, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgid(r5) socket$qrtr(0x2a, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002980), 0x20080, 0x0) r7 = getpid() process_vm_readv(r7, 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0), 0x400) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x1000020, &(0x7f0000001640)=ANY=[@ANYBLOB="75737271756f74615f696e6f64655f686172646c696d69743d253633783925e73478742c67727071756f74615f626c6f636b5f686172646c696d69743d36302c636f6e746578743d726f6f742c646f6e745f686173682c726f6f74636f6e746578743d757365725f752c666f776e65723c", @ANYRES32=r3, @ANYRES32=r6, @ANYRES8, @ANYRESOCT=r2]) fstat(r4, &(0x7f0000001780)) epoll_create(0xff) lstat(&(0x7f0000002a40)='./file0\x00', &(0x7f0000002a80)) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000003d80), 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) 3.03883536s ago: executing program 4 (id=3155): socket$kcm(0x10, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x54ae}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x9, r0, 0x4}, 0x38) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x1) 2.968115892s ago: executing program 4 (id=3156): r0 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x206}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000300)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900272f8db0049d90490900ebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="0504160000", 0x5}], 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0xffff, 0x8a, 0xb, 0x3}, {0x6, 0xb, 0x9, 0x9}, {0x9, 0x2, 0x6, 0x10000}, {0xff, 0x7, 0xf, 0x9}, {0x7, 0xf, 0x81, 0x4}]}) sendto$packet(r0, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r5, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) 2.823689734s ago: executing program 4 (id=3157): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}}], 0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x58168000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000001100)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@orlov}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000200)='sched_switch\x00', r6}, 0x18) r7 = syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r8 = socket(0x1d, 0x2, 0x6) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYRESDEC, @ANYRESOCT=r5, @ANYBLOB="070800000000000000000000e4fffffffeffffe0", @ANYBLOB="a4cd3043fa7653ae1c2c6ffb70a04145a5bbebacbfd96c36952c1415bc29f95cd7211e25ff2ee23f08ed5fc7c6b1400bafa99a9552f5a8f815ff8d36783ea803d23207d7055dcba5eb186f7b0215f7bb446aff9b783ea5b5b5602d3009060679dcca9bad1e7823e6170724bb7095ba267258839dae3c69ddb310f791e7b05a0572c468888c39a140e382d5c47b73405a34", @ANYRESOCT=r7, @ANYRES16=r6], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) r11 = socket$netlink(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES8=r12, @ANYBLOB="010000000000fbdbdf25250000080000000000000064057673696d0000000f0002006e657464657673696930000041ce382f16513250b39eb15d0a00000000000000e8bbc6f7ce17f620f6c9c2729fdc3cc65bdd4695d55507d7f250b0e508e492241a71678cff6b68761157517192763a6c068ad1d5"], 0x34}, 0x1, 0x0, 0x0, 0xc054}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000100)={0x1d, r13, 0x2, {0x3}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r8) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x100}, 0x1, 0x0, 0x0, 0xc4}, 0x20004009) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r4}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000300000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 2.377051334s ago: executing program 2 (id=3168): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r1, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r1, 0x1) 2.325508414s ago: executing program 2 (id=3170): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000003740)='ib_mad_recv_done_handler\x00'}, 0x18) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000006c0)='.\x00', 0x1a4243c, &(0x7f0000000700)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRESHEX, @ANYRES8, @ANYRES32, @ANYRES8, @ANYRES64, @ANYRES8=0x0, @ANYRES64, @ANYRES8], 0x0, 0x0, &(0x7f0000000080)) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c) sendmsg(0xffffffffffffffff, 0x0, 0x4080) sendto$inet6(r1, 0x0, 0x0, 0xb961a898ae1b1206, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xd, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) r3 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c00000003000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x800000000006}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RLOPEN(r3, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x1, 0x4, 0x7}, 0x3}}, 0x18) 1.662952947s ago: executing program 3 (id=3176): r0 = io_uring_setup(0x25ee, &(0x7f0000000000)={0x0, 0xb07c, 0x7e, 0x3}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000fa461aa0fbe8ab80679467df91c09e8a722e34d7e484893ffa560200130011186809fc071200000f0023ff3f210000001770faf047145bc79e0b9971bcbedac0eead3374b1f10b97acf10fcb34894d37f5d3f6c760a735be8b7297778664a552281b96d5a7d7f3875f05e487baf067da3f28852a08c19ab0bbea9c89c1a4ecff2194f01dab19545076990660e40558de7765", 0x95}], 0x1) r1 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) setreuid(0x0, 0xee00) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000001240)=ANY=[@ANYRESDEC, @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYRES64, @ANYRESOCT=r0, @ANYRESDEC, @ANYBLOB="0ffe05", @ANYRES8, @ANYBLOB="e8fa88e70da1b9c76cfaf3d80659ae68eb29563234049e665da79cebc620be16778776225013943b37faa22e2cf1c8182f9f145839b2c310bbb276b81cf5e8f79bbcdaca26dc11e2aac8f915fd6f248216e714865dc635d6f0f3b375b0dbba056bdf18a7f200de6a9e995dca5fa8beda1ef93e1a9b241640634e6a6687d44c4cb189bcdfa08b86714d70495d79", @ANYBLOB="8e992400028447ab6903d457b10100c104a0b14ac8f07d96cff44ef489440101", @ANYRESOCT, @ANYRES32=0xee00, @ANYRES8, @ANYBLOB="7d81dae7d77fcb0de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b6649266", @ANYRESDEC, @ANYRESOCT, @ANYRES8=r1, @ANYRES32=0xffffffffffffffff, @ANYRESDEC=0x0, @ANYBLOB="0800047f475279a75e8bab650100000022965a91f6491b57075b13751d", @ANYRES16], 0x94, 0x1) r3 = getuid() r4 = socket(0x1f, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgid(r5) socket$qrtr(0x2a, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002980), 0x20080, 0x0) r7 = getpid() process_vm_readv(r7, 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0), 0x400) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x1000020, &(0x7f0000001640)=ANY=[@ANYBLOB="75737271756f74615f696e6f64655f686172646c696d69743d253633783925e73478742c67727071756f74615f626c6f636b5f686172646c696d69743d36302c636f6e746578743d726f6f742c646f6e745f686173682c726f6f74636f6e746578743d757365725f752c666f776e65723c", @ANYRES32=r3, @ANYRES32=r6, @ANYRES8, @ANYRESOCT=r2]) fstat(r4, &(0x7f0000001780)) epoll_create(0xff) lstat(&(0x7f0000002a40)='./file0\x00', &(0x7f0000002a80)) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000003d80), 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) 1.609083208s ago: executing program 3 (id=3177): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 1.491366191s ago: executing program 3 (id=3178): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000040000000000000000094fff20000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000001640)=ANY=[], 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x524, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x2, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r4, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}}, 0x1c) shutdown(r4, 0x1) 1.490963421s ago: executing program 3 (id=3179): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r5, &(0x7f0000003280)="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", 0xfffffffffffffd29) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r7, 0x0, 0x0}, 0x10) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 1.400615333s ago: executing program 2 (id=3180): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xfffffffffffffeac) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='fib_table_lookup\x00', r5, 0x0, 0x4000000000000000}, 0x18) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000002240)='9p_client_req\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB=',\x00']) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$key(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="0213a5f30300000027bdfbdbdf2502001000"/30], 0x20}}, 0x8001) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r9, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}, 0x1, 0x0, 0x0, 0x4044894}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000140000000000000000080000020000fec114baa8d261a1d065f2bdedfffffd0fad2f01ab36e36410737f927fdf8cc9635d8333ac324716cc117874901b7d4559e8c68b833ec78fc9ab50a8dde8e60e7937655b9ae8e3ed304447e3efc5ba46ac1e6ba10c72f6f01e2ee6f951762c7991f2d1c02fad61cf5ee9fc9bcc48eae140", @ANYRES32=r9, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r10 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r10, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r7, @ANYRES32=r6, @ANYBLOB="0000000000000000b708b6000000396f7b8af8ff0000000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000950000000000"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x7fff}, 0x18) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r12}, 0x10) 1.311175324s ago: executing program 2 (id=3181): socket$inet6(0xa, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x5f}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0xffffffffffffffff}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.153282507s ago: executing program 2 (id=3182): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='unhide,overriderockperm\x00utf8,map=normal,map=off,crlftAsession=0x0000000000000037,unhide,iocharset=maccroatian,overriderockperm,map=off,map=normal,norock,\x00'], 0x2, 0x6b1, &(0x7f0000001100)="$eJzs3V1vG1kdx/HfOI7jZqFaAaqqqg+nLSulorhjZ5sqKhJrxuNkwPZYMw5qJKRV2Sarqk4X2iLR3Cy54UFa3gDihgu44EUgcb3vghsE0grukJYLr+bJseOnuuu2u9vvJ9r1eM5/zvnPjOu/JvEcCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyHJqtl221PBaO3fMZE4t8Jvp8v97o+1Jb8u6lixcmzmuZEX/qVjU2WTV2W8dN5+J/ndF55Nn51WMHoo6fOPMm7e/mc9l209J+Hlo3g4fPz18cLfb3Xv0DLFLmrv7V0m5bOlUek7GBG25LS/0vWZ1yzVe6JvNjQ37xnY9NHWv4Ya7YcdtGidwcx0/MGvONVPe3Fw3bmnX32lt1aoNN1t567sV294wP1xJTrSkUuhse42G19qKY6LmKOaW+egnSYBbbRqzf7+7tz5rT6Kg8rMEVWYFVexKpVyuVMobNzdv3rLt/OCKnKS8HbHsPo1ssvAXLb5kFvPGDSxALqr//7CkhopqaUd3ZMb+OKopkK/mhPZUVv/fuuFOHXew/mdV/qz0/bT5nOL6fzF5dnFS/Z+Qi5GJNxjXYk1YP9/PcpyR0WM91aEe6K666mpPjxbQt5G5tJBeXsLPlly15CmUL09NVbWlP39d6RqjTW1oQ7be1bbqCmVUl6eGXIXaVaiO3PgV5SiQq6o68hXIaE2OrsmorE1tal1Grkrala8dtbSlmqr6X6/X29f9+LivT8lRWVB5QsDKYFBlSk/DxfyPyur/Tz9MXqd23j6B+v96SV4HK8nDx9NigC+AXnr9Pyg3e7NLLy4jAAAAAACwaFb823cr/tv9BUk91b2Ga7/qtAAAAAAAwAJZ6q3ovKzo+l/SBVlc/wMAAAAA8FVjxffYWZJW4w/1W8d3Qj3LLwGWXkKKAAAAAADgc4rv/L9YkHrxpBWXZM11/Q8AAAAAAL4Efjswx34+m2O3l/1ZPycpbK9Yf/vPioJl66h959vWQTVqqR6kMZ+e7LFTP2edTifqjR8KkuJnjnveOp9MjplOgtmfd/CT/Vlz/VvBiQQKS4MdTEjAikbeyKfP9JEuJ5tcTueZv3eYU9ySjLJa9xpuyfEbt8uqVk/nOu6dzi8e3v+lFPQ/6bB/v7tXeu+D7r04l6No1dFB1OmHQ+nkxh+M41yexPMtxPdcjNvjU6pnQ/6u1Vy14nHtbP+XVD3IDQ407QQcj/lrXVH8qY0rq0ns6mF/xv1o/4vR/pdL8Skb2vtg2TrOonxyz8ediAlZFOMsriYxV9euqvLPZLl/FnJW8TtLUqU0eg6GsqgMZjH7WFj/HTkWA1nED1nLwLFYj7L4e9TRhCzW58ti5IwAwKuyrwuK34UuKJ7EvF+FimndzcpD9qb2XHVndnV/Z7i6P/lDrxdvsCTl079NTB2lqOgdfc2K61Ah2aX8uTHv6HZaV4qa8I5uf47qFo311+PvQErTHsni016vd7scj/v7E1X1T0PDjYwbNipL0SG88eTgZ/EE+JH3997fe1iprG/Yb9v2zYqW491IH5ZE7QEAjJj9HTszI6y3dTmJuHzv328lS0MV7xv9jxSU9J4+UFf3dD37CoFL43tdHfgYwvXkqlUDV63mzJu34++lG44t6/rEq7q4lg7EVvqxy8o2Ga7Ux7HrL/gsAADwcl2ZUYfH1//iUP2/rrUkYu3c2Ovu4VqeXh33L+knxZZnJ//Ooo8GAACvBzf4xFrt/MYKAq/9bnlzs1ztbLsm8J0fmcCrbbnGa3XcwNmutrZc0w78ju/4DdMOtOLV3NCEO+22H3RM3Q9M2w+9O/E3v5v0q99Dt1ltdTwnbDfcaugax291qk7H1LzQMe2dHzS8cNsN4o3Dtut4dc+pdjy/ZUJ/J3DckjGh6w4EejW31fHqXrTYMu3Aa1aDXfNjv7HTdE3NDZ3Aa3f8pMNsLK9V94Nm3G0p3xv3eQEAAF47j58ePrjb7e49OrlwKro0T9YcaULM6EJBj59GV+XRmnzaxBxBAAB8wRwX8Dk2Kr7AhAAAAAAAAAAAAAAAAAAAAAAAwIjZt/TNubA87mZBqb/m56fTNfqVjm8xHOnH0qITm2chN+9W2S0Rhw8+nhRT0N1T/TXZ4R+MOXppO/ivr0lvxGuUrMkvfqxTU07ui1j43n5yRCfGRI1jm1b65yL/HP8cCpoZ8/AvE5p6vV5v+hArw8ewMLSDuWmD5iU9Ksx9CgojL1EAX1WfBQAA//843TOC") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfd\\no=', @ANYRESHEX, @ANYBLOB=',\x00']) 1.152879067s ago: executing program 0 (id=3183): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x80, 0x8000, 0x8000, 0x8000, {{0x34, 0x4, 0x3, 0x1, 0xd0, 0x65, 0x0, 0x7, 0x4, 0x0, @broadcast, @multicast2, {[@rr={0x7, 0x1f, 0xdf, [@empty, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local]}, @cipso={0x86, 0x1b, 0x3, [{0x0, 0x12, "b3b469ecb27f753f51ebea3629913b5e"}, {0x0, 0x3, "10"}]}, @cipso={0x86, 0x37, 0x1, [{0x7, 0x5, "fbf67d"}, {0x7, 0x7, "71d701fefb"}, {0x7, 0x12, "2379bf59c320e264ff306e96666c6fe6"}, {0x7, 0x3, '\"'}, {0x7, 0xc, "b7021cceac2933a2ece7"}, {0x1, 0x4, "06bf"}]}, @rr={0x7, 0x23, 0x40, [@loopback, @rand_addr=0x64010100, @multicast2, @private=0xa010100, @rand_addr=0x64010101, @loopback, @private=0xa010100, @loopback]}, @lsrr={0x83, 0x3, 0x6a}, @cipso={0x86, 0x25, 0x1, [{0x5, 0x12, "98cdc010efd2a3e4b7a26a34ce069651"}, {0x6, 0xd, "97ec0e8cb141a9e10c03e4"}]}]}}}}}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x7c, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_CGROUP_POLICE={0x14, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 1.151152987s ago: executing program 0 (id=3184): socket$kcm(0x10, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x54ae}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x9, r0, 0x4}, 0x38) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) 1.136924328s ago: executing program 2 (id=3185): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES64=0x0, @ANYRESDEC], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002580000000e0a01020000000000000000010000000900020073797a32000000001800038014000080100001800400028006000180000000000900010073797a30"], 0xc8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r2 = dup(0xffffffffffffffff) write$tun(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000100)=0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_process_exec\x00', r3, 0x0, 0x6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xffffffffffffff72}, 0x1, 0x0, 0x0, 0x80}, 0x4840) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r4) tkill(r4, 0x12) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40010) r6 = gettid() socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) poll(&(0x7f0000000580)=[{}], 0x1, 0x1fb) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, r6) tkill(r6, 0x13) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000009c0)=ANY=[@ANYBLOB="f4001f00", @ANYRES16=0x0, @ANYBLOB="020028bd7000fbdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=r4, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r2, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0004000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r5, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008b00dd97dcbf237f812ffa6babba8fe36dbbb815aa2796075f003046aaa4cd1aa0af3277fd63f48a603cbc2d4bef8d93864d250501399520829721b4e4dee5d4163ea0d05332d1e7640ce2dd3231", @ANYRES32=r6, @ANYRESHEX=r7], 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r8, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 1.044908059s ago: executing program 0 (id=3187): r0 = io_uring_setup(0x25ee, &(0x7f0000000000)={0x0, 0xb07c, 0x7e, 0x3}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000fa461aa0fbe8ab80679467df91c09e8a722e34d7e484893ffa560200130011186809fc071200000f0023ff3f210000001770faf047145bc79e0b9971bcbedac0eead3374b1f10b97acf10fcb34894d37f5d3f6c760a735be8b7297778664a552281b96d5a7d7f3875f05e487baf067da3f28852a08c19ab0bbea9c89c1a4ecff2194f01dab19545076990660e40558de7765", 0x95}], 0x1) r1 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) setreuid(0x0, 0xee00) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000001240)=ANY=[@ANYRESDEC, @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYRES64, @ANYRESOCT=r0, @ANYRESDEC, @ANYBLOB="0ffe05", @ANYRES8, @ANYBLOB="e8fa88e70da1b9c76cfaf3d80659ae68eb29563234049e665da79cebc620be16778776225013943b37faa22e2cf1c8182f9f145839b2c310bbb276b81cf5e8f79bbcdaca26dc11e2aac8f915fd6f248216e714865dc635d6f0f3b375b0dbba056bdf18a7f200de6a9e995dca5fa8beda1ef93e1a9b241640634e6a6687d44c4cb189bcdfa08b86714d70495d79", @ANYBLOB="8e992400028447ab6903d457b10100c104a0b14ac8f07d96cff44ef489440101", @ANYRESOCT, @ANYRES32=0xee00, @ANYRES8, @ANYBLOB="7d81dae7d77fcb0de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b6649266", @ANYRESDEC, @ANYRESOCT, @ANYRES8=r1, @ANYRES32=0xffffffffffffffff, @ANYRESDEC=0x0, @ANYBLOB="0800047f475279a75e8bab650100000022965a91f6491b57075b13751d", @ANYRES16], 0x94, 0x1) r3 = getuid() r4 = socket(0x1f, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgid(r5) socket$qrtr(0x2a, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002980), 0x20080, 0x0) r7 = getpid() process_vm_readv(r7, 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0), 0x400) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x1000020, &(0x7f0000001640)=ANY=[@ANYBLOB="75737271756f74615f696e6f64655f686172646c696d69743d253633783925e73478742c67727071756f74615f626c6f636b5f686172646c696d69743d36302c636f6e746578743d726f6f742c646f6e745f686173682c726f6f74636f6e746578743d757365725f752c666f776e65723c", @ANYRES32=r3, @ANYRES32=r6, @ANYRES8, @ANYRESOCT=r2]) fstat(r4, &(0x7f0000001780)) epoll_create(0xff) lstat(&(0x7f0000002a40)='./file0\x00', &(0x7f0000002a80)) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000003d80), 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) 559.827679ms ago: executing program 0 (id=3188): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @hyper}, 0x61) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x44040, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) listen(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00'}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000008000000000"], 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r6}, 0x10) sendto$inet6(r5, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 559.368509ms ago: executing program 3 (id=3189): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket(0x11, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) (async) setsockopt$packet_int(r2, 0x107, 0xdd6846a320a6dd1a, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r2, &(0x7f00000003c0)={0x0, 0x40, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000ff840600ac141430e0000003808a8972bd0b72e4108296a3d206163944f8afc1bf505602da9168d6f9ce320068ff1f7e345a170d1423c2e18c8ed410c8aab9a20b514d2b583b90a86da4483488c0fdc6c2"], 0xdd12}], 0x1}, 0x1) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000ac8a9ea828c727237f678355000000b70400000800000085000000950000009500000000000000a0fc5d9f722509f4f574950d7d9b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYRES16=r0], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x33, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) (async) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r12, 0x0) r13 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r13, 0x6, 0x0, 0x0, 0x0) r14 = fsmount(r13, 0x0, 0xa) fchdir(r14) (async) open(&(0x7f0000000300)='./file0\x00', 0x489c0, 0x0) 408.59µs ago: executing program 0 (id=3190): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000003740)='ib_mad_recv_done_handler\x00'}, 0x18) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000006c0)='.