last executing test programs: 6.943439107s ago: executing program 1 (id=2838): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) 6.012574453s ago: executing program 1 (id=2847): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@bsdgroups}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x477, &(0x7f0000001e00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)=ANY=[@ANYBLOB]) 5.94035802s ago: executing program 1 (id=2848): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x826, 0xd80) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000f40)=ANY=[@ANYBLOB="1800000100000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.818529252s ago: executing program 1 (id=2849): socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000180)=""/92, 0x5c, 0x0, &(0x7f00000003c0)=""/161, 0xa1}}, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xff10, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r1, 0x400, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) 5.793040014s ago: executing program 1 (id=2850): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r3, 0x0, 0x1034}, 0x18) r4 = dup2(r2, r2) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) r8 = getpid() r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ptrace$ARCH_SHSTK_LOCK(0x1e, r8, 0x3, 0x5003) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) 5.148749643s ago: executing program 3 (id=2856): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(r1, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x64000600) 4.996350028s ago: executing program 1 (id=2857): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@bsdgroups}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x477, &(0x7f0000001e00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)=ANY=[@ANYBLOB="000000004c90020000000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000020000000000000000000000000000080000"]) 2.824446308s ago: executing program 3 (id=2878): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r3, 0x0) r4 = gettid() r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1.83184509s ago: executing program 3 (id=2882): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 1.820242721s ago: executing program 2 (id=2883): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1.737860859s ago: executing program 2 (id=2885): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.737480969s ago: executing program 2 (id=2886): fadvise64(0xffffffffffffffff, 0xf, 0xa5, 0x0) socket$netlink(0x10, 0x3, 0x13) add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0002020000000000004000000000000000881b375a15e89c51ffe546ce2db6e8d438794891358c532d0d99d5be09000000a57319f45c0371ac7b231995d70c21bfd0481dfe42620f305095fd5446cb1268af60665854b35726f95ff439584270fe6fb286ff742f3c069a84d9839a936655190e7492bcc48dea00a8a0eff0e2d00b94498af384c254cfe0de65d7dceffb28d30ed248f0124311b9b4d94a9411b4db59ceab8bf72fb187402825b4"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x0, 0x0}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000580)={0x2, &(0x7f0000000540)=[{0x6f, 0x5, 0xc, 0x3}, {0xa1e3, 0x80, 0x7, 0xa}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0fb0000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYRES8], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x10, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700)}, 0x0, 0x44a300000, 0x4, 0x1, 0x10000b, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) 1.528812988s ago: executing program 4 (id=2887): socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x4, 0x8, 0xff, 0x7, 0x3, @empty, @private2, 0x40, 0x7, 0xe, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', r0, 0x4, 0x0, 0xc1, 0x5, 0x20, @private1, @loopback, 0x1, 0x700, 0xb68, 0xfffffff9}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r3, 0x0, 0xfffffffffffffc02}, 0x18) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000007c0)={0xffffffffffffffff, 0xf, {0x0, 0x0, 0x0, 0x5, 0x400080000000, 0x0, 0x1b, 0x24, 0x18, "9dc38897b6def6df4ecffa1c5065fb042494bd7906c3573be0eedc42d5f7049ceff9dc1ca4c47fe7e5288b4f42c7f7aef39fe3e94bd8aca4fabab8f663c5f728", "f2e59517158e0728b71a4498a0555ecebffba66486ce42fe5281d8f6f80312ecaa894b6d6a1595170f066afe47c0dd1735501349f1c444c5e75b930fee921b26", "4a99d243ced1a14609df99ed461e4c527800", [0x0, 0x1]}}) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000200)={'fscrypt:', @auto=[0x37, 0x37, 0x65, 0x34, 0x61, 0x31, 0x33, 0x38, 0x66, 0x36, 0x61, 0x33, 0x30, 0x61, 0x65, 0x61]}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r6, r5, r5, 0x0) keyctl$KEYCTL_MOVE(0x4, r4, r4, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) getdents64(r8, 0xfffffffffffffffe, 0x29) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x201c888, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0x4, 0x27d, &(0x7f0000000d40)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0xffffffffffffffe7, &(0x7f0000000240)={&(0x7f0000002440)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r10, {0xe, 0xb}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000010) 1.475726323s ago: executing program 3 (id=2889): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x14004040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r1, &(0x7f0000000300)=""/212, 0xd4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x330b9072}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r5, 0x89f3, 0x200000000000004) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fsmount(r6, 0x0, 0x2) move_mount(r6, &(0x7f0000000040)='./file0/../file0/../file0/../file0\x00', 0xffffffffffffff9c, 0x0, 0x60) 1.452675045s ago: executing program 0 (id=2890): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x5}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@gettfilter={0x64, 0x2e, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x8, 0xc7f5ee8c7b7f1b2b}, {0x4, 0xd}, {0x7, 0xd}}, [{0x8, 0xb, 0x3}, {0x8}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x80000081}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r4}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_context(r5, &(0x7f0000000280)='system_u:object_r:nvram_device_t:s0\x00', 0x24) 1.334888436s ago: executing program 0 (id=2891): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$x25(0x9, 0x5, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x64000600) 1.326929567s ago: executing program 4 (id=2892): socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x4, 0x8, 0xff, 0x7, 0x3, @empty, @private2, 0x40, 0x7, 0xe, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', r0, 0x4, 0x0, 0xc1, 0x5, 0x20, @private1, @loopback, 0x1, 0x700, 0xb68, 0xfffffff9}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r3, 0x0, 0xfffffffffffffc02}, 0x18) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000007c0)={0xffffffffffffffff, 0xf, {0x0, 0x0, 0x0, 0x5, 0x400080000000, 0x0, 0x1b, 0x24, 0x18, "9dc38897b6def6df4ecffa1c5065fb042494bd7906c3573be0eedc42d5f7049ceff9dc1ca4c47fe7e5288b4f42c7f7aef39fe3e94bd8aca4fabab8f663c5f728", "f2e59517158e0728b71a4498a0555ecebffba66486ce42fe5281d8f6f80312ecaa894b6d6a1595170f066afe47c0dd1735501349f1c444c5e75b930fee921b26", "4a99d243ced1a14609df99ed461e4c527800", [0x0, 0x1]}}) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000200)={'fscrypt:', @auto=[0x37, 0x37, 0x65, 0x34, 0x61, 0x31, 0x33, 0x38, 0x66, 0x36, 0x61, 0x33, 0x30, 0x61, 0x65, 0x61]}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r6, r5, r5, 0x0) keyctl$KEYCTL_MOVE(0x4, r4, r4, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) getdents64(r8, 0xfffffffffffffffe, 0x29) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x201c888, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0x4, 0x27d, &(0x7f0000000d40)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0xffffffffffffffe7, &(0x7f0000000240)={&(0x7f0000002440)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r9, {0xe, 0xb}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000010) 1.162737592s ago: executing program 4 (id=2893): unshare(0x28000600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd13}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb000005000006140000001100", @ANYRES64], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) 1.140043914s ago: executing program 4 (id=2894): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@usrquota}, {@nodiscard}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0xffffffffffffffff) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @empty, @empty, {[@noop]}}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x288ba, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@nodiscard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8000003}}]}, 0x0, 0x461, &(0x7f00000004c0)="$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") r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r6 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r6) request_key(0x0, 0x0, 0x0, r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x101, 0x7, 0x1) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) 835.400423ms ago: executing program 2 (id=2895): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 717.560453ms ago: executing program 2 (id=2896): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x9, 0xfffff136}}, './file0\x00'}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000002c0), &(0x7f0000000500)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xfffffffffffffccc, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r6, r6, 0x21) wait4(r6, 0x0, 0x40000000, 0x0) socket$inet6(0xa, 0x6, 0x5) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'macsec0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x90) 591.912225ms ago: executing program 3 (id=2897): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000002640)=""/4104, 0x1008}], 0x1, 0xf0, 0xa) socket$inet6_udp(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) socket(0x1e, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 586.964996ms ago: executing program 4 (id=2898): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0xc, 0x80000000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102}, 0x10) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) inotify_init() chdir(&(0x7f0000000240)='./file0\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r4, 0xfffffffffffffffd, 0xbb) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x29) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x80) pwritev(r5, 0x0, 0x0, 0xffffff01, 0x2) r6 = syz_io_uring_complete(0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r6}, 0x8) r7 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800000, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_u}, {@ignoreqv}], [], 0x6b}}) 415.955831ms ago: executing program 0 (id=2899): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 310.173061ms ago: executing program 2 (id=2900): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x20, 0x1418, 0x1, 0x0, 0x3, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usbip_server_init(0x5) 304.951722ms ago: executing program 3 (id=2901): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0x15, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x80000000}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ldst={0x0, 0x1, 0x2, 0x7, 0xb, 0xffffffffffffffff, 0xfffffffffffffffd}]}, &(0x7f00000001c0)='syzkaller\x00', 0xfffffff8, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x10, 0x80, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000001e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4], &(0x7f0000001ec0)=[{0x1, 0x4, 0x2, 0x6}, {0x5, 0x2, 0x0, 0x9}, {0x4, 0x5, 0x0, 0xb}, {0x4, 0x3, 0x3, 0xb}, {0x0, 0x4, 0x2, 0x3}, {0x2, 0xc, 0x5, 0xa}, {0x0, 0x1, 0xc, 0x8}, {0x2, 0x4, 0xb}, {0x0, 0x3, 0x5, 0x4}], 0x10, 0x9}, 0x94) unshare(0x64000600) 248.599067ms ago: executing program 4 (id=2902): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) mknod$loop(0x0, 0x100000000000600d, 0x1) 235.811458ms ago: executing program 32 (id=2902): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) mknod$loop(0x0, 0x100000000000600d, 0x1) 165.070535ms ago: executing program 0 (id=2904): socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000180)=""/92, 0x5c, 0x0, &(0x7f00000003c0)=""/161, 0xa1}}, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xff10, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r1, 0x400, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) 47.134305ms ago: executing program 0 (id=2905): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 0s ago: executing program 0 (id=2906): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x14004040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r1, &(0x7f0000000300)=""/212, 0xd4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x330b9072}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r5, 0x89f3, 0x200000000000004) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fsmount(r6, 0x0, 0x2) move_mount(r6, &(0x7f0000000040)='./file0/../file0/../file0/../file0\x00', 0xffffffffffffff9c, 0x0, 0x60) kernel console output (not intermixed with test programs): 55288][T10769] bridge_slave_1: left allmulticast mode [ 165.161170][T10769] bridge_slave_1: left promiscuous mode [ 165.167209][T10769] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.184301][T10769] bond0: (slave bond_slave_0): Releasing backup interface [ 165.194071][T10770] netlink: 400 bytes leftover after parsing attributes in process `syz.1.2047'. [ 165.204694][T10769] bond0: (slave bond_slave_1): Releasing backup interface [ 165.214365][T10769] team0: Port device team_slave_0 removed [ 165.221831][T10769] team0: Port device team_slave_1 removed [ 165.228519][T10769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.236282][T10769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.244436][T10769] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 165.623837][T10792] hub 6-0:1.0: USB hub found [ 165.629114][T10792] hub 6-0:1.0: 8 ports detected [ 165.663744][T10796] ALSA: seq fatal error: cannot create timer (-22) [ 165.672433][T10796] vlan0: entered promiscuous mode [ 165.682106][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2057'. [ 165.694859][T10797] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 165.704472][T10797] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 165.765109][T10803] loop3: detected capacity change from 0 to 512 [ 165.773180][T10803] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 165.796364][T10803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.825483][T10803] ext4 filesystem being mounted at /433/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.861342][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.878050][T10817] netlink: 'syz.0.2064': attribute type 10 has an invalid length. [ 165.886034][T10817] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2064'. [ 165.938515][T10826] dvmrp1: entered allmulticast mode [ 165.961221][T10831] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2061'. [ 165.974097][T10826] dvmrp1: left allmulticast mode [ 166.025722][T10837] loop3: detected capacity change from 0 to 512 [ 166.036616][T10837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.167484][T10848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2070'. [ 166.177491][T10842] vhci_hcd vhci_hcd.2: invalid port number 249 [ 166.204309][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.294670][T10858] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 166.294670][T10858] program syz.3.2071 not setting count and/or reply_len properly [ 166.803732][T10866] sctp: [Deprecated]: