last executing test programs: 21.123984934s ago: executing program 3 (id=64): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) getgid() 21.012355233s ago: executing program 3 (id=67): ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fa, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x1, r0}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000300)) 21.005527394s ago: executing program 3 (id=69): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000001f) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) fcntl$notify(r2, 0x402, 0x8000003d) close_range(r1, r2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3964860c33acb56e, 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x80800) 20.957319308s ago: executing program 3 (id=71): fsmount(0xffffffffffffffff, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000180)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@block_validity}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) (fail_nth: 1) 20.604384506s ago: executing program 3 (id=78): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) getgid() 20.100366527s ago: executing program 3 (id=84): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 20.099228957s ago: executing program 32 (id=84): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 1.150781237s ago: executing program 0 (id=595): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f0000000140)='./file0\x00') 1.075731533s ago: executing program 1 (id=598): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 1.074944583s ago: executing program 4 (id=599): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 1.048141985s ago: executing program 0 (id=600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000180), 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0xfffffffc, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x6}, {}, {0x0, 0x0, 0xfe}, {0xf792}, {0x3}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 1.047196646s ago: executing program 1 (id=601): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0x34}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) connect$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a483137140000", 0x17}], 0x1}, 0x48000) 1.046493715s ago: executing program 4 (id=602): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030007e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1.028341257s ago: executing program 4 (id=603): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000014000e0a49bf925471e7fc50983f097013799b641ea79c734b6ef4a909f6c2743f53f288e526b45fe0769b612cae30d347d692db24c0a7fc637fa1cb855773a97058bb1e89ea2629a03a000f0f527000fbdb2d1b65fa9d7a12f86e4727da8c12d73cadf3961abdb1e575e65427efb303c637f2785cdb1d128d656102d655936b6ead69539ab7933768022578e97e1df45e204b804dce7f1b89c9e85251bbe2f57c3b4be994e3dfaefab23911bf72bf62214f8d1154befd11e305e47343dc4bc0e603181bc0bcd0a3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@deltfilter={0x5c, 0x2d, 0x400, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x5, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0xf, 0x1}}, @TCA_RATE={0x6, 0x5, {0x9, 0xe}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x14000000) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@usrquota}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x13, 0x1a, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000070000000000000066000000851000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500", @ANYRES32, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000001800000005000000000000000400000018100000", @ANYRES32, @ANYBLOB="00000000000000008520000002000000183800000300000000000000000000009500000000000000950000000000000077edf6371d04d6fc333495c455d397c9fbd0a59f954343f91b4435ca90156c25bacb9d2fb0619abc0cb29d7cdc658779b004fcb74242c48fb22bfb5c1b1f89ed234de70029f06cdf838feaefe86282b042744852ac6ccfe2e1f77e7ace69fbb064f2b5c2f8c9f7bff98688cb768efbaabea18d4a9d2f4af44a51e79fde06b76603785c394790a04dcf1233133e4760cee215af86eb7254eb459dc7b71af5caffe3c3cd147c8a7bf5e2eb8211a43b5dd1da6f0e4c"], &(0x7f0000000500)='syzkaller\x00', 0x533, 0x47, &(0x7f00000007c0)=""/71, 0x0, 0x4, '\x00', r3, @fallback=0x2c, r0, 0x8, &(0x7f0000000840)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000cc0)=[{0x5, 0x2, 0x7, 0x4}, {0x5, 0x1, 0x8, 0x51390033210c3dd4}, {0x4, 0x5, 0x1, 0xa}, {0x5, 0x4, 0x6, 0x5}, {0x0, 0x2, 0xd, 0x1}, {0x3, 0x3, 0x9, 0xa}, {0x5, 0x1, 0x7, 0xa}, {0x5, 0x1, 0x4, 0x2}], 0x10, 0x2}, 0x94) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000080)=0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x0) r8 = socket$isdn_base(0x22, 0x3, 0x0) bind$rds(r8, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000032c0)='/sys/power/pm_print_times', 0x200802, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) 1.009759668s ago: executing program 1 (id=604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) 999.161939ms ago: executing program 1 (id=605): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010200000000000000000a00000024"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x80800) 910.836616ms ago: executing program 5 (id=606): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) remap_file_pages(&(0x7f0000330000/0x2000)=nil, 0x2000, 0x0, 0x600, 0x20) syz_io_uring_setup(0x1e8f, &(0x7f0000000180)={0x0, 0x2b94, 0x10000, 0x4, 0x61}, &(0x7f0000000040), &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070002000000fddbdf2505000000180001801400020073797a5f74756e00000000000000007d0800038004000380080005"], 0x3c}}, 0x0) 896.094317ms ago: executing program 0 (id=607): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000330000/0x2000)=nil, 0x2000, 0x0, 0x600, 0x20) syz_io_uring_setup(0x1e8f, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070002000000fddbdf2505000000180001801400020073797a5f74756e00000000000000007d08000380040003800800"], 0x3c}}, 0x0) 885.115228ms ago: executing program 1 (id=608): futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0xab87fb79e2ee7309, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x400, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20200006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000940), 0x81000, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x40043d0d, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc0008000600000003600e120800110002000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db79800951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920323f9a94100"/216, 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x16, &(0x7f0000000280)=ANY=[], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) fchdir(0xffffffffffffffff) r3 = socket$inet(0x2, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x44010) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x14}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000a80)='qgroup_update_counters\x00', 0xffffffffffffffff, 0x0, 0x10000}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="35e2000000000000600012800b000100697036746e6c00005000028008000100", @ANYRES32, @ANYBLOB="0800140000000000080008000a0000000500090089000000060010000d000000080008000c000000050009"], 0x80}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000050, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x39, &(0x7f00000002c0), 0x4aae65405fe7c4dc, 0x10, &(0x7f00000002c0), &(0x7f00000005c0), 0x8, 0x80ce, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="11b7c78e3f1db2acc4"], 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="50000000090601020000000000000000000000000900020073797a31000000000500010007000000280007801800018014000240fc0100000000000000000c000280080001407f000001000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x10040047}, 0x24040844) socket$nl_netfilter(0x10, 0x3, 0xc) 884.694068ms ago: executing program 5 (id=609): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x4c) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000080)='./file0\x00', r1, 0x4000, r2}, 0x18) 879.956528ms ago: executing program 0 (id=610): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) 853.668481ms ago: executing program 5 (id=611): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") chdir(&(0x7f0000000140)='./file0\x00') 853.241981ms ago: executing program 4 (id=612): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x3) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 821.956033ms ago: executing program 4 (id=613): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030007e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 794.369006ms ago: executing program 0 (id=614): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0x34}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) connect$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a483137140000", 0x17}], 0x1}, 0x48000) 773.977348ms ago: executing program 4 (id=615): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, &(0x7f0000000340), 0x0}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r3, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r6 = dup(r4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) shutdown(r4, 0x1) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xa4}}, 0x0) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) ioctl$KDGKBTYPE(r8, 0x4b33, &(0x7f0000000080)) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x2) r10 = dup(r9) r11 = open(&(0x7f0000000040)='./bus\x00', 0x40d00, 0x20) sendfile(r10, r11, 0x0, 0x8000fffffffe) socket$inet_smc(0x2b, 0x1, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1}, 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70402000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r13}, 0x10) r14 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) fcntl$setlease(r14, 0x400, 0x0) 767.852718ms ago: executing program 5 (id=616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x8004) 756.928218ms ago: executing program 0 (id=617): ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) r3 = memfd_create(&(0x7f0000000000)='+\x00', 0x6) cachestat(r3, &(0x7f00000005c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x11}, 0x64) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000240), 0x4) r6 = socket$kcm(0xa, 0x5, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x4e23, 0x0, 0x4e24, 0x0, 0x2, 0x80, 0x0, 0x11, 0x0, r8}, {0xe61, 0x0, 0x0, 0x8, 0xb, 0x800, 0xffd, 0xffffffffffffffff}, {0x7, 0x4, 0x7fffffffffffffff, 0x7}, 0x8000, 0x6e6bb3, 0x0, 0x0, 0x2, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x3c}, 0x2, @in6=@remote, 0x3500, 0x0, 0x0, 0x4, 0xc, 0xd0, 0x1}}, 0xe8) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, r8, &(0x7f0000000100)) getgid() lchown(&(0x7f0000000040)='./file0\x00', r8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r6}) 726.348431ms ago: executing program 5 (id=618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000180), 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0xfffffffc, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x6}, {}, {0x0, 0x0, 0xfe}, {0xf792}, {0x3}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 662.636686ms ago: executing program 5 (id=619): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(r1, &(0x7f00000009c0)="3bf58d7d", 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ip_vti0\x00'}) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b0000000700000001000100490000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_CREATE(0x1800, &(0x7f00000009c0)=ANY=[], 0x48) 456.557302ms ago: executing program 2 (id=621): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f00000003c0)=""/67, 0x4}, 0x20) r1 = socket(0x2d, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="fb0c0000051636000000000000", @ANYRESHEX=r1, @ANYRES64=r1, @ANYRESDEC], 0x48) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x8090) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000000000085"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x3}}, [@tmpl={0x84, 0x5, [{{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}}, {{@in6=@empty, 0x0, 0x2b}, 0x2, @in=@dev, 0xffffffff}]}]}, 0x13c}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setresuid(0x0, 0x0, 0xee00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000)) 400.917927ms ago: executing program 2 (id=622): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010200000000000000000a00000024"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x80800) 196.279354ms ago: executing program 2 (id=623): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x3) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 195.818584ms ago: executing program 2 (id=624): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) 77.388493ms ago: executing program 2 (id=625): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030007e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 21.438847ms ago: executing program 2 (id=626): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)="1a", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x110, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040004) 0s ago: executing program 1 (id=627): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0x34}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) connect$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d0003", 