\x00', 0x1a4243c, &(0x7f0000000700)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRESHEX, @ANYRES8, @ANYRES32, @ANYRES8, @ANYRES64, @ANYRES8=0x0, @ANYRES64, @ANYRES8], 0x0, 0x0, &(0x7f0000000080)) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c) sendmsg(0xffffffffffffffff, 0x0, 0x4080) sendto$inet6(r1, 0x0, 0x0, 0xb961a898ae1b1206, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xd, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c00000003000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x800000000006}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x1, 0x4, 0x7}, 0x3}}, 0x18) 0s ago: executing program 3 (id=3191): r0 = getuid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'caif0\x00', @multicast}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@user_xattr}, {@mblk_io_submit}, {@resuid={'resuid', 0x3d, r0}}, {@norecovery}]}, 0x8, 0x44d, &(0x7f0000000cc0)="$eJzs28tvG8UfAPDvrp3019cvpiqPPoBAQVQ8kiYtpQcOgEDiABISHMoxJGlV6jaoCRKtKigIlSOqxB1xROIv4AQXBJyQuAJnVKlCubRwMlp7t3FcO01Suw7x5yNtPbM77szXs2PP7mQDGFij2T9JxI6I+C0iRhrZ5QVGGy83Fi9O/714cTqJWu3Nv5J6ueuLF6eLosX7theZckT6aRL72tQ7f/7C6alqdfZcnh9fOPPe+Pz5C8+cOjN1cvbk7NnJY8eOHJ547ujks12JM4vr+t4P5/bvefXtK69PH7/yzk/fJEX8LXF0yWjbveXGy+O1Wper66+dTemk3MeGsCal/JQcqo//kSjFUueNxCuf9LVxQE/VarXafZ0PX6oBm1gS/W4B0B/FD312/Vtsd2nqsSFce7FxAZTFfSPfGkfKkeZlhlqub7tpNCKOX/rny2yL1vsQW3tUKQAw0L7L5j9Pt5v/pdF8X+j/+RpKJSLuiYhdEXE0InZHxL0R9bL3R8QDa6y/dZHk1vlnenVdga1SNv97Pl/bWj7/K2Z/USnluZ31+IeSE6eqs4fyz+RgDG3J8hMr1PH9y79+3ulY8/wv27L6i7lg3o6r5S3L3zMztTB1JzE3u/ZxxN5yu/iTmysBSUTsiYgX1lnHqSe/3t/pWIf4h1f1H3dhnan2VcQTjf6/FC3xF5KV1yfH/xfV2UPjxVlxq59/ufxGp/pv3/+9lfX/trbnfxH/H5Wkeb12fu11XP79s47XlOs9/4eTt5bt+2BqYeHcRMRw8lo9X2neP9lSbnKpfBb/wQPtx/+u/D1Z9fsiIjuJH4yIhyLi4bztj0TEoxFxYIX4f3zpsXfXH39vZfHPrNj/0dL/S4nhaN2TJ4pxme8pnf7h22WVVpaSq+v/I/XUwXzPar7/2rarTeJOPjsAAAD4r0gjYkck6djNdJqOjTX+hn93bEurc/MLT52Ye//sTOMZgUoMpcWdrpGm+6ET+WV9kZ9syR/O7xt/Udpaz49Nz1Vn+h08DLjtHcZ/5s9Sv1sH9JzntWBwGf8wuIx/GFzGPwyuNuPfo2cwINr9/n/Uh3YAd1/L+F9x2c/EADYX1/8wuIx/GFzGPwyk+a1x+4fkN0cijYgN0IzNkoh0QzRDokeJfn8zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMe/AQAA//9tSOI0") r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write$P9_RREAD(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="a000000075020095000000e34a888bad6c22dcb43a375185af1585651f6bf8b50adacd3ad1844943de54cd643c0c39c6d9bc2cc024e7099e09acff7bcd803a6887c09ac5aaadf5a75c5b20161ae4a7a129844322662fc865be98b6891a5b3e2127ef1bc89e9c525d2726db1158ffe5985a81b78ae27296557ec6f206c958fa6b76f9e943987e5962ad9a6509bae99f27c3c09f0bb01c2fecdb1f"], 0xa0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(0xffffffffffffffff, 0x1) sendfile(r4, r3, 0x0, 0x3ffff) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") kernel console output (not intermixed with test programs): 098986][T10438] Unable to read rock-ridge attributes [ 222.104972][T10438] 9pnet_fd: Insufficient options for proto=fd [ 222.130499][T10441] loop2: detected capacity change from 0 to 512 [ 222.161211][T10441] ext4 filesystem being mounted at /517/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.504235][T10468] program syz.1.2477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.911982][T10470] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2473'. [ 222.921419][T10470] IPVS: Error connecting to the multicast addr [ 223.193062][T10477] loop1: detected capacity change from 0 to 164 [ 223.302834][T10477] Unable to read rock-ridge attributes [ 223.338064][T10477] Unable to read rock-ridge attributes [ 223.350295][T10493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2482'. [ 223.359591][T10477] 9pnet_fd: Insufficient options for proto=fd [ 223.371398][T10493] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2482'. [ 223.416823][T10495] loop1: detected capacity change from 0 to 512 [ 223.426994][T10497] program syz.2.2484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.439789][T10495] ext4 filesystem being mounted at /483/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.509387][T10501] loop2: detected capacity change from 0 to 512 [ 223.521859][T10501] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.529241][T10501] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 223.540645][T10504] loop4: detected capacity change from 0 to 512 [ 223.543211][T10501] EXT4-fs (loop2): 1 truncate cleaned up [ 223.556628][T10504] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 223.569310][T10504] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2486: Invalid block bitmap block 0 in block_group 0 [ 223.583403][T10504] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 223.594156][T10504] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.2486: attempt to clear invalid blocks 983261 len 1 [ 223.610185][T10504] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.2486: Invalid inode table block 0 in block_group 0 [ 223.704624][T10520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10520 comm=syz.3.2492 [ 223.722486][T10504] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 223.732499][T10504] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 223.741639][T10504] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.2486: Invalid inode table block 0 in block_group 0 [ 223.757916][T10522] loop1: detected capacity change from 0 to 164 [ 223.767044][T10522] Unable to read rock-ridge attributes [ 223.770975][T10504] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 223.784467][T10522] Unable to read rock-ridge attributes [ 223.792292][T10522] 9pnet_fd: Insufficient options for proto=fd [ 223.794508][T10504] EXT4-fs error (device loop4): ext4_truncate:4666: inode #11: comm syz.4.2486: mark_inode_dirty error [ 223.811699][T10504] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 223.830181][T10504] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.2486: Invalid inode table block 0 in block_group 0 [ 223.834755][T10524] pimreg: entered allmulticast mode [ 223.846639][T10504] EXT4-fs (loop4): 1 truncate cleaned up [ 223.864798][T10526] program syz.1.2495 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.876528][T10504] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.2486: Invalid inode table block 0 in block_group 0 [ 223.891027][T10504] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 223.907636][T10504] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.2486: mark_inode_dirty error [ 223.923706][T10504] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.2486: Invalid inode table block 0 in block_group 0 [ 224.036028][T10532] syzkaller1: entered promiscuous mode [ 224.041552][T10532] syzkaller1: entered allmulticast mode [ 224.244666][T10534] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.2486: Invalid inode bitmap blk 0 in block_group 0 [ 224.569929][T10547] program syz.0.2501 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.609175][T10551] loop2: detected capacity change from 0 to 512 [ 224.629386][T10551] ext4 filesystem being mounted at /524/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.644648][T10557] loop0: detected capacity change from 0 to 164 [ 224.652041][T10557] Unable to read rock-ridge attributes [ 224.660919][T10557] Unable to read rock-ridge attributes [ 224.669553][T10557] 9pnet_fd: Insufficient options for proto=fd [ 224.686605][T10559] program syz.2.2506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.718061][ T31] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm kworker/u8:1: Invalid inode table block 0 in block_group 0 [ 224.737209][T10564] wireguard7: entered promiscuous mode [ 224.742788][T10564] wireguard7: entered allmulticast mode [ 224.866458][T10571] loop4: detected capacity change from 0 to 512 [ 224.887675][T10571] EXT4-fs: Ignoring removed mblk_io_submit option [ 224.895940][T10571] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 224.917297][T10571] EXT4-fs (loop4): 1 truncate cleaned up [ 224.956620][T10583] lo speed is unknown, defaulting to 1000 [ 224.968996][T10585] loop2: detected capacity change from 0 to 512 [ 224.976505][T10583] lo speed is unknown, defaulting to 1000 [ 224.982534][T10583] lo speed is unknown, defaulting to 1000 [ 224.990287][T10583] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 225.001576][T10583] lo speed is unknown, defaulting to 1000 [ 225.005167][T10585] ext4 filesystem being mounted at /528/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.019210][T10583] lo speed is unknown, defaulting to 1000 [ 225.025542][T10583] lo speed is unknown, defaulting to 1000 [ 225.032358][T10583] lo speed is unknown, defaulting to 1000 [ 225.038413][T10583] lo speed is unknown, defaulting to 1000 [ 225.163178][T10595] 9pnet_fd: Insufficient options for proto=fd [ 225.788859][T10611] loop4: detected capacity change from 0 to 164 [ 225.797766][T10611] Unable to read rock-ridge attributes [ 225.799630][T10611] Unable to read rock-ridge attributes [ 225.800980][T10611] 9pnet_fd: Insufficient options for proto=fd [ 225.832141][T10613] tipc: Enabling of bearer rejected, failed to enable media [ 225.832381][T10615] program syz.4.2527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.872199][T10613] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2526'. [ 225.928923][T10623] loop0: detected capacity change from 0 to 512 [ 225.930571][T10624] loop1: detected capacity change from 0 to 512 [ 225.937448][T10623] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 225.983518][T10623] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 225.983554][T10623] System zones: 1-12 [ 225.983725][T10623] EXT4-fs (loop0): orphan cleanup on readonly fs [ 225.983995][T10623] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2530: invalid indirect mapped block 12 (level 1) [ 225.984152][T10623] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2530: invalid indirect mapped block 2 (level 2) [ 225.984401][T10623] EXT4-fs (loop0): 1 truncate cleaned up [ 226.075606][ T29] kauditd_printk_skb: 539 callbacks suppressed [ 226.075624][ T29] audit: type=1400 audit(1758952438.151:19490): avc: denied { create } for pid=10629 comm="syz.3.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 226.109633][ T29] audit: type=1400 audit(1758952438.151:19491): avc: denied { setopt } for pid=10629 comm="syz.3.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 226.134353][ T29] audit: type=1326 audit(1758952438.207:19492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10619 comm="syz.4.2528" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4cfd9feec9 code=0x0 [ 226.165465][T10635] 9pnet_fd: Insufficient options for proto=fd [ 226.414592][T10661] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2544'. [ 226.454684][T10665] loop2: detected capacity change from 0 to 512 [ 226.468857][T10667] loop0: detected capacity change from 0 to 164 [ 226.477357][T10667] Unable to read rock-ridge attributes [ 226.477775][T10665] ext4 filesystem being mounted at /536/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.485248][T10667] Unable to read rock-ridge attributes [ 226.500930][T10667] 9pnet_fd: Insufficient options for proto=fd [ 226.718696][T10681] loop0: detected capacity change from 0 to 512 [ 226.719357][T10681] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 226.720430][T10681] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 226.745306][T10681] System zones: 1-12 [ 226.745422][T10681] EXT4-fs (loop0): orphan cleanup on readonly fs [ 226.756730][T10681] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2552: invalid indirect mapped block 12 (level 1) [ 226.756992][T10681] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2552: invalid indirect mapped block 2 (level 2) [ 226.757550][T10681] EXT4-fs (loop0): 1 truncate cleaned up [ 226.839025][ T29] audit: type=1326 audit(1758952438.871:19493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10685 comm="syz.4.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cfd9feec9 code=0x7ffc0000 [ 226.839055][ T29] audit: type=1326 audit(1758952438.871:19494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10685 comm="syz.4.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cfd9feec9 code=0x7ffc0000 [ 226.874355][ T29] audit: type=1326 audit(1758952438.890:19495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10685 comm="syz.4.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cfd9feec9 code=0x7ffc0000 [ 226.919561][ T29] audit: type=1326 audit(1758952438.890:19496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10685 comm="syz.4.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cfd9feec9 code=0x7ffc0000 [ 226.943209][ T29] audit: type=1326 audit(1758952438.890:19497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10685 comm="syz.4.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cfd9feec9 code=0x7ffc0000 [ 226.943285][ T29] audit: type=1326 audit(1758952438.890:19498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10685 comm="syz.4.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4cfd9feec9 code=0x7ffc0000 [ 226.943332][ T29] audit: type=1326 audit(1758952438.890:19499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10685 comm="syz.4.