syz.0.2076 (pid 10866) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.803732][T10866] Use struct sctp_sack_info instead [ 166.823722][T10867] FAULT_INJECTION: forcing a failure. [ 166.823722][T10867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.837540][T10867] CPU: 0 UID: 0 PID: 10867 Comm: syz.4.2074 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 166.837580][T10867] Tainted: [W]=WARN [ 166.837587][T10867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.837601][T10867] Call Trace: [ 166.837609][T10867] [ 166.837689][T10867] __dump_stack+0x1d/0x30 [ 166.837721][T10867] dump_stack_lvl+0x95/0xd0 [ 166.837746][T10867] dump_stack+0x15/0x1b [ 166.837768][T10867] should_fail_ex+0x265/0x280 [ 166.837864][T10867] should_fail+0xb/0x20 [ 166.837886][T10867] should_fail_usercopy+0x1a/0x20 [ 166.837914][T10867] _copy_from_user+0x1c/0xb0 [ 166.837947][T10867] proc_control+0x43/0xa0 [ 166.838043][T10867] usbdev_ioctl+0x93c/0x1700 [ 166.838073][T10867] ? __pfx_usbdev_ioctl+0x10/0x10 [ 166.838100][T10867] __se_sys_ioctl+0xce/0x140 [ 166.838146][T10867] __x64_sys_ioctl+0x43/0x50 [ 166.838213][T10867] x64_sys_call+0x14b0/0x3000 [ 166.838239][T10867] do_syscall_64+0xca/0x2b0 [ 166.838333][T10867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.838354][T10867] RIP: 0033:0x7f2a9a0ff749 [ 166.838368][T10867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.838386][T10867] RSP: 002b:00007f2a98b3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.838406][T10867] RAX: ffffffffffffffda RBX: 00007f2a9a356090 RCX: 00007f2a9a0ff749 [ 166.838429][T10867] RDX: 0000200000000040 RSI: 00000000c0185500 RDI: 0000000000000009 [ 166.838441][T10867] RBP: 00007f2a98b3e090 R08: 0000000000000000 R09: 0000000000000000 [ 166.838453][T10867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.838464][T10867] R13: 00007f2a9a356128 R14: 00007f2a9a356090 R15: 00007ffea6aee0c8 [ 166.838489][T10867] [ 166.948337][T10871] gre1: entered allmulticast mode [ 167.095886][T10878] vhci_hcd vhci_hcd.2: invalid port number 249 [ 167.321197][T10886] lo speed is unknown, defaulting to 1000 [ 167.701358][T10909] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2082'. [ 167.832110][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 167.832128][ T29] audit: type=1326 audit(1766895044.024:11458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10914 comm="syz.0.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d864f749 code=0x7ffc0000 [ 167.862446][ T29] audit: type=1326 audit(1766895044.024:11459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10914 comm="syz.0.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d864f749 code=0x7ffc0000 [ 167.962311][ T29] audit: type=1326 audit(1766895044.074:11460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10914 comm="syz.0.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d864f749 code=0x7ffc0000 [ 167.986461][ T29] audit: type=1326 audit(1766895044.074:11461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10914 comm="syz.0.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d864f749 code=0x7ffc0000 [ 168.010925][ T29] audit: type=1326 audit(1766895044.074:11462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10914 comm="syz.0.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d864f749 code=0x7ffc0000 [ 168.014387][T10925] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2084'. [ 168.035281][ T29] audit: type=1326 audit(1766895044.074:11463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10914 comm="syz.0.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d864f749 code=0x7ffc0000 [ 168.068265][ T29] audit: type=1326 audit(1766895044.074:11464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10914 comm="syz.0.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d864f749 code=0x7ffc0000 [ 168.092473][ T29] audit: type=1326 audit(1766895044.074:11465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10914 comm="syz.0.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d864f749 code=0x7ffc0000 [ 168.116355][ T29] audit: type=1326 audit(1766895044.074:11466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10914 comm="syz.0.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d864f749 code=0x7ffc0000 [ 168.140250][ T29] audit: type=1326 audit(1766895044.074:11467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10914 comm="syz.0.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d864f749 code=0x7ffc0000 [ 168.313291][T10936] dvmrp1: entered allmulticast mode [ 168.330945][T10936] dvmrp1: left allmulticast mode [ 168.396493][T10936] loop3: detected capacity change from 0 to 512 [ 168.405827][T10936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.480805][T10948] loop1: detected capacity change from 0 to 128 [ 168.488778][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.489547][T10948] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.510409][T10948] ext4 filesystem being mounted at /425/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 168.547005][T10956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2094'. [ 168.567363][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.775726][T10978] lo speed is unknown, defaulting to 1000 [ 168.854075][T11013] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2106'. [ 168.936364][T11023] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2104'. [ 168.940932][T11024] loop3: detected capacity change from 0 to 1024 [ 168.953015][T11024] EXT4-fs: Ignoring removed bh option [ 168.962309][T11024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.784925][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.049385][T11070] loop3: detected capacity change from 0 to 512 [ 170.056382][T11070] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 170.071649][T11070] EXT4-fs: error: could not find journal device path [ 170.129072][T11070] lo speed is unknown, defaulting to 1000 [ 170.434464][T11108] hub 6-0:1.0: USB hub found [ 170.453815][T11108] hub 6-0:1.0: 8 ports detected [ 170.603931][T11118] __nla_validate_parse: 2 callbacks suppressed [ 170.603949][T11118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2130'. [ 170.924827][T11129] 9p: Bad value for 'rfdno' [ 170.964228][T11135] loop2: detected capacity change from 0 to 512 [ 170.971786][T11135] EXT4-fs: Ignoring removed i_version option [ 170.980760][T11135] EXT4-fs (loop2): orphan cleanup on readonly fs [ 170.988745][T11135] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.2136: EA inode hash validation failed [ 171.002613][T11135] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.2136: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 171.018795][T11135] EXT4-fs (loop2): Remounting filesystem read-only [ 171.025691][T11135] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.2.2136: ea_inode dec ref err=-117 [ 171.039582][T11135] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 171.048935][T11135] EXT4-fs (loop2): 1 orphan inode deleted [ 171.055509][T11135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 171.079643][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.151043][T11157] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2142'. [ 171.300264][T11160] lo speed is unknown, defaulting to 1000 [ 171.452514][T11190] loop0: detected capacity change from 0 to 512 [ 171.459342][T11190] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 171.474530][T11190] EXT4-fs: error: could not find journal device path [ 171.517308][T11190] lo speed is unknown, defaulting to 1000 [ 172.079285][T11228] lo speed is unknown, defaulting to 1000 [ 172.430646][T11233] hub 6-0:1.0: USB hub found [ 172.452480][T11233] hub 6-0:1.0: 8 ports detected [ 172.534197][T11270] dvmrp1: entered allmulticast mode [ 172.544359][T11270] dvmrp1: left allmulticast mode [ 172.579504][T11276] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 172.579504][T11276] program syz.1.2153 not setting count and/or reply_len properly [ 172.602132][T11277] loop2: detected capacity change from 0 to 512 [ 172.611248][T11277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.772896][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.792894][T11293] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 172.792894][T11293] program syz.4.2157 not setting count and/or reply_len properly [ 172.844088][T11294] hub 6-0:1.0: USB hub found [ 172.848849][T11294] hub 6-0:1.0: 8 ports detected [ 173.339883][T11302] loop0: detected capacity change from 0 to 512 [ 173.346755][T11302] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 173.361595][T11302] EXT4-fs: error: could not find journal device path [ 173.379382][T11302] lo speed is unknown, defaulting to 1000 [ 173.534303][T11328] loop1: detected capacity change from 0 to 512 [ 173.548033][T11328] EXT4-fs: Ignoring removed i_version option [ 173.562314][T11328] EXT4-fs (loop1): orphan cleanup on readonly fs [ 173.580792][T11328] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.2160: EA inode hash validation failed [ 173.646579][T11328] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.2160: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 173.689033][T11328] EXT4-fs (loop1): Remounting filesystem read-only [ 173.695783][T11328] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.1.2160: ea_inode dec ref err=-117 [ 173.713595][T11328] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 173.725834][T11328] EXT4-fs (loop1): 1 orphan inode deleted [ 173.732547][T11328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 173.768466][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.803728][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 173.803747][ T29] audit: type=1326 audit(1766895049.994:11706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11345 comm="syz.1.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85982f749 code=0x7ffc0000 [ 173.833993][ T29] audit: type=1326 audit(1766895049.994:11707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11345 comm="syz.1.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85982f749 code=0x7ffc0000 [ 173.880747][ T29] audit: type=1326 audit(1766895049.994:11708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11345 comm="syz.1.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fe85982f749 code=0x7ffc0000 [ 173.905362][ T29] audit: type=1326 audit(1766895049.994:11709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11345 comm="syz.1.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85982f749 code=0x7ffc0000 [ 173.929874][T11353] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2168'. [ 174.007618][T11360] 9p: Bad value for 'rfdno' [ 174.289736][T11379] lo speed is unknown, defaulting to 1000 [ 174.573754][T11403] lo speed is unknown, defaulting to 1000 [ 175.017438][T11403] siw: device registration error -23 [ 175.056133][T11447] xfrm1: entered promiscuous mode [ 175.072825][T11453] loop1: detected capacity change from 0 to 512 [ 175.080710][T11453] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.087385][T11453] EXT4-fs: Ignoring removed oldalloc option [ 175.120704][T11453] EXT4-fs: Mount option(s) incompatible with ext2 [ 175.192353][T11467] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2196'. [ 175.329939][ T29] audit: type=1326 audit(1766895051.514:11710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="syz.2.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 175.354079][ T29] audit: type=1326 audit(1766895051.514:11711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="syz.2.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 175.378203][ T29] audit: type=1326 audit(1766895051.514:11712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="syz.2.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 175.402597][ T29] audit: type=1326 audit(1766895051.514:11713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="syz.2.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 175.426466][ T29] audit: type=1326 audit(1766895051.514:11714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="syz.2.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 175.450168][ T29] audit: type=1326 audit(1766895051.514:11715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="syz.2.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 175.642365][T11484] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2200'. [ 175.733003][T11489] dvmrp1: entered allmulticast mode [ 175.739456][T11489] dvmrp1: left allmulticast mode [ 175.793441][T11494] loop3: detected capacity change from 0 to 512 [ 175.802299][T11494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.869958][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.149161][T11517] loop0: detected capacity change from 0 to 512 [ 176.156520][T11517] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.163210][T11517] EXT4-fs: Ignoring removed oldalloc option [ 176.169652][T11517] EXT4-fs: Mount option(s) incompatible with ext2 [ 176.265661][T11526] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 176.275715][T11526] SELinux: failed to load policy [ 176.394792][T11534] loop4: detected capacity change from 0 to 1024 [ 176.402568][T11534] EXT4-fs: Ignoring removed orlov option [ 176.410958][T11534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.432453][T11534] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.432480][T11535] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.453718][T11540] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2214'. [ 176.464968][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.921957][T11563] openvswitch: netlink: Missing key (keys=40, expected=100) [ 176.949817][T11567] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 176.949817][T11567] program syz.1.2219 not setting count and/or reply_len properly [ 177.111497][T11574] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2225'. [ 177.674018][T11594] FAULT_INJECTION: forcing a failure. [ 177.674018][T11594] name failslab, interval 1, probability 0, space 0, times 0 [ 177.687064][T11594] CPU: 1 UID: 0 PID: 11594 Comm: syz.3.2234 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 177.687102][T11594] Tainted: [W]=WARN [ 177.687110][T11594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.687195][T11594] Call Trace: [ 177.687199][T11594] [ 177.687223][T11594] __dump_stack+0x1d/0x30 [ 177.687243][T11594] dump_stack_lvl+0x95/0xd0 [ 177.687258][T11594] dump_stack+0x15/0x1b [ 177.687280][T11594] should_fail_ex+0x265/0x280 [ 177.687360][T11594] should_failslab+0x8c/0xb0 [ 177.687387][T11594] kmem_cache_alloc_noprof+0x69/0x4b0 [ 177.687409][T11594] ? security_inode_alloc+0x37/0x100 [ 177.687431][T11594] security_inode_alloc+0x37/0x100 [ 177.687451][T11594] inode_init_always_gfp+0x4b7/0x500 [ 177.687489][T11594] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 177.687706][T11594] alloc_inode+0x58/0x170 [ 177.687769][T11594] new_inode+0x1d/0xe0 [ 177.687786][T11594] shmem_get_inode+0x246/0x750 [ 177.687883][T11594] shmem_mknod+0x44/0x170 [ 177.687906][T11594] shmem_create+0x34/0x50 [ 177.687927][T11594] vfs_create+0x29e/0x2e0 [ 177.687983][T11594] do_mknodat+0x28e/0x500 [ 177.688004][T11594] __x64_sys_mknodat+0x5e/0x70 [ 177.688018][T11594] x64_sys_call+0x2b33/0x3000 [ 177.688091][T11594] do_syscall_64+0xca/0x2b0 [ 177.688170][T11594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.688190][T11594] RIP: 0033:0x7f9944a9f749 [ 177.688202][T11594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.688216][T11594] RSP: 002b:00007f9943507038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 