0x23}], 0x1}, 0x48000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.214' (ED25519) to the list of known hosts. [ 26.945743][ T29] audit: type=1400 audit(1756684896.136:62): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.946585][ T3294] cgroup: Unknown subsys name 'net' [ 26.968618][ T29] audit: type=1400 audit(1756684896.136:63): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.995876][ T29] audit: type=1400 audit(1756684896.176:64): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.150418][ T3294] cgroup: Unknown subsys name 'cpuset' [ 27.156503][ T3294] cgroup: Unknown subsys name 'rlimit' [ 27.285675][ T29] audit: type=1400 audit(1756684896.476:65): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.309118][ T29] audit: type=1400 audit(1756684896.476:66): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.329615][ T29] audit: type=1400 audit(1756684896.476:67): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.349967][ T29] audit: type=1400 audit(1756684896.476:68): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.360384][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.370208][ T29] audit: type=1400 audit(1756684896.486:69): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.403471][ T29] audit: type=1400 audit(1756684896.486:70): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.426661][ T29] audit: type=1400 audit(1756684896.576:71): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.427242][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.591429][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 28.600041][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 28.679901][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 28.688365][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 28.700748][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.707794][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.715009][ T3303] bridge_slave_0: entered allmulticast mode [ 28.721380][ T3303] bridge_slave_0: entered promiscuous mode [ 28.746398][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.753489][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.760617][ T3309] bridge_slave_0: entered allmulticast mode [ 28.767028][ T3309] bridge_slave_0: entered promiscuous mode [ 28.773657][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.780747][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.787838][ T3303] bridge_slave_1: entered allmulticast mode [ 28.794149][ T3303] bridge_slave_1: entered promiscuous mode [ 28.805029][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 28.820848][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.827892][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.835198][ T3309] bridge_slave_1: entered allmulticast mode [ 28.841447][ T3309] bridge_slave_1: entered promiscuous mode [ 28.855498][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.884273][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.904498][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.928879][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.945576][ T3303] team0: Port device team_slave_0 added [ 28.954271][ T3303] team0: Port device team_slave_1 added [ 28.964643][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.971718][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.978878][ T3311] bridge_slave_0: entered allmulticast mode [ 28.985352][ T3311] bridge_slave_0: entered promiscuous mode [ 29.014422][ T3309] team0: Port device team_slave_0 added [ 29.020135][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.027232][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.035287][ T3311] bridge_slave_1: entered allmulticast mode [ 29.041619][ T3311] bridge_slave_1: entered promiscuous mode [ 29.056434][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.063507][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.070657][ T3304] bridge_slave_0: entered allmulticast mode [ 29.076978][ T3304] bridge_slave_0: entered promiscuous mode [ 29.084017][ T3309] team0: Port device team_slave_1 added [ 29.103284][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.110384][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.117490][ T3308] bridge_slave_0: entered allmulticast mode [ 29.123874][ T3308] bridge_slave_0: entered promiscuous mode [ 29.130548][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.137622][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.144837][ T3308] bridge_slave_1: entered allmulticast mode [ 29.151279][ T3308] bridge_slave_1: entered promiscuous mode [ 29.157741][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.164788][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.190683][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.201439][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.208526][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.215707][ T3304] bridge_slave_1: entered allmulticast mode [ 29.222057][ T3304] bridge_slave_1: entered promiscuous mode [ 29.233539][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.242780][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.249740][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.275763][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.290915][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.297850][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.323792][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.339907][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.349190][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.356228][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.382131][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.400113][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.422657][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.438153][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.452369][ T3311] team0: Port device team_slave_0 added [ 29.468425][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.477965][ T3311] team0: Port device team_slave_1 added [ 29.499365][ T3309] hsr_slave_0: entered promiscuous mode [ 29.505315][ T3309] hsr_slave_1: entered promiscuous mode [ 29.512131][ T3308] team0: Port device team_slave_0 added [ 29.532758][ T3303] hsr_slave_0: entered promiscuous mode [ 29.538619][ T3303] hsr_slave_1: entered promiscuous mode [ 29.544590][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 29.550311][ T3303] Cannot create hsr debugfs directory [ 29.556695][ T3308] team0: Port device team_slave_1 added [ 29.570942][ T3304] team0: Port device team_slave_0 added [ 29.576965][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.583954][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.610004][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.636267][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.643270][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.669146][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.680960][ T3304] team0: Port device team_slave_1 added [ 29.686833][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.693786][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.719756][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.743914][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.750901][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.776808][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.799123][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.806098][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.831995][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.857006][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.864067][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.889974][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.928663][ T3308] hsr_slave_0: entered promiscuous mode [ 29.935348][ T3308] hsr_slave_1: entered promiscuous mode [ 29.941295][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 29.946994][ T3308] Cannot create hsr debugfs directory [ 29.956463][ T3311] hsr_slave_0: entered promiscuous mode [ 29.962468][ T3311] hsr_slave_1: entered promiscuous mode [ 29.968159][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 29.973908][ T3311] Cannot create hsr debugfs directory [ 29.992726][ T3304] hsr_slave_0: entered promiscuous mode [ 29.998541][ T3304] hsr_slave_1: entered promiscuous mode [ 30.004507][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 30.010229][ T3304] Cannot create hsr debugfs directory [ 30.163122][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.176122][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.184760][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.193408][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.215400][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.230844][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.240679][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.256322][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.271024][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.286546][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.295749][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.307233][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.341304][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.350826][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.359209][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.368215][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.395199][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.415454][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.424380][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.434984][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.443074][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.452443][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.464543][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.473672][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.480791][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.496957][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.520519][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.527580][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.546640][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.553766][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.562094][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.569123][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.614505][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.632523][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.641241][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.657325][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.664396][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.679080][ T1463] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.686170][ T1463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.710334][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.720058][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.746794][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.754734][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.761811][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.783069][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.790192][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.804008][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.826040][ T1717] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.833183][ T1717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.842356][ T1717] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.849457][ T1717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.869187][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.879562][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.907749][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.918041][ T3309] veth0_vlan: entered promiscuous mode [ 30.932296][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.958407][ T3309] veth1_vlan: entered promiscuous mode [ 30.998552][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.013280][ T3309] veth0_macvtap: entered promiscuous mode [ 31.030987][ T3309] veth1_macvtap: entered promiscuous mode [ 31.064422][ T3303] veth0_vlan: entered promiscuous mode [ 31.080924][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.092392][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.101465][ T3303] veth1_vlan: entered promiscuous mode [ 31.118646][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.133329][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.143641][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.174863][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.184892][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.213723][ T3308] veth0_vlan: entered promiscuous mode [ 31.230376][ T3303] veth0_macvtap: entered promiscuous mode [ 31.245586][ T3309] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.260452][ T3303] veth1_macvtap: entered promiscuous mode [ 31.272257][ T3308] veth1_vlan: entered promiscuous mode [ 31.288024][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.311741][ T3311] veth0_vlan: entered promiscuous mode [ 31.319596][ T3311] veth1_vlan: entered promiscuous mode [ 31.326269][ T3308] veth0_macvtap: entered promiscuous mode [ 31.334750][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.342851][ T3308] veth1_macvtap: entered promiscuous mode [ 31.356370][ T3470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 31.356370][ T3304] veth0_vlan: entered promiscuous mode [ 31.383961][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.393274][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.412741][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.424747][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.437534][ T3304] veth1_vlan: entered promiscuous mode [ 31.444811][ T3311] veth0_macvtap: entered promiscuous mode [ 31.455479][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.471663][ T3311] veth1_macvtap: entered promiscuous mode [ 31.486233][ T3304] veth0_macvtap: entered promiscuous mode [ 31.499815][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.509277][ T3304] veth1_macvtap: entered promiscuous mode [ 31.558934][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.581636][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.592425][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.610689][ T1463] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.620134][ T3470] syz.0.1 (3470) used greatest stack depth: 10888 bytes left [ 31.623073][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.639835][ T1463] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.649369][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.691340][ T3491] loop2: detected capacity change from 0 to 2048 [ 31.700923][ T1463] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.738299][ T3491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.738527][ T1463] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.765204][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.808591][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.817574][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.827331][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.836821][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.845961][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.855252][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.977173][ T3507] loop3: detected capacity change from 0 to 2048 [ 32.037369][ T3508] loop4: detected capacity change from 0 to 1024 [ 32.044032][ T3508] ext4: Unknown parameter 'nouser_xattr' [ 32.053283][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 32.053296][ T29] audit: type=1400 audit(1756684901.246:119): avc: denied { mounton } for pid=3504 comm="syz.4.5" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.082727][ T3511] netlink: 'syz.1.9': attribute type 1 has an invalid length. [ 32.088329][ T3508] 9pnet: Could not find request transport: fd0x0000000000000004 [ 32.090232][ T3511] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9'. [ 32.153585][ T3491] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm +}[@: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 32.187663][ T29] audit: type=1326 audit(1756684901.376:120): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3515 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97e5ebe9 code=0x7ffc0000 [ 32.211331][ T29] audit: type=1326 audit(1756684901.376:121): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3515 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97e5ebe9 code=0x7ffc0000 [ 32.224919][ T3520] pim6reg: entered allmulticast mode [ 32.234831][ T29] audit: type=1326 audit(1756684901.376:122): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3515 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde97e5ebe9 code=0x7ffc0000 [ 32.263936][ T29] audit: type=1326 audit(1756684901.376:123): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3515 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97e5ebe9 code=0x7ffc0000 [ 32.278057][ T3507] loop3: unable to read partition table [ 32.287541][ T29] audit: type=1326 audit(1756684901.376:124): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3515 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97e5ebe9 code=0x7ffc0000 [ 32.296518][ T3507] loop3: partition table beyond EOD, [ 32.316588][ T29] audit: type=1326 audit(1756684901.376:125): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3515 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fde97e5ebe9 code=0x7ffc0000 [ 32.322009][ T3507] truncated [ 32.345406][ T29] audit: type=1326 audit(1756684901.376:126): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3515 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97e5ebe9 code=0x7ffc0000 [ 32.348441][ T3507] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 32.371879][ T29] audit: type=1326 audit(1756684901.376:127): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3515 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97e5ebe9 code=0x7ffc0000 [ 32.430914][ T3491] EXT4-fs (loop2): Remounting filesystem read-only [ 32.445974][ T29] audit: type=1326 audit(1756684901.376:128): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3515 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fde97e5ebe9 code=0x7ffc0000 [ 32.484983][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.536707][ T2994] loop3: unable to read partition table [ 32.543503][ T2994] loop3: partition table beyond EOD, truncated [ 32.644164][ T3507] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 32.653808][ T3507] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 32.656844][ T3538] mmap: syz.2.16 (3538) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.682903][ T3507] team0: Failed to send options change via netlink (err -105) [ 32.690539][ T3507] team0: Port device netdevsim1 added [ 32.697166][ T41] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 32.702035][ T3540] loop0: detected capacity change from 0 to 4096 [ 32.731643][ T3540] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 32.732598][ T3542] FAULT_INJECTION: forcing a failure. [ 32.732598][ T3542] name failslab, interval 1, probability 0, space 0, times 1 [ 32.754453][ T3542] CPU: 1 UID: 60928 PID: 3542 Comm: syz.2.19 Not tainted syzkaller #0 PREEMPT(voluntary) [ 32.754480][ T3542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 32.754498][ T3542] Call Trace: [ 32.754503][ T3542] [ 32.754510][ T3542] __dump_stack+0x1d/0x30 [ 32.754536][ T3542] dump_stack_lvl+0xe8/0x140 [ 32.754553][ T3542] dump_stack+0x15/0x1b [ 32.754567][ T3542] should_fail_ex+0x265/0x280 [ 32.754586][ T3542] ? alloc_mnt_ns+0x72/0x270 [ 32.754607][ T3542] should_failslab+0x8c/0xb0 [ 32.754642][ T3542] __kmalloc_cache_noprof+0x4c/0x320 [ 32.754671][ T3542] alloc_mnt_ns+0x72/0x270 [ 32.754690][ T3542] __se_sys_fsmount+0x398/0x580 [ 32.754731][ T3542] __x64_sys_fsmount+0x43/0x50 [ 32.754752][ T3542] x64_sys_call+0x2ab3/0x2ff0 [ 32.754779][ T3542] do_syscall_64+0xd2/0x200 [ 32.754803][ T3542] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 32.754904][ T3542] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 32.754931][ T3542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.755045][ T3542] RIP: 0033:0x7f289919ebe9 [ 32.755092][ T3542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.755107][ T3542] RSP: 002b:00007f2897c07038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 32.755123][ T3542] RAX: ffffffffffffffda RBX: 00007f28993d5fa0 RCX: 00007f289919ebe9 [ 32.755134][ T3542] RDX: 0000000000000087 RSI: 0000000000000000 RDI: 0000000000000005 [ 32.755199][ T3542] RBP: 00007f2897c07090 R08: 0000000000000000 R09: 0000000000000000 [ 32.755210][ T3542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.755220][ T3542] R13: 00007f28993d6038 R14: 00007f28993d5fa0 R15: 00007ffe486cf5f8 [ 32.755235][ T3542] [ 32.958280][ T3540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.986340][ T3548] loop1: detected capacity change from 0 to 2048 [ 32.993900][ T3540] FAULT_INJECTION: forcing a failure. [ 32.993900][ T3540] name failslab, interval 1, probability 0, space 0, times 0 [ 33.006635][ T3540] CPU: 1 UID: 0 PID: 3540 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.006711][ T3540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 33.006725][ T3540] Call Trace: [ 33.006739][ T3540] [ 33.006746][ T3540] __dump_stack+0x1d/0x30 [ 33.006769][ T3540] dump_stack_lvl+0xe8/0x140 [ 33.006844][ T3540] dump_stack+0x15/0x1b [ 33.006911][ T3540] should_fail_ex+0x265/0x280 [ 33.006989][ T3540] should_failslab+0x8c/0xb0 [ 33.007015][ T3540] __kmalloc_noprof+0xa5/0x3e0 [ 33.007043][ T3540] ? find_next_id+0x3d/0x540 [ 33.007108][ T3540] find_next_id+0x3d/0x540 [ 33.007145][ T3540] ? __brelse+0x32/0x60 [ 33.007195][ T3540] ? ext4_quota_read+0x22b/0x260 [ 33.007220][ T3540] find_next_id+0x423/0x540 [ 33.007257][ T3540] find_next_id+0x423/0x540 [ 33.007292][ T3540] find_next_id+0x423/0x540 [ 33.007328][ T3540] qtree_get_next_id+0x55/0x120 [ 33.007496][ T3540] v2_get_next_id+0x81/0xc0 [ 33.007529][ T3540] ? __pfx_v2_get_next_id+0x10/0x10 [ 33.007561][ T3540] dquot_get_next_id+0xb2/0xe0 [ 33.007611][ T3540] dquot_get_next_dqblk+0x41/0x200 [ 33.007641][ T3540] quota_getnextquota+0x16b/0x2c0 [ 33.007662][ T3540] ? cred_has_capability+0x210/0x280 [ 33.007691][ T3540] do_quotactl+0x38f/0x670 [ 33.007713][ T3540] __se_sys_quotactl+0x3a5/0x670 [ 33.007792][ T3540] __x64_sys_quotactl+0x55/0x70 [ 33.007813][ T3540] x64_sys_call+0x15d6/0x2ff0 [ 33.007915][ T3540] do_syscall_64+0xd2/0x200 [ 33.007941][ T3540] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 33.008020][ T3540] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 33.008046][ T3540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.008096][ T3540] RIP: 0033:0x7f6fc797ebe9 [ 33.008111][ T3540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.008130][ T3540] RSP: 002b:00007f6fc63e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 33.008222][ T3540] RAX: ffffffffffffffda RBX: 00007f6fc7bb5fa0 RCX: 00007f6fc797ebe9 [ 33.008234][ T3540] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffff80000901 [ 33.008245][ T3540] RBP: 00007f6fc63e7090 R08: 0000000000000000 R09: 0000000000000000 [ 33.008255][ T3540] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 33.008265][ T3540] R13: 00007f6fc7bb6038 R14: 00007f6fc7bb5fa0 R15: 00007fffac286468 [ 33.008282][ T3540] [ 33.025322][ T3514] Alternate GPT is invalid, using primary GPT. [ 33.252768][ T3514] loop1: p2 p3 p7 [ 33.270061][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.310534][ T3548] Alternate GPT is invalid, using primary GPT. [ 33.316941][ T3548] loop1: p2 p3 p7 [ 33.347419][ T3579] loop4: detected capacity change from 0 to 2048 [ 33.411309][ T3297] Alternate GPT is invalid, using primary GPT. [ 33.417550][ T3297] loop4: p1 p2 p3 [ 33.434673][ T3597] netlink: 9004 bytes leftover after parsing attributes in process `syz.1.28'. [ 33.458228][ T3579] Alternate GPT is invalid, using primary GPT. [ 33.464656][ T3579] loop4: p1 p2 p3 [ 33.609473][ T3610] loop2: detected capacity change from 0 to 512 [ 33.631289][ T3610] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.648212][ T3610] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.661365][ T3610] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 33.696776][ T3611] Zero length message leads to an empty skb [ 33.705276][ T3612] loop3: detected capacity change from 0 to 2048 [ 33.751458][ T3612] Alternate GPT is invalid, using primary GPT. [ 33.757524][ T3610] EXT4-fs (loop2): 1 truncate cleaned up [ 33.757733][ T3612] loop3: p1 p2 p3 [ 33.789863][ T3610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.828148][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.853503][ T3619] netlink: 64 bytes leftover after parsing attributes in process `syz.1.36'. [ 34.028128][ T3627] netlink: 'syz.2.40': attribute type 1 has an invalid length. [ 34.035738][ T3627] netlink: 224 bytes leftover after parsing attributes in process `syz.2.40'. [ 34.218198][ T3639] loop2: detected capacity change from 0 to 4096 [ 34.260710][ T3641] loop1: detected capacity change from 0 to 512 [ 34.280008][ T3641] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.291023][ T3639] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 34.302340][ T3641] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 34.310606][ T3639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.312125][ T3641] EXT4-fs (loop1): group descriptors corrupted! [ 34.338587][ T3644] loop0: detected capacity change from 0 to 512 [ 34.346247][ T3644] ======================================================= [ 34.346247][ T3644] WARNING: The mand mount option has been deprecated and [ 34.346247][ T3644] and is ignored by this kernel. Remove the mand [ 34.346247][ T3644] option from the mount to silence this warning. [ 34.346247][ T3644] ======================================================= [ 34.384940][ T3646] loop1: detected capacity change from 0 to 512 [ 34.391648][ T3646] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.399759][ T3646] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.412631][ T3644] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 34.422912][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.433026][ T3646] EXT4-fs (loop1): 1 truncate cleaned up [ 34.439122][ T3646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.452543][ T3644] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 34.460828][ T3644] System zones: 1-12 [ 34.464871][ T3644] EXT4-fs (loop0): orphan cleanup on readonly fs [ 34.472780][ T3644] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.47: bg 0: block 361: padding at end of block bitmap is not set [ 34.487259][ T3644] EXT4-fs (loop0): Remounting filesystem read-only [ 34.494615][ T3644] EXT4-fs (loop0): 1 truncate cleaned up [ 34.508372][ T3644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 34.536678][ T3654] vlan2: entered allmulticast mode [ 34.538157][ T3658] netlink: 64 bytes leftover after parsing attributes in process `syz.2.50'. [ 34.542023][ T3654] dummy0: entered allmulticast mode [ 34.611449][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 34.623220][ C0] hrtimer: interrupt took 26908 ns [ 34.641506][ T3664] loop3: detected capacity change from 0 to 2048 [ 34.671576][ T3664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 34.687913][ T3364] IPVS: starting estimator thread 0... [ 34.737022][ T3680] FAULT_INJECTION: forcing a failure. [ 34.737022][ T3680] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 34.750163][ T3680] CPU: 0 UID: 0 PID: 3680 Comm: syz.0.61 Not tainted syzkaller #0 PREEMPT(voluntary) [ 34.750190][ T3680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 34.750253][ T3680] Call Trace: [ 34.750261][ T3680] [ 34.750269][ T3680] __dump_stack+0x1d/0x30 [ 34.750292][ T3680] dump_stack_lvl+0xe8/0x140 [ 34.750321][ T3680] dump_stack+0x15/0x1b [ 34.750456][ T3680] should_fail_ex+0x265/0x280 [ 34.750488][ T3680] should_fail+0xb/0x20 [ 34.750530][ T3680] should_fail_usercopy+0x1a/0x20 [ 34.750555][ T3680] _copy_from_user+0x1c/0xb0 [ 34.750620][ T3680] __sys_bpf+0x178/0x7b0 [ 34.750655][ T3680] __x64_sys_bpf+0x41/0x50 [ 34.750682][ T3680] x64_sys_call+0x2aea/0x2ff0 [ 34.750706][ T3680] do_syscall_64+0xd2/0x200 [ 34.750735][ T3680] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 34.750760][ T3680] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 34.750864][ T3680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.750883][ T3680] RIP: 0033:0x7f6fc797ebe9 [ 34.750895][ T3680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.750910][ T3680] RSP: 002b:00007f6fc63e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 34.751033][ T3680] RAX: ffffffffffffffda RBX: 00007f6fc7bb5fa0 RCX: 00007f6fc797ebe9 [ 34.751102][ T3680] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 34.751113][ T3680] RBP: 00007f6fc63e7090 R08: 0000000000000000 R09: 0000000000000000 [ 34.751124][ T3680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.751134][ T3680] R13: 00007f6fc7bb6038 R14: 00007f6fc7bb5fa0 R15: 00007fffac286468 [ 34.751149][ T3680] [ 34.927421][ T3676] IPVS: using max 2928 ests per chain, 146400 per kthread [ 34.957379][ T3687] loop4: detected capacity change from 0 to 2048 [ 34.975679][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 35.002958][ T3691] netlink: 64 bytes leftover after parsing attributes in process `syz.0.65'. [ 35.008394][ T3687] Alternate GPT is invalid, using primary GPT. [ 35.018118][ T3687] loop4: p1 p2 p3 [ 35.058897][ T3663] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.145292][ T3707] loop3: detected capacity change from 0 to 512 [ 35.151905][ T3707] EXT4-fs: Ignoring removed oldalloc option [ 35.172628][ T3707] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.71: Parent and EA inode have the same ino 15 [ 35.205848][ T3707] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 35.229876][ T3707] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.71: Parent and EA inode have the same ino 15 [ 35.245686][ T3707] EXT4-fs (loop3): 1 orphan inode deleted [ 35.253288][ T3707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.266963][ T3646] syz.1.48 (3646) used greatest stack depth: 10600 bytes left [ 35.267304][ T3663] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.274719][ T3718] FAULT_INJECTION: forcing a failure. [ 35.274719][ T3718] name failslab, interval 1, probability 0, space 0, times 0 [ 35.274745][ T3718] CPU: 1 UID: 0 PID: 3718 Comm: syz.4.74 Not tainted syzkaller #0 PREEMPT(voluntary) [ 35.274832][ T3718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 35.274918][ T3718] Call Trace: [ 35.274924][ T3718] [ 35.274931][ T3718] __dump_stack+0x1d/0x30 [ 35.274952][ T3718] dump_stack_lvl+0xe8/0x140 [ 35.274970][ T3718] dump_stack+0x15/0x1b [ 35.274987][ T3718] should_fail_ex+0x265/0x280 [ 35.275064][ T3718] should_failslab+0x8c/0xb0 [ 35.275088][ T3718] kmem_cache_alloc_noprof+0x50/0x310 [ 35.275116][ T3718] ? getname_flags+0x80/0x3b0 [ 35.275144][ T3718] getname_flags+0x80/0x3b0 [ 35.275232][ T3718] __x64_sys_unlink+0x21/0x40 [ 35.275302][ T3718] x64_sys_call+0x2dc0/0x2ff0 [ 35.275353][ T3718] do_syscall_64+0xd2/0x200 [ 35.275425][ T3718] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 35.275449][ T3718] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 35.275476][ T3718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.275497][ T3718] RIP: 0033:0x7fde97e5ebe9 [ 35.275554][ T3718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.275571][ T3718] RSP: 002b:00007fde968c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 35.275589][ T3718] RAX: ffffffffffffffda RBX: 00007fde98095fa0 RCX: 00007fde97e5ebe9 [ 35.275602][ T3718] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.275613][ T3718] RBP: 00007fde968c7090 R08: 0000000000000000 R09: 0000000000000000 [ 35.275625][ T3718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.275637][ T3718] R13: 00007fde98096038 R14: 00007fde98095fa0 R15: 00007fffa2fafa78 [ 35.275710][ T3718] [ 35.304327][ T3707] FAULT_INJECTION: forcing a failure. [ 35.304327][ T3707] name failslab, interval 1, probability 0, space 0, times 0 [ 35.418319][ T3723] loop4: detected capacity change from 0 to 2048 [ 35.426419][ T3707] CPU: 1 UID: 0 PID: 3707 Comm: syz.3.71 Not tainted syzkaller #0 PREEMPT(voluntary) [ 35.426445][ T3707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 35.426456][ T3707] Call Trace: [ 35.426462][ T3707] [ 35.426469][ T3707] __dump_stack+0x1d/0x30 [ 35.426488][ T3707] dump_stack_lvl+0xe8/0x140 [ 35.426540][ T3707] dump_stack+0x15/0x1b [ 35.426557][ T3707] should_fail_ex+0x265/0x280 [ 35.426579][ T3707] should_failslab+0x8c/0xb0 [ 35.426604][ T3707] kmem_cache_alloc_noprof+0x50/0x310 [ 35.426638][ T3707] ? getname_flags+0x80/0x3b0 [ 35.426666][ T3707] getname_flags+0x80/0x3b0 [ 35.426693][ T3707] user_path_at+0x28/0x130 [ 35.426725][ T3707] __x64_sys_umount+0x85/0xe0 [ 35.426805][ T3707] x64_sys_call+0xdd2/0x2ff0 [ 35.426826][ T3707] do_syscall_64+0xd2/0x200 [ 35.426854][ T3707] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 35.426898][ T3707] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 35.426997][ T3707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.427017][ T3707] RIP: 0033:0x7fcc5d53ebe9 [ 35.427032][ T3707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.427049][ T3707] RSP: 002b:00007fcc5bf9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 35.427131][ T3707] RAX: ffffffffffffffda RBX: 00007fcc5d775fa0 RCX: 00007fcc5d53ebe9 [ 35.427180][ T3707] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 35.427192][ T3707] RBP: 00007fcc5bf9f090 R08: 0000000000000000 R09: 0000000000000000 [ 35.427204][ T3707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.427216][ T3707] R13: 00007fcc5d776038 R14: 00007fcc5d775fa0 R15: 00007ffe80c004b8 [ 35.427233][ T3707] [ 35.449902][ T3304] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 35.520295][ T3723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 35.530129][ T3722] vlan2: entered allmulticast mode [ 35.537481][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.542942][ T3304] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 15 [ 35.547450][ T3722] dummy0: entered allmulticast mode [ 35.561399][ T3304] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 15 [ 35.746597][ T3663] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.783383][ T3731] loop1: detected capacity change from 0 to 2048 [ 35.799033][ T3735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.806739][ T3735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.814782][ T3735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.814900][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 35.822316][ T3735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.833047][ T3731] Alternate GPT is invalid, using primary GPT. [ 35.844865][ T3731] loop1: p1 p2 p3 [ 35.861466][ T3663] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.941903][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.952901][ T3304] syz-executor (3304) used greatest stack depth: 10592 bytes left [ 35.962165][ T3740] syz.4.83 uses obsolete (PF_INET,SOCK_PACKET) [ 35.973416][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.017817][ T51] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.034566][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.054053][ T3663] syz.2.55 (3663) used greatest stack depth: 10568 bytes left [ 36.063427][ T51] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.076900][ T51] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.100917][ T31] team0: Port device netdevsim1 removed [ 36.107882][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.121152][ T51] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.150021][ T3760] netlink: 'syz.2.88': attribute type 1 has an invalid length. [ 36.157636][ T3760] netlink: 224 bytes leftover after parsing attributes in process `syz.2.88'. [ 36.172369][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.223720][ T3769] vlan2: entered allmulticast mode [ 36.234248][ T3769] dummy0: entered allmulticast mode [ 36.284707][ T3773] loop0: detected capacity change from 0 to 2048 [ 36.291903][ T31] bridge_slave_1: left allmulticast mode [ 36.297577][ T31] bridge_slave_1: left promiscuous mode [ 36.303357][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.311121][ T31] bridge_slave_0: left allmulticast mode [ 36.316755][ T31] bridge_slave_0: left promiscuous mode [ 36.317959][ T3773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 36.322549][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.425669][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 36.435086][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.445022][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.455013][ T31] bond0 (unregistering): Released all slaves [ 36.464972][ T3782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.472596][ T3782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.480623][ T3782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.488039][ T3782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.520833][ T3752] chnl_net:caif_netlink_parms(): no params data found [ 36.554676][ T31] hsr_slave_0: left promiscuous mode [ 36.560497][ T31] hsr_slave_1: left promiscuous mode [ 36.566203][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.573760][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.582673][ T3793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.99'. [ 36.582892][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.599040][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.681922][ T31] veth1_macvtap: left promiscuous mode [ 36.687451][ T31] veth0_macvtap: left promiscuous mode [ 36.693002][ T31] veth1_vlan: left promiscuous mode [ 36.698194][ T31] veth0_vlan: left promiscuous mode [ 36.752961][ T3802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'. [ 36.765414][ T31] pim6reg (unregistering): left allmulticast mode [ 36.803891][ T31] team0 (unregistering): Port device team_slave_1 removed [ 36.821492][ T31] team0 (unregistering): Port device team_slave_0 removed [ 36.848370][ T3809] netlink: 'syz.4.105': attribute type 1 has an invalid length. [ 36.856095][ T3809] netlink: 224 bytes leftover after parsing attributes in process `syz.4.105'. [ 36.896904][ T3752] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.897889][ T3802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'. [ 36.904301][ T3752] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.921875][ T3752] bridge_slave_0: entered allmulticast mode [ 36.932041][ T3752] bridge_slave_0: entered promiscuous mode [ 36.938780][ T3752] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.945862][ T3752] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.954301][ T3752] bridge_slave_1: entered allmulticast mode [ 36.960790][ T3752] bridge_slave_1: entered promiscuous mode [ 36.989461][ T3817] netlink: 'syz.1.106': attribute type 1 has an invalid length. [ 36.997194][ T3817] netlink: 224 bytes leftover after parsing attributes in process `syz.1.106'. [ 37.011653][ T3752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.046657][ T3752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.055864][ T3821] loop0: detected capacity change from 0 to 2048 [ 37.069156][ T3752] team0: Port device team_slave_0 added [ 37.076965][ T3752] team0: Port device team_slave_1 added [ 37.098592][ T3752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.105562][ T3752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.131468][ T3752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.133958][ T3821] Alternate GPT is invalid, using primary GPT. [ 37.142876][ T3752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.148729][ T3821] loop0: p1 p2 p3 [ 37.155440][ T3752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.185085][ T3752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.226518][ T29] kauditd_printk_skb: 3843 callbacks suppressed [ 37.226528][ T29] audit: type=1326 audit(1756684906.406:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289919ebe9 code=0x7ffc0000 [ 37.228670][ T3752] hsr_slave_0: entered promiscuous mode [ 37.232814][ T29] audit: type=1326 audit(1756684906.406:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289919ebe9 code=0x7ffc0000 [ 37.232841][ T29] audit: type=1326 audit(1756684906.416:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f289919ebe9 code=0x7ffc0000 [ 37.257496][ T3752] hsr_slave_1: entered promiscuous mode [ 37.261657][ T29] audit: type=1326 audit(1756684906.416:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289919ebe9 code=0x7ffc0000 [ 37.286683][ T3752] debugfs: 'hsr0' already exists in 'hsr' [ 37.308253][ T29] audit: type=1326 audit(1756684906.416:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f289919ebe9 code=0x7ffc0000 [ 37.308364][ T29] audit: type=1326 audit(1756684906.416:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289919ebe9 code=0x7ffc0000 [ 37.314071][ T3752] Cannot create hsr debugfs directory [ 37.337345][ T29] audit: type=1326 audit(1756684906.416:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f289919ebe9 code=0x7ffc0000 [ 37.400024][ T3828] loop2: detected capacity change from 0 to 2048 [ 37.418330][ T29] audit: type=1326 audit(1756684906.416:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289919ebe9 code=0x7ffc0000 [ 37.431255][ T3828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 37.448059][ T29] audit: type=1326 audit(1756684906.416:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f289919ebe9 code=0x7ffc0000 [ 37.483770][ T29] audit: type=1326 audit(1756684906.416:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3826 comm="syz.2.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289919ebe9 code=0x7ffc0000 [ 37.509988][ T3827] vlan2: entered allmulticast mode [ 37.515179][ T3827] dummy0: entered allmulticast mode [ 37.577443][ T3752] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.592676][ T3752] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.600625][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 37.601955][ T3752] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.619223][ T3752] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 37.645415][ T3834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.652955][ T3834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.661022][ T3834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.668403][ T3834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.683794][ T3752] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.690842][ T3752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.698087][ T3752] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.705165][ T3752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.738401][ T3752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.749933][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.758091][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.774903][ T3752] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.806152][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.813227][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.827085][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.834197][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.853849][ T3854] netlink: 'syz.1.116': attribute type 1 has an invalid length. [ 37.861601][ T3854] netlink: 224 bytes leftover after parsing attributes in process `syz.1.116'. [ 37.956633][ T3752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.095060][ T3752] veth0_vlan: entered promiscuous mode [ 38.106228][ T3752] veth1_vlan: entered promiscuous mode [ 38.123479][ T3752] veth0_macvtap: entered promiscuous mode [ 38.134516][ T3752] veth1_macvtap: entered promiscuous mode [ 38.148355][ T3752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.160134][ T3752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.172917][ T1463] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.186003][ T1463] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.200478][ T1463] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.215937][ T51] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.256519][ T3905] loop0: detected capacity change from 0 to 2048 [ 38.291047][ T3905] Alternate GPT is invalid, using primary GPT. [ 38.297348][ T3905] loop0: p1 p2 p3 [ 38.452026][ T3934] loop5: detected capacity change from 0 to 2048 [ 38.481142][ T3934] Alternate GPT is invalid, using primary GPT. [ 38.487378][ T3934] loop5: p1 p2 p3 [ 38.489549][ T3940] vlan2: entered allmulticast mode [ 38.543809][ T3941] loop0: detected capacity change from 0 to 2048 [ 38.561435][ T3941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 38.642152][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 38.804302][ T3971] vlan2: entered allmulticast mode [ 38.863248][ T3977] loop0: detected capacity change from 0 to 2048 [ 38.882960][ T3977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 38.962646][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 39.346154][ T4026] vlan2: entered allmulticast mode [ 39.387907][ T4026] loop4: detected capacity change from 0 to 2048 [ 39.401265][ T4026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 39.483780][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 39.512340][ T4044] loop1: detected capacity change from 0 to 512 [ 39.520025][ T4042] loop4: detected capacity change from 0 to 2048 [ 39.527060][ T4044] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.534157][ T4044] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.545098][ T4044] EXT4-fs (loop1): 1 truncate cleaned up [ 39.551236][ T4044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.564549][ T4042] Alternate GPT is invalid, using primary GPT. [ 39.570845][ T4042] loop4: p1 p2 p3 [ 39.632882][ T4051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.182'. [ 39.931864][ T4070] vlan2: entered allmulticast mode [ 39.977728][ T4073] loop0: detected capacity change from 0 to 2048 [ 39.993032][ T4073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 40.074981][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 40.103691][ T4077] loop0: detected capacity change from 0 to 2048 [ 40.132596][ T4072] loop4: detected capacity change from 0 to 512 [ 40.140351][ T4077] Alternate GPT is invalid, using primary GPT. [ 40.146596][ T4077] loop0: p1 p2 p3 [ 40.150984][ T4072] EXT4-fs (loop4): orphan cleanup on readonly fs [ 40.158111][ T4072] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.190: bad orphan inode 13 [ 40.168359][ T4072] ext4_test_bit(bit=12, block=18) = 1 [ 40.173767][ T4072] is_bad_inode(inode)=0 [ 40.177935][ T4072] NEXT_ORPHAN(inode)=2130706432 [ 40.182817][ T4072] max_ino=32 [ 40.185998][ T4072] i_nlink=1 [ 40.234440][ T4084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.194'. [ 40.339582][ T4072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.352436][ T4044] syz.1.180 (4044) used greatest stack depth: 9776 bytes left [ 40.380157][ T4072] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 40.404045][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.414621][ T4072] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 40.472137][ T4096] FAULT_INJECTION: forcing a failure. [ 40.472137][ T4096] name failslab, interval 1, probability 0, space 0, times 0 [ 40.484928][ T4096] CPU: 0 UID: 0 PID: 4096 Comm: syz.0.198 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.484954][ T4096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 40.484966][ T4096] Call Trace: [ 40.484972][ T4096] [ 40.484979][ T4096] __dump_stack+0x1d/0x30 [ 40.485015][ T4096] dump_stack_lvl+0xe8/0x140 [ 40.485034][ T4096] dump_stack+0x15/0x1b [ 40.485052][ T4096] should_fail_ex+0x265/0x280 [ 40.485075][ T4096] should_failslab+0x8c/0xb0 [ 40.485101][ T4096] __kmalloc_noprof+0xa5/0x3e0 [ 40.485177][ T4096] ? ip_options_get+0x52/0x350 [ 40.485203][ T4096] ip_options_get+0x52/0x350 [ 40.485226][ T4096] do_ip_setsockopt+0x19d4/0x2240 [ 40.485287][ T4096] ip_setsockopt+0x58/0x110 [ 40.485316][ T4096] ipv6_setsockopt+0xfb/0x130 [ 40.485338][ T4096] tcp_setsockopt+0x98/0xb0 [ 40.485357][ T4096] sock_common_setsockopt+0x66/0x80 [ 40.485425][ T4096] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 40.485466][ T4096] __sys_setsockopt+0x184/0x200 [ 40.485486][ T4096] __x64_sys_setsockopt+0x64/0x80 [ 40.485506][ T4096] x64_sys_call+0x20ec/0x2ff0 [ 40.485528][ T4096] do_syscall_64+0xd2/0x200 [ 40.485589][ T4096] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 40.485669][ T4096] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 40.485695][ T4096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.485744][ T4096] RIP: 0033:0x7f6fc797ebe9 [ 40.485763][ T4096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.485781][ T4096] RSP: 002b:00007f6fc63c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 40.485799][ T4096] RAX: ffffffffffffffda RBX: 00007f6fc7bb6090 RCX: 00007f6fc797ebe9 [ 40.485870][ T4096] RDX: 0000000000000004 RSI: 0004000000000000 RDI: 0000000000000004 [ 40.485882][ T4096] RBP: 00007f6fc63c6090 R08: 0000000000000000 R09: 0000000000000000 [ 40.485892][ T4096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.485902][ T4096] R13: 00007f6fc7bb6128 R14: 00007f6fc7bb6090 R15: 00007fffac286468 [ 40.485917][ T4096] [ 40.488573][ T4097] netlink: 'syz.5.197': attribute type 1 has an invalid length. [ 40.566417][ T4105] loop1: detected capacity change from 0 to 2048 [ 40.569682][ T4097] netlink: 224 bytes leftover after parsing attributes in process `syz.5.197'. [ 40.750456][ T4105] Alternate GPT is invalid, using primary GPT. [ 40.756732][ T4105] loop1: p1 p2 p3 [ 40.798690][ T4115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.206'. [ 40.927502][ T4127] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 40.954717][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.247299][ T4181] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 41.298396][ T4156] loop1: detected capacity change from 0 to 512 [ 41.319991][ T4156] EXT4-fs (loop1): orphan cleanup on readonly fs [ 41.326696][ T4156] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.224: bad orphan inode 13 [ 41.336736][ T4156] ext4_test_bit(bit=12, block=18) = 1 [ 41.342123][ T4156] is_bad_inode(inode)=0 [ 41.346260][ T4156] NEXT_ORPHAN(inode)=2130706432 [ 41.351114][ T4156] max_ino=32 [ 41.354293][ T4156] i_nlink=1 [ 41.358707][ T4156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.399268][ T4156] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 41.436605][ T4156] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 41.516200][ T4223] netlink: 'syz.4.247': attribute type 1 has an invalid length. [ 41.534211][ T4225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.541887][ T4225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.552242][ T4225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.559639][ T4225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.600002][ T4233] __nla_validate_parse: 5 callbacks suppressed [ 41.600017][ T4233] netlink: 20 bytes leftover after parsing attributes in process `syz.0.257'. [ 41.616877][ T4233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.257'. [ 41.638866][ T4235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.258'. [ 41.745083][ T4238] FAULT_INJECTION: forcing a failure. [ 41.745083][ T4238] name failslab, interval 1, probability 0, space 0, times 0 [ 41.757757][ T4238] CPU: 0 UID: 0 PID: 4238 Comm: syz.5.259 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.757794][ T4238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 41.757804][ T4238] Call Trace: [ 41.757809][ T4238] [ 41.757815][ T4238] __dump_stack+0x1d/0x30 [ 41.757835][ T4238] dump_stack_lvl+0xe8/0x140 [ 41.757863][ T4238] dump_stack+0x15/0x1b [ 41.757880][ T4238] should_fail_ex+0x265/0x280 [ 41.757901][ T4238] should_failslab+0x8c/0xb0 [ 41.757926][ T4238] __kmalloc_noprof+0xa5/0x3e0 [ 41.758083][ T4238] ? ip_options_get+0x52/0x350 [ 41.758111][ T4238] ip_options_get+0x52/0x350 [ 41.758205][ T4238] do_ip_setsockopt+0x19d4/0x2240 [ 41.758255][ T4238] ip_setsockopt+0x58/0x110 [ 41.758288][ T4238] ipv6_setsockopt+0xfb/0x130 [ 41.758311][ T4238] tcp_setsockopt+0x98/0xb0 [ 41.758331][ T4238] sock_common_setsockopt+0x66/0x80 [ 41.758439][ T4238] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 41.758467][ T4238] __sys_setsockopt+0x184/0x200 [ 41.758486][ T4238] __x64_sys_setsockopt+0x64/0x80 [ 41.758569][ T4238] x64_sys_call+0x20ec/0x2ff0 [ 41.758591][ T4238] do_syscall_64+0xd2/0x200 [ 41.758697][ T4238] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 41.758720][ T4238] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 41.758788][ T4238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.758808][ T4238] RIP: 0033:0x7f8d0531ebe9 [ 41.758820][ T4238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.758915][ T4238] RSP: 002b:00007f8d03d7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 41.758935][ T4238] RAX: ffffffffffffffda RBX: 00007f8d05555fa0 RCX: 00007f8d0531ebe9 [ 41.758947][ T4238] RDX: 0000000000000004 RSI: 0004000000000000 RDI: 0000000000000004 [ 41.758982][ T4238] RBP: 00007f8d03d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 41.759000][ T4238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.759013][ T4238] R13: 00007f8d05556038 R14: 00007f8d05555fa0 R15: 00007ffcccbba088 [ 41.759029][ T4238] [ 41.762966][ T4240] loop0: detected capacity change from 0 to 512 [ 41.956934][ T4251] loop5: detected capacity change from 0 to 512 [ 41.977364][ T4251] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.984250][ T4251] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 41.990525][ T4240] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0002] [ 41.995391][ T4251] EXT4-fs (loop5): 1 truncate cleaned up [ 42.002658][ T4240] System zones: 1-3, 19-19, 35-38 [ 42.008402][ T4251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.013150][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.034999][ T4240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.047974][ T4240] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.065514][ T4240] EXT4-fs warning (device loop0): ext4_group_extend:1891: can't read last block, resize aborted [ 42.074079][ T4256] loop1: detected capacity change from 0 to 2048 [ 42.103628][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.113295][ T4256] Alternate GPT is invalid, using primary GPT. [ 42.119618][ T4256] loop1: p1 p2 p3 [ 42.150818][ T4261] loop1: detected capacity change from 0 to 512 [ 42.157380][ T4261] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.165012][ T4261] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.178448][ T4264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.268'. [ 42.188849][ T4261] EXT4-fs (loop1): 1 truncate cleaned up [ 42.196478][ T4264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'. [ 42.214613][ T4261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.235841][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 42.235854][ T29] audit: type=1326 audit(1756684911.426:4369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4266 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc797ebe9 code=0x7ffc0000 [ 42.265979][ T29] audit: type=1326 audit(1756684911.456:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4266 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc797ebe9 code=0x7ffc0000 [ 42.273581][ T4267] vlan2: entered allmulticast mode [ 42.289639][ T29] audit: type=1326 audit(1756684911.456:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4266 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6fc797ebe9 code=0x7ffc0000 [ 42.317795][ T29] audit: type=1326 audit(1756684911.456:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4266 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc797ebe9 code=0x7ffc0000 [ 42.341180][ T29] audit: type=1326 audit(1756684911.456:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4266 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc797ebe9 code=0x7ffc0000 [ 42.364473][ T29] audit: type=1326 audit(1756684911.456:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4266 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fc797ebe9 code=0x7ffc0000 [ 42.387945][ T29] audit: type=1326 audit(1756684911.456:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4266 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc797ebe9 code=0x7ffc0000 [ 42.411316][ T29] audit: type=1326 audit(1756684911.456:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4266 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc797ebe9 code=0x7ffc0000 [ 42.434624][ T29] audit: type=1326 audit(1756684911.456:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4266 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fc797ebe9 code=0x7ffc0000 [ 42.458031][ T29] audit: type=1326 audit(1756684911.456:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4266 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc797ebe9 code=0x7ffc0000 [ 42.492191][ T4269] loop0: detected capacity change from 0 to 2048 [ 42.534776][ T4269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 42.659189][ T4291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.276'. [ 42.776788][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 42.835926][ T4288] loop4: detected capacity change from 0 to 512 [ 42.869301][ T4288] EXT4-fs (loop4): orphan cleanup on readonly fs [ 42.870764][ T4294] loop0: detected capacity change from 0 to 2048 [ 42.883589][ T4288] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.275: bad orphan inode 13 [ 42.894641][ T4288] ext4_test_bit(bit=12, block=18) = 1 [ 42.900150][ T4288] is_bad_inode(inode)=0 [ 42.904486][ T4288] NEXT_ORPHAN(inode)=2130706432 [ 42.905629][ T3752] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.909317][ T4288] max_ino=32 [ 42.909325][ T4288] i_nlink=1 [ 42.930461][ T4288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.949439][ T4297] netlink: 20 bytes leftover after parsing attributes in process `syz.2.279'. [ 42.959952][ T4297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'. [ 42.973777][ T4288] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 42.980902][ T4294] Alternate GPT is invalid, using primary GPT. [ 42.989398][ T4294] loop0: p1 p2 p3 [ 43.024968][ T4288] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 43.034101][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.061694][ T4308] netlink: 'syz.5.281': attribute type 1 has an invalid length. [ 43.069353][ T4308] netlink: 224 bytes leftover after parsing attributes in process `syz.5.281'. [ 43.163937][ T4318] vlan2: entered allmulticast mode [ 43.221846][ T4324] loop0: detected capacity change from 0 to 2048 [ 43.234048][ T4325] netlink: 'syz.2.288': attribute type 1 has an invalid length. [ 43.241725][ T4325] netlink: 224 bytes leftover after parsing attributes in process `syz.2.288'. [ 43.252553][ T4324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 43.332886][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 43.413872][ T4332] netlink: 'syz.0.290': attribute type 30 has an invalid length. [ 43.425319][ T1463] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.434215][ T1463] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.443263][ T31] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.452668][ T31] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.562175][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.876635][ T4365] FAULT_INJECTION: forcing a failure. [ 43.876635][ T4365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.889721][ T4365] CPU: 1 UID: 0 PID: 4365 Comm: syz.0.302 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.889866][ T4365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 43.889875][ T4365] Call Trace: [ 43.889879][ T4365] [ 43.889883][ T4365] __dump_stack+0x1d/0x30 [ 43.889897][ T4365] dump_stack_lvl+0xe8/0x140 [ 43.889914][ T4365] dump_stack+0x15/0x1b [ 43.890009][ T4365] should_fail_ex+0x265/0x280 [ 43.890099][ T4365] should_fail+0xb/0x20 [ 43.890114][ T4365] should_fail_usercopy+0x1a/0x20 [ 43.890134][ T4365] _copy_to_user+0x20/0xa0 [ 43.890160][ T4365] simple_read_from_buffer+0xb5/0x130 [ 43.890305][ T4365] proc_fail_nth_read+0x10e/0x150 [ 43.890400][ T4365] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 43.890425][ T4365] vfs_read+0x1a8/0x770 [ 43.890447][ T4365] ? __rcu_read_unlock+0x4f/0x70 [ 43.890471][ T4365] ? __fget_files+0x184/0x1c0 [ 43.890577][ T4365] ksys_read+0xda/0x1a0 [ 43.890619][ T4365] __x64_sys_read+0x40/0x50 [ 43.890643][ T4365] x64_sys_call+0x27bc/0x2ff0 [ 43.890664][ T4365] do_syscall_64+0xd2/0x200 [ 43.890693][ T4365] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 43.890719][ T4365] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 43.890802][ T4365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.890824][ T4365] RIP: 0033:0x7f6fc797d5fc [ 43.890837][ T4365] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 43.890901][ T4365] RSP: 002b:00007f6fc63e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 43.890987][ T4365] RAX: ffffffffffffffda RBX: 00007f6fc7bb5fa0 RCX: 00007f6fc797d5fc [ 43.890998][ T4365] RDX: 000000000000000f RSI: 00007f6fc63e70a0 RDI: 0000000000000004 [ 43.891019][ T4365] RBP: 00007f6fc63e7090 R08: 0000000000000000 R09: 0000000000000000 [ 43.891032][ T4365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.891045][ T4365] R13: 00007f6fc7bb6038 R14: 00007f6fc7bb5fa0 R15: 00007fffac286468 [ 43.891063][ T4365] [ 44.152213][ T4378] loop0: detected capacity change from 0 to 512 [ 44.158620][ T4378] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 44.235992][ T4392] netlink: 'syz.2.311': attribute type 1 has an invalid length. [ 44.262454][ T4396] netlink: 'syz.0.313': attribute type 1 has an invalid length. [ 44.468233][ T4413] vlan2: entered allmulticast mode [ 44.497047][ T4413] loop4: detected capacity change from 0 to 2048 [ 44.511318][ T4413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 44.559399][ T4424] loop5: detected capacity change from 0 to 512 [ 44.565897][ T4424] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.572483][ T4424] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 44.583451][ T4424] EXT4-fs (loop5): 1 truncate cleaned up [ 44.589477][ T4424] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.611893][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 45.084419][ T4447] loop0: detected capacity change from 0 to 2048 [ 45.114621][ T4452] vlan2: entered allmulticast mode [ 45.120125][ T4452] dummy0: entered allmulticast mode [ 45.141394][ T4447] Alternate GPT is invalid, using primary GPT. [ 45.147873][ T4447] loop0: p1 p2 p3 [ 45.164416][ T4455] loop1: detected capacity change from 0 to 2048 [ 45.201369][ T4455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 45.311368][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 45.336581][ T4471] netlink: 'syz.0.343': attribute type 1 has an invalid length. [ 45.415394][ T4476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.423070][ T4476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.431446][ T4476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.438824][ T4476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.501946][ T3752] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.567280][ T4484] loop5: detected capacity change from 0 to 2048 [ 45.589599][ T4490] FAULT_INJECTION: forcing a failure. [ 45.589599][ T4490] name failslab, interval 1, probability 0, space 0, times 0 [ 45.602217][ T4490] CPU: 0 UID: 0 PID: 4490 Comm: syz.4.352 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.602243][ T4490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 45.602259][ T4490] Call Trace: [ 45.602265][ T4490] [ 45.602277][ T4490] __dump_stack+0x1d/0x30 [ 45.602303][ T4490] dump_stack_lvl+0xe8/0x140 [ 45.602327][ T4490] dump_stack+0x15/0x1b [ 45.602344][ T4490] should_fail_ex+0x265/0x280 [ 45.602364][ T4490] should_failslab+0x8c/0xb0 [ 45.602463][ T4490] kmem_cache_alloc_noprof+0x50/0x310 [ 45.602488][ T4490] ? dst_alloc+0xbd/0x100 [ 45.602508][ T4490] dst_alloc+0xbd/0x100 [ 45.602559][ T4490] ip_route_input_rcu+0x177d/0x1d00 [ 45.602594][ T4490] ip_route_input_noref+0x5f/0x90 [ 45.602622][ T4490] ip_rcv_finish_core+0x315/0xb40 [ 45.602684][ T4490] ip_rcv_finish+0x100/0x1c0 [ 45.602703][ T4490] ip_rcv+0x62/0x140 [ 45.602720][ T4490] ? __pfx_ip_rcv_finish+0x10/0x10 [ 45.602816][ T4490] ? __pfx_ip_rcv+0x10/0x10 [ 45.602835][ T4490] __netif_receive_skb+0xff/0x270 [ 45.602866][ T4490] ? tun_rx_batched+0xc7/0x430 [ 45.602896][ T4490] netif_receive_skb+0x4b/0x2e0 [ 45.602960][ T4490] ? tun_rx_batched+0xc7/0x430 [ 45.602986][ T4490] tun_rx_batched+0xfc/0x430 [ 45.603070][ T4490] tun_get_user+0x1eb6/0x2680 [ 45.603102][ T4490] ? ref_tracker_alloc+0x1f2/0x2f0 [ 45.603124][ T4490] tun_chr_write_iter+0x15e/0x210 [ 45.603257][ T4490] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 45.603284][ T4490] vfs_write+0x52a/0x960 [ 45.603306][ T4490] ksys_write+0xda/0x1a0 [ 45.603326][ T4490] __x64_sys_write+0x40/0x50 [ 45.603345][ T4490] x64_sys_call+0x27fe/0x2ff0 [ 45.603446][ T4490] do_syscall_64+0xd2/0x200 [ 45.603470][ T4490] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 45.603491][ T4490] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 45.603544][ T4490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.603622][ T4490] RIP: 0033:0x7fde97e5d69f [ 45.603635][ T4490] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 45.603650][ T4490] RSP: 002b:00007fde968c7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 45.603671][ T4490] RAX: ffffffffffffffda RBX: 00007fde98095fa0 RCX: 00007fde97e5d69f [ 45.603682][ T4490] RDX: 0000000000000036 RSI: 00002000000002c0 RDI: 00000000000000c8 [ 45.603692][ T4490] RBP: 00007fde968c7090 R08: 0000000000000000 R09: 0000000000000000 [ 45.603745][ T4490] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 45.603755][ T4490] R13: 00007fde98096038 R14: 00007fde98095fa0 R15: 00007fffa2fafa78 [ 45.603770][ T4490] [ 45.880863][ T4484] Alternate GPT is invalid, using primary GPT. [ 45.887194][ T4484] loop5: p1 p2 p3 [ 45.903930][ T4496] vlan2: entered allmulticast mode [ 45.959191][ T4500] loop4: detected capacity change from 0 to 2048 [ 45.972538][ T4500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 46.180741][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 46.191740][ T4516] FAULT_INJECTION: forcing a failure. [ 46.191740][ T4516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.204802][ T4516] CPU: 0 UID: 0 PID: 4516 Comm: syz.2.358 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.204826][ T4516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 46.204893][ T4516] Call Trace: [ 46.204900][ T4516] [ 46.204908][ T4516] __dump_stack+0x1d/0x30 [ 46.204928][ T4516] dump_stack_lvl+0xe8/0x140 [ 46.205021][ T4516] dump_stack+0x15/0x1b [ 46.205036][ T4516] should_fail_ex+0x265/0x280 [ 46.205055][ T4516] should_fail+0xb/0x20 [ 46.205070][ T4516] should_fail_usercopy+0x1a/0x20 [ 46.205093][ T4516] _copy_from_iter+0xd2/0xe80 [ 46.205151][ T4516] ? __build_skb_around+0x1a0/0x200 [ 46.205188][ T4516] ? __alloc_skb+0x223/0x320 [ 46.205206][ T4516] netlink_sendmsg+0x471/0x6b0 [ 46.205229][ T4516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 46.205263][ T4516] __sock_sendmsg+0x145/0x180 [ 46.205424][ T4516] ____sys_sendmsg+0x31e/0x4e0 [ 46.205446][ T4516] ___sys_sendmsg+0x17b/0x1d0 [ 46.205503][ T4516] __x64_sys_sendmsg+0xd4/0x160 [ 46.205526][ T4516] x64_sys_call+0x191e/0x2ff0 [ 46.205545][ T4516] do_syscall_64+0xd2/0x200 [ 46.205575][ T4516] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 46.205602][ T4516] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 46.205701][ T4516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.205793][ T4516] RIP: 0033:0x7f289919ebe9 [ 46.205809][ T4516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.205827][ T4516] RSP: 002b:00007f2897c07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.205847][ T4516] RAX: ffffffffffffffda RBX: 00007f28993d5fa0 RCX: 00007f289919ebe9 [ 46.205860][ T4516] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000003 [ 46.205874][ T4516] RBP: 00007f2897c07090 R08: 0000000000000000 R09: 0000000000000000 [ 46.205887][ T4516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.205900][ T4516] R13: 00007f28993d6038 R14: 00007f28993d5fa0 R15: 00007ffe486cf5f8 [ 46.205986][ T4516] [ 46.534120][ T4532] netlink: 'syz.0.364': attribute type 21 has an invalid length. [ 46.544039][ T4532] syz.0.364 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 46.564005][ T4532] tipc: Started in network mode [ 46.568912][ T4532] tipc: Node identity 128991b6f351, cluster identity 4711 [ 46.576155][ T4532] tipc: Enabled bearer , priority 0 [ 46.593558][ T4534] loop4: detected capacity change from 0 to 2048 [ 46.616236][ T4532] tipc: Disabling bearer [ 46.659918][ T4534] Alternate GPT is invalid, using primary GPT. [ 46.666205][ T4534] loop4: p1 p2 p3 [ 46.692378][ T4551] netlink: 'syz.5.369': attribute type 1 has an invalid length. [ 46.700058][ T4551] __nla_validate_parse: 12 callbacks suppressed [ 46.700072][ T4551] netlink: 224 bytes leftover after parsing attributes in process `syz.5.369'. [ 46.754003][ T4559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.377'. [ 46.882845][ T4569] Illegal XDP return value 4294967274 on prog (id 186) dev N/A, expect packet loss! [ 46.950930][ T4582] loop1: detected capacity change from 0 to 2048 [ 46.963822][ T4578] FAULT_INJECTION: forcing a failure. [ 46.963822][ T4578] name failslab, interval 1, probability 0, space 0, times 0 [ 46.969761][ T4584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 46.976503][ T4578] CPU: 0 UID: 0 PID: 4578 Comm: syz.2.383 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.976530][ T4578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 46.976543][ T4578] Call Trace: [ 46.976572][ T4578] [ 46.976579][ T4578] __dump_stack+0x1d/0x30 [ 46.976600][ T4578] dump_stack_lvl+0xe8/0x140 [ 46.976639][ T4578] dump_stack+0x15/0x1b [ 46.976656][ T4578] should_fail_ex+0x265/0x280 [ 46.976677][ T4578] should_failslab+0x8c/0xb0 [ 46.976702][ T4578] __kmalloc_noprof+0xa5/0x3e0 [ 46.976762][ T4578] ? kobject_get_path+0x92/0x1c0 [ 46.976844][ T4578] kobject_get_path+0x92/0x1c0 [ 46.976907][ T4578] kobject_uevent_env+0x1da/0x570 [ 46.976959][ T4578] kobject_uevent+0x1d/0x30 [ 46.976980][ T4578] device_release_driver_internal+0x46e/0x4e0 [ 46.977019][ T4578] device_release_driver+0x19/0x20 [ 46.977044][ T4578] usb_driver_release_interface+0xf0/0x100 [ 46.977109][ T4578] proc_ioctl+0x1d5/0x400 [ 46.977141][ T4578] proc_ioctl_default+0x71/0xa0 [ 46.977214][ T4578] usbdev_ioctl+0xe97/0x1710 [ 46.977240][ T4578] ? __pfx_usbdev_ioctl+0x10/0x10 [ 46.977331][ T4578] __se_sys_ioctl+0xcb/0x140 [ 46.977414][ T4578] __x64_sys_ioctl+0x43/0x50 [ 46.977431][ T4578] x64_sys_call+0x1816/0x2ff0 [ 46.977452][ T4578] do_syscall_64+0xd2/0x200 [ 46.977479][ T4578] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 46.977582][ T4578] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 46.977609][ T4578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.977631][ T4578] RIP: 0033:0x7f289919ebe9 [ 46.977645][ T4578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.977691][ T4578] RSP: 002b:00007f2897c07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 46.977709][ T4578] RAX: ffffffffffffffda RBX: 00007f28993d5fa0 RCX: 00007f289919ebe9 [ 46.977722][ T4578] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 0000000000000005 [ 46.977734][ T4578] RBP: 00007f2897c07090 R08: 0000000000000000 R09: 0000000000000000 [ 46.977746][ T4578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.977758][ T4578] R13: 00007f28993d6038 R14: 00007f28993d5fa0 R15: 00007ffe486cf5f8 [ 46.977834][ T4578] [ 46.979429][ T4582] Alternate GPT is invalid, using primary GPT. [ 46.985311][ T4584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.386'. [ 46.994930][ T4582] loop1: p1 p2 p3 [ 47.080150][ T4589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.388'. [ 47.240305][ T29] kauditd_printk_skb: 431 callbacks suppressed [ 47.240319][ T29] audit: type=1326 audit(1756684916.436:4810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4585 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289919ebe9 code=0x7ffc0000 [ 47.275327][ T29] audit: type=1326 audit(1756684916.466:4811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4585 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f289919ebe9 code=0x7ffc0000 [ 47.298668][ T29] audit: type=1326 audit(1756684916.466:4812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4585 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289919ebe9 code=0x7ffc0000 [ 47.321980][ T29] audit: type=1326 audit(1756684916.466:4813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4585 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f289919ebe9 code=0x7ffc0000 [ 47.345334][ T29] audit: type=1326 audit(1756684916.466:4814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4585 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289919ebe9 code=0x7ffc0000 [ 47.368817][ T29] audit: type=1326 audit(1756684916.466:4815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4585 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f289919ebe9 code=0x7ffc0000 [ 47.392112][ T29] audit: type=1326 audit(1756684916.466:4816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4585 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289919ebe9 code=0x7ffc0000 [ 47.415428][ T29] audit: type=1326 audit(1756684916.466:4817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4585 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f289919ebe9 code=0x7ffc0000 [ 47.438713][ T29] audit: type=1326 audit(1756684916.466:4818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4585 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289919ebe9 code=0x7ffc0000 [ 47.462064][ T29] audit: type=1326 audit(1756684916.466:4819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4585 comm="syz.2.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f289919ebe9 code=0x7ffc0000 [ 47.511377][ T4598] FAULT_INJECTION: forcing a failure. [ 47.511377][ T4598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.524598][ T4598] CPU: 0 UID: 0 PID: 4598 Comm: syz.0.391 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.524625][ T4598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 47.524638][ T4598] Call Trace: [ 47.524644][ T4598] [ 47.524652][ T4598] __dump_stack+0x1d/0x30 [ 47.524671][ T4598] dump_stack_lvl+0xe8/0x140 [ 47.524759][ T4598] dump_stack+0x15/0x1b [ 47.524777][ T4598] should_fail_ex+0x265/0x280 [ 47.524800][ T4598] should_fail+0xb/0x20 [ 47.524819][ T4598] should_fail_usercopy+0x1a/0x20 [ 47.524889][ T4598] _copy_to_user+0x20/0xa0 [ 47.524920][ T4598] simple_read_from_buffer+0xb5/0x130 [ 47.524979][ T4598] proc_fail_nth_read+0x10e/0x150 [ 47.525007][ T4598] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 47.525033][ T4598] vfs_read+0x1a8/0x770 [ 47.525051][ T4598] ? __rcu_read_unlock+0x4f/0x70 [ 47.525131][ T4598] ? __fget_files+0x184/0x1c0 [ 47.525157][ T4598] ksys_read+0xda/0x1a0 [ 47.525178][ T4598] __x64_sys_read+0x40/0x50 [ 47.525200][ T4598] x64_sys_call+0x27bc/0x2ff0 [ 47.525221][ T4598] do_syscall_64+0xd2/0x200 [ 47.525335][ T4598] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.525437][ T4598] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 47.525499][ T4598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.525522][ T4598] RIP: 0033:0x7f6fc797d5fc [ 47.525536][ T4598] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 47.525554][ T4598] RSP: 002b:00007f6fc63e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 47.525575][ T4598] RAX: ffffffffffffffda RBX: 00007f6fc7bb5fa0 RCX: 00007f6fc797d5fc [ 47.525659][ T4598] RDX: 000000000000000f RSI: 00007f6fc63e70a0 RDI: 0000000000000007 [ 47.525671][ T4598] RBP: 00007f6fc63e7090 R08: 0000000000000000 R09: 0000000000000000 [ 47.525682][ T4598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.525692][ T4598] R13: 00007f6fc7bb6038 R14: 00007f6fc7bb5fa0 R15: 00007fffac286468 [ 47.525709][ T4598] [ 47.527469][ T4600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.392'. [ 47.808922][ T4629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.403'. [ 47.861336][ T4633] netlink: 'syz.0.401': attribute type 1 has an invalid length. [ 47.869002][ T4633] netlink: 224 bytes leftover after parsing attributes in process `syz.0.401'. [ 47.943117][ T4640] netlink: 'syz.5.404': attribute type 1 has an invalid length. [ 47.950860][ T4640] netlink: 224 bytes leftover after parsing attributes in process `syz.5.404'. [ 48.533444][ T4668] loop1: detected capacity change from 0 to 512 [ 48.541113][ T4668] EXT4-fs (loop1): orphan cleanup on readonly fs [ 48.547843][ T4668] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.415: bad orphan inode 13 [ 48.558025][ T4668] ext4_test_bit(bit=12, block=18) = 1 [ 48.563449][ T4668] is_bad_inode(inode)=0 [ 48.567664][ T4668] NEXT_ORPHAN(inode)=2130706432 [ 48.572574][ T4668] max_ino=32 [ 48.575746][ T4668] i_nlink=1 [ 48.579207][ T4668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.593766][ T4668] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 48.611705][ T4668] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 48.790330][ T4686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.421'. [ 48.805261][ T4688] netlink: 'syz.0.418': attribute type 1 has an invalid length. [ 48.862051][ T4691] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 48.901296][ T4691] 0ªî{X¹¦: entered allmulticast mode [ 48.907543][ T4691] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 48.954653][ T4692] geneve0: entered allmulticast mode [ 49.166636][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.415169][ T4730] loop5: detected capacity change from 0 to 512 [ 49.422637][ T4730] EXT4-fs (loop5): orphan cleanup on readonly fs [ 49.429205][ T4730] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.438: bad orphan inode 13 [ 49.439234][ T4730] ext4_test_bit(bit=12, block=18) = 1 [ 49.444678][ T4730] is_bad_inode(inode)=0 [ 49.448819][ T4730] NEXT_ORPHAN(inode)=2130706432 [ 49.453688][ T4730] max_ino=32 [ 49.456898][ T4730] i_nlink=1 [ 49.460469][ T4730] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.473837][ T4730] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 49.490107][ T4730] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 49.803712][ T4769] netlink: 'syz.0.452': attribute type 1 has an invalid length. [ 49.850096][ T4754] loop4: detected capacity change