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cfd9feec9 code=0x7ffc0000 [ 227.126365][T10691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2556'. [ 227.265251][T10703] loop4: detected capacity change from 0 to 1024 [ 227.265505][T10703] ext4: Unknown parameter 'appraise_type' [ 227.358030][T10711] loop4: detected capacity change from 0 to 512 [ 227.375934][T10711] ext4 filesystem being mounted at /495/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.468611][T10720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2567'. [ 227.653208][T10723] loop2: detected capacity change from 0 to 32768 [ 228.092134][T10731] loop2: detected capacity change from 0 to 164 [ 228.101788][T10731] Unable to read rock-ridge attributes [ 228.110111][T10731] Unable to read rock-ridge attributes [ 228.116060][T10731] 9pnet_fd: Insufficient options for proto=fd [ 228.143275][T10733] program syz.2.2573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.178542][T10737] program syz.0.2575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.213858][T10739] loop2: detected capacity change from 0 to 512 [ 228.228852][T10741] loop0: detected capacity change from 0 to 1024 [ 228.235666][T10741] ext4: Unknown parameter 'appraise_type' [ 228.248065][T10744] 9pnet_fd: Insufficient options for proto=fd [ 228.255837][T10739] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.453301][T10764] program syz.0.2587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.535631][T10768] loop0: detected capacity change from 0 to 128 [ 228.542942][T10768] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 228.556329][T10768] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 228.597104][ T37] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 228.623913][T10771] loop0: detected capacity change from 0 to 512 [ 228.623948][T10774] loop4: detected capacity change from 0 to 512 [ 228.630753][T10771] EXT4-fs: Ignoring removed mblk_io_submit option [ 228.638235][T10774] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 228.645384][T10771] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 228.655403][T10775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2590'. [ 228.670085][T10774] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 228.680265][T10774] System zones: 1-12 [ 228.684425][T10774] EXT4-fs (loop4): orphan cleanup on readonly fs [ 228.692843][T10774] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2592: invalid indirect mapped block 12 (level 1) [ 228.754323][T10783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2594'. [ 228.771035][T10771] EXT4-fs (loop0): 1 truncate cleaned up [ 228.777333][T10771] EXT4-fs mount: 51 callbacks suppressed [ 228.777424][T10771] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.812799][T10774] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2592: invalid indirect mapped block 2 (level 2) [ 228.828643][T10774] EXT4-fs (loop4): 1 truncate cleaned up [ 228.859558][T10774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 229.335128][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 229.533684][T10813] loop4: detected capacity change from 0 to 1024 [ 229.550989][T10813] EXT4-fs: Ignoring removed oldalloc option [ 229.556972][T10813] EXT4-fs: Ignoring removed bh option [ 229.568938][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.613213][T10813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.639673][T10822] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2605'. [ 229.716997][ T3387] IPVS: starting estimator thread 0... [ 229.818253][T10830] IPVS: using max 2592 ests per chain, 129600 per kthread [ 229.923235][T10845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2614'. [ 230.096096][T10857] loop1: detected capacity change from 0 to 128 [ 230.174785][T10859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2620'. [ 230.439777][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.499819][T10878] loop4: detected capacity change from 0 to 512 [ 230.531041][T10884] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2631'. [ 230.557225][T10878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.557373][T10878] ext4 filesystem being mounted at /503/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.559796][T10882] loop9: detected capacity change from 0 to 7 [ 230.599697][T10891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2632'. [ 230.601340][T10882] Buffer I/O error on dev loop9, logical block 0, async page read [ 230.601397][T10882] Buffer I/O error on dev loop9, logical block 0, async page read [ 230.601416][T10882] loop9: unable to read partition table [ 230.601461][T10882] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 230.601461][T10882] ) failed (rc=-5) [ 230.609233][ T3387] hid_parser_main: 48 callbacks suppressed [ 230.609255][ T3387] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 230.609300][ T3387] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 230.609388][ T3387] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 230.609409][ T3387] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 230.609432][ T3387] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 230.609461][ T3387] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 230.609486][ T3387] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 230.609537][ T3387] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 230.609595][ T3387] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 230.609621][ T3387] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 230.636477][ T3387] hid-generic 0003:0004:0000.0007: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 230.644376][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.661577][T10896] loop1: detected capacity change from 0 to 164 [ 230.683682][T10896] Unable to read rock-ridge attributes [ 230.703366][T10896] Unable to read rock-ridge attributes [ 230.735921][T10896] 9pnet_fd: Insufficient options for proto=fd [ 230.770468][T10902] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2637'. [ 230.847306][T10902] ip6tnl1: entered allmulticast mode [ 230.925371][T10910] loop1: detected capacity change from 0 to 1764 [ 231.118394][T10922] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2644'. [ 231.199309][T10927] loop4: detected capacity change from 0 to 512 [ 231.200724][T10927] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 231.251911][T10927] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2645: iget: bad i_size value: 360287970189639680 [ 231.252052][T10927] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2645: couldn't read orphan inode 15 (err -117) [ 231.252570][T10927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.254714][T10927] EXT4-fs error (device loop4): ext4_empty_dir:3086: inode #12: block 13: comm syz.4.2645: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=1 [ 231.254896][T10927] EXT4-fs warning (device loop4): ext4_empty_dir:3089: inode #12: comm syz.4.2645: directory missing '.' [ 231.460532][ T29] kauditd_printk_skb: 1076 callbacks suppressed [ 231.460596][ T29] audit: type=1326 audit(1758952443.184:20576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088afeec9 code=0x7ffc0000 [ 231.498016][T10939] loop0: detected capacity change from 0 to 512 [ 231.505279][T10939] EXT4-fs: Ignoring removed oldalloc option [ 231.512723][T10939] EXT4-fs (loop0): bad geometry: block count 1792 exceeds size of device (256 blocks) [ 231.523308][ T29] audit: type=1326 audit(1758952443.222:20577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe088afeec9 code=0x7ffc0000 [ 231.547026][ T29] audit: type=1326 audit(1758952443.222:20578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088afeec9 code=0x7ffc0000 [ 231.571384][ T29] audit: type=1326 audit(1758952443.222:20579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe088afeec9 code=0x7ffc0000 [ 231.595098][ T29] audit: type=1326 audit(1758952443.222:20580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088afeec9 code=0x7ffc0000 [ 231.619302][ T29] audit: type=1326 audit(1758952443.222:20581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe088afeec9 code=0x7ffc0000 [ 231.643168][ T29] audit: type=1326 audit(1758952443.222:20582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088afeec9 code=0x7ffc0000 [ 231.667480][ T29] audit: type=1326 audit(1758952443.222:20583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe088afeec9 code=0x7ffc0000 [ 231.690955][ T29] audit: type=1326 audit(1758952443.222:20584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088afeec9 code=0x7ffc0000 [ 231.715253][ T29] audit: type=1326 audit(1758952443.222:20585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fe088afeec9 code=0x7ffc0000 [ 231.747276][T10939] pimreg: entered allmulticast mode [ 231.758506][T10939] loop0: detected capacity change from 0 to 1024 [ 231.766925][T10939] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 231.777898][T10939] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 231.838229][T10939] JBD2: no valid journal superblock found [ 231.844005][T10939] EXT4-fs (loop0): Could not load journal inode [ 232.132019][T10955] loop2: detected capacity change from 0 to 512 [ 232.164552][T10955] EXT4-fs: Ignoring removed mblk_io_submit option [ 232.171646][T10955] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 232.185905][T10955] EXT4-fs (loop2): 1 truncate cleaned up [ 232.194468][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.211730][T10955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.239806][T10962] loop4: detected capacity change from 0 to 512 [ 232.254375][T10962] EXT4-fs: Ignoring removed mblk_io_submit option [ 232.265837][T10962] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 232.279053][T10968] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2662'. [ 232.289764][T10962] EXT4-fs (loop4): 1 truncate cleaned up [ 232.295925][T10962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.509858][T10979] rdma_op ffff8881308d7580 conn xmit_rdma 0000000000000000 [ 232.943601][T10986] loop1: detected capacity change from 0 to 164 [ 232.973060][T10986] Unable to read rock-ridge attributes [ 233.013321][T10986] Unable to read rock-ridge attributes [ 233.041995][T10986] 9pnet_fd: Insufficient options for proto=fd [ 233.101824][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.138354][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.197790][T10998] FAULT_INJECTION: forcing a failure. [ 233.197790][T10998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.211005][T10998] CPU: 1 UID: 0 PID: 10998 Comm: syz.1.2672 Not tainted syzkaller #0 PREEMPT(voluntary) [ 233.211039][T10998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 233.211128][T10998] Call Trace: [ 233.211135][T10998] [ 233.211145][T10998] __dump_stack+0x1d/0x30 [ 233.211170][T10998] dump_stack_lvl+0xe8/0x140 [ 233.211194][T10998] dump_stack+0x15/0x1b [ 233.211213][T10998] should_fail_ex+0x265/0x280 [ 233.211271][T10998] should_fail+0xb/0x20 [ 233.211296][T10998] should_fail_usercopy+0x1a/0x20 [ 233.211319][T10998] _copy_to_user+0x20/0xa0 [ 233.211423][T10998] simple_read_from_buffer+0xb5/0x130 [ 233.211495][T10998] proc_fail_nth_read+0x10e/0x150 [ 233.211558][T10998] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 233.211589][T10998] vfs_read+0x1a5/0x770 [ 233.211652][T10998] ? __rcu_read_unlock+0x4f/0x70 [ 233.211675][T10998] ? __fget_files+0x184/0x1c0 [ 233.211708][T10998] ksys_read+0xda/0x1a0 [ 233.211735][T10998] __x64_sys_read+0x40/0x50 [ 233.211756][T10998] x64_sys_call+0x27bc/0x2ff0 [ 233.211849][T10998] do_syscall_64+0xd2/0x200 [ 233.211886][T10998] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 233.211937][T10998] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 233.212017][T10998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.212045][T10998] RIP: 0033:0x7f51b710d8dc [ 233.212064][T10998] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 233.212088][T10998] RSP: 002b:00007f51b5b6f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 233.212128][T10998] RAX: ffffffffffffffda RBX: 00007f51b7365fa0 RCX: 00007f51b710d8dc [ 233.212144][T10998] RDX: 000000000000000f RSI: 00007f51b5b6f0a0 RDI: 0000000000000003 [ 233.212161][T10998] RBP: 00007f51b5b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 233.212176][T10998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.212213][T10998] R13: 00007f51b7366038 R14: 00007f51b7365fa0 R15: 00007ffd5acdf858 [ 233.212237][T10998] [ 233.316625][T11012] loop1: detected capacity change from 0 to 512 [ 233.484227][T11012] EXT4-fs: Ignoring removed mblk_io_submit option [ 233.494911][T11017] loop0: detected capacity change from 0 to 512 [ 233.495250][T11017] EXT4-fs: Ignoring removed mblk_io_submit option [ 233.496794][T11017] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 233.497214][T11012] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 233.504186][T11017] EXT4-fs (loop0): 1 truncate cleaned up [ 233.544608][T11012] EXT4-fs (loop1): 1 truncate cleaned up [ 233.545028][T11012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.565145][T11017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.248004][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.429637][T11036] lo speed is unknown, defaulting to 1000 [ 234.447120][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.526974][T11036] chnl_net:caif_netlink_parms(): no params data found [ 234.679359][T11036] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.679406][T11036] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.679593][T11036] bridge_slave_0: entered allmulticast mode [ 234.680387][T11036] bridge_slave_0: entered promiscuous mode [ 234.681489][T11036] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.681525][T11036] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.681687][T11036] bridge_slave_1: entered allmulticast mode [ 234.682147][T11036] bridge_slave_1: entered promiscuous mode [ 234.710270][T11036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.759038][T11036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.815490][T11036] team0: Port device team_slave_0 added [ 234.822796][T11036] team0: Port device team_slave_1 added [ 234.856188][T11036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.856204][T11036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.856306][T11036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.857652][T11036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.908048][T11036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.934023][T11036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.006579][T11036] hsr_slave_0: entered promiscuous mode [ 235.013041][T11036] hsr_slave_1: entered promiscuous mode [ 235.042524][T11036] debugfs: 'hsr0' already exists in 'hsr' [ 235.042544][T11036] Cannot create hsr debugfs directory [ 235.165597][T11036] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.217787][T11036] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.357411][T11036] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.391628][T11077] loop2: detected capacity change from 0 to 512 [ 235.398978][T11077] EXT4-fs: Ignoring removed mblk_io_submit option [ 235.405804][T11077] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 235.417165][T11077] EXT4-fs (loop2): 1 truncate cleaned up [ 235.469628][T11077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.533172][T11080] lo speed is unknown, defaulting to 1000 [ 235.700334][T11036] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.961312][T11036] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 235.983201][T11036] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 235.993836][T11036] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 236.006227][T11036] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 236.098552][T11095] program syz.4.2699 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.133109][T11036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.161055][T11036] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.177133][T11102] loop4: detected capacity change from 0 to 512 [ 236.190199][T11102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.223632][T11102] ext4 filesystem being mounted at /515/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.327811][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.350177][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.416365][ T51] bond0 (unregistering): Released all slaves [ 236.426082][ T51] bond1 (unregistering): Released all slaves [ 236.438327][ T51] bond2 (unregistering): Released all slaves [ 236.447634][ T51] bond3 (unregistering): Released all slaves [ 236.458470][ T51] bond4 (unregistering): Released all slaves [ 236.467765][ T51] bond5 (unregistering): Released all slaves [ 236.477705][ T51] bond6 (unregistering): Released all slaves [ 236.486736][ T51] bond7 (unregistering): Released all slaves [ 236.496056][ T51] bond8 (unregistering): Released all slaves [ 236.524378][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.531511][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.544534][T11117] FAULT_INJECTION: forcing a failure. [ 236.544534][T11117] name failslab, interval 1, probability 0, space 0, times 0 [ 236.557232][T11117] CPU: 1 UID: 0 PID: 11117 Comm: syz.2.2708 Not tainted syzkaller #0 PREEMPT(voluntary) [ 236.557296][T11117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 236.557387][T11117] Call Trace: [ 236.557395][T11117] [ 236.557404][T11117] __dump_stack+0x1d/0x30 [ 236.557477][T11117] dump_stack_lvl+0xe8/0x140 [ 236.557494][T11117] dump_stack+0x15/0x1b [ 236.557508][T11117] should_fail_ex+0x265/0x280 [ 236.557532][T11117] should_failslab+0x8c/0xb0 [ 236.557629][T11117] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 236.557664][T11117] ? sidtab_sid2str_get+0xa0/0x130 [ 236.557692][T11117] kmemdup_noprof+0x2b/0x70 [ 236.557782][T11117] sidtab_sid2str_get+0xa0/0x130 [ 236.557808][T11117] security_sid_to_context_core+0x1eb/0x2e0 [ 236.557836][T11117] security_sid_to_context+0x27/0x40 [ 236.557926][T11117] selinux_lsmprop_to_secctx+0x67/0xf0 [ 236.557946][T11117] security_lsmprop_to_secctx+0x43/0x80 [ 236.558111][T11117] audit_log_task_context+0x77/0x190 [ 236.558195][T11117] audit_log_task+0xf4/0x250 [ 236.558284][T11117] audit_seccomp+0x61/0x100 [ 236.558307][T11117] ? __seccomp_filter+0x68c/0x10d0 [ 236.558393][T11117] __seccomp_filter+0x69d/0x10d0 [ 236.558413][T11117] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 236.558438][T11117] ? vfs_write+0x7e8/0x960 [ 236.558472][T11117] __secure_computing+0x82/0x150 [ 236.558567][T11117] syscall_trace_enter+0xcf/0x1e0 [ 236.558592][T11117] do_syscall_64+0xac/0x200 [ 236.558622][T11117] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 236.558654][T11117] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 236.558749][T11117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.558792][T11117] RIP: 0033:0x7fc401b4eec9 [ 236.558810][T11117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.558838][T11117] RSP: 002b:00007fc4005aee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 236.558855][T11117] RAX: ffffffffffffffda RBX: 0000000000000269 RCX: 00007fc401b4eec9 [ 236.558870][T11117] RDX: 00007fc4005aeef0 RSI: 0000000000000000 RDI: 00007fc401bd2960 [ 236.558884][T11117] RBP: 0000200000000a00 R08: 00007fc4005aebb7 R09: 00007fc4005aee40 [ 236.558899][T11117] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000740 [ 236.558914][T11117] R13: 00007fc4005aeef0 R14: 00007fc4005aeeb0 R15: 0000200000000100 [ 236.558937][T11117] [ 236.561123][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.575414][T11117] loop2: detected capacity change from 0 to 128 [ 236.581233][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.724865][T11117] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 236.830335][T11117] ext4 filesystem being mounted at /566/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.844077][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 236.844090][ T29] audit: type=1326 audit(1758952448.227:20884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11116 comm="syz.2.