177.688232][T11594] RAX: ffffffffffffffda RBX: 00007f9944cf5fa0 RCX: 00007f9944a9f749 [ 177.688241][T11594] RDX: 0000000000008910 RSI: 0000200000000100 RDI: 0000000000000004 [ 177.688302][T11594] RBP: 00007f9943507090 R08: 0000000000000000 R09: 0000000000000000 [ 177.688311][T11594] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 177.688377][T11594] R13: 00007f9944cf6038 R14: 00007f9944cf5fa0 R15: 00007ffd4a2a1f88 [ 177.688393][T11594] [ 178.004465][T11607] hub 6-0:1.0: USB hub found [ 178.009523][T11607] hub 6-0:1.0: 8 ports detected [ 178.169149][T11614] loop0: detected capacity change from 0 to 1024 [ 178.176441][T11614] EXT4-fs: inline encryption not supported [ 178.182599][T11614] EXT4-fs: Ignoring removed orlov option [ 178.188876][T11614] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 178.206142][T11614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.240169][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.258026][T11622] dvmrp1: entered allmulticast mode [ 178.265236][T11622] dvmrp1: left allmulticast mode [ 178.317929][T11634] loop4: detected capacity change from 0 to 512 [ 178.326446][T11634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.340860][T11637] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 178.340860][T11637] program syz.0.2245 not setting count and/or reply_len properly [ 178.401080][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.420660][T11643] wireguard0: entered promiscuous mode [ 178.426225][T11643] wireguard0: entered allmulticast mode [ 178.469081][T11649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=11649 comm=syz.4.2246 [ 178.605475][T11651] loop4: detected capacity change from 0 to 512 [ 178.612518][T11651] EXT4-fs: Ignoring removed bh option [ 178.618412][T11651] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 178.628429][T11651] EXT4-fs (loop4): 1 truncate cleaned up [ 178.634937][T11651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.647877][T11651] forcing mempool usage for bio_alloc_bioset+0x449/0xa50 [ 178.662690][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.820524][T11669] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2250'. [ 178.848533][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 178.848609][ T29] audit: type=1326 audit(1766895055.034:11832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 178.893396][ T29] audit: type=1326 audit(1766895055.074:11833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 178.917582][ T29] audit: type=1326 audit(1766895055.074:11834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 178.942934][ T29] audit: type=1326 audit(1766895055.074:11835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 178.967470][ T29] audit: type=1326 audit(1766895055.074:11836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11670 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 178.991605][ T29] audit: type=1326 audit(1766895055.134:11837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.2.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 179.016756][ T29] audit: type=1326 audit(1766895055.134:11838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.2.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 179.040807][ T29] audit: type=1326 audit(1766895055.134:11839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.2.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 179.064943][ T29] audit: type=1326 audit(1766895055.134:11840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.2.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 179.089071][ T29] audit: type=1326 audit(1766895055.134:11841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.2.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 179.682829][T11694] bridge_slave_0: left allmulticast mode [ 179.688535][T11694] bridge_slave_0: left promiscuous mode [ 179.694747][T11694] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.706057][T11694] bridge_slave_1: left allmulticast mode [ 179.712151][T11694] bridge_slave_1: left promiscuous mode [ 179.718345][T11694] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.730061][T11694] bond0: (slave bond_slave_0): Releasing backup interface [ 179.743587][T11694] bond0: (slave bond_slave_1): Releasing backup interface [ 179.754100][T11702] loop3: detected capacity change from 0 to 512 [ 179.761274][T11702] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.762763][T11694] team0: Port device team_slave_0 removed [ 179.768015][T11702] EXT4-fs: Ignoring removed oldalloc option [ 179.770437][T11702] EXT4-fs: Mount option(s) incompatible with ext2 [ 179.788912][T11694] team0: Port device team_slave_1 removed [ 179.797014][T11694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.804776][T11694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.821757][T11694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.829797][T11694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.840684][T11694] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 179.857304][ T4333] lo speed is unknown, defaulting to 1000 [ 179.883963][T11707] lo speed is unknown, defaulting to 1000 [ 179.952039][T11719] dvmrp1: entered allmulticast mode [ 179.963984][T11719] dvmrp1: left allmulticast mode [ 179.973754][T11731] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 179.973754][T11731] program syz.4.2267 not setting count and/or reply_len properly [ 179.992299][ T4333] page_pool_release_retry() stalled pool shutdown: id 27, 19 inflight 121 sec [ 180.014884][T11742] loop2: detected capacity change from 0 to 512 [ 180.024980][T11742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.056881][T11707] siw: device registration error -23 [ 180.129139][T11751] 9p: Bad value for 'rfdno' [ 180.148269][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.307499][T11768] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2270'. [ 180.438068][T11777] lo speed is unknown, defaulting to 1000 [ 180.660100][T11802] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 180.885332][T11805] loop4: detected capacity change from 0 to 512 [ 180.903663][T11805] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.910947][T11805] EXT4-fs: Ignoring removed oldalloc option [ 180.929033][T11805] EXT4-fs: Mount option(s) incompatible with ext2 [ 180.997872][T11813] lo speed is unknown, defaulting to 1000 [ 181.288217][T11840] lo speed is unknown, defaulting to 1000 [ 181.381550][T11867] SELinux: security_context_str_to_sid () failed with errno=-22 [ 181.526834][T11813] siw: device registration error -23 [ 181.593118][T11889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2288'. [ 181.683947][T11897] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 181.683947][T11897] program syz.0.2289 not setting count and/or reply_len properly [ 181.718033][T11900] loop4: detected capacity change from 0 to 512 [ 181.725008][T11900] EXT4-fs: Ignoring removed i_version option [ 181.763781][T11900] EXT4-fs (loop4): orphan cleanup on readonly fs [ 181.770911][T11900] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.2290: EA inode hash validation failed [ 181.783885][T11900] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.2290: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 181.799510][T11900] EXT4-fs (loop4): Remounting filesystem read-only [ 181.806115][T11900] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.4.2290: ea_inode dec ref err=-117 [ 181.820194][T11900] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 181.833646][T11900] EXT4-fs (loop4): 1 orphan inode deleted [ 181.840678][T11900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 181.862727][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.939177][T11913] lo speed is unknown, defaulting to 1000 [ 182.117083][T11936] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2293'. [ 182.351391][T11943] dvmrp1: entered allmulticast mode [ 182.360524][T11943] dvmrp1: left allmulticast mode [ 182.411201][T11950] loop3: detected capacity change from 0 to 512 [ 182.420971][T11950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.485261][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.494726][T11959] loop0: detected capacity change from 0 to 512 [ 182.501643][T11959] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.508385][T11959] EXT4-fs: Ignoring removed oldalloc option [ 182.514920][T11959] EXT4-fs: Mount option(s) incompatible with ext2 [ 182.549922][T11968] lo speed is unknown, defaulting to 1000 [ 182.709729][T11968] siw: device registration error -23 [ 183.023282][T12019] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 183.023282][T12019] program syz.3.2307 not setting count and/or reply_len properly [ 183.051842][T12020] lo speed is unknown, defaulting to 1000 [ 183.331680][T12051] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 183.331680][T12051] program syz.2.2309 not setting count and/or reply_len properly [ 183.354642][T12053] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2311'. [ 183.435703][T12067] loop1: detected capacity change from 0 to 512 [ 183.446779][T12067] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.453573][T12067] EXT4-fs: Ignoring removed oldalloc option [ 183.460234][T12067] EXT4-fs: Mount option(s) incompatible with ext2 [ 183.481125][T12072] hub 6-0:1.0: USB hub found [ 183.486237][T12072] hub 6-0:1.0: 8 ports detected [ 183.598544][T12077] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2316'. [ 183.681015][T12080] capability: warning: `syz.4.2317' uses deprecated v2 capabilities in a way that may be insecure [ 183.697820][T12080] loop4: detected capacity change from 0 to 512 [ 183.730567][T12085] lo speed is unknown, defaulting to 1000 [ 183.822210][T12111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2320'. [ 183.842328][T12085] siw: device registration error -23 [ 183.857132][ T29] kauditd_printk_skb: 409 callbacks suppressed [ 183.857152][ T29] audit: type=1326 audit(1766895060.044:12251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12112 comm="syz.3.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9944a9f749 code=0x7ffc0000 [ 183.888171][ T29] audit: type=1326 audit(1766895060.044:12252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12112 comm="syz.3.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9944a9f749 code=0x7ffc0000 [ 183.912548][ T29] audit: type=1326 audit(1766895060.074:12253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12112 comm="syz.3.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f9944a9f749 code=0x7ffc0000 [ 183.937106][ T29] audit: type=1326 audit(1766895060.104:12254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12112 comm="syz.3.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9944a9f749 code=0x7ffc0000 [ 183.961412][ T29] audit: type=1326 audit(1766895060.104:12255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12112 comm="syz.3.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9944a9f749 code=0x7ffc0000 [ 184.006989][ T29] audit: type=1400 audit(1766895060.194:12256): avc: denied { mount } for pid=12120 comm="syz.3.2323" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 184.031027][T12121] loop3: detected capacity change from 0 to 512 [ 184.040347][T12121] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2323: inode has both inline data and extents flags [ 184.054392][T12121] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2323: couldn't read orphan inode 15 (err -117) [ 184.074926][T12121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.095274][T12128] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2324'. [ 184.116919][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.136562][ T29] audit: type=1326 audit(1766895060.324:12257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12129 comm="syz.2.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 184.168406][ T29] audit: type=1326 audit(1766895060.354:12258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12129 comm="syz.2.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 184.192838][ T29] audit: type=1326 audit(1766895060.354:12259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12129 comm="syz.2.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 184.218001][ T29] audit: type=1326 audit(1766895060.354:12260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12129 comm="syz.2.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 184.333110][T12150] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 184.333110][T12150] program syz.2.2329 not setting count and/or reply_len properly [ 184.379663][T12153] loop3: detected capacity change from 0 to 512 [ 184.390753][T12153] EXT4-fs: Ignoring removed i_version option [ 184.400112][T12153] EXT4-fs (loop3): orphan cleanup on readonly fs [ 184.426577][T12153] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.2331: EA inode hash validation failed [ 184.441257][T12153] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.2331: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 184.472769][T12158] lo speed is unknown, defaulting to 1000 [ 184.621286][T12153] EXT4-fs (loop3): Remounting filesystem read-only [ 184.627988][T12153] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.3.2331: ea_inode dec ref err=-117 [ 184.697574][T12153] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 184.719857][T12183] lo speed is unknown, defaulting to 1000 [ 184.726121][T12153] EXT4-fs (loop3): 1 orphan inode deleted [ 184.746440][T12153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 184.832246][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.947005][T12183] siw: device registration error -23 [ 185.133038][T12225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2336'. [ 185.157243][T12225] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 185.799612][T12263] loop3: detected capacity change from 0 to 512 [ 185.822926][T12263] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.2346: EA inode hash validation failed [ 185.837490][T12263] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 185.852380][T12263] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.2346: corrupted inode contents [ 185.865484][T12263] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.2346: mark_inode_dirty error [ 185.878337][T12263] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.2346: corrupted inode contents [ 185.891992][T12263] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.2346: mark_inode_dirty error [ 185.904982][T12263] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.2346: mark inode dirty (error -117) [ 185.920597][T12263] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 185.932347][T12263] EXT4-fs (loop3): 1 orphan inode deleted [ 185.953547][T12263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.004675][T12269] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 186.004675][T12269] program syz.4.2347 not setting count and/or reply_len properly [ 186.118388][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2349'. [ 186.135134][T12274] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2349'. [ 186.204984][T12272] lo speed is unknown, defaulting to 1000 [ 186.503835][T12337] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2358'. [ 186.588964][T12339] loop0: detected capacity change from 0 to 512 [ 186.595768][T12339] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 186.611007][T12339] EXT4-fs: error: could not find journal device path [ 186.630350][T12339] lo speed is unknown, defaulting to 1000 [ 186.768454][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.052766][T12374] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2360'. [ 187.143713][T12374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2360'. [ 187.468551][T12394] loop3: detected capacity change from 0 to 512 [ 187.475724][T12394] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 187.497569][T12394] EXT4-fs (loop3): 1 truncate cleaned up [ 187.503784][T12394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.651328][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.703514][T12409] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2369'. [ 187.798227][T12414] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 187.798227][T12414] program syz.4.2371 not setting count and/or reply_len properly [ 187.887756][T12416] lo speed is unknown, defaulting to 1000 [ 188.066264][T12445] lo speed is unknown, defaulting to 1000 [ 188.340345][T12457] loop1: detected capacity change from 0 to 512 [ 188.421790][T12457] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 188.430130][T12457] EXT4-fs (loop1): orphan cleanup on readonly fs [ 188.440003][T12457] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 188.452291][T12457] EXT4-fs (loop1): Remounting filesystem read-only [ 188.459462][T12457] EXT4-fs (loop1): 1 truncate cleaned up [ 188.795189][T12485] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2379'. [ 189.152341][ T9123] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 189.162958][ T9123] __quota_error: 239 callbacks suppressed [ 189.162976][ T9123] Quota error (device loop1): write_blk: dquota write failed [ 189.176289][ T9123] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 189.186505][ T9123] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 189.197221][ T9123] Quota error (device loop1): write_blk: dquota write failed [ 189.205011][ T9123] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 189.218524][ T9123] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 189.228930][ T9123] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 189.239803][ T9123] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 189.250253][T12457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 189.315853][ T29] audit: type=1326 audit(1766895065.504:12500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12494 comm="syz.0.