from 0 to 512 [ 49.857652][ T4754] EXT4-fs (loop4): orphan cleanup on readonly fs [ 49.864360][ T4754] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.447: bad orphan inode 13 [ 49.874667][ T4754] ext4_test_bit(bit=12, block=18) = 1 [ 49.880080][ T4754] is_bad_inode(inode)=0 [ 49.884227][ T4754] NEXT_ORPHAN(inode)=2130706432 [ 49.889075][ T4754] max_ino=32 [ 49.892298][ T4754] i_nlink=1 [ 49.896891][ T4754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.902680][ T4772] vlan2: entered allmulticast mode [ 49.917054][ T4754] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 49.930050][ T4754] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 49.956963][ T4774] loop2: detected capacity change from 0 to 2048 [ 49.971166][ T4774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 50.016383][ T3752] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.070372][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 50.091490][ T4784] loop5: detected capacity change from 0 to 2048 [ 50.141151][ T4784] Alternate GPT is invalid, using primary GPT. [ 50.147496][ T4784] loop5: p1 p2 p3 [ 50.200976][ T4803] vlan2: entered allmulticast mode [ 50.258031][ T4805] loop2: detected capacity change from 0 to 2048 [ 50.271310][ T4805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 50.370520][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 50.457599][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.529197][ T4827] loop2: detected capacity change from 0 to 2048 [ 50.570712][ T4827] Alternate GPT is invalid, using primary GPT. [ 50.577071][ T4827] loop2: p1 p2 p3 [ 50.730678][ T4849] vlan2: entered allmulticast mode [ 50.788589][ T4851] loop4: detected capacity change from 0 to 2048 [ 50.801334][ T4851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 50.805647][ T4853] vlan2: entered allmulticast mode [ 50.859695][ T4856] loop0: detected capacity change from 0 to 2048 [ 50.871634][ T4856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 50.907221][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 50.983981][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 51.077302][ T4869] loop0: detected capacity change from 0 to 512 [ 51.084863][ T4869] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.093033][ T4869] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 51.105281][ T4869] EXT4-fs (loop0): 1 truncate cleaned up [ 51.111511][ T4869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.244088][ T4888] vlan2: entered allmulticast mode [ 51.267358][ T4888] dummy0: entered allmulticast mode [ 51.307222][ T4893] loop5: detected capacity change from 0 to 2048 [ 51.331754][ T4893] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 51.561591][ T3752] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 51.861826][ T4924] loop5: detected capacity change from 0 to 512 [ 51.868551][ T4924] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.881059][ T4924] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 51.893136][ T4924] EXT4-fs (loop5): 1 truncate cleaned up [ 51.927320][ T4924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.940747][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.972652][ T4929] __nla_validate_parse: 23 callbacks suppressed [ 51.972667][ T4929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.509'. [ 52.044236][ T4934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.511'. [ 52.067946][ T4938] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 52.108821][ T4945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.514'. [ 52.279183][ T4957] loop4: detected capacity change from 0 to 512 [ 52.285963][ T4957] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.306409][ T4957] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.336790][ T4957] EXT4-fs (loop4): 1 truncate cleaned up [ 52.344013][ T4957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.369054][ T4964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 52.604980][ T4970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.522'. [ 52.631039][ T4974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.523'. [ 52.651916][ T4974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.523'. [ 52.653444][ T29] kauditd_printk_skb: 403 callbacks suppressed [ 52.653474][ T29] audit: type=1326 audit(1756684921.846:5223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4975 comm="syz.2.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289919ebe9 code=0x7ffc0000 [ 52.698774][ T29] audit: type=1326 audit(1756684921.866:5224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4975 comm="syz.2.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f289919ebe9 code=0x7ffc0000 [ 52.722159][ T29] audit: type=1326 audit(1756684921.866:5225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4975 comm="syz.2.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289919ebe9 code=0x7ffc0000 [ 52.745590][ T29] audit: type=1326 audit(1756684921.866:5226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4975 comm="syz.2.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289919ebe9 code=0x7ffc0000 [ 52.879943][ T3752] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.011385][ T5000] loop5: detected capacity change from 0 to 2048 [ 53.073222][ T5000] Alternate GPT is invalid, using primary GPT. [ 53.079701][ T5000] loop5: p1 p2 p3 [ 53.189931][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.213235][ T5012] loop5: detected capacity change from 0 to 2048 [ 53.224692][ T5014] netlink: 'syz.1.539': attribute type 1 has an invalid length. [ 53.232376][ T5014] netlink: 224 bytes leftover after parsing attributes in process `syz.1.539'. [ 53.319690][ T5012] loop5: unable to read partition table [ 53.327370][ T5012] loop5: partition table beyond EOD, truncated [ 53.333619][ T5012] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 53.355097][ T5012] pim6reg: entered allmulticast mode [ 53.379334][ T5012] netlink: 'syz.5.541': attribute type 10 has an invalid length. [ 53.389310][ T5012] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 53.398510][ T5012] team0: Failed to send options change via netlink (err -105) [ 53.406002][ T5012] team0: Port device netdevsim1 added [ 53.447127][ T5032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.548'. [ 53.486063][ T29] audit: type=1326 audit(1756684922.676:5227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97e5ebe9 code=0x7ffc0000 [ 53.511034][ T29] audit: type=1326 audit(1756684922.676:5228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97e5ebe9 code=0x7ffc0000 [ 53.534365][ T29] audit: type=1326 audit(1756684922.696:5229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fde97e5ebe9 code=0x7ffc0000 [ 53.549078][ T5039] loop4: detected capacity change from 0 to 2048 [ 53.557748][ T29] audit: type=1326 audit(1756684922.696:5230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97e5ebe9 code=0x7ffc0000 [ 53.567858][ T5037] netlink: 'syz.5.549': attribute type 1 has an invalid length. [ 53.587477][ T29] audit: type=1326 audit(1756684922.696:5231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97e5ebe9 code=0x7ffc0000 [ 53.618420][ T5037] netlink: 224 bytes leftover after parsing attributes in process `syz.5.549'. [ 53.660539][ T5039] Alternate GPT is invalid, using primary GPT. [ 53.666872][ T5039] loop4: p1 p2 p3 [ 53.765113][ T29] audit: type=1326 audit(1756684922.956:5232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5048 comm="syz.4.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97e5ebe9 code=0x7ffc0000 [ 53.797391][ T5049] vlan2: entered allmulticast mode [ 53.854404][ T5052] loop4: detected capacity change from 0 to 2048 [ 53.955768][ T5062] loop2: detected capacity change from 0 to 2048 [ 53.999531][ T5070] loop4: detected capacity change from 0 to 2048 [ 54.021777][ T5062] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm +}[@: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 54.038451][ T5062] EXT4-fs (loop2): Remounting filesystem read-only [ 54.045847][ T5070] Alternate GPT is invalid, using primary GPT. [ 54.052181][ T5070] loop4: p1 p2 p3 [ 54.168924][ T5093] vlan2: entered allmulticast mode [ 54.231396][ T5096] loop4: detected capacity change from 0 to 2048 [ 54.368584][ T5112] netlink: 'syz.5.574': attribute type 1 has an invalid length. [ 54.561345][ T5125] loop0: detected capacity change from 0 to 2048 [ 54.612286][ T5116] loop2: detected capacity change from 0 to 1024 [ 54.618819][ T5116] ext4: Unknown parameter 'nouser_xattr' [ 54.640175][ T5116] 9pnet: Could not find request transport: fd0x0000000000000004 [ 54.644036][ T5125] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm +}[@: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 54.670194][ T5125] EXT4-fs (loop0): Remounting filesystem read-only [ 54.722095][ T5142] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 54.732954][ T5140] loop0: detected capacity change from 0 to 2048 [ 54.771878][ T5140] Alternate GPT is invalid, using primary GPT. [ 54.778406][ T5140] loop0: p1 p2 p3 [ 54.937229][ T5159] loop4: detected capacity change from 0 to 2048 [ 54.960268][ T5163] loop0: detected capacity change from 0 to 2048 [ 54.968887][ T5159] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.594: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 54.985498][ T5159] EXT4-fs (loop4): Remounting filesystem read-only [ 54.997111][ T5163] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.595: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 55.021217][ T5163] EXT4-fs (loop0): Remounting filesystem read-only [ 55.078318][ T5182] vlan2: entered allmulticast mode [ 55.133779][ T5187] loop4: detected capacity change from 0 to 2048 [ 55.226728][ T5200] loop0: detected capacity change from 0 to 2048 [ 55.247924][ T5203] loop5: detected capacity change from 0 to 2048 [ 55.256187][ T5200] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.610: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 55.273316][ T5200] EXT4-fs (loop0): Remounting filesystem read-only [ 55.283548][ T5203] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.611: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 55.304146][ T5203] EXT4-fs (loop5): Remounting filesystem read-only [ 55.403848][ T5229] netlink: 'syz.0.617': attribute type 1 has an invalid length. [ 55.440878][ T5236] loop5: detected capacity change from 0 to 512 [ 55.447532][ T5236] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.454280][ T5236] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 55.465039][ T5236] EXT4-fs (loop5): 1 truncate cleaned up [ 55.872796][ T5282] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 55.947856][ T5289] loop2: detected capacity change from 0 to 2048 [ 55.964665][ T5289] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.624: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 55.981398][ T5289] EXT4-fs (loop2): Remounting filesystem read-only [ 56.084819][ T5249] ================================================================== [ 56.092924][ T5249] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 56.101805][ T5249] [ 56.104116][ T5249] read-write to 0xffff88811a0e9ce8 of 8 bytes by task 5236 on cpu 0: [ 56.112160][ T5249] __filemap_add_folio+0x5b9/0x7d0 [ 56.117268][ T5249] filemap_add_folio+0x98/0x1b0 [ 56.122113][ T5249] __filemap_get_folio+0x31e/0x6b0 [ 56.127219][ T5249] ext4_write_begin+0x2fe/0xeb0 [ 56.132057][ T5249] generic_perform_write+0x181/0x490 [ 56.137332][ T5249] ext4_buffered_write_iter+0x1ee/0x3c0 [ 56.142881][ T5249] ext4_file_write_iter+0xdbf/0xf00 [ 56.148072][ T5249] iter_file_splice_write+0x663/0xa60 [ 56.153433][ T5249] direct_splice_actor+0x153/0x2a0 [ 56.158530][ T5249] splice_direct_to_actor+0x30f/0x680 [ 56.163886][ T5249] do_splice_direct+0xda/0x150 [ 56.168638][ T5249] do_sendfile+0x380/0x650 [ 56.173043][ T5249] __x64_sys_sendfile64+0x105/0x150 [ 56.178236][ T5249] x64_sys_call+0x2bb0/0x2ff0 [ 56.182903][ T5249] do_syscall_64+0xd2/0x200 [ 56.187405][ T5249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.193284][ T5249] [ 56.195591][ T5249] read to 0xffff88811a0e9ce8 of 8 bytes by task 5249 on cpu 1: [ 56.203117][ T5249] filemap_write_and_wait_range+0x59/0x340 [ 56.208924][ T5249] ext4_file_write_iter+0xe04/0xf00 [ 56.214119][ T5249] iter_file_splice_write+0x663/0xa60 [ 56.219476][ T5249] direct_splice_actor+0x153/0x2a0 [ 56.224575][ T5249] splice_direct_to_actor+0x30f/0x680 [ 56.229936][ T5249] do_splice_direct+0xda/0x150 [ 56.234686][ T5249] do_sendfile+0x380/0x650 [ 56.239093][ T5249] __x64_sys_sendfile64+0x105/0x150 [ 56.244284][ T5249] x64_sys_call+0x2bb0/0x2ff0 [ 56.248950][ T5249] do_syscall_64+0xd2/0x200 [ 56.253444][ T5249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.259321][ T5249] [ 56.261628][ T5249] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 56.268717][ T5249] [ 56.271023][ T5249] Reported by Kernel Concurrency Sanitizer on: [ 56.277158][ T5249] CPU: 1 UID: 0 PID: 5249 Comm: syz.5.619 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.286778][ T5249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 56.296817][ T5249] ==================================================================