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc401b4d710 code=0x7ffc0000 [ 236.887245][ T29] audit: type=1326 audit(1758952448.255:20885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11116 comm="syz.2.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fc401b4dc17 code=0x7ffc0000 [ 236.910999][ T29] audit: type=1326 audit(1758952448.255:20886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11116 comm="syz.2.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc401b4d710 code=0x7ffc0000 [ 236.934736][ T29] audit: type=1326 audit(1758952448.255:20887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11116 comm="syz.2.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc401b4d8dc code=0x7ffc0000 [ 236.958222][ T29] audit: type=1326 audit(1758952448.255:20888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11116 comm="syz.2.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc401b4d97f code=0x7ffc0000 [ 236.975932][T11036] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 236.981646][ T29] audit: type=1326 audit(1758952448.255:20889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11116 comm="syz.2.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc401b4db2a code=0x7ffc0000 [ 236.992024][T11036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.015475][ T29] audit: type=1326 audit(1758952448.255:20890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11116 comm="syz.2.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc401b4eec9 code=0x7ffc0000 [ 237.074520][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 237.107494][ T51] hsr_slave_0: left promiscuous mode [ 237.116341][ T51] hsr_slave_1: left promiscuous mode [ 237.128672][ T51] veth1_macvtap: left promiscuous mode [ 237.153351][ T51] veth0_macvtap: left promiscuous mode [ 237.163625][T11128] program syz.2.2711 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.163848][ T51] veth1_vlan: left promiscuous mode [ 237.179552][ T51] veth0_vlan: left promiscuous mode [ 237.188505][ T29] audit: type=1326 audit(1758952448.545:20891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.1.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b710eec9 code=0x7ffc0000 [ 237.212156][ T29] audit: type=1326 audit(1758952448.545:20892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.1.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b710eec9 code=0x7ffc0000 [ 237.300703][ T29] audit: type=1326 audit(1758952448.545:20893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.1.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f51b710eec9 code=0x7ffc0000 [ 237.359251][ T51] pimreg (unregistering): left allmulticast mode [ 237.403808][T11137] loop1: detected capacity change from 0 to 512 [ 237.420259][T11137] EXT4-fs: Ignoring removed mblk_io_submit option [ 237.427049][T11137] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 237.438445][T11137] EXT4-fs (loop1): 1 truncate cleaned up [ 237.446455][T11137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.668520][T11143] __nla_validate_parse: 1 callbacks suppressed [ 237.668534][T11143] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2716'. [ 237.729351][T11036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.361502][T11036] veth0_vlan: entered promiscuous mode [ 238.369436][T11036] veth1_vlan: entered promiscuous mode [ 238.382293][T11036] veth0_macvtap: entered promiscuous mode [ 238.388931][T11161] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 238.401719][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.421640][T11036] veth1_macvtap: entered promiscuous mode [ 238.430776][T11163] loop1: detected capacity change from 0 to 1024 [ 238.438226][T11163] EXT4-fs: Ignoring removed bh option [ 238.443730][T11163] EXT4-fs: inline encryption not supported [ 238.447687][T11036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.460152][T11163] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 238.462962][T11036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.483270][T11163] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 238.486081][T11168] loop2: detected capacity change from 0 to 164 [ 238.493039][T11163] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.2720: lblock 2 mapped to illegal pblock 2 (length 1) [ 238.514774][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.515913][T11163] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.2720: lblock 0 mapped to illegal pblock 48 (length 1) [ 238.523874][T11168] Unable to read rock-ridge attributes [ 238.529204][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.544875][T11168] Unable to read rock-ridge attributes [ 238.553417][T11163] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.2720: Failed to acquire dquot type 0 [ 238.560438][T11168] 9pnet_fd: Insufficient options for proto=fd [ 238.576272][T11163] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 238.596173][ T3432] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.601344][T11163] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.2720: mark_inode_dirty error [ 238.607093][ T3432] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.617661][T11163] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 238.635621][T11163] EXT4-fs (loop1): 1 orphan inode deleted [ 238.642058][T11163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.657439][ T12] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 238.675076][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 0 [ 238.715838][T11171] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 238.724158][T11171] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 238.733154][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.746576][T11175] loop3: detected capacity change from 0 to 512 [ 238.756890][ T3299] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 238.822481][ T3299] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 238.834555][ T3299] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 238.878843][T11175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.899120][T11175] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.930719][T11036] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.944679][T11187] loop4: detected capacity change from 0 to 512 [ 238.958833][T11187] EXT4-fs: Ignoring removed mblk_io_submit option [ 238.968496][T11190] FAULT_INJECTION: forcing a failure. [ 238.968496][T11190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.981632][T11190] CPU: 1 UID: 0 PID: 11190 Comm: syz.3.2730 Not tainted syzkaller #0 PREEMPT(voluntary) [ 238.981722][T11190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 238.981740][T11190] Call Trace: [ 238.981749][T11190] [ 238.981759][T11190] __dump_stack+0x1d/0x30 [ 238.981804][T11190] dump_stack_lvl+0xe8/0x140 [ 238.981827][T11190] dump_stack+0x15/0x1b [ 238.981848][T11190] should_fail_ex+0x265/0x280 [ 238.981894][T11190] should_fail+0xb/0x20 [ 238.981952][T11190] should_fail_usercopy+0x1a/0x20 [ 238.982008][T11190] _copy_from_user+0x1c/0xb0 [ 238.982043][T11190] ___sys_sendmsg+0xc1/0x1d0 [ 238.982089][T11190] __x64_sys_sendmsg+0xd4/0x160 [ 238.982122][T11190] x64_sys_call+0x191e/0x2ff0 [ 238.982149][T11190] do_syscall_64+0xd2/0x200 [ 238.982193][T11190] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 238.982225][T11190] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 238.982259][T11190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.982332][T11190] RIP: 0033:0x7ff8ea6eeec9 [ 238.982371][T11190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.982391][T11190] RSP: 002b:00007ff8e914f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.982416][T11190] RAX: ffffffffffffffda RBX: 00007ff8ea945fa0 RCX: 00007ff8ea6eeec9 [ 238.982495][T11190] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 238.982511][T11190] RBP: 00007ff8e914f090 R08: 0000000000000000 R09: 0000000000000000 [ 238.982527][T11190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.982543][T11190] R13: 00007ff8ea946038 R14: 00007ff8ea945fa0 R15: 00007ffe0ae02968 [ 238.982575][T11190] [ 239.180237][T11187] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 239.238989][T11187] EXT4-fs (loop4): 1 truncate cleaned up [ 239.246227][T11187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.320930][T11194] netlink: 'syz.3.2731': attribute type 1 has an invalid length. [ 239.328882][T11194] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2731'. [ 239.642303][T11200] program syz.3.2732 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.678121][T11202] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2733'. [ 239.777571][T11205] loop2: detected capacity change from 0 to 1024 [ 239.784477][T11205] EXT4-fs: Ignoring removed bh option [ 239.789949][T11205] EXT4-fs: inline encryption not supported [ 239.796186][T11205] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 239.817285][T11205] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 239.841689][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.852160][T11205] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.2734: lblock 2 mapped to illegal pblock 2 (length 1) [ 239.869331][T11205] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.2734: lblock 0 mapped to illegal pblock 48 (length 1) [ 239.883795][T11205] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2734: Failed to acquire dquot type 0 [ 239.896745][T11205] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 239.910599][T11211] tipc: Started in network mode [ 239.915514][T11211] tipc: Node identity ac14140f, cluster identity 4711 [ 239.924849][T11211] tipc: New replicast peer: 255.255.255.83 [ 239.931576][T11211] tipc: Enabled bearer , priority 10 [ 239.943630][T11205] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2734: mark_inode_dirty error [ 240.056509][T11211] bridge0: entered promiscuous mode [ 240.061784][T11211] macsec1: entered promiscuous mode [ 240.066824][T11205] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 240.067916][T11211] bridge0: port 3(macsec1) entered blocking state [ 240.077628][T11205] EXT4-fs (loop2): 1 orphan inode deleted [ 240.083655][T11211] bridge0: port 3(macsec1) entered disabled state [ 240.083842][T11211] macsec1: entered allmulticast mode [ 240.091016][ T12] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 240.095916][T11211] bridge0: entered allmulticast mode [ 240.102051][T11205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.134525][T11211] macsec1: left allmulticast mode [ 240.139582][T11211] bridge0: left allmulticast mode [ 240.145167][T11211] bridge0: left promiscuous mode [ 240.188961][T11220] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 240.201546][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 0 [ 241.185720][ T3387] tipc: Node number set to 2886997007 [ 241.198273][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.208803][ T3303] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 241.279972][ T3303] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 241.387656][ T3303] EXT4-fs error (device loop2): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 241.502247][T11240] caif0: entered promiscuous mode [ 241.507328][T11240] caif0: entered allmulticast mode [ 241.520500][T11240] loop3: detected capacity change from 0 to 512 [ 241.527598][T11240] EXT4-fs: Ignoring removed mblk_io_submit option [ 241.537727][T11240] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 241.560115][T11240] EXT4-fs (loop3): 1 truncate cleaned up [ 241.567462][T11246] loop2: detected capacity change from 0 to 128 [ 241.569861][T11240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.613270][T11249] loop2: detected capacity change from 0 to 512 [ 241.646848][T11235] loop4: detected capacity change from 0 to 32768 [ 241.665081][T11249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.687038][T11249] ext4 filesystem being mounted at /581/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.761615][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.823417][T11255] 8021q: adding VLAN 0 to HW filter on device bond7 [ 241.831910][T11255] bridge0: port 3(bond7) entered blocking state [ 241.838248][T11255] bridge0: port 3(bond7) entered disabled state [ 241.844812][T11255] bond7: entered allmulticast mode [ 241.851239][T11255] bond7: entered promiscuous mode [ 241.857444][T11255] bridge0: port 3(bond7) entered blocking state [ 241.863732][T11255] bridge0: port 3(bond7) entered forwarding state [ 241.903109][T11260] loop2: detected capacity change from 0 to 512 [ 241.910285][T11260] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 241.921119][T11260] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.2751: corrupted in-inode xattr: overlapping e_value [ 241.959691][T11260] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2751: couldn't read orphan inode 15 (err -117) [ 241.996349][T11260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.185862][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.258611][ T29] kauditd_printk_skb: 365 callbacks suppressed [ 242.258627][ T29] audit: type=1326 audit(1758952453.288:21253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11264 comm="syz.4.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4cfd9feec9 code=0x7ffc0000 [ 242.535205][T11277] loop4: detected capacity change from 0 to 164 [ 242.549837][ T3432] bridge0: port 3(bond7) entered disabled state [ 242.573256][T11036] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.593553][T11277] Unable to read rock-ridge attributes [ 242.624594][T11277] Unable to read rock-ridge attributes [ 242.633270][T11277] 9pnet_fd: Insufficient options for proto=fd [ 242.661766][T11281] audit: audit_backlog=65 > audit_backlog_limit=64 [ 242.668462][T11281] audit: audit_lost=9 audit_rate_limit=0 audit_backlog_limit=64 [ 242.676090][T11281] audit: backlog limit exceeded [ 242.682944][ T29] audit: type=1326 audit(1758952453.288:21254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11264 comm="syz.4.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4cfd9feec9 code=0x7ffc0000 [ 242.707189][ T29] audit: type=1326 audit(1758952453.344:21255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.1.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b710eec9 code=0x7ffc0000 [ 242.707439][T11281] pimreg: entered allmulticast mode [ 242.730929][ T29] audit: type=1326 audit(1758952453.344:21256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.1.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b710eec9 code=0x7ffc0000 [ 242.730970][ T29] audit: type=1326 audit(1758952453.353:21257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.1.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51b710eec9 code=0x7ffc0000 [ 242.738492][T11283] pimreg: left allmulticast mode [ 242.760652][ T29] audit: type=1326 audit(1758952453.353:21258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.1.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b710eec9 code=0x7ffc0000 [ 242.812914][ T29] audit: type=1326 audit(1758952453.353:21259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.1.