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d864f749 code=0x7ffc0000 [ 189.340076][ T29] audit: type=1326 audit(1766895065.504:12501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12494 comm="syz.0.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa6d864f749 code=0x7ffc0000 [ 189.364287][ T29] audit: type=1326 audit(1766895065.504:12502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12494 comm="syz.0.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d864f749 code=0x7ffc0000 [ 189.388050][ T29] audit: type=1326 audit(1766895065.504:12503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12494 comm="syz.0.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fa6d864f749 code=0x7ffc0000 [ 189.491967][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.625412][T12506] lo speed is unknown, defaulting to 1000 [ 189.791104][T12529] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 189.791104][T12529] program syz.1.2383 not setting count and/or reply_len properly [ 190.236095][T12542] loop0: detected capacity change from 0 to 512 [ 190.279716][T12542] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.286517][T12542] EXT4-fs: Ignoring removed oldalloc option [ 190.309450][T12543] lo speed is unknown, defaulting to 1000 [ 190.486526][T12542] EXT4-fs: Mount option(s) incompatible with ext2 [ 190.602549][T12568] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 190.602549][T12568] program syz.3.2389 not setting count and/or reply_len properly [ 190.757387][T12582] loop1: detected capacity change from 0 to 512 [ 190.764612][T12582] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.771513][T12582] EXT4-fs: Ignoring removed oldalloc option [ 190.806565][T12582] EXT4-fs: Mount option(s) incompatible with ext2 [ 191.055850][T12596] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 191.163032][T12611] hub 6-0:1.0: USB hub found [ 191.167884][T12611] hub 6-0:1.0: 8 ports detected [ 191.453217][T12626] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2406'. [ 191.469754][T12626] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2406'. [ 191.762836][T12641] loop3: detected capacity change from 0 to 512 [ 191.769854][T12641] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 191.785501][T12641] EXT4-fs: error: could not find journal device path [ 191.805017][T12641] lo speed is unknown, defaulting to 1000 [ 191.990496][T12691] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2421'. [ 192.039618][T12703] loop1: detected capacity change from 0 to 512 [ 192.049264][T12703] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2424: inode has both inline data and extents flags [ 192.065458][T12703] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2424: couldn't read orphan inode 15 (err -117) [ 192.078997][T12703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.098917][T12712] dvmrp1: entered allmulticast mode [ 192.106187][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.123188][T12712] dvmrp1: left allmulticast mode [ 192.142868][T12728] loop1: detected capacity change from 0 to 512 [ 192.149823][T12728] EXT4-fs: Ignoring removed i_version option [ 192.157429][T12728] EXT4-fs (loop1): orphan cleanup on readonly fs [ 192.165418][T12728] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.2427: EA inode hash validation failed [ 192.179007][T12728] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 192.195103][T12733] loop4: detected capacity change from 0 to 512 [ 192.202294][T12728] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.2427: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 192.218009][T12728] EXT4-fs (loop1): Remounting filesystem read-only [ 192.218920][T12733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.224596][T12728] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.1.2427: ea_inode dec ref err=-117 [ 192.250234][T12728] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 192.259307][T12728] EXT4-fs (loop1): 1 orphan inode deleted [ 192.266080][T12728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 192.294382][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.362534][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.548393][T12781] loop4: detected capacity change from 0 to 512 [ 192.574291][T12781] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2438: inode has both inline data and extents flags [ 192.595333][T12781] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2438: couldn't read orphan inode 15 (err -117) [ 192.608437][T12781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.646554][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.744813][T12810] hub 6-0:1.0: USB hub found [ 192.744945][T12808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2445'. [ 192.755935][T12810] hub 6-0:1.0: 8 ports detected [ 192.830861][T12824] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2447'. [ 192.873691][ T4333] hid-generic 0705:86000000:C8D6C0D7.0001: unknown main item tag 0x0 [ 192.894346][ T4333] hid-generic 0705:86000000:C8D6C0D7.0001: hidraw0: HID veb64f0.78 Device [syz1] on syz0 [ 192.901791][T12833] loop0: detected capacity change from 0 to 512 [ 192.916161][T12833] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.2453: inode has both inline data and extents flags [ 192.931019][T12833] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2453: couldn't read orphan inode 15 (err -117) [ 192.944218][T12833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.968970][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.227714][T12863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2459'. [ 193.269574][T12860] lo speed is unknown, defaulting to 1000 [ 193.338886][T12872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2462'. [ 193.580989][T12903] loop4: detected capacity change from 0 to 512 [ 193.599319][T12903] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2465: inode has both inline data and extents flags [ 193.620638][T12903] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2465: couldn't read orphan inode 15 (err -117) [ 193.638347][T12903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.681586][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.811897][T12911] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2466'. [ 194.118794][T12914] loop0: detected capacity change from 0 to 512 [ 194.125780][T12914] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 194.140953][T12914] EXT4-fs: error: could not find journal device path [ 194.176349][T12914] lo speed is unknown, defaulting to 1000 [ 194.322844][T12947] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2468'. [ 194.367446][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2471'. [ 194.377180][T12949] wireguard0: entered promiscuous mode [ 194.382980][T12949] wireguard0: entered allmulticast mode [ 194.400065][T12956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=12956 comm=syz.0.2470 [ 194.425398][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 194.425426][ T29] audit: type=1326 audit(1766895070.604:12787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12955 comm="syz.2.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 194.455912][ T29] audit: type=1326 audit(1766895070.604:12788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12955 comm="syz.2.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 194.479844][ T29] audit: type=1326 audit(1766895070.604:12789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12955 comm="syz.2.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 194.504019][ T29] audit: type=1326 audit(1766895070.604:12790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12955 comm="syz.2.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 194.527967][ T29] audit: type=1326 audit(1766895070.604:12791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12955 comm="syz.2.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 194.551759][ T29] audit: type=1326 audit(1766895070.604:12792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12955 comm="syz.2.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 194.575756][ T29] audit: type=1326 audit(1766895070.604:12793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12955 comm="syz.2.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 194.599731][ T29] audit: type=1326 audit(1766895070.604:12794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12955 comm="syz.2.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 194.624193][ T29] audit: type=1326 audit(1766895070.604:12795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12955 comm="syz.2.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 194.649038][ T29] audit: type=1326 audit(1766895070.604:12796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12955 comm="syz.2.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 194.690372][T12963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2473'. [ 194.781103][T12973] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.2476: inode has both inline data and extents flags [ 194.795476][T12973] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2476: couldn't read orphan inode 15 (err -117) [ 194.811080][T12973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.866524][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.113602][T12998] lo speed is unknown, defaulting to 1000 [ 195.411128][T13006] wireguard0: entered promiscuous mode [ 195.416673][T13006] wireguard0: entered allmulticast mode [ 195.457800][T13031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=13031 comm=syz.3.2484 [ 195.593100][T13037] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2485'. [ 195.615095][T13039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2486'. [ 195.653611][T13043] set_capacity_and_notify: 1 callbacks suppressed [ 195.653631][T13043] loop4: detected capacity change from 0 to 512 [ 195.667047][T13045] wireguard0: entered promiscuous mode [ 195.667497][T13043] EXT4-fs: Ignoring removed i_version option [ 195.672933][T13045] wireguard0: entered allmulticast mode [ 195.684429][T13043] EXT4-fs (loop4): orphan cleanup on readonly fs [ 195.692283][T13043] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.2488: EA inode hash validation failed [ 195.705247][T13043] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.2488: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 195.710441][T13052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=13052 comm=syz.3.2489 [ 195.723321][T13043] EXT4-fs (loop4): Remounting filesystem read-only [ 195.740144][T13043] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.4.2488: ea_inode dec ref err=-117 [ 195.754383][T13043] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 195.763670][T13043] EXT4-fs (loop4): 1 orphan inode deleted [ 195.770164][T13043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 195.873604][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.023705][T13079] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 196.105237][T13076] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 196.105237][T13076] program syz.4.2492 not setting count and/or reply_len properly [ 196.166676][T13091] dvmrp1: entered allmulticast mode [ 196.176695][T13091] dvmrp1: left allmulticast mode [ 196.202425][T13097] lo speed is unknown, defaulting to 1000 [ 196.285593][T13098] loop3: detected capacity change from 0 to 512 [ 196.295267][T13098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.373976][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.451707][T13128] loop1: detected capacity change from 0 to 512 [ 196.458471][T13128] EXT4-fs: Ignoring removed i_version option [ 196.466159][T13128] EXT4-fs (loop1): orphan cleanup on readonly fs [ 196.473639][T13128] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.2503: EA inode hash validation failed [ 196.486575][T13128] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.2503: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 196.502680][T13128] EXT4-fs (loop1): Remounting filesystem read-only [ 196.509425][T13128] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.1.2503: ea_inode dec ref err=-117 [ 196.522836][T13128] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 196.532289][T13128] EXT4-fs (loop1): 1 orphan inode deleted [ 196.538867][T13128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 196.560012][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.580550][T13144] loop1: detected capacity change from 0 to 512 [ 196.587488][T13144] EXT4-fs: dax option not supported [ 196.612625][T13144] lo speed is unknown, defaulting to 1000 [ 196.631754][T13143] lo speed is unknown, defaulting to 1000 [ 196.657129][T13161] FAULT_INJECTION: forcing a failure. [ 196.657129][T13161] name failslab, interval 1, probability 0, space 0, times 0 [ 196.670350][T13161] CPU: 0 UID: 0 PID: 13161 Comm: syz.3.2507 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 196.670387][T13161] Tainted: [W]=WARN [ 196.670400][T13161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.670412][T13161] Call Trace: [ 196.670419][T13161] [ 196.670429][T13161] __dump_stack+0x1d/0x30 [ 196.670457][T13161] dump_stack_lvl+0x95/0xd0 [ 196.670478][T13161] dump_stack+0x15/0x1b [ 196.670512][T13161] should_fail_ex+0x265/0x280 [ 196.670559][T13161] should_failslab+0x8c/0xb0 [ 196.670654][T13161] kmem_cache_alloc_noprof+0x69/0x4b0 [ 196.670683][T13161] ? dst_alloc+0xbd/0x100 [ 196.670715][T13161] ? fib6_table_lookup+0x214/0x630 [ 196.670827][T13161] ? __pfx_ip6_dst_gc+0x10/0x10 [ 196.670855][T13161] dst_alloc+0xbd/0x100 [ 196.670917][T13161] ip6_rt_cache_alloc+0x259/0x610 [ 196.671008][T13161] ip6_pol_route+0xafe/0xbd0 [ 196.671040][T13161] ? __rcu_read_unlock+0x4f/0x70 [ 196.671068][T13161] ip6_pol_route_output+0x40/0x50 [ 196.671115][T13161] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 196.671144][T13161] fib6_rule_lookup+0x112/0x470 [ 196.671165][T13161] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 196.671201][T13161] ? dev_get_by_index_rcu+0xa0/0xc0 [ 196.671245][T13161] ip6_route_output_flags+0x1e0/0x2c0 [ 196.671279][T13161] ip6_dst_lookup_tail+0x4a2/0xab0 [ 196.671361][T13161] ? avc_has_perm+0xf7/0x180 [ 196.671387][T13161] ip6_dst_lookup_flow+0x47/0xc0 [ 196.671412][T13161] rawv6_sendmsg+0xa29/0xf70 [ 196.671445][T13161] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 196.671464][T13161] inet_sendmsg+0xc5/0xd0 [ 196.671487][T13161] __sock_sendmsg+0x102/0x180 [ 196.671552][T13161] sock_write_iter+0x1a7/0x1f0 [ 196.671588][T13161] ? __pfx_sock_write_iter+0x10/0x10 [ 196.671624][T13161] vfs_write+0x52a/0x960 [ 196.671666][T13161] ksys_write+0xda/0x1a0 [ 196.671686][T13161] __x64_sys_write+0x40/0x50 [ 196.671705][T13161] x64_sys_call+0x2847/0x3000 [ 196.671730][T13161] do_syscall_64+0xca/0x2b0 [ 196.671765][T13161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.671851][T13161] RIP: 0033:0x7f9944a9f749 [ 196.671869][T13161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.671951][T13161] RSP: 002b:00007f9943507038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 196.671976][T13161] RAX: ffffffffffffffda RBX: 00007f9944cf5fa0 RCX: 00007f9944a9f749 [ 196.671992][T13161] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000003 [ 196.672005][T13161] RBP: 00007f9943507090 R08: 0000000000000000 R09: 0000000000000000 [ 196.672019][T13161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.672035][T13161] R13: 00007f9944cf6038 R14: 00007f9944cf5fa0 R15: 00007ffd4a2a1f88 [ 196.672115][T13161] [ 197.172396][T13202] infiniband syz!: set down [ 197.177131][T13202] infiniband syz!: added team_slave_0 [ 197.215938][T13222] netlink: 'syz.2.2514': attribute type 10 has an invalid length. [ 197.226625][T13202] RDS/IB: syz!: added [ 197.232722][T13202] smc: adding ib device syz! with port count 1 [ 197.239344][T13202] smc: ib device syz! port 1 has no pnetid [ 197.253147][T13222] team0: Failed to send options change via netlink (err -105) [ 197.260750][T13222] team0: Port device dummy0 added [ 197.763909][T13250] __nla_validate_parse: 5 callbacks suppressed [ 197.763923][T13250] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2519'. [ 197.857556][T13252] lo speed is unknown, defaulting to 1000 [ 198.004401][T13275] FAULT_INJECTION: forcing a failure. [ 198.004401][T13275] name failslab, interval 1, probability 0, space 0, times 0 [ 198.017452][T13275] CPU: 0 UID: 0 PID: 13275 Comm: syz.0.2521 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 198.017515][T13275] Tainted: [W]=WARN [ 198.017522][T13275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 198.017545][T13275] Call Trace: [ 198.017552][T13275] [ 198.017562][T13275] __dump_stack+0x1d/0x30 [ 198.017590][T13275] dump_stack_lvl+0x95/0xd0 [ 198.017614][T13275] dump_stack+0x15/0x1b [ 198.017641][T13275] should_fail_ex+0x265/0x280 [ 198.017740][T13275] ? __pfx_sock_alloc_inode+0x10/0x10 [ 198.017766][T13275] should_failslab+0x8c/0xb0 [ 198.017794][T13275] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 198.017822][T13275] ? sock_alloc_inode+0x34/0xa0 [ 198.017884][T13275] ? __pfx_sock_alloc_inode+0x10/0x10 [ 198.017908][T13275] sock_alloc_inode+0x34/0xa0 [ 198.017932][T13275] alloc_inode+0x40/0x170 [ 198.017959][T13275] __sock_create+0x120/0x580 [ 198.017983][T13275] __sys_socketpair+0x170/0x430 [ 198.018060][T13275] ? ksys_write+0x192/0x1a0 [ 198.018085][T13275] __x64_sys_socketpair+0x52/0x60 [ 198.018143][T13275] x64_sys_call+0x2df3/0x3000 [ 198.018174][T13275] do_syscall_64+0xca/0x2b0 [ 198.018217][T13275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.018282][T13275] RIP: 0033:0x7fa6d865169a [ 198.018298][T13275] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.018317][T13275] RSP: 002b:00007fa6d70aef78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 198.018340][T13275] RAX: ffffffffffffffda RBX: 00007fa6d88a5f00 RCX: 00007fa6d865169a [ 198.018357][T13275] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 198.018372][T13275] RBP: 00007fa6d70af090 R08: 0000000000000000 R09: 0000000000000000 [ 198.018385][T13275] R10: 00007fa6d70aef98 R11: 0000000000000246 R12: 0000000000000004 [ 198.018410][T13275] R13: 00007fa6d88a6038 R14: 00007fa6d88a5fa0 R15: 00007fffca5c5b08 [ 198.018428][T13275] [ 198.018437][T13275] socket: no more sockets [ 198.319299][T13286] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2524'. [ 198.340856][T13288] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 198.340856][T13288] program syz.3.2523 not setting count and/or reply_len properly [ 198.476337][T13301] wireguard0: entered promiscuous mode [ 198.482083][T13301] wireguard0: entered allmulticast mode [ 198.541411][T13307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=13307 comm=syz.2.2529 [ 198.695325][T13327] loop1: detected capacity change from 0 to 512 [ 198.706121][T13327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.718797][T13329] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2533'. [ 198.786248][T13342] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2536'. [ 198.821411][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.834356][T13344] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 198.834356][T13344] program syz.0.2538 not setting count and/or reply_len properly [ 199.069030][T13352] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2540'. [ 199.188443][T13357] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 199.188443][T13357] program syz.3.2541 not setting count and/or reply_len properly [ 199.501915][T13363] loop4: detected capacity change from 0 to 512 [ 199.508652][T13363] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.515560][T13363] EXT4-fs: Ignoring removed oldalloc option [ 199.522077][T13363] EXT4-fs: Mount option(s) incompatible with ext2 [ 199.570940][T13370] wireguard0: entered promiscuous mode [ 199.576734][T13370] wireguard0: entered allmulticast mode [ 199.614225][T13380] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2547'. [ 199.623466][T13380] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2547'. [ 199.632570][T13380] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2547'. [ 199.643804][T13382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=13382 comm=syz.4.2545 [ 199.768331][T13385] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 199.783295][T13385] loop2: detected capacity change from 0 to 512 [ 199.790854][T13385] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 199.803350][T13385] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 199.905634][T13392] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2550'. [ 199.931925][T13385] EXT4-fs (loop2): 1 truncate cleaned up [ 200.368375][T13385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.404919][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 200.404936][ T29] audit: type=1326 audit(1766895076.594:13122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13396 comm="syz.3.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9944a9f749 code=0x7ffc0000 [ 200.435353][ T29] audit: type=1326 audit(1766895076.594:13123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13396 comm="syz.3.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9944a9f749 code=0x7ffc0000 [ 200.459199][ T29] audit: type=1326 audit(1766895076.594:13124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13396 comm="syz.3.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9944a9f749 code=0x7ffc0000 [ 200.483408][ T29] audit: type=1326 audit(1766895076.594:13125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13396 comm="syz.3.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f9944a9f749 code=0x7ffc0000 [ 200.484801][T13402] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 200.484801][T13402] program syz.3.2551 not setting count and/or reply_len properly [ 200.639393][T13406] loop4: detected capacity change from 0 to 512 [ 200.659291][T13406] EXT4-fs: Ignoring removed nomblk_io_submit option [ 200.666097][T13406] EXT4-fs: Ignoring removed oldalloc option [ 200.673813][T13406] EXT4-fs: Mount option(s) incompatible with ext2 [ 200.681954][T13409] loop1: detected capacity change from 0 to 1024 [ 200.695783][T13409] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 200.705974][T13409] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 200.716665][T13409] EXT4-fs error (device loop1): ext4_get_journal_inode:5849: inode #32: comm syz.1.2555: iget: special inode unallocated [ 200.730682][T13409] EXT4-fs (loop1): Remounting filesystem read-only [ 200.737756][T13409] EXT4-fs (loop1): no journal found [ 200.743201][T13409] EXT4-fs (loop1): can't get journal size [ 200.752124][T13409] EXT4-fs (loop1): filesystem is read-only [ 200.758598][T13409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 200.761615][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.771165][T13409] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.805105][ T29] audit: type=1326 audit(1766895076.994:13126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13423 comm="syz.2.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 200.830078][ T29] audit: type=1326 audit(1766895076.994:13127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13423 comm="syz.2.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 200.854164][ T29] audit: type=1326 audit(1766895076.994:13128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13423 comm="syz.2.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 200.857208][T13427] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 200.857208][T13427] program syz.2.2557 not setting count and/or reply_len properly [ 200.878212][ T29] audit: type=1326 audit(1766895076.994:13129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13423 comm="syz.2.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 200.897659][T13429] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2556'. [ 200.919599][ T29] audit: type=1326 audit(1766895076.994:13130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13423 comm="syz.2.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 200.954863][T13409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13409 comm=syz.1.2555 [ 201.016474][T13432] loop1: detected capacity change from 0 to 512 [ 201.024287][T13432] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 201.038600][T13432] EXT4-fs (loop1): 1 truncate cleaned up [ 201.044978][T13432] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.136864][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.260571][T13442] loop3: detected capacity change from 0 to 512 [ 201.279982][T13442] EXT4-fs: Ignoring removed i_version option [ 201.288735][T13442] EXT4-fs (loop3): orphan cleanup on readonly fs [ 201.295957][T13442] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.2560: EA inode hash validation failed [ 201.308886][T13442] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 201.322662][T13442] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.2560: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 201.338085][T13442] EXT4-fs (loop3): Remounting filesystem read-only [ 201.344684][T13442] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.3.2560: ea_inode dec ref err=-117 [ 201.360600][T13442] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 201.369868][T13442] EXT4-fs (loop3): 1 orphan inode deleted [ 201.376106][T13442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 201.397985][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.672883][T13494] lo speed is unknown, defaulting to 1000 [ 202.154391][T13520] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 202.160954][T13520] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 202.168676][T13520] vhci_hcd vhci_hcd.0: Device attached [ 202.194093][T13526] loop3: detected capacity change from 0 to 512 [ 202.200849][T13526] EXT4-fs: Ignoring removed i_version option [ 202.208599][T13523] vhci_hcd: connection closed [ 202.208841][ T9123] vhci_hcd vhci_hcd.2: stop threads [ 202.218906][ T9123] vhci_hcd vhci_hcd.2: release socket [ 202.224499][ T9123] vhci_hcd vhci_hcd.2: disconnect device [ 202.237871][T13526] EXT4-fs (loop3): orphan cleanup on readonly fs [ 202.246711][T13526] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.2568: EA inode hash validation failed [ 202.251809][ T29] audit: type=1326 audit(1766895078.434:13131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13529 comm="syz.0.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d864f749 code=0x7ffc0000 [ 202.259691][T13526] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.2568: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 202.331702][T13526] EXT4-fs (loop3): Remounting filesystem read-only [ 202.338283][T13526] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.3.2568: ea_inode dec ref err=-117 [ 202.355354][T13526] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 202.365579][T13526] EXT4-fs (loop3): 1 orphan inode deleted [ 202.372253][T13526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 202.389077][T13539] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 202.389077][T13539] program syz.4.2570 not setting count and/or reply_len properly [ 202.421629][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.712203][T13569] lo speed is unknown, defaulting to 1000 [ 203.045844][T13593] wireguard0: entered promiscuous mode [ 203.051673][T13593] wireguard0: entered allmulticast mode [ 203.105051][T13602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=13602 comm=syz.1.2580 [ 203.320095][T13612] loop2: detected capacity change from 0 to 512 [ 203.395936][T13612] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.2587: inode has both inline data and extents flags [ 203.444344][T13612] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2587: couldn't read orphan inode 15 (err -117) [ 203.492464][T13612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.562664][T13624] __nla_validate_parse: 3 callbacks suppressed [ 203.562684][T13624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2591'. [ 203.616712][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.638615][T13624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.646221][T13624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.672137][T13624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.679696][T13624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.728119][T13626] lo speed is unknown, defaulting to 1000 [ 203.742995][T13640] FAULT_INJECTION: forcing a failure. [ 203.742995][T13640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.756212][T13640] CPU: 0 UID: 0 PID: 13640 Comm: syz.2.2595 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 203.756313][T13640] Tainted: [W]=WARN [ 203.756320][T13640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 203.756332][T13640] Call Trace: [ 203.756340][T13640] [ 