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b710eec9 code=0x7ffc0000 [ 242.862891][T11287] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 242.868962][T11287] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 242.874969][T11287] syzkaller1: ignored: set checksum enabled [ 243.200214][T11308] loop2: detected capacity change from 0 to 128 [ 243.227270][T11308] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 243.244340][T11308] ext4 filesystem being mounted at /585/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.319359][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 243.541639][T11320] can0: slcan on ttyS3. [ 243.550155][T11321] lo speed is unknown, defaulting to 1000 [ 243.695934][T11329] loop2: detected capacity change from 0 to 764 [ 243.708672][T11329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2774'. [ 243.799528][T11284] can0 (unregistered): slcan off ttyS3. [ 243.904608][T11341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2779'. [ 243.904758][T11333] loop2: detected capacity change from 0 to 32768 [ 244.028516][T11347] IPv6: NLM_F_CREATE should be specified when creating new route [ 244.047287][T11347] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.054620][T11347] IPv6: NLM_F_CREATE should be set when creating new route [ 244.062165][T11347] FAULT_INJECTION: forcing a failure. [ 244.062165][T11347] name failslab, interval 1, probability 0, space 0, times 0 [ 244.074831][T11347] CPU: 0 UID: 0 PID: 11347 Comm: syz.3.2783 Not tainted syzkaller #0 PREEMPT(voluntary) [ 244.074863][T11347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 244.074881][T11347] Call Trace: [ 244.074886][T11347] [ 244.074893][T11347] __dump_stack+0x1d/0x30 [ 244.074974][T11347] dump_stack_lvl+0xe8/0x140 [ 244.075009][T11347] dump_stack+0x15/0x1b [ 244.075026][T11347] should_fail_ex+0x265/0x280 [ 244.075051][T11347] ? nsim_fib_event_nb+0x1a0/0xcb0 [ 244.075077][T11347] should_failslab+0x8c/0xb0 [ 244.075108][T11347] __kmalloc_cache_noprof+0x4c/0x320 [ 244.075141][T11347] nsim_fib_event_nb+0x1a0/0xcb0 [ 244.075167][T11347] ? vprintk+0x1d/0x30 [ 244.075192][T11347] ? fib6_add_1+0x97e/0xa80 [ 244.075284][T11347] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 244.075311][T11347] atomic_notifier_call_chain+0x73/0x1c0 [ 244.075348][T11347] call_fib_notifiers+0x65/0xa0 [ 244.075396][T11347] call_fib6_notifiers+0x30/0x40 [ 244.075490][T11347] call_fib6_multipath_entry_notifiers+0x94/0xc0 [ 244.075576][T11347] inet6_rtm_newroute+0xaf1/0x1020 [ 244.075701][T11347] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 244.075738][T11347] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 244.075772][T11347] netlink_rcv_skb+0x123/0x220 [ 244.075794][T11347] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 244.075899][T11347] rtnetlink_rcv+0x1c/0x30 [ 244.075926][T11347] netlink_unicast+0x5bd/0x690 [ 244.076024][T11347] netlink_sendmsg+0x58b/0x6b0 [ 244.076051][T11347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.076075][T11347] __sock_sendmsg+0x145/0x180 [ 244.076140][T11347] ____sys_sendmsg+0x31e/0x4e0 [ 244.076179][T11347] ___sys_sendmsg+0x17b/0x1d0 [ 244.076257][T11347] __x64_sys_sendmsg+0xd4/0x160 [ 244.076284][T11347] x64_sys_call+0x191e/0x2ff0 [ 244.076349][T11347] do_syscall_64+0xd2/0x200 [ 244.076376][T11347] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 244.076398][T11347] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 244.076517][T11347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.076536][T11347] RIP: 0033:0x7ff8ea6eeec9 [ 244.076550][T11347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.076566][T11347] RSP: 002b:00007ff8e914f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.076584][T11347] RAX: ffffffffffffffda RBX: 00007ff8ea945fa0 RCX: 00007ff8ea6eeec9 [ 244.076595][T11347] RDX: 0000000020040844 RSI: 0000200000000340 RDI: 0000000000000006 [ 244.076607][T11347] RBP: 00007ff8e914f090 R08: 0000000000000000 R09: 0000000000000000 [ 244.076681][T11347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.076745][T11347] R13: 00007ff8ea946038 R14: 00007ff8ea945fa0 R15: 00007ffe0ae02968 [ 244.076782][T11347] [ 244.352768][T11352] loop4: detected capacity change from 0 to 164 [ 244.366429][T11352] Unable to read rock-ridge attributes [ 244.372489][T11353] loop2: detected capacity change from 0 to 512 [ 244.381205][T11353] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 244.391029][T11352] Unable to read rock-ridge attributes [ 244.396837][T11352] 9pnet_fd: Insufficient options for proto=fd [ 244.412402][T11355] netlink: 'syz.0.2786': attribute type 4 has an invalid length. [ 244.439362][T11355] netlink: 'syz.0.2786': attribute type 4 has an invalid length. [ 244.442751][T11360] loop3: detected capacity change from 0 to 1024 [ 244.459098][T11360] EXT4-fs: Ignoring removed bh option [ 244.460450][T11355] 9pnet_fd: Insufficient options for proto=fd [ 244.464679][T11360] EXT4-fs: inline encryption not supported [ 244.465582][T11360] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 244.472175][T11353] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.2785: iget: bad i_size value: 360287970189639680 [ 244.517792][T11360] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 244.550735][T11353] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2785: couldn't read orphan inode 15 (err -117) [ 244.564661][T11360] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.2787: lblock 2 mapped to illegal pblock 2 (length 1) [ 244.590689][T11360] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.2787: lblock 0 mapped to illegal pblock 48 (length 1) [ 244.607167][T11360] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2787: Failed to acquire dquot type 0 [ 244.607749][T11353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.631745][T11360] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 244.642478][T11360] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.2787: mark_inode_dirty error [ 244.657009][T11353] EXT4-fs error (device loop2): ext4_empty_dir:3086: inode #12: block 13: comm syz.2.2785: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=1 [ 244.676847][T11353] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #12: comm syz.2.2785: directory missing '.' [ 244.688709][T11360] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 244.720903][T11360] EXT4-fs (loop3): 1 orphan inode deleted [ 244.727260][T11360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.740034][ T52] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 244.770561][ T52] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 244.796362][T11036] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.818582][T11036] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 244.844723][T11036] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 244.863956][T11036] EXT4-fs error (device loop3): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 244.902347][T11372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2790'. [ 245.179499][T11376] loop3: detected capacity change from 0 to 32768 [ 245.437491][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.471750][T11385] program syz.2.2796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.510735][T11389] loop0: detected capacity change from 0 to 512 [ 245.521995][T11389] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.2798: missing EA_INODE flag [ 245.540328][T11389] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.2798: error while reading EA inode 11 err=-117 [ 245.560243][T11389] EXT4-fs (loop0): 1 orphan inode deleted [ 245.568401][T11389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.586157][T11397] loop3: detected capacity change from 0 to 512 [ 245.599527][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.601159][T11399] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2802'. [ 245.886803][T11412] loop1: detected capacity change from 0 to 2048 [ 245.910100][T11412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.986456][T11412] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 246.085036][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.638803][T11449] team_slave_0: entered promiscuous mode [ 246.646204][T11449] ipvlan0: entered promiscuous mode [ 246.652163][T11449] ipvlan0: left promiscuous mode [ 246.666702][T11449] team_slave_0: left promiscuous mode [ 246.686467][T11454] loop4: detected capacity change from 0 to 512 [ 246.694699][T11454] EXT4-fs: Ignoring removed mblk_io_submit option [ 246.703921][T11456] vhci_hcd: default hub control req: 8001 v0000 i0003 l14 [ 246.710771][T11454] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 246.724050][T11454] EXT4-fs (loop4): 1 truncate cleaned up [ 246.730764][T11454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.769487][T11450] lo speed is unknown, defaulting to 1000 [ 246.825876][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.884944][T11450] chnl_net:caif_netlink_parms(): no params data found [ 246.906821][ T3374] kernel write not supported for file /1353/attr/prev (pid: 3374 comm: kworker/0:3) [ 246.919579][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.003652][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.035066][T11450] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.043056][T11450] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.148962][T11450] bridge_slave_0: entered allmulticast mode [ 247.308568][T11450] bridge_slave_0: entered promiscuous mode [ 247.383616][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.414555][T11450] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.421681][T11450] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.532883][T11450] bridge_slave_1: entered allmulticast mode [ 247.539748][T11450] bridge_slave_1: entered promiscuous mode [ 247.584157][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.604617][T11450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.624730][T11450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.657207][T11450] team0: Port device team_slave_0 added [ 247.666644][T11450] team0: Port device team_slave_1 added [ 247.695219][T11450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.702253][T11450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.728193][T11450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.743896][T11487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2819'. [ 247.766751][T11450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.773793][T11450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.799983][T11450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.817148][T11489] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2820'. [ 247.930347][ T52] bond7: left allmulticast mode [ 247.935356][ T52] bond7: left promiscuous mode [ 247.940241][ T52] bridge0: port 3(bond7) entered disabled state [ 247.955553][ T52] bridge_slave_1: left allmulticast mode [ 247.961273][ T52] bridge_slave_1: left promiscuous mode [ 247.963609][ T29] kauditd_printk_skb: 421 callbacks suppressed [ 247.963626][ T29] audit: type=1400 audit(1758952458.630:21678): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 247.967136][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.973107][ T29] audit: type=1400 audit(1758952458.630:21679): avc: denied { open } for pid=3302 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.038471][ T29] audit: type=1400 audit(1758952458.667:21680): avc: denied { ioctl } for pid=3302 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.070046][T11498] loop4: detected capacity change from 0 to 512 [ 248.083603][T11499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2823'. [ 248.096994][ T29] audit: type=1400 audit(1758952458.742:21681): avc: denied { read } for pid=11497 comm="syz.0.2823" dev="nsfs" ino=4026532851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 248.118387][ T29] audit: type=1400 audit(1758952458.742:21682): avc: denied { open } for pid=11497 comm="syz.0.2823" path="net:[4026532851]" dev="nsfs" ino=4026532851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 248.122792][T11501] loop1: detected capacity change from 0 to 164 [ 248.141813][ T29] audit: type=1400 audit(1758952458.742:21683): avc: denied { create } for pid=11497 comm="syz.0.2823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.141847][ T29] audit: type=1400 audit(1758952458.742:21684): avc: denied { write } for pid=11497 comm="syz.0.2823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.150108][T11498] EXT4-fs: Ignoring removed mblk_io_submit option [ 248.169645][ T29] audit: type=1400 audit(1758952458.742:21685): avc: denied { read } for pid=11497 comm="syz.0.2823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.196027][T11501] Unable to read rock-ridge attributes [ 248.217110][ T29] audit: type=1400 audit(1758952458.742:21686): avc: denied { prog_load } for pid=11497 comm="syz.0.2823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 248.224683][T11498] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 248.241095][ T29] audit: type=1400 audit(1758952458.742:21687): avc: denied { bpf } for pid=11497 comm="syz.0.2823" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 248.261128][T11501] Unable to read rock-ridge attributes [ 248.278635][ T52] bridge_slave_0: left allmulticast mode [ 248.284313][ T52] bridge_slave_0: left promiscuous mode [ 248.290274][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.300225][T11498] EXT4-fs (loop4): 1 truncate cleaned up [ 248.306432][T11498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.320516][T11501] 9pnet_fd: Insufficient options for proto=fd [ 248.414970][ T3374] kernel write not supported for file /1415/attr/prev (pid: 3374 comm: kworker/0:3) [ 249.179541][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.190760][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.202239][ T52] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 249.212073][ T52] bond0 (unregistering): Released all slaves [ 249.222911][ T52] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 249.231723][ T52] wireguard0: left promiscuous mode [ 249.238353][ T52] bond1 (unregistering): (slave wireguard1): Releasing backup interface [ 249.252847][ T52] bond1 (unregistering): Released all slaves [ 249.264395][ T52] bond2 (unregistering): (slave wireguard2): Releasing backup interface [ 249.273729][ T52] wireguard2: left promiscuous mode [ 249.280176][ T52] bond2 (unregistering): (slave wireguard3): Releasing backup interface [ 249.290233][ T52] bond2 (unregistering): Released all slaves [ 249.299473][ T52] bond3 (unregistering): (slave wireguard4): Releasing backup interface [ 249.307946][ T52] wireguard4: left promiscuous mode [ 249.314059][ T52] bond3 (unregistering): (slave wireguard5): Releasing backup interface [ 249.323511][ T52] bond3 (unregistering): Released all slaves [ 249.333533][ T52] bond4 (unregistering): (slave wireguard6): Releasing backup interface [ 249.341976][ T52] wireguard6: left promiscuous mode [ 249.348318][ T52] bond4 (unregistering): Released all slaves [ 249.357103][ T52] bond5 (unregistering): Released all slaves [ 249.366206][ T52] bond6 (unregistering): Released all slaves [ 249.375275][ T52] bond7 (unregistering): Released all slaves [ 249.393442][T11450] hsr_slave_0: entered promiscuous mode [ 249.399895][T11450] hsr_slave_1: entered promiscuous mode [ 249.406676][T11450] debugfs: 'hsr0' already exists in 'hsr' [ 249.408092][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.412598][T11450] Cannot create hsr debugfs directory [ 249.439217][T11521] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 249.447564][T11521] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 249.470055][T11530] loop1: detected capacity change from 0 to 512 [ 249.472442][T11528] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2833'. [ 249.488030][ T52] hsr_slave_0: left promiscuous mode [ 249.494072][ T52] hsr_slave_1: left promiscuous mode [ 249.500015][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.507483][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.517582][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.525116][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.534319][T11530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.546902][T11530] ext4 filesystem being mounted at /545/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.561158][ T52] veth1_macvtap: left promiscuous mode [ 249.566659][ T52] veth0_macvtap: left promiscuous mode [ 249.573646][ T52] veth1_vlan: left promiscuous mode [ 249.578968][ T52] veth0_vlan: left promiscuous mode [ 249.605385][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.733167][ T52] team0 (unregistering): Port device team_slave_1 removed [ 249.738177][T11539] program syz.1.2836 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.755872][ T52] team0 (unregistering): Port device team_slave_0 removed [ 249.815571][ T3401] infiniband syz0: ib_query_port failed (-19) [ 249.857180][ T3387] kernel write not supported for file /64/attr/prev (pid: 3387 comm: kworker/0:4) [ 249.984333][T11549] loop0: detected capacity change from 0 to 256 [ 250.051942][T11554] program syz.1.2842 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.133000][T11558] loop1: detected capacity change from 0 to 512 [ 250.169068][T11558] EXT4-fs: Ignoring removed oldalloc option [ 250.176654][T11558] EXT4-fs (loop1): bad geometry: block count 1792 exceeds size of device (256 blocks) [ 250.209727][T11560] loop0: detected capacity change from 0 to 512 [ 250.226801][T11560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.241473][T11560] ext4 filesystem being mounted at /528/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.275732][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.360623][T11450] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 250.370955][T11450] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 250.380116][T11450] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 250.391603][T11450] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 250.435500][T11558] pimreg: entered allmulticast mode [ 250.459187][T11558] loop1: detected capacity change from 0 to 1024 [ 250.469061][T11558] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 250.480600][T11558] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 250.492382][T11558] JBD2: no valid journal superblock found [ 250.498144][T11558] EXT4-fs (loop1): Could not load journal inode [ 250.501922][T11450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.523760][T11450] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.535855][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.542994][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.559627][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.566747][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.638912][T11450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.713121][T11591] loop3: detected capacity change from 0 to 128 [ 250.721740][T11591] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 250.731655][T11450] veth0_vlan: entered promiscuous mode [ 250.736690][T11591] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.743041][T11450] veth1_vlan: entered promiscuous mode [ 250.765706][T11450] veth0_macvtap: entered promiscuous mode [ 250.773481][T11450] veth1_macvtap: entered promiscuous mode [ 250.773686][T11036] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 250.784592][T11450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.814549][T11450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.829474][ T321] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.845239][ T321] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.856406][ T52] IPVS: stop unused estimator thread 0... [ 250.858422][ T321] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.874578][T11598] vhci_hcd: invalid port number 12 [ 250.893408][T11598] loop0: detected capacity change from 0 to 512 [ 250.904185][ T321] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.935922][T11598] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.2852: bad orphan inode 11862016 [ 250.947204][T11598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 250.959919][T11598] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.977811][T11606] FAULT_INJECTION: forcing a failure. [ 250.977811][T11606] name failslab, interval 1, probability 0, space 0, times 0 [ 250.981403][T11598] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 250.990590][T11606] CPU: 0 UID: 0 PID: 11606 Comm: syz.2.2809 Not tainted syzkaller #0 PREEMPT(voluntary) [ 250.990621][T11606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 250.990637][T11606] Call Trace: [ 250.990695][T11606] [ 250.990706][T11606] __dump_stack+0x1d/0x30 [ 250.990736][T11606] dump_stack_lvl+0xe8/0x140 [ 250.990765][T11606] dump_stack+0x15/0x1b [ 250.990788][T11606] should_fail_ex+0x265/0x280 [ 250.990870][T11606] should_failslab+0x8c/0xb0 [ 250.990982][T11606] kmem_cache_alloc_noprof+0x50/0x310 [ 250.991018][T11606] ? getname_kernel+0x3c/0x1f0 [ 250.991084][T11606] ? should_fail_ex+0xdb/0x280 [ 250.991117][T11606] getname_kernel+0x3c/0x1f0 [ 250.991163][T11606] kern_path_create+0x25/0x130 [ 250.991202][T11606] unix_bind+0x1fd/0x920 [ 250.991309][T11606] __sys_bind+0x1ce/0x2a0 [ 250.991361][T11606] __x64_sys_bind+0x3f/0x50 [ 250.991404][T11606] x64_sys_call+0x2b6e/0x2ff0 [ 250.991432][T11606] do_syscall_64+0xd2/0x200 [ 250.991480][T11606] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 250.991511][T11606] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 250.991550][T11606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.991578][T11606] RIP: 0033:0x7f9e5c3aeec9 [ 250.991602][T11606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.991627][T11606] RSP: 002b:00007f9e5ae17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 250.991653][T11606] RAX: ffffffffffffffda RBX: 00007f9e5c605fa0 RCX: 00007f9e5c3aeec9 [ 250.991670][T11606] RDX: 000000000000006e RSI: 0000200000000080 RDI: 0000000000000004 [ 250.991687][T11606] RBP: 00007f9e5ae17090 R08: 0000000000000000 R09: 0000000000000000 [ 250.991705][T11606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.991722][T11606] R13: 00007f9e5c606038 R14: 00007f9e5c605fa0 R15: 00007ffeddf75c18 [ 250.991749][T11606] [ 251.024162][T11608] loop2: detected capacity change from 0 to 512 [ 251.200460][T11608] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 251.211753][T11608] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2854: Invalid block bitmap block 0 in block_group 0 [ 251.225876][T11608] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 251.234816][T11608] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.2854: attempt to clear invalid blocks 983261 len 1 [ 251.249077][T11608] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.2854: Invalid inode table block 0 in block_group 0 [ 251.262043][T11608] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 251.273682][T11608] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 251.283324][T11608] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.2854: Invalid inode table block 0 in block_group 0 [ 251.296353][T11608] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 251.303835][T11612] loop0: detected capacity change from 0 to 512 [ 251.306271][T11608] EXT4-fs error (device loop2): ext4_truncate:4666: inode #11: comm syz.2.2854: mark_inode_dirty error [ 251.323301][T11608] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 251.332655][T11608] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.2854: Invalid inode table block 0 in block_group 0 [ 251.335457][T11612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.347203][T11608] EXT4-fs (loop2): 1 truncate cleaned up [ 251.360251][T11612] ext4 filesystem being mounted at /532/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.364333][T11608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.392743][T11608] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.2854: Invalid inode table block 0 in block_group 0 [ 251.406556][T11608] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 251.416253][T11608] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.2854: mark_inode_dirty error [ 251.429365][T11608] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.2854: Invalid inode table block 0 in block_group 0 [ 251.446295][ T36] kernel write not supported for file /1392/attr/prev (pid: 36 comm: kworker/1:1) [ 251.503356][T11617] syzkaller1: entered promiscuous mode [ 251.508943][T11617] syzkaller1: entered allmulticast mode [ 251.589607][T11620] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2854: Invalid inode bitmap blk 0 in block_group 0 [ 252.017582][T11624] loop0: detected capacity change from 0 to 512 [ 252.024107][T11626] loop3: detected capacity change from 0 to 512 [ 252.031767][T11624] EXT4-fs: Ignoring removed mblk_io_submit option [ 252.031918][T11626] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.038524][T11624] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 252.060748][T11624] EXT4-fs (loop0): 1 truncate cleaned up [ 252.253865][T11631] program syz.3.2860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.351663][T11635] netlink: 'syz.3.2861': attribute type 4 has an invalid length. [ 252.363485][T11635] netlink: 'syz.3.2861': attribute type 4 has an invalid length. [ 252.428333][T11643] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 252.990638][T11653] program syz.0.2868 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.022720][T11655] loop0: detected capacity change from 0 to 512 [ 253.038228][T11655] ext4 filesystem being mounted at /537/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.181689][T11662] 9pnet_fd: Insufficient options for proto=fd [ 253.290623][T11665] program syz.0.2872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.313369][ T29] kauditd_printk_skb: 712 callbacks suppressed [ 253.313456][ T29] audit: type=1326 audit(1758952463.635:22400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11663 comm="syz.0.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe088b31785 code=0x7ffc0000 [ 253.314679][ T29] audit: type=1326 audit(1758952463.635:22401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11663 comm="syz.0.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe088b31785 code=0x7ffc0000 [ 253.368258][ T29] audit: type=1326 audit(1758952463.691:22402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11663 comm="syz.0.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe088b31785 code=0x7ffc0000 [ 253.408245][ T29] audit: type=1326 audit(1758952463.709:22403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11663 comm="syz.0.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe088b31785 code=0x7ffc0000 [ 253.408355][ T29] audit: type=1326 audit(1758952463.719:22404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11663 comm="syz.0.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088afeec9 code=0x7ffc0000 [ 253.408456][ T29] audit: type=1326 audit(1758952463.719:22405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11663 comm="syz.0.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088afeec9 code=0x7ffc0000 [ 253.444345][ T29] audit: type=1326 audit(1758952463.756:22406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11663 comm="syz.0.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe088afeec9 code=0x7ffc0000 [ 253.524156][T11669] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 253.532506][T11669] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 253.544988][T11672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2875'. [ 253.584829][ T31] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm kworker/u8:1: Invalid inode table block 0 in block_group 0 [ 253.612534][T11676] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.2878'. [ 253.634652][ T29] audit: type=1326 audit(1758952463.934:22407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11663 comm="syz.0.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe088afeec9 code=0x7ffc0000 [ 253.667060][T11679] program syz.3.2879 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.756706][ T29] audit: type=1326 audit(1758952464.046:22408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11687 comm="syz.3.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ea6eeec9 code=0x7ffc0000 [ 253.786747][T11689] loop3: detected capacity change from 0 to 512 [ 253.788417][ T29] audit: type=1326 audit(1758952464.046:22409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11687 comm="syz.3.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ea6eeec9 code=0x7ffc0000 [ 253.805232][T11689] EXT4-fs: Ignoring removed oldalloc option [ 253.840015][T11689] EXT4-fs (loop3): bad geometry: block count 1792 exceeds size of device (256 blocks) [ 253.854243][T11695] loop0: detected capacity change from 0 to 512 [ 253.860989][T11695] EXT4-fs: Ignoring removed mblk_io_submit option [ 253.865375][T11689] pimreg: entered allmulticast mode [ 253.874521][T11695] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 253.884163][T11689] loop3: detected capacity change from 0 to 1024 [ 253.899620][T11689] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 253.910686][T11689] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 253.922205][T11695] EXT4-fs (loop0): 1 truncate cleaned up [ 253.933573][T11689] JBD2: no valid journal superblock found [ 253.939328][T11689] EXT4-fs (loop3): Could not load journal inode [ 254.078380][T11700] loop1: detected capacity change from 0 to 32768 [ 254.291944][T11706] loop1: detected capacity change from 0 to 1024 [ 254.299553][T11706] EXT4-fs: Ignoring removed bh option [ 254.305157][T11706] EXT4-fs: inline encryption not supported [ 254.312415][T11706] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 254.325076][T11706] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 254.336127][T11706] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.2890: lblock 2 mapped to illegal pblock 2 (length 1) [ 254.351181][T11706] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.2890: lblock 0 mapped to illegal pblock 48 (length 1) [ 254.366341][T11706] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.2890: Failed to acquire dquot type 0 [ 254.378066][T11706] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 254.388030][T11706] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.2890: mark_inode_dirty error [ 254.400340][T11706] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 254.410618][T11706] EXT4-fs (loop1): 1 orphan inode deleted [ 254.425129][ T321] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 254.448291][ T321] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 254.463287][ T3299] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 254.476402][ T3299] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 254.486226][ T3299] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 254.571377][T11713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2893'. [ 254.593759][T11713] 8021q: adding VLAN 0 to HW filter on device bond9 [ 254.654790][T11717] program syz.2.2894 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.842168][T11726] loop1: detected capacity change from 0 to 512 [ 254.853972][T11726] EXT4-fs: Ignoring removed mblk_io_submit option [ 254.862263][T11726] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 254.883308][T11726] EXT4-fs (loop1): 1 truncate cleaned up [ 254.893889][T11731] FAULT_INJECTION: forcing a failure. [ 254.893889][T11731] name failslab, interval 1, probability 0, space 0, times 0 [ 254.906598][T11731] CPU: 1 UID: 0 PID: 11731 Comm: syz.2.2899 Not tainted syzkaller #0 PREEMPT(voluntary) [ 254.906628][T11731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 254.906709][T11731] Call Trace: [ 254.906715][T11731] [ 254.906721][T11731] __dump_stack+0x1d/0x30 [ 254.906745][T11731] dump_stack_lvl+0xe8/0x140 [ 254.906769][T11731] dump_stack+0x15/0x1b [ 254.906789][T11731] should_fail_ex+0x265/0x280 [ 254.906818][T11731] should_failslab+0x8c/0xb0 [ 254.906937][T11731] __kmalloc_noprof+0xa5/0x3e0 [ 254.906969][T11731] ? kobject_get_path+0x92/0x1c0 [ 254.907049][T11731] kobject_get_path+0x92/0x1c0 [ 254.907074][T11731] input_devices_seq_show+0x36/0x470 [ 254.907121][T11731] seq_read_iter+0x62a/0x940 [ 254.907237][T11731] seq_read+0x270/0x2b0 [ 254.907277][T11731] ? __pfx_seq_read+0x10/0x10 [ 254.907326][T11731] proc_reg_read+0x125/0x1c0 [ 254.907377][T11731] ? __pfx_proc_reg_read+0x10/0x10 [ 254.907407][T11731] vfs_readv+0x3f8/0x690 [ 254.907462][T11731] __x64_sys_preadv+0xfd/0x1c0 [ 254.907567][T11731] x64_sys_call+0x282a/0x2ff0 [ 254.907591][T11731] do_syscall_64+0xd2/0x200 [ 254.907651][T11731] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 254.907679][T11731] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 254.907711][T11731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.907739][T11731] RIP: 0033:0x7f9e5c3aeec9 [ 254.907822][T11731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.907915][T11731] RSP: 002b:00007f9e5ae17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 254.907938][T11731] RAX: ffffffffffffffda RBX: 00007f9e5c605fa0 RCX: 00007f9e5c3aeec9 [ 254.907954][T11731] RDX: 0000000000000001 RSI: 00002000000015c0 RDI: 0000000000000003 [ 254.907970][T11731] RBP: 00007f9e5ae17090 R08: 000000000000d215 R09: 0000000000000000 [ 254.907985][T11731] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 254.907999][T11731] R13: 00007f9e5c606038 R14: 00007f9e5c605fa0 R15: 00007ffeddf75c18 [ 254.908050][T11731] [ 254.929305][T11733] loop4: detected capacity change from 0 to 164 [ 255.139197][T11733] Unable to read rock-ridge attributes [ 255.149627][T11733] Unable to read rock-ridge attributes [ 255.157964][T11733] 9pnet_fd: Insufficient options for proto=fd [ 255.228041][T11746] caif0: entered promiscuous mode [ 255.233128][T11746] caif0: entered allmulticast mode [ 255.241883][T11746] loop2: detected capacity change from 0 to 512 [ 255.248636][T11746] EXT4-fs: Ignoring removed mblk_io_submit option [ 255.256019][T11746] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 255.267573][T11746] EXT4-fs (loop2): 1 truncate cleaned up [ 255.798477][T11751] program syz.1.2907 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.833525][T11753] FAULT_INJECTION: forcing a failure. [ 255.833525][T11753] name failslab, interval 1, probability 0, space 0, times 0 [ 255.846255][T11753] CPU: 1 UID: 0 PID: 11753 Comm: syz.1.2908 Not tainted syzkaller #0 PREEMPT(voluntary) [ 255.846288][T11753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 255.846303][T11753] Call Trace: [ 255.846335][T11753] [ 255.846343][T11753] __dump_stack+0x1d/0x30 [ 255.846385][T11753] dump_stack_lvl+0xe8/0x140 [ 255.846402][T11753] dump_stack+0x15/0x1b [ 255.846415][T11753] should_fail_ex+0x265/0x280 [ 255.846436][T11753] should_failslab+0x8c/0xb0 [ 255.846540][T11753] __kmalloc_noprof+0xa5/0x3e0 [ 255.846565][T11753] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 255.846617][T11753] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 255.846652][T11753] ? __kfree_skb+0x109/0x150 [ 255.846672][T11753] genl_start+0xe0/0x390 [ 255.846703][T11753] __netlink_dump_start+0x334/0x520 [ 255.846759][T11753] genl_family_rcv_msg_dumpit+0x115/0x180 [ 255.846785][T11753] ? __pfx_genl_start+0x10/0x10 [ 255.846808][T11753] ? __pfx_genl_dumpit+0x10/0x10 [ 255.846850][T11753] ? __pfx_genl_done+0x10/0x10 [ 255.846877][T11753] genl_rcv_msg+0x3f0/0x460 [ 255.846901][T11753] ? __pfx_ctrl_dumppolicy_start+0x10/0x10 [ 255.846973][T11753] ? __pfx_ctrl_dumppolicy+0x10/0x10 [ 255.846996][T11753] ? __pfx_ctrl_dumppolicy_done+0x10/0x10 [ 255.847022][T11753] netlink_rcv_skb+0x123/0x220 [ 255.847071][T11753] ? __pfx_genl_rcv_msg+0x10/0x10 [ 255.847117][T11753] genl_rcv+0x28/0x40 [ 255.847145][T11753] netlink_unicast+0x5bd/0x690 [ 255.847164][T11753] netlink_sendmsg+0x58b/0x6b0 [ 255.847239][T11753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.847302][T11753] __sock_sendmsg+0x145/0x180 [ 255.847329][T11753] ____sys_sendmsg+0x31e/0x4e0 [ 255.847415][T11753] ___sys_sendmsg+0x17b/0x1d0 [ 255.847479][T11753] __x64_sys_sendmsg+0xd4/0x160 [ 255.847505][T11753] x64_sys_call+0x191e/0x2ff0 [ 255.847529][T11753] do_syscall_64+0xd2/0x200 [ 255.847556][T11753] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 255.847668][T11753] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 255.847727][T11753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.847746][T11753] RIP: 0033:0x7f51b710eec9 [ 255.847840][T11753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.847856][T11753] RSP: 002b:00007f51b5b6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.847873][T11753] RAX: ffffffffffffffda RBX: 00007f51b7365fa0 RCX: 00007f51b710eec9 [ 255.847884][T11753] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 255.847895][T11753] RBP: 00007f51b5b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 255.847906][T11753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.847917][T11753] R13: 00007f51b7366038 R14: 00007f51b7365fa0 R15: 00007ffd5acdf858 [ 255.847934][T11753] [ 256.163804][T11757] program syz.4.2910 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.218062][T11767] loop1: detected capacity change from 0 to 164 [ 256.232124][T11767] Unable to read rock-ridge attributes [ 256.246736][T11767] Unable to read rock-ridge attributes [ 256.261904][T11761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2913'. [ 256.263704][T11767] 9pnet_fd: Insufficient options for proto=fd [ 256.272658][T11761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11761 comm=syz.4.2913 [ 256.340889][T11775] program syz.1.2918 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.375508][T11782] FAULT_INJECTION: forcing a failure. [ 256.375508][T11782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.388659][T11782] CPU: 0 UID: 0 PID: 11782 Comm: syz.1.2921 Not tainted syzkaller #0 PREEMPT(voluntary) [ 256.388684][T11782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 256.388743][T11782] Call Trace: [ 256.388751][T11782] [ 256.388760][T11782] __dump_stack+0x1d/0x30 [ 256.388784][T11782] dump_stack_lvl+0xe8/0x140 [ 256.388807][T11782] dump_stack+0x15/0x1b [ 256.388822][T11782] should_fail_ex+0x265/0x280 [ 256.388844][T11782] should_fail+0xb/0x20 [ 256.388915][T11782] should_fail_usercopy+0x1a/0x20 [ 256.388937][T11782] _copy_from_user+0x1c/0xb0 [ 256.389049][T11782] do_tcp_getsockopt+0xc8/0x1af0 [ 256.389090][T11782] ? _parse_integer_limit+0x170/0x190 [ 256.389137][T11782] ? _parse_integer+0x27/0x40 [ 256.389182][T11782] ? __rcu_read_unlock+0x4f/0x70 [ 256.389251][T11782] ? avc_has_perm_noaudit+0x1b1/0x200 [ 256.389285][T11782] ? avc_has_perm+0xf7/0x180 [ 256.389315][T11782] tcp_getsockopt+0x6e/0xe0 [ 256.389345][T11782] sock_common_getsockopt+0x5d/0x70 [ 256.389431][T11782] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 256.389468][T11782] do_sock_getsockopt+0x1fd/0x240 [ 256.389502][T11782] __x64_sys_getsockopt+0x11e/0x1a0 [ 256.389529][T11782] x64_sys_call+0x2bc6/0x2ff0 [ 256.389575][T11782] do_syscall_64+0xd2/0x200 [ 256.389610][T11782] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 256.389638][T11782] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 256.389669][T11782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.389709][T11782] RIP: 0033:0x7f51b710eec9 [ 256.389727][T11782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.389745][T11782] RSP: 002b:00007f51b5b6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 256.389762][T11782] RAX: ffffffffffffffda RBX: 00007f51b7365fa0 RCX: 00007f51b710eec9 [ 256.389775][T11782] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000003 [ 256.389786][T11782] RBP: 00007f51b5b6f090 R08: 0000200000000540 R09: 0000000000000000 [ 256.389850][T11782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.389865][T11782] R13: 00007f51b7366038 R14: 00007f51b7365fa0 R15: 00007ffd5acdf858 [ 256.389887][T11782] [ 256.630012][T11787] program syz.1.2923 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.682826][T11791] loop1: detected capacity change from 0 to 512 [ 256.689523][T11791] EXT4-fs: Ignoring removed mblk_io_submit option [ 256.696451][T11791] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 256.709605][T11791] EXT4-fs (loop1): 1 truncate cleaned up [ 256.904641][T11796] netlink: 'syz.4.2926': attribute type 1 has an invalid length. [ 256.912413][T11796] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2926'. [ 257.046173][T11802] loop3: detected capacity change from 0 to 164 [ 257.054170][T11802] Unable to read rock-ridge attributes [ 257.061472][T11802] Unable to read rock-ridge attributes [ 257.067681][T11802] 9pnet_fd: Insufficient options for proto=fd [ 257.249726][T11804] netlink: 'syz.3.2930': attribute type 1 has an invalid length. [ 257.257527][T11804] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2930'. [ 257.295968][T11810] program syz.2.2932 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.354443][T11814] program syz.4.2934 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.462966][T11818] loop2: detected capacity change from 0 to 164 [ 257.473387][T11820] loop3: detected capacity change from 0 to 512 [ 257.478347][T11822] loop4: detected capacity change from 0 to 128 [ 257.493556][T11820] EXT4-fs: Ignoring removed oldalloc option [ 257.501921][T11818] Unable to read rock-ridge attributes [ 257.509562][T11820] EXT4-fs (loop3): bad geometry: block count 1792 exceeds size of device (256 blocks) [ 257.520581][T11818] Unable to read rock-ridge attributes [ 257.530853][T11818] 9pnet_fd: Insufficient options for proto=fd [ 257.557278][T11820] loop3: detected capacity change from 0 to 1024 [ 257.574749][T11820] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 257.585708][T11820] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 257.608265][T11826] loop2: detected capacity change from 0 to 164 [ 257.617241][T11820] JBD2: no valid journal superblock found [ 257.623025][T11820] EXT4-fs (loop3): Could not load journal inode [ 257.640061][T11826] Unable to read rock-ridge attributes [ 257.651502][T11826] Unable to read rock-ridge attributes [ 257.657231][T11830] loop1: detected capacity change from 0 to 512 [ 257.658697][T11826] 9pnet_fd: Insufficient options for proto=fd [ 257.681659][T11830] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 257.703015][T11830] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.2941: iget: bad i_size value: 360287970189639680 [ 257.716531][T11830] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2941: couldn't read orphan inode 15 (err -117) [ 257.736255][T11830] EXT4-fs error (device loop1): ext4_empty_dir:3086: inode #12: block 13: comm syz.1.2941: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=1 [ 257.757405][T11830] EXT4-fs warning (device loop1): ext4_empty_dir:3089: inode #12: comm syz.1.2941: directory missing '.' [ 257.941988][T11840] program syz.2.2945 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.007228][T11842] program syz.2.2946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.173205][T11845] program syz.2.2947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.553679][T11850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2949'. [ 258.645936][T11859] loop1: detected capacity change from 0 to 128 [ 258.650235][T11861] program syz.4.2956 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.682543][T11859] ext4 filesystem being mounted at /575/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.694998][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 258.695015][ T29] audit: type=1326 audit(1758952468.668:22741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11865 comm="syz.2.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5c3aeec9 code=0x7ffc0000 [ 258.740255][T11868] program syz.4.2957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.781131][ T29] audit: type=1326 audit(1758952468.696:22742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11865 comm="syz.2.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5c3aeec9 code=0x7ffc0000 [ 258.804796][ T29] audit: type=1326 audit(1758952468.696:22743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11865 comm="syz.2.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5c3aeec9 code=0x7ffc0000 [ 258.828382][ T29] audit: type=1326 audit(1758952468.696:22744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11865 comm="syz.2.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5c3aeec9 code=0x7ffc0000 [ 258.851981][ T29] audit: type=1326 audit(1758952468.696:22745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11865 comm="syz.2.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f9e5c3aeec9 code=0x7ffc0000 [ 258.875538][ T29] audit: type=1326 audit(1758952468.696:22746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11865 comm="syz.2.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5c3aeec9 code=0x7ffc0000 [ 258.899233][ T29] audit: type=1326 audit(1758952468.696:22747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11865 comm="syz.2.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5c3aeec9 code=0x7ffc0000 [ 258.922945][ T29] audit: type=1326 audit(1758952468.696:22748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11865 comm="syz.2.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5c3aeec9 code=0x7ffc0000 [ 258.946569][ T29] audit: type=1326 audit(1758952468.696:22749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11865 comm="syz.2.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9e5c3aeec9 code=0x7ffc0000 [ 258.970350][ T29] audit: type=1326 audit(1758952468.696:22750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11865 comm="syz.2.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5c3aeec9 code=0x7ffc0000 [ 259.077295][T11877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2961'. [ 259.121560][T11869] program syz.2.2958 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.236405][T11880] loop4: detected capacity change from 0 to 512 [ 259.253669][T11880] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 259.263230][T11880] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2962: iget: bad i_size value: 360287970189639680 [ 259.277760][T11880] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2962: couldn't read orphan inode 15 (err -117) [ 259.306391][T11880] EXT4-fs error (device loop4): ext4_empty_dir:3086: inode #12: block 13: comm syz.4.2962: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=1 [ 259.332038][T11885] loop2: detected capacity change from 0 to 512 [ 259.338720][T11885] EXT4-fs: Ignoring removed mblk_io_submit option [ 259.345881][T11885] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 259.358716][T11885] EXT4-fs (loop2): 1 truncate cleaned up [ 259.368461][T11880] EXT4-fs warning (device loop4): ext4_empty_dir:3089: inode #12: comm syz.4.2962: directory missing '.' [ 260.126602][T11894] program syz.1.2967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.182811][T11898] netlink: 'syz.4.2969': attribute type 11 has an invalid length. [ 260.190691][T11898] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2969'. [ 260.223362][T11898] ÿÿÿÿÿÿm: renamed from vlan1 (while UP) [ 260.356619][T11906] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11906 comm=syz.4.2973 [ 260.391823][T11906] openvswitch: netlink: Message has 6 unknown bytes. [ 260.479387][T11912] netlink: 'syz.2.2975': attribute type 1 has an invalid length. [ 260.492255][T11912] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2975'. [ 260.703072][T11919] program syz.3.2978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.926863][T11934] loop1: detected capacity change from 0 to 164 [ 260.937442][T11936] loop2: detected capacity change from 0 to 164 [ 260.947650][T11936] Unable to read rock-ridge attributes [ 260.972969][T11934] Unable to read rock-ridge attributes [ 260.981428][T11934] Unable to read rock-ridge attributes [ 260.982123][T11936] Unable to read rock-ridge attributes [ 260.992737][T11936] 9pnet_fd: Insufficient options for proto=fd [ 261.000815][T11934] 9pnet_fd: Insufficient options for proto=fd [ 261.074410][T11947] program syz.3.2990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.285856][T11962] netlink: 'syz.2.2996': attribute type 4 has an invalid length. [ 261.295011][T11967] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2997'. [ 261.314349][T11962] netlink: 'syz.2.2996': attribute type 4 has an invalid length. [ 261.334885][T11969] loop1: detected capacity change from 0 to 164 [ 261.354584][T11969] Unable to read rock-ridge attributes [ 261.362690][T11969] Unable to read rock-ridge attributes [ 261.368438][T11969] 9pnet_fd: Insufficient options for proto=fd [ 261.391668][T11974] loop1: detected capacity change from 0 to 164 [ 261.399691][T11974] Unable to read rock-ridge attributes [ 261.406843][T11974] Unable to read rock-ridge attributes [ 261.412563][T11974] 9pnet_fd: Insufficient options for proto=fd [ 261.513856][T11983] program syz.2.3005 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.514480][T11985] program syz.1.3002 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.609253][T11992] loop1: detected capacity change from 0 to 512 [ 261.658983][T11996] loop2: detected capacity change from 0 to 164 [ 261.667980][T11996] Unable to read rock-ridge attributes [ 261.676687][T11996] Unable to read rock-ridge attributes [ 261.682996][T11996] 9pnet_fd: Insufficient options for proto=fd [ 263.524097][T12090] netlink: 'syz.3.3054': attribute type 4 has an invalid length. [ 263.726616][T12112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3065'. [ 263.877335][T12118] netlink: 'syz.2.3067': attribute type 4 has an invalid length. [ 264.113042][ T29] kauditd_printk_skb: 551 callbacks suppressed [ 264.113060][ T29] audit: type=1400 audit(1758952473.738:23302): avc: denied { read write } for pid=12121 comm="syz.2.3069" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 264.173535][ T29] audit: type=1400 audit(1758952473.785:23303): avc: denied { prog_load } for pid=12121 comm="syz.2.3069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 264.173624][ T29] audit: type=1400 audit(1758952473.785:23304): avc: denied { prog_load } for pid=12121 comm="syz.2.3069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 264.222923][ T29] audit: type=1400 audit(1758952473.841:23305): avc: denied { create } for pid=12121 comm="syz.2.3069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 264.243935][ T29] audit: type=1400 audit(1758952473.860:23306): avc: denied { map_create } for pid=12121 comm="syz.2.3069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 264.266193][ T29] audit: type=1400 audit(1758952473.879:23307): avc: denied { create } for pid=12121 comm="syz.2.3069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 264.266230][ T29] audit: type=1400 audit(1758952473.879:23308): avc: denied { prog_load } for pid=12121 comm="syz.2.3069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 264.326510][ T29] audit: type=1400 audit(1758952473.935:23309): avc: denied { read write } for pid=11450 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 264.351087][ T29] audit: type=1400 audit(1758952473.935:23310): avc: denied { allowed } for pid=12124 comm="syz.2.3070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 264.371328][ T29] audit: type=1400 audit(1758952473.935:23311): avc: denied { read append } for pid=12124 comm="syz.2.3070" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=0 [ 264.460390][T12133] team_slave_1: entered allmulticast mode [ 264.562684][T12141] netlink: 'syz.4.3078': attribute type 4 has an invalid length. [ 264.779942][T12156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12156 comm=syz.4.3085 [ 265.470273][T12198] FAULT_INJECTION: forcing a failure. [ 265.470273][T12198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.483439][T12198] CPU: 0 UID: 0 PID: 12198 Comm: syz.4.3102 Not tainted syzkaller #0 PREEMPT(voluntary) [ 265.483474][T12198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 265.483548][T12198] Call Trace: [ 265.483555][T12198] [ 265.483564][T12198] __dump_stack+0x1d/0x30 [ 265.483591][T12198] dump_stack_lvl+0xe8/0x140 [ 265.483615][T12198] dump_stack+0x15/0x1b [ 265.483697][T12198] should_fail_ex+0x265/0x280 [ 265.483720][T12198] should_fail+0xb/0x20 [ 265.483782][T12198] should_fail_usercopy+0x1a/0x20 [ 265.483809][T12198] _copy_to_user+0x20/0xa0 [ 265.483909][T12198] simple_read_from_buffer+0xb5/0x130 [ 265.483939][T12198] proc_fail_nth_read+0x10e/0x150 [ 265.483974][T12198] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.484078][T12198] vfs_read+0x1a5/0x770 [ 265.484098][T12198] ? __fget_files+0x184/0x1c0 [ 265.484175][T12198] ? __rcu_read_unlock+0x4f/0x70 [ 265.484195][T12198] ? __fget_files+0x184/0x1c0 [ 265.484226][T12198] ksys_read+0xda/0x1a0 [ 265.484252][T12198] __x64_sys_read+0x40/0x50 [ 265.484280][T12198] x64_sys_call+0x27bc/0x2ff0 [ 265.484359][T12198] do_syscall_64+0xd2/0x200 [ 265.484388][T12198] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 265.484418][T12198] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 265.484529][T12198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.484556][T12198] RIP: 0033:0x7f4cfd9fd8dc [ 265.484643][T12198] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 265.484662][T12198] RSP: 002b:00007f4cfc467030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 265.484686][T12198] RAX: ffffffffffffffda RBX: 00007f4cfdc55fa0 RCX: 00007f4cfd9fd8dc [ 265.484702][T12198] RDX: 000000000000000f RSI: 00007f4cfc4670a0 RDI: 0000000000000004 [ 265.484718][T12198] RBP: 00007f4cfc467090 R08: 0000000000000000 R09: 0000000000000000 [ 265.484734][T12198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.484750][T12198] R13: 00007f4cfdc56038 R14: 00007f4cfdc55fa0 R15: 00007fff4b5020e8 [ 265.484833][T12198] [ 265.774735][T12206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3106'. [ 265.788649][T12206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12206 comm=syz.4.3106 [ 266.926004][T12254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12254 comm=syz.4.3126 [ 268.216740][T12299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3146'. [ 268.352534][T12306] FAULT_INJECTION: forcing a failure. [ 268.352534][T12306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.366513][T12306] CPU: 0 UID: 0 PID: 12306 Comm: syz.3.3149 Not tainted syzkaller #0 PREEMPT(voluntary) [ 268.366585][T12306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 