203.756348][T13640] __dump_stack+0x1d/0x30 [ 203.756378][T13640] dump_stack_lvl+0x95/0xd0 [ 203.756404][T13640] dump_stack+0x15/0x1b [ 203.756484][T13640] should_fail_ex+0x265/0x280 [ 203.756511][T13640] should_fail+0xb/0x20 [ 203.756536][T13640] should_fail_usercopy+0x1a/0x20 [ 203.756562][T13640] _copy_from_user+0x1c/0xb0 [ 203.756594][T13640] ___sys_sendmsg+0xc1/0x1d0 [ 203.756651][T13640] __x64_sys_sendmsg+0xd4/0x160 [ 203.756691][T13640] x64_sys_call+0x17ba/0x3000 [ 203.756718][T13640] do_syscall_64+0xca/0x2b0 [ 203.756821][T13640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.756845][T13640] RIP: 0033:0x7fd98bd8f749 [ 203.756866][T13640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.756967][T13640] RSP: 002b:00007fd98a7f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.757053][T13640] RAX: ffffffffffffffda RBX: 00007fd98bfe5fa0 RCX: 00007fd98bd8f749 [ 203.757067][T13640] RDX: 0000000004000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 203.757080][T13640] RBP: 00007fd98a7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 203.757092][T13640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.757125][T13640] R13: 00007fd98bfe6038 R14: 00007fd98bfe5fa0 R15: 00007ffec21db988 [ 203.757172][T13640] [ 203.877658][T13641] siw: device registration error -23 [ 204.198390][T13677] wireguard0: entered promiscuous mode [ 204.204350][T13677] wireguard0: entered allmulticast mode [ 204.247123][T13683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=13683 comm=syz.0.2599 [ 204.358842][T13694] loop3: detected capacity change from 0 to 512 [ 204.367376][T13694] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2602: inode has both inline data and extents flags [ 204.381471][T13694] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2602: couldn't read orphan inode 15 (err -117) [ 204.397390][T13694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.424214][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.435494][T13700] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2601'. [ 204.995080][T13780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2624'. [ 205.059180][T13788] loop3: detected capacity change from 0 to 128 [ 205.068595][T13788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2628'. [ 205.068599][T13794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2630'. [ 205.277040][T13826] dvmrp1: entered allmulticast mode [ 205.283768][T13826] dvmrp1: left allmulticast mode [ 205.334505][T13826] loop2: detected capacity change from 0 to 512 [ 205.350911][T13826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.488370][ T29] kauditd_printk_skb: 397 callbacks suppressed [ 205.488419][ T29] audit: type=1326 audit(1766895081.674:13527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.1.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85982f749 code=0x7ffc0000 [ 205.518794][ T29] audit: type=1326 audit(1766895081.674:13528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.1.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe85982f749 code=0x7ffc0000 [ 205.542827][ T29] audit: type=1326 audit(1766895081.674:13529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.1.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85982f749 code=0x7ffc0000 [ 205.551940][T13826] syz.2.2637 (13826) used greatest stack depth: 9144 bytes left [ 205.606500][ T29] audit: type=1326 audit(1766895081.754:13530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.1.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe85982f749 code=0x7ffc0000 [ 205.630456][ T29] audit: type=1326 audit(1766895081.754:13531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.1.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85982f749 code=0x7ffc0000 [ 205.654515][ T29] audit: type=1326 audit(1766895081.754:13532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.1.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe85982f749 code=0x7ffc0000 [ 205.665942][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.678745][ T29] audit: type=1326 audit(1766895081.754:13533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.1.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85982f749 code=0x7ffc0000 [ 205.711855][ T29] audit: type=1326 audit(1766895081.754:13534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.1.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe85982f749 code=0x7ffc0000 [ 205.735809][ T29] audit: type=1326 audit(1766895081.754:13535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.1.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85982f749 code=0x7ffc0000 [ 205.759836][ T29] audit: type=1326 audit(1766895081.754:13536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.1.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe85982f749 code=0x7ffc0000 [ 205.816621][T13880] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2646'. [ 205.976358][T13897] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2650'. [ 206.400946][T13916] lo speed is unknown, defaulting to 1000 [ 206.549025][T13939] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2661'. [ 206.558272][T13939] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2661'. [ 206.567486][T13939] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2661'. [ 206.846020][T13947] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 206.846020][T13947] program syz.3.2663 not setting count and/or reply_len properly [ 207.551448][T13972] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 207.551448][T13972] program syz.4.2670 not setting count and/or reply_len properly [ 207.579539][T13975] loop1: detected capacity change from 0 to 512 [ 207.587871][T13975] EXT4-fs: Ignoring removed i_version option [ 207.600886][T13975] EXT4-fs (loop1): orphan cleanup on readonly fs [ 207.615558][T13975] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.2673: EA inode hash validation failed [ 207.639122][T13975] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.2673: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 207.655321][T13975] EXT4-fs (loop1): Remounting filesystem read-only [ 207.662055][T13975] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.1.2673: ea_inode dec ref err=-117 [ 207.675171][T13975] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 207.710354][T13975] EXT4-fs (loop1): 1 orphan inode deleted [ 207.723454][T13975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 207.777089][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.881951][T13988] loop1: detected capacity change from 0 to 128 [ 208.146067][T14001] wireguard0: entered promiscuous mode [ 208.151789][T14001] wireguard0: entered allmulticast mode [ 208.193958][T14007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=14007 comm=syz.1.2679 [ 208.389373][T14015] loop1: detected capacity change from 0 to 512 [ 208.397143][T14015] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.404121][T14015] EXT4-fs: Ignoring removed oldalloc option [ 208.410844][T14015] EXT4-fs: Mount option(s) incompatible with ext2 [ 208.456588][T14025] dvmrp1: entered allmulticast mode [ 208.466905][T14025] dvmrp1: left allmulticast mode [ 208.509963][T14034] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 208.509963][T14034] program syz.4.2685 not setting count and/or reply_len properly [ 208.534471][T14036] loop2: detected capacity change from 0 to 512 [ 208.557088][T14036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.648135][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.688870][T14055] wireguard0: entered promiscuous mode [ 208.694528][T14055] wireguard0: entered allmulticast mode [ 208.702433][T14060] loop3: detected capacity change from 0 to 512 [ 208.709693][T14060] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 208.721317][T14060] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 208.735033][T14060] EXT4-fs (loop3): 1 truncate cleaned up [ 208.741156][T14060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.754335][T14065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=14065 comm=syz.2.2691 [ 208.866482][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.964783][T14081] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=14081 comm=syz.3.2697 [ 208.992958][T14084] loop3: detected capacity change from 0 to 512 [ 208.999997][T14084] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.006942][T14084] EXT4-fs: Ignoring removed oldalloc option [ 209.013562][T14084] EXT4-fs: Mount option(s) incompatible with ext2 [ 209.023445][T14088] __nla_validate_parse: 3 callbacks suppressed [ 209.023464][T14088] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2696'. [ 209.341768][T14101] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2702'. [ 209.358423][T14103] wireguard0: entered promiscuous mode [ 209.364276][T14103] wireguard0: entered allmulticast mode [ 209.375439][T14109] loop4: detected capacity change from 0 to 512 [ 209.384099][T14109] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2705: inode has both inline data and extents flags [ 209.398108][T14109] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2705: couldn't read orphan inode 15 (err -117) [ 209.410938][T14114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=14114 comm=syz.1.2704 [ 209.417542][T14109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.462931][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.507308][T14118] loop4: detected capacity change from 0 to 512 [ 209.514138][T14118] EXT4-fs: Ignoring removed i_version option [ 209.522137][T14118] EXT4-fs (loop4): orphan cleanup on readonly fs [ 209.529165][T14118] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.2706: EA inode hash validation failed [ 209.541916][T14118] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 209.555278][T14118] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.2706: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 209.571978][T14118] EXT4-fs (loop4): Remounting filesystem read-only [ 209.578710][T14118] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.4.2706: ea_inode dec ref err=-117 [ 209.592173][T14118] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 209.601656][T14118] EXT4-fs (loop4): 1 orphan inode deleted [ 209.607863][T14118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 209.632048][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.651611][T14132] loop4: detected capacity change from 0 to 512 [ 209.658436][T14132] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.665224][T14132] EXT4-fs: Ignoring removed oldalloc option [ 209.672255][T14132] EXT4-fs: Mount option(s) incompatible with ext2 [ 209.700768][T14137] wireguard0: entered promiscuous mode [ 209.706476][T14137] wireguard0: entered allmulticast mode [ 209.748028][T14147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=14147 comm=syz.1.2710 [ 209.863747][T14156] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2714'. [ 209.880982][T14156] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 209.887714][T14156] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 209.895553][T14156] vhci_hcd vhci_hcd.0: Device attached [ 209.920430][T14161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2715'. [ 209.931821][T14157] vhci_hcd: connection closed [ 209.932012][T12340] vhci_hcd vhci_hcd.2: stop threads [ 209.942314][T12340] vhci_hcd vhci_hcd.2: release socket [ 209.947969][T12340] vhci_hcd vhci_hcd.2: disconnect device [ 210.325507][T14187] lo speed is unknown, defaulting to 1000 [ 210.344465][T14195] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2722'. [ 210.364018][T14197] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2726'. [ 210.755997][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 210.756017][ T29] audit: type=1326 audit(1766895086.914:13824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.0.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d864f749 code=0x7ffc0000 [ 210.786588][ T29] audit: type=1326 audit(1766895086.914:13825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.0.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa6d864f749 code=0x7ffc0000 [ 210.810691][ T29] audit: type=1326 audit(1766895086.914:13826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.0.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d864f749 code=0x7ffc0000 [ 210.834624][ T29] audit: type=1326 audit(1766895086.924:13827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.0.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fa6d864f749 code=0x7ffc0000 [ 210.858758][ T29] audit: type=1326 audit(1766895086.924:13828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.0.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d864f749 code=0x7ffc0000 [ 210.882855][ T29] audit: type=1326 audit(1766895086.924:13829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.0.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fa6d864f749 code=0x7ffc0000 [ 210.906634][ T29] audit: type=1326 audit(1766895086.924:13830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.0.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d864f749 code=0x7ffc0000 [ 210.930654][ T29] audit: type=1326 audit(1766895086.924:13831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.0.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d864f749 code=0x7ffc0000 [ 210.954833][ T29] audit: type=1326 audit(1766895086.924:13832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.0.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fa6d864f749 code=0x7ffc0000 [ 210.979223][ T29] audit: type=1326 audit(1766895086.924:13833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14220 comm="syz.0.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d864f749 code=0x7ffc0000 [ 211.064551][T14230] loop2: detected capacity change from 0 to 512 [ 211.071657][T14230] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 211.092273][T14230] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 211.136148][T14230] EXT4-fs (loop2): 1 truncate cleaned up [ 211.204484][T14230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.228663][T14242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2733'. [ 211.334162][T14257] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2737'. [ 211.379002][T14255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 211.391332][T14255] ext4 filesystem being mounted at /529/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.410729][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.414792][T14267] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 211.414792][T14267] program syz.3.2736 not setting count and/or reply_len properly [ 211.490603][T14278] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.497355][T14278] EXT4-fs: Ignoring removed oldalloc option [ 211.503968][T14278] EXT4-fs: Mount option(s) incompatible with ext2 [ 211.537669][T14291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2747'. [ 211.548656][T14291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2747'. [ 211.697999][T14311] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 211.710203][T14311] EXT4-fs (loop1): 1 truncate cleaned up [ 211.716715][T14311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.834788][T14319] dvmrp1: entered allmulticast mode [ 211.841076][T14319] dvmrp1: left allmulticast mode [ 211.889145][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.896746][T14324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.938317][T14334] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2755: inode has both inline data and extents flags [ 211.952583][T14334] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2755: couldn't read orphan inode 15 (err -117) [ 211.965606][T14334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.989160][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.021865][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.042496][T14346] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.049165][T14346] EXT4-fs: Ignoring removed oldalloc option [ 212.055607][T14346] EXT4-fs: Mount option(s) incompatible with ext2 [ 212.101628][T14356] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.108410][T14356] EXT4-fs: Ignoring removed oldalloc option [ 212.115070][T14356] EXT4-fs: Mount option(s) incompatible with ext2 [ 212.193947][T14372] EXT4-fs: Ignoring removed i_version option [ 212.201842][T14372] EXT4-fs (loop1): orphan cleanup on readonly fs [ 212.209006][T14372] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.2766: EA inode hash validation failed [ 212.222886][T14372] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 212.240574][T14372] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.2766: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 212.256621][T14377] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.2767: inode has both inline data and extents flags [ 212.258409][T14381] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.276740][T14381] EXT4-fs: Ignoring removed oldalloc option [ 212.280659][T14377] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2767: couldn't read orphan inode 15 (err -117) [ 212.283019][T14372] EXT4-fs (loop1): Remounting filesystem read-only [ 212.301462][T14372] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.1.2766: ea_inode dec ref err=-117 [ 212.305041][T14381] EXT4-fs: Mount option(s) incompatible with ext2 [ 212.315636][T14377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.338649][T14372] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 212.357506][T14372] EXT4-fs (loop1): 1 orphan inode deleted [ 212.361395][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.363886][T14372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 212.434649][T14392] dvmrp1: entered allmulticast mode [ 212.443694][T14392] dvmrp1: left allmulticast mode [ 212.446669][T14391] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 212.464595][T14391] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 212.479717][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.479747][T14391] EXT4-fs (loop3): 1 truncate cleaned up [ 212.480193][T14391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.661551][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.702084][T14424] set_capacity_and_notify: 12 callbacks suppressed [ 212.702106][T14424] loop3: detected capacity change from 0 to 512 [ 212.731932][T14424] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2779: inode has both inline data and extents flags [ 212.746080][T14424] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2779: couldn't read orphan inode 15 (err -117) [ 212.769751][T14430] loop2: detected capacity change from 0 to 512 [ 212.776595][T14430] EXT4-fs: Ignoring removed i_version option [ 212.782679][T14430] EXT4-fs: Ignoring removed bh option [ 212.791165][T14428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=14428 comm=syz.0.2780 [ 212.813492][T14430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.826732][T14430] ext4 filesystem being mounted at /538/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.875451][T14424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.918714][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.031811][T14437] loop3: detected capacity change from 0 to 512 [ 213.056685][T14437] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.063482][T14437] EXT4-fs: Ignoring removed oldalloc option [ 213.079098][T14437] EXT4-fs: Mount option(s) incompatible with ext2 [ 213.688502][T14453] loop1: detected capacity change from 0 to 512 [ 213.705187][T14453] EXT4-fs: Ignoring removed i_version option [ 213.758074][T14453] EXT4-fs (loop1): orphan cleanup on readonly fs [ 213.765257][T14453] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.2785: EA inode hash validation failed [ 213.778330][T14453] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 213.791818][T14453] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.2785: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 213.807305][T14453] EXT4-fs (loop1): Remounting filesystem read-only [ 213.813851][T14453] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.1.2785: ea_inode dec ref err=-117 [ 213.828549][T14453] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 213.838117][T14453] EXT4-fs (loop1): 1 orphan inode deleted [ 213.844541][T14453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 213.869424][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.170880][T14042] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 214.226442][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.248162][T14469] loop2: detected capacity change from 0 to 512 [ 214.261000][T14469] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.2791: inode has both inline data and extents flags [ 214.276367][T14469] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2791: couldn't read orphan inode 15 (err -117) [ 214.289075][T14469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.304663][T14475] wireguard0: entered promiscuous mode [ 214.310501][T14475] wireguard0: entered allmulticast mode [ 214.342860][T14480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=14480 comm=syz.0.2792 [ 214.361704][T14471] __nla_validate_parse: 11 callbacks suppressed [ 214.361725][T14471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2786'. [ 214.378821][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.389398][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 214.487421][T14501] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2795'. [ 214.525162][T14502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2796'. [ 214.535509][T14502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2796'. [ 214.548840][T14506] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2795'. [ 214.755165][T14530] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 214.755165][T14530] program syz.0.2801 not setting count and/or reply_len properly [ 214.867831][T14540] wireguard0: entered promiscuous mode [ 214.873514][T14540] wireguard0: entered allmulticast mode [ 214.916972][T14547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=14547 comm=syz.4.2807 [ 215.037107][T14558] loop4: detected capacity change from 0 to 512 [ 215.044055][T14558] EXT4-fs: Ignoring removed i_version option [ 215.051920][T14558] EXT4-fs (loop4): orphan cleanup on readonly fs [ 215.059657][T14558] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.2810: EA inode hash validation failed [ 215.072605][T14558] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.2810: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 215.088139][T14558] EXT4-fs (loop4): Remounting filesystem read-only [ 215.094732][T14558] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.4.2810: ea_inode dec ref err=-117 [ 215.108740][T14558] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 215.118187][T14558] EXT4-fs (loop4): 1 orphan inode deleted [ 215.278741][T14575] lo speed is unknown, defaulting to 1000 [ 215.327529][ T4358] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.346627][T14601] wireguard0: entered promiscuous mode [ 215.352339][T14601] wireguard0: entered allmulticast mode [ 215.383040][ T4358] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.395350][T14625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=14625 comm=syz.4.2820 [ 215.444818][T14575] chnl_net:caif_netlink_parms(): no params data found [ 215.472207][ T4358] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.521452][T14575] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.528579][T14575] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.552484][T14575] bridge_slave_0: entered allmulticast mode [ 215.559097][T14575] bridge_slave_0: entered promiscuous mode [ 215.568055][ T4358] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.596785][T14575] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.604176][T14575] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.611778][T14575] bridge_slave_1: entered allmulticast mode [ 215.618437][T14575] bridge_slave_1: entered promiscuous mode [ 215.642552][T14575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.661587][T14575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.696254][T14808] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2822'. [ 215.730218][T14575] team0: Port device team_slave_0 added [ 215.761137][T14575] team0: Port device team_slave_1 added [ 215.782924][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 215.782943][ T29] audit: type=1326 audit(1766895091.964:14007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14820 comm="syz.4.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f2a9a0ff749 code=0x7ffc0000 [ 215.813837][ T29] audit: type=1326 audit(1766895091.974:14008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14820 comm="syz.4.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9a0ff749 code=0x7ffc0000 [ 215.837715][ T29] audit: type=1326 audit(1766895091.974:14009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14820 comm="syz.4.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f2a9a0ff749 code=0x7ffc0000 [ 215.861934][ T29] audit: type=1326 audit(1766895091.974:14010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14820 comm="syz.4.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9a0ff749 code=0x7ffc0000 [ 215.885851][ T29] audit: type=1326 audit(1766895091.974:14011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14820 comm="syz.4.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a9a0ff749 code=0x7ffc0000 [ 215.944952][T14575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.952056][T14575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.978329][T14575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.990785][ T29] audit: type=1326 audit(1766895092.124:14012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14820 comm="syz.4.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9a0ff749 code=0x7ffc0000 [ 216.014708][ T29] audit: type=1326 audit(1766895092.124:14013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14820 comm="syz.4.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9a0ff749 code=0x7ffc0000 [ 216.038551][ T29] audit: type=1326 audit(1766895092.144:14014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14850 comm="syz.2.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 216.062454][ T29] audit: type=1326 audit(1766895092.144:14015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14850 comm="syz.2.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 216.086572][ T29] audit: type=1326 audit(1766895092.144:14016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14850 comm="syz.2.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd98bd8f749 code=0x7ffc0000 [ 216.095015][T14883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=14883 comm=syz.4.2832 [ 216.112976][T14575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.130463][T14575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.156952][T14575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.197165][T14881] wireguard0: entered promiscuous mode [ 216.203049][T14881] wireguard0: entered allmulticast mode [ 216.372172][ T4358] bond0 (unregistering): Released all slaves [ 216.401702][T14575] hsr_slave_0: entered promiscuous mode [ 216.407849][T14575] hsr_slave_1: entered promiscuous mode [ 216.414153][T14575] debugfs: 'hsr0' already exists in 'hsr' [ 216.420067][T14575] Cannot create hsr debugfs directory [ 216.427100][ T4358] IPVS: stopping master sync thread 9331 ... [ 216.529380][ T4358] hsr_slave_0: left promiscuous mode [ 216.535586][ T4358] hsr_slave_1: left promiscuous mode [ 216.543234][ T4358] veth1_macvtap: left promiscuous mode [ 216.549224][ T4358] veth0_macvtap: left promiscuous mode [ 216.556200][ T4358] veth1_vlan: left promiscuous mode [ 216.950567][T14575] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 216.963350][T14575] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 216.972958][T14575] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 216.984701][T14575] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 217.064273][T15054] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 217.064273][T15054] program syz.4.2843 not setting count and/or reply_len properly [ 217.127505][T14575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.140999][T14575] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.297169][T15060] lo speed is unknown, defaulting to 1000 [ 217.509622][T15083] loop1: detected capacity change from 0 to 512 [ 217.521917][ T9123] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.529371][ T9123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.553994][T15083] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2847: inode has both inline data and extents flags [ 217.554534][ T9123] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.567755][T15083] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2847: couldn't read orphan inode 15 (err -117) [ 217.574484][ T9123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.653994][T14575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.721676][T14575] veth0_vlan: entered promiscuous mode [ 217.730688][T14575] veth1_vlan: entered promiscuous mode [ 217.747964][T14575] veth0_macvtap: entered promiscuous mode [ 217.756855][T14575] veth1_macvtap: entered promiscuous mode [ 217.770746][T14575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.783855][T14575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.797174][ T4358] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.808089][ T4358] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.912581][ T4358] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.921866][T15114] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2850'. [ 217.934445][ T4358] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.028874][T15135] lo speed is unknown, defaulting to 1000 [ 218.514022][T15173] loop1: detected capacity change from 0 to 512 [ 218.522718][T15173] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2857: inode has both inline data and extents flags [ 218.538644][T15173] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2857: couldn't read orphan inode 15 (err -117) [ 218.691234][T15188] wireguard0: entered promiscuous mode [ 218.696934][T15188] wireguard0: entered allmulticast mode [ 218.718164][T15193] lo speed is unknown, defaulting to 1000 [ 218.740923][T15203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=15203 comm=syz.2.2859 [ 218.777459][T15197] wireguard0: entered promiscuous mode [ 218.783045][T15197] wireguard0: entered allmulticast mode [ 218.819487][T15209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=15209 comm=syz.4.2860 [ 219.036057][T15183] lo speed is unknown, defaulting to 1000 [ 219.586808][T15240] lo speed is unknown, defaulting to 1000 [ 219.833041][T15312] FAULT_INJECTION: forcing a failure. [ 219.833041][T15312] name failslab, interval 1, probability 0, space 0, times 0 [ 219.846189][T15312] CPU: 1 UID: 0 PID: 15312 Comm: syz.4.2867 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 219.846266][T15312] Tainted: [W]=WARN [ 219.846272][T15312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 219.846285][T15312] Call Trace: [ 219.846292][T15312] [ 219.846300][T15312] __dump_stack+0x1d/0x30 [ 219.846399][T15312] dump_stack_lvl+0x95/0xd0 [ 219.846423][T15312] dump_stack+0x15/0x1b [ 219.846514][T15312] should_fail_ex+0x265/0x280 [ 219.846542][T15312] should_failslab+0x8c/0xb0 [ 219.846569][T15312] __kmalloc_noprof+0xb9/0x5a0 [ 219.846594][T15312] ? kernfs_fop_write_iter+0xe2/0x300 [ 219.846699][T15312] ? avc_policy_seqno+0x15/0x30 [ 219.846782][T15312] ? selinux_file_permission+0x1e2/0x320 [ 219.846821][T15312] kernfs_fop_write_iter+0xe2/0x300 [ 219.846905][T15312] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 219.847041][T15312] vfs_write+0x52a/0x960 [ 219.847074][T15312] ksys_write+0xda/0x1a0 [ 219.847100][T15312] __x64_sys_write+0x40/0x50 [ 219.847149][T15312] x64_sys_call+0x2847/0x3000 [ 219.847177][T15312] do_syscall_64+0xca/0x2b0 [ 219.847211][T15312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.847239][T15312] RIP: 0033:0x7f2a9a0ff749 [ 219.847260][T15312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.847336][T15312] RSP: 002b:00007f2a98b5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 219.847395][T15312] RAX: ffffffffffffffda RBX: 00007f2a9a355fa0 RCX: 00007f2a9a0ff749 [ 219.847411][T15312] RDX: 0000000000000012 RSI: 00002000000001c0 RDI: 0000000000000007 [ 219.847427][T15312] RBP: 00007f2a98b5f090 R08: 0000000000000000 R09: 0000000000000000 [ 219.847477][T15312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.847492][T15312] R13: 00007f2a9a356038 R14: 00007f2a9a355fa0 R15: 00007ffea6aee0c8 [ 219.847513][T15312] [ 220.073287][T15183] chnl_net:caif_netlink_parms(): no params data found [ 220.211185][T15183] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.218497][T15183] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.262822][T15183] bridge_slave_0: entered allmulticast mode [ 220.285448][T15183] bridge_slave_0: entered promiscuous mode [ 220.310111][T15183] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.317346][T15183] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.354613][T15183] bridge_slave_1: entered allmulticast mode [ 220.401253][T15183] bridge_slave_1: entered promiscuous mode [ 220.492910][T15183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.531406][T15183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.581918][T15183] team0: Port device team_slave_0 added [ 220.583304][T15524] loop4: detected capacity change from 0 to 128 [ 220.597703][T15524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2874'. [ 220.613596][T15183] team0: Port device team_slave_1 added [ 220.696504][T15183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.703665][T15183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.729816][T15183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.814897][T15565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=15565 comm=syz.3.2878 [ 220.838182][T15183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.845252][T15183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.871661][T15183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.417465][T15564] wireguard0: entered promiscuous mode [ 221.423184][T15564] wireguard0: entered allmulticast mode [ 221.482621][T15571] lo speed is unknown, defaulting to 1000 [ 221.491069][T15572] lo speed is unknown, defaulting to 1000 [ 221.502511][T15183] hsr_slave_0: entered promiscuous mode [ 221.508884][T15183] hsr_slave_1: entered promiscuous mode [ 221.724874][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 221.724892][ T29] audit: type=1326 audit(1766895097.914:14131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.3.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526153f749 code=0x7ffc0000 [ 221.761103][ T29] audit: type=1326 audit(1766895097.944:14132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.3.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f526153f749 code=0x7ffc0000 [ 221.785074][ T29] audit: type=1326 audit(1766895097.944:14133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.3.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526153f749 code=0x7ffc0000 [ 221.809270][ T29] audit: type=1326 audit(1766895097.944:14134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.3.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f526153f749 code=0x7ffc0000 [ 221.833374][ T29] audit: type=1326 audit(1766895097.944:14135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.3.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526153f749 code=0x7ffc0000 [ 221.857653][ T29] audit: type=1326 audit(1766895097.954:14136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.3.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526153f749 code=0x7ffc0000 [ 221.864603][T15695] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 221.864603][T15695] program syz.2.2886 not setting count and/or reply_len properly [ 221.881978][ T29] audit: type=1326 audit(1766895097.954:14137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.3.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f526153f749 code=0x7ffc0000 [ 221.922723][ T29] audit: type=1326 audit(1766895097.954:14138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.3.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526153f749 code=0x7ffc0000 [ 221.946918][ T29] audit: type=1326 audit(1766895097.954:14139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.3.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f526153f749 code=0x7ffc0000 [ 221.971466][ T29] audit: type=1326 audit(1766895097.954:14140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15674 comm="syz.3.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526153f749 code=0x7ffc0000 [ 222.043387][T15732] loop4: detected capacity change from 0 to 128 [ 222.052205][T15732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2887'. [ 222.099356][T15745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2890'. [ 222.109384][T15745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2890'. [ 222.256976][T15768] loop4: detected capacity change from 0 to 128 [ 222.269278][T15768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2892'. [ 222.364409][ T9123] bond0 (unregistering): Released all slaves [ 222.462377][T15782] lo speed is unknown, defaulting to 1000 [ 222.732985][T15807] loop4: detected capacity change from 0 to 2048 [ 222.855847][T15183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 222.873050][ T9123] hsr_slave_0: left promiscuous mode [ 222.879944][ T9123] hsr_slave_1: left promiscuous mode [ 222.961901][ T3320] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 222.966638][T14662] smc: removing ib device syz! [ 223.013885][T15183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 223.037560][T15183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 223.047558][T15183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 223.212214][T15833] EXT4-fs unmount: 7 callbacks suppressed [ 223.212234][T15833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.259588][T15853] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 223.266255][T15853] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 223.274601][T15853] vhci_hcd vhci_hcd.0: Device attached [ 223.331628][T15855] vhci_hcd: connection closed [ 223.332400][T15264] vhci_hcd vhci_hcd.2: stop threads [ 223.342678][T15264] vhci_hcd vhci_hcd.2: release socket [ 223.348320][T15264] vhci_hcd vhci_hcd.2: disconnect device [ 223.358329][T15183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.391673][T15183] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.402292][T14662] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.409428][T14662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.477783][T15183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 223.488297][T15183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.594581][T14662] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.602045][T14662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.665653][T15868] lo speed is unknown, defaulting to 1000 [ 223.843009][T15874] ================================================================== [ 223.851215][T15874] BUG: KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_refill_alloc_cache [ 223.860886][T15874] [ 223.863487][T15874] write to 0xffff88811a79a200 of 8 bytes by task 15873 on cpu 1: [ 223.871194][T15874] page_pool_refill_alloc_cache+0x2a5/0x3c0 [ 223.877208][T15874] page_pool_alloc_pages+0xd0/0x130 [ 223.882606][T15874] bpf_test_run_xdp_live+0x54d/0x11d0 [ 223.888257][T15874] bpf_prog_test_run_xdp+0x525/0x970 [ 223.893885][T15874] bpf_prog_test_run+0x204/0x340 [ 223.898907][T15874] __sys_bpf+0x4c0/0x7c0 [ 223.903143][T15874] __x64_sys_bpf+0x41/0x50 [ 223.907589][T15874] x64_sys_call+0x28e1/0x3000 [ 223.912352][T15874] do_syscall_64+0xca/0x2b0 [ 223.916891][T15874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.922950][T15874] [ 223.925266][T15874] read to 0xffff88811a79a200 of 8 bytes by task 15874 on cpu 0: [ 223.933072][T15874] page_pool_put_unrefed_netmem+0x38b/0x4b0 [ 223.939035][T15874] napi_pp_put_page+0xe9/0x200 [ 223.943838][T15874] skb_free_head+0x12c/0x150 [ 223.948634][T15874] skb_release_data+0x33b/0x370 [ 223.953503][T15874] __kfree_skb+0x44/0x150 [ 223.957905][T15874] sk_skb_reason_drop+0xbd/0x270 [ 223.962870][T15874] udpv6_recvmsg+0x1f7/0xca0 [ 223.967486][T15874] inet6_recvmsg+0x143/0x290 [ 223.972181][T15874] sock_recvmsg+0x95/0x170 [ 223.976804][T15874] sock_read_iter+0x152/0x1a0 [ 223.981595][T15874] vfs_read+0x64c/0x770 [ 223.985778][T15874] ksys_read+0xda/0x1a0 [ 223.990041][T15874] __x64_sys_read+0x40/0x50 [ 223.994543][T15874] x64_sys_call+0x2889/0x3000 [ 223.999392][T15874] do_syscall_64+0xca/0x2b0 [ 224.003899][T15874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.009898][T15874] [ 224.012226][T15874] value changed: 0xffffea000463d9c0 -> 0x0000000000000000 [ 224.019436][T15874] [ 224.021775][T15874] Reported by Kernel Concurrency Sanitizer on: [ 224.028552][T15874] CPU: 0 UID: 0 PID: 15874 Comm: syz.0.2906 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 224.040009][T15874] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 224.043975][T15874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.054405][T15874] ================================================================== [ 224.112199][ T9123] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.177276][ T9123] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.278092][ T9123] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.363389][ T9123] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.722417][ T9123] bond0 (unregistering): Released all slaves [ 224.884070][ T9123] hsr_slave_0: left promiscuous mode [ 224.889784][ T9123] hsr_slave_1: left promiscuous mode [ 224.898379][ T9123] veth1_macvtap: left promiscuous mode [ 224.903998][ T9123] veth0_macvtap: left promiscuous mode [ 224.966991][ T3418] lo speed is unknown, defaulting to 1000 [ 224.973162][ T3418] infiniband syz2: ib_query_port failed (-19) [ 225.215647][ T9123] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.292597][ T9123] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.362752][ T9123] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.412954][ T9123] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.495200][ T9123] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.532831][ T9123] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.592930][ T9123] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.653123][ T9123] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.974203][ T9123] bridge_slave_1: left allmulticast mode [ 225.979949][ T9123] bridge_slave_1: left promiscuous mode [ 225.985774][ T9123] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.993772][ T9123] bridge_slave_0: left allmulticast mode [ 225.999513][ T9123] bridge_slave_0: left promiscuous mode [ 226.005512][ T9123] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.014538][ T9123] dummy0: left allmulticast mode [ 226.019593][ T9123] bridge0: port 3(dummy0) entered disabled state [ 226.026768][ T9123] bridge_slave_1: left allmulticast mode [ 226.032559][ T9123] bridge_slave_1: left promiscuous mode [ 226.038618][ T9123] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.046504][ T9123] bridge_slave_0: left allmulticast mode [ 226.052426][ T9123] bridge_slave_0: left promiscuous mode [ 226.058099][ T9123] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.172406][ T9123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.182750][ T9123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.192256][ T9123] bond0 (unregistering): Released all slaves [ 226.322847][ T9123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.332588][ T9123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.342078][ T9123] bond0 (unregistering): Released all slaves [ 226.350563][ T9123] bond1 (unregistering): Released all slaves [ 226.461860][ T9123] bond0 (unregistering): Released all slaves [ 226.565606][ T9123] hsr_slave_0: left promiscuous mode [ 226.571354][ T9123] hsr_slave_1: left promiscuous mode [ 226.576913][ T9123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.584467][ T9123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.592526][ T9123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.600188][ T9123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.609490][ T9123] hsr_slave_0: left promiscuous mode [ 226.616968][ T9123] hsr_slave_1: left promiscuous mode [ 226.624175][ T9123] hsr_slave_0: left promiscuous mode [ 226.630154][ T9123] hsr_slave_1: left promiscuous mode [ 226.640908][ T9123] veth1_macvtap: left promiscuous mode [ 226.647024][ T9123] veth0_macvtap: left promiscuous mode [ 226.652792][ T9123] veth1_vlan: left promiscuous mode [ 226.658260][ T9123] veth0_vlan: left promiscuous mode [ 226.663954][ T9123] veth1_macvtap: left promiscuous mode [ 226.669772][ T9123] veth0_macvtap: left promiscuous mode [ 226.675465][ T9123] veth1_vlan: left promiscuous mode [ 226.681157][ T9123] veth0_vlan: left promiscuous mode [ 226.764940][ T9123] team0 (unregistering): Port device team_slave_1 removed [ 226.775216][ T9123] team0 (unregistering): Port device team_slave_0 removed [ 226.825931][ T9123] team0 (unregistering): Port device team_slave_1 removed [ 226.837412][ T9123] team0 (unregistering): Port device team_slave_0 removed [ 226.889503][ T31] smc: removing ib device !yz! [ 226.909273][ T9123] team0 (unregistering): Port device dummy0 removed [ 227.804217][ T9123] bridge_slave_1: left allmulticast mode [ 227.810083][ T9123] bridge_slave_1: left promiscuous mode [ 227.815899][ T9123] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.823723][ T9123] bridge_slave_0: left allmulticast mode [ 227.829457][ T9123] bridge_slave_0: left promiscuous mode [ 227.835181][ T9123] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.903216][ T9123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.913191][ T9123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.922733][ T9123] bond0 (unregistering): Released all slaves [ 227.963597][ T9123] hsr_slave_0: left promiscuous mode [ 227.969836][ T9123] hsr_slave_1: left promiscuous mode [ 227.975689][ T9123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.983644][ T9123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.026220][ T9123] team0 (unregistering): Port device team_slave_1 removed [ 228.036535][ T9123] team0 (unregistering): Port device team_slave_0 removed