268.366597][T12306] Call Trace: [ 268.366604][T12306] [ 268.366611][T12306] __dump_stack+0x1d/0x30 [ 268.366631][T12306] dump_stack_lvl+0xe8/0x140 [ 268.366653][T12306] dump_stack+0x15/0x1b [ 268.366674][T12306] should_fail_ex+0x265/0x280 [ 268.366808][T12306] should_fail+0xb/0x20 [ 268.366834][T12306] should_fail_usercopy+0x1a/0x20 [ 268.366872][T12306] _copy_from_iter+0xd2/0xe80 [ 268.366907][T12306] ? __build_skb_around+0x1a0/0x200 [ 268.366976][T12306] ? __alloc_skb+0x223/0x320 [ 268.367003][T12306] netlink_sendmsg+0x471/0x6b0 [ 268.367036][T12306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.367133][T12306] __sock_sendmsg+0x145/0x180 [ 268.367255][T12306] ____sys_sendmsg+0x31e/0x4e0 [ 268.367290][T12306] ___sys_sendmsg+0x17b/0x1d0 [ 268.367349][T12306] __x64_sys_sendmsg+0xd4/0x160 [ 268.367431][T12306] x64_sys_call+0x191e/0x2ff0 [ 268.367458][T12306] do_syscall_64+0xd2/0x200 [ 268.367488][T12306] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 268.367511][T12306] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 268.367545][T12306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.367592][T12306] RIP: 0033:0x7ff8ea6eeec9 [ 268.367607][T12306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.367624][T12306] RSP: 002b:00007ff8e914f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.367642][T12306] RAX: ffffffffffffffda RBX: 00007ff8ea945fa0 RCX: 00007ff8ea6eeec9 [ 268.367653][T12306] RDX: 0000000000004040 RSI: 0000200000000080 RDI: 0000000000000004 [ 268.367711][T12306] RBP: 00007ff8e914f090 R08: 0000000000000000 R09: 0000000000000000 [ 268.367724][T12306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.367735][T12306] R13: 00007ff8ea946038 R14: 00007ff8ea945fa0 R15: 00007ffe0ae02968 [ 268.367753][T12306] [ 268.871761][T12318] serio: Serial port ptm0 [ 269.486102][ T29] kauditd_printk_skb: 907 callbacks suppressed [ 269.486116][ T29] audit: type=1400 audit(1758952478.771:24219): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 269.583099][ T29] audit: type=1400 audit(1758952478.809:24220): avc: denied { read write } for pid=11036 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 269.583141][ T29] audit: type=1400 audit(1758952478.818:24221): avc: denied { read write } for pid=11450 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 269.632534][ T29] audit: type=1400 audit(1758952478.818:24222): avc: denied { read } for pid=12327 comm="syz.2.3159" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 269.657164][ T29] audit: type=1400 audit(1758952478.837:24223): avc: denied { perfmon } for pid=12329 comm="syz.3.3158" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 269.678266][ T29] audit: type=1400 audit(1758952478.837:24224): avc: denied { kernel } for pid=12329 comm="syz.3.3158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 269.698794][ T29] audit: type=1400 audit(1758952478.837:24225): avc: denied { open } for pid=12329 comm="syz.3.3158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 269.718254][ T29] audit: type=1400 audit(1758952478.837:24226): avc: denied { map_create } for pid=12329 comm="syz.3.3158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 269.738399][ T29] audit: type=1400 audit(1758952478.837:24227): avc: denied { prog_load } for pid=12329 comm="syz.3.3158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 269.757749][ T29] audit: type=1400 audit(1758952478.837:24228): avc: denied { prog_load } for pid=12329 comm="syz.3.3158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 270.022500][T12353] netlink: 'syz.3.3169': attribute type 1 has an invalid length. [ 270.038864][T12353] 8021q: adding VLAN 0 to HW filter on device bond1 [ 270.071803][T12353] bond1: (slave geneve2): making interface the new active one [ 270.073026][T12353] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 270.982290][T12379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3180'. [ 271.084337][T12381] netlink: 'syz.2.3181': attribute type 4 has an invalid length. [ 271.117133][T12381] netlink: 'syz.2.3181': attribute type 4 has an invalid length. [ 271.539804][ T3432] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.593518][ T3432] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.648077][ T3432] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.690104][ T3432] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.754978][ T3432] bridge_slave_1: left allmulticast mode [ 271.760699][ T3432] bridge_slave_1: left promiscuous mode [ 271.766476][ T3432] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.774409][ T3432] bridge_slave_0: left allmulticast mode [ 271.780113][ T3432] bridge_slave_0: left promiscuous mode [ 271.785836][ T3432] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.884463][ T3432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.894219][ T3432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.904081][ T3432] bond0 (unregistering): Released all slaves [ 271.912995][ T3432] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 271.921377][ T3432] wireguard0: left promiscuous mode [ 271.927931][ T3432] bond1 (unregistering): (slave wireguard1): Releasing backup interface [ 271.937306][ T3432] bond1 (unregistering): Released all slaves [ 271.946940][ T3432] bond2 (unregistering): (slave wireguard2): Releasing backup interface [ 271.955369][ T3432] wireguard2: left promiscuous mode [ 271.961638][ T3432] bond2 (unregistering): (slave wireguard3): Releasing backup interface [ 271.971166][ T3432] bond2 (unregistering): Released all slaves [ 271.980097][ T3432] bond3 (unregistering): (slave wireguard4): Releasing backup interface [ 271.988525][ T3432] wireguard4: left promiscuous mode [ 271.994723][ T3432] bond3 (unregistering): (slave wireguard5): Releasing backup interface [ 272.003829][ T3432] bond3 (unregistering): Released all slaves [ 272.012402][ T3432] bond4 (unregistering): (slave wireguard6): Releasing backup interface [ 272.020835][ T3432] wireguard6: left promiscuous mode [ 272.027091][ T3432] bond4 (unregistering): (slave wireguard7): Releasing backup interface [ 272.036530][ T3432] bond4 (unregistering): Released all slaves [ 272.046304][ T3432] bond5 (unregistering): (slave wireguard8): Releasing backup interface [ 272.054716][ T3432] wireguard8: left promiscuous mode [ 272.060865][ T3432] bond5 (unregistering): (slave wireguard9): Releasing backup interface [ 272.070041][ T3432] bond5 (unregistering): Released all slaves [ 272.079516][ T3432] bond6 (unregistering): (slave wireguard10): Releasing backup interface [ 272.088002][ T3432] wireguard10: left promiscuous mode [ 272.094372][ T3432] bond6 (unregistering): (slave wireguard11): Releasing backup interface [ 272.103740][ T3432] bond6 (unregistering): Released all slaves [ 272.112833][ T3432] bond7 (unregistering): (slave wireguard12): Releasing backup interface [ 272.121308][ T3432] wireguard12: left promiscuous mode [ 272.127505][ T3432] bond7 (unregistering): Released all slaves [ 272.136135][ T3432] bond8 (unregistering): (slave wireguard13): Releasing backup interface [ 272.144680][ T3432] wireguard13: left promiscuous mode [ 272.151835][ T3432] bond8 (unregistering): Released all slaves [ 272.160429][ T3432] bond9 (unregistering): Released all slaves [ 272.225452][ T3432] tipc: Disabling bearer [ 272.230526][ T3432] tipc: Left network mode [ 272.237044][ T3432] hsr_slave_0: left promiscuous mode [ 272.242658][ T3432] hsr_slave_1: left promiscuous mode [ 272.248288][ T3432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.255774][ T3432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.265480][ T3432] veth1_macvtap: left promiscuous mode [ 272.270971][ T3432] veth0_macvtap: left promiscuous mode [ 272.300828][ T3432] pimreg (unregistering): left allmulticast mode [ 272.336817][ T3432] team0 (unregistering): Port device team_slave_1 removed [ 272.348031][ T3432] team0 (unregistering): Port device team_slave_0 removed [ 272.390811][ T3387] lo speed is unknown, defaulting to 1000 [ 272.390987][ T3387] ================================================================== [ 272.404790][ T3387] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 272.411428][ T3387] [ 272.411438][ T3387] write to 0xffffffff8686ebd8 of 8 bytes by task 12409 on cpu 1: [ 272.411458][ T3387] data_alloc+0x27d/0x2b0 [ 272.411494][ T3387] prb_reserve+0x808/0xaf0 [ 272.411528][ T3387] vprintk_store+0x56d/0x860 [ 272.411562][ T3387] vprintk_emit+0x178/0x650 [ 272.411577][ T3387] vprintk_default+0x26/0x30 [ 272.411593][ T3387] vprintk+0x1d/0x30 [ 272.411613][ T3387] _printk+0x79/0xa0 [ 272.411644][ T3387] chnl_net_open+0x2a9/0x560 [ 272.411665][ T3387] __dev_open+0x2d2/0x530 [ 272.411707][ T3387] __dev_change_flags+0x163/0x400 [ 272.411728][ T3387] netif_change_flags+0x5a/0xd0 [ 272.411748][ T3387] dev_change_flags+0xce/0x180 [ 272.411785][ T3387] dev_ifsioc+0x44b/0xaa0 [ 272.411813][ T3387] dev_ioctl+0x70a/0x960 [ 272.411841][ T3387] sock_do_ioctl+0x197/0x220 [ 272.411868][ T3387] sock_ioctl+0x41b/0x610 [ 272.411890][ T3387] __se_sys_ioctl+0xcb/0x140 [ 272.411905][ T3387] __x64_sys_ioctl+0x43/0x50 [ 272.411922][ T3387] x64_sys_call+0x1816/0x2ff0 [ 272.411947][ T3387] do_syscall_64+0xd2/0x200 [ 272.411975][ T3387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.412000][ T3387] [ 272.412007][ T3387] read to 0xffffffff8686ebd8 of 8 bytes by task 3387 on cpu 0: [ 272.412024][ T3387] prb_reserve+0x221/0xaf0 [ 272.412050][ T3387] vprintk_store+0x56d/0x860 [ 272.412084][ T3387] vprintk_emit+0x178/0x650 [ 272.412103][ T3387] dev_vprintk_emit+0x242/0x2a0 [ 272.412123][ T3387] dev_printk_emit+0x84/0xb0 [ 272.412142][ T3387] __dev_printk+0xf3/0x110 [ 272.412167][ T3387] _dev_warn+0x9b/0xd0 [ 272.412189][ T3387] ib_cache_update+0x63a/0x700 [ 272.412216][ T3387] ib_cache_event_task+0x7f/0xf0 [ 272.412243][ T3387] process_scheduled_works+0x4cb/0x9d0 [ 272.412278][ T3387] worker_thread+0x582/0x770 [ 272.412306][ T3387] kthread+0x489/0x510 [ 272.412323][ T3387] ret_from_fork+0x11f/0x1b0 [ 272.412341][ T3387] ret_from_fork_asm+0x1a/0x30 [ 272.412362][ T3387] [ 272.412367][ T3387] value changed: 0xfffffffffffd3ad8 -> 0x000000000007da20 [ 272.412381][ T3387] [ 272.412385][ T3387] Reported by Kernel Concurrency Sanitizer on: [ 272.412398][ T3387] CPU: 0 UID: 0 PID: 3387 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(voluntary) [ 272.412428][ T3387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 272.412443][ T3387] Workqueue: infiniband ib_cache_event_task [ 272.412471][ T3387] ================================================================== [ 272.390857][ T3387] infiniband syz2: ib_query_port failed (-19) [ 273.770605][ T3432] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.861917][ T3432] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.924864][ T3432] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.977913][ T3432] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.064981][ T3432] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.105839][ T3432] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.180596][ T3432] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.266051][ T3432] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.333690][ T3432] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.362284][ T3432] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.405771][ T3432] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.447932][ T3432] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.537801][ T3432] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.586874][ T3432] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.629122][ T3432] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.683583][ T3432] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.746863][ T3432] bridge_slave_1: left allmulticast mode [ 274.752519][ T3432] bridge_slave_1: left promiscuous mode [ 274.758200][ T3432] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.765938][ T3432] bridge_slave_0: left allmulticast mode [ 274.771585][ T3432] bridge_slave_0: left promiscuous mode [ 274.777328][ T3432] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.785897][ T3432] bridge_slave_1: left allmulticast mode [ 274.792133][ T3432] bridge_slave_1: left promiscuous mode [ 274.797951][ T3432] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.805860][ T3432] bridge_slave_0: left allmulticast mode [ 274.811518][ T3432] bridge_slave_0: left promiscuous mode [ 274.817170][ T3432] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.828110][ T3432] bridge_slave_1: left allmulticast mode [ 274.833944][ T3432] bridge_slave_1: left promiscuous mode [ 274.839561][ T3432] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.847629][ T3432] bridge_slave_0: left allmulticast mode [ 274.853336][ T3432] bridge_slave_0: left promiscuous mode [ 274.859053][ T3432] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.067617][ T3432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.077801][ T3432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.087406][ T3432] bond0 (unregistering): Released all slaves [ 275.176482][ T3432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.186142][ T3432] bond0 (unregistering): Released all slaves [ 275.195057][ T3432] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 275.203459][ T3432] wireguard0: left promiscuous mode [ 275.210049][ T3432] bond1 (unregistering): (slave wireguard1): Releasing backup interface [ 275.219613][ T3432] bond1 (unregistering): Released all slaves [ 275.228417][ T3432] bond2 (unregistering): (slave wireguard2): Releasing backup interface [ 275.237511][ T3432] wireguard2: left promiscuous mode [ 275.243919][ T3432] bond2 (unregistering): (slave wireguard3): Releasing backup interface [ 275.252961][ T3432] bond2 (unregistering): Released all slaves [ 275.261817][ T3432] bond3 (unregistering): (slave wireguard4): Releasing backup interface [ 275.270850][ T3432] wireguard4: left promiscuous mode [ 275.277102][ T3432] bond3 (unregistering): (slave wireguard5): Releasing backup interface [ 275.286522][ T3432] bond3 (unregistering): Released all slaves [ 275.307009][ T3432] bond1 (unregistering): (slave geneve2): Releasing active interface [ 275.347005][ T3432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.356832][ T3432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.366898][ T3432] bond0 (unregistering): Released all slaves [ 275.375464][ T3432] bond1 (unregistering): Released all slaves [ 275.442987][ T3432] bond0 (unregistering): Released all slaves [ 275.451341][ T3432] bond1 (unregistering): Released all slaves [ 275.459685][ T3432] bond2 (unregistering): Released all slaves [ 275.514813][ T3432] hsr_slave_0: left promiscuous mode [ 275.520475][ T3432] hsr_slave_1: left promiscuous mode [ 275.526212][ T3432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.533602][ T3432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.541099][ T3432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.548603][ T3432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.558246][ T3432] hsr_slave_0: left promiscuous mode [ 275.563783][ T3432] hsr_slave_1: left promiscuous mode [ 275.569425][ T3432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.576790][ T3432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.584399][ T3432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.591808][ T3432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.600817][ T3432] hsr_slave_0: left promiscuous mode [ 275.606514][ T3432] hsr_slave_1: left promiscuous mode [ 275.612087][ T3432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.619448][ T3432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.627050][ T3432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.634492][ T3432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.645455][ T3432] hsr_slave_0: left promiscuous mode [ 275.651203][ T3432] hsr_slave_1: left promiscuous mode [ 275.665334][ T3432] veth1_macvtap: left promiscuous mode [ 275.670833][ T3432] veth0_macvtap: left promiscuous mode [ 275.676359][ T3432] veth1_vlan: left promiscuous mode [ 275.681641][ T3432] veth0_vlan: left promiscuous mode [ 275.687346][ T3432] veth1_macvtap: left promiscuous mode [ 275.692807][ T3432] veth0_macvtap: left promiscuous mode [ 275.698359][ T3432] veth1_vlan: left promiscuous mode [ 275.703593][ T3432] veth0_vlan: left promiscuous mode [ 275.709483][ T3432] veth1_macvtap: left promiscuous mode [ 275.714946][ T3432] veth0_macvtap: left promiscuous mode [ 275.720528][ T3432] veth1_vlan: left promiscuous mode [ 275.725794][ T3432] veth0_vlan: left promiscuous mode [ 275.731607][ T3432] veth1_macvtap: left promiscuous mode [ 275.737085][ T3432] veth0_macvtap: left promiscuous mode [ 275.742677][ T3432] veth1_vlan: left promiscuous mode [ 275.747887][ T3432] veth0_vlan: left promiscuous mode [ 275.910611][ T3432] team0 (unregistering): Port device team_slave_1 removed [ 275.920002][ T3432] team0 (unregistering): Port device team_slave_0 removed [ 275.978629][ T3432] team0 (unregistering): Port device team_slave_1 removed [ 275.988278][ T3432] team0 (unregistering): Port device team_slave_0 removed [ 276.017400][ T3432] pimreg (unregistering): left allmulticast mode [ 276.045886][ T3432] team0 (unregistering): Port device team_slave_1 removed [ 276.055332][ T3432] team0 (unregistering): Port device team_slave_0 removed [ 276.085000][ T3432] pimreg (unregistering): left allmulticast mode