last executing test programs: 4m48.932102086s ago: executing program 32 (id=51): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, 0x0}, 0x4) 4m8.525877274s ago: executing program 1 (id=245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x40000000000016c, 0x0) 4m8.213701853s ago: executing program 1 (id=249): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0x3bf}}, {@shortname_winnt}, {@numtail}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@uni_xlateno}, {@fat=@nfs_stale_rw}, {@fat=@discard}, {@fat=@debug}, {@shortname_mixed}, {@fat=@sys_immutable}, {@utf8no}, {@shortname_win95}]}, 0x0, 0x2a5, &(0x7f0000000540)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_setup(0x60, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000001400)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000200)={0x1d, r4, 0x0, {0x0, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') fcntl$setstatus(r5, 0x4, 0x40800) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd=r5, 0x792, &(0x7f00000004c0)=[{&(0x7f00000006c0)=""/144, 0x90}], 0x1}) io_uring_enter(0xffffffffffffffff, 0x567, 0x1000a387, 0x0, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x207}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x100) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000380)=[{0x3, 0x3, {0x2, 0x1, 0x4}, {0x1, 0xb25f81e830ee96fb, 0x1}, 0x0, 0xfe}, {0x5, 0x1, {0x1, 0xff}, {0x2, 0x1}, 0x1, 0x1}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x74, r4, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r6, &(0x7f0000001900)=""/4079, 0xfef, 0x66) 4m8.151031756s ago: executing program 1 (id=251): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) (async) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000005240)=@newchain={0xf3c, 0x64, 0x800, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xc}, {0xffe0, 0xffe0}, {0x3, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xf08, 0x2, [@TCA_MATCHALL_ACT={0xf04, 0x2, [@m_skbmod={0xb0, 0x0, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x1, 0x5, 0x5, 0xff}, 0x5}}]}, {0x49, 0x6, "621c059bec4005b96e2a3acd50fe6491ba5eb6a8cece7371003b41c7987afd43cd9877482ecb38b4c8c2c9f40db3005067b4fad8c3e799a971d1a28f51d0ec2ce939f78052"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_pedit={0xe50, 0xd, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2b1e, 0x2, 0x0, 0x1, 0x6}, 0x8, 0xd}, [{0x4df, 0xdf46, 0x1, 0x2, 0x42, 0x2}, {0x4, 0x0, 0x9, 0x12, 0x7, 0xf}, {0x3a, 0x80000001, 0x1, 0x1, 0x40, 0xc41}, {0x7, 0x1, 0x0, 0x1, 0x6, 0x4}, {0xa1, 0x5, 0x200000, 0x7ff, 0x7fffffff, 0x3}, {0x5, 0xa4, 0x86d, 0x1, 0x4, 0x100}, {0x4, 0x7ff, 0x1, 0xfffffffc, 0x7ff, 0x2}, {0x40, 0x4, 0x6, 0x0, 0x7fffffff, 0x9}, {0x81, 0x6, 0x7, 0x4}, {0xd9, 0x0, 0x3, 0x6, 0x80000001, 0x6}, {0x2, 0x3, 0xffffff01, 0x8da, 0xfff, 0x8}, {0x5, 0x3126, 0x80, 0x1b, 0x1, 0x1000}, {0x0, 0x6, 0x2, 0x7fff, 0x8, 0xd64}, {0x45c, 0xa8, 0xdf, 0x8, 0x4bee, 0xd}, {0x2, 0xb, 0x1, 0x7, 0x8, 0xe}, {0xfc000000, 0x18, 0x6, 0x80000000, 0x4, 0x7fff}, {0x5, 0x7, 0x7, 0x5, 0x2, 0x7}, {0xfffffffd, 0x0, 0x0, 0xffffffff, 0x1ff, 0x8}, {0x3, 0xe, 0x40000000, 0xfffff001, 0x100, 0x7fffffff}, {0x9, 0x7, 0x9, 0x2, 0xb, 0x6}, {0x401, 0x80000000, 0x8, 0x729, 0x3, 0x6}, {0xfffffff9, 0x738, 0x1000, 0x9, 0x0, 0x59a}, {0x0, 0x8db0, 0x3, 0x400, 0x0, 0xf}, {0xf16, 0x65af, 0x0, 0xffffffff, 0x8, 0xffff}, {0x0, 0x400, 0x1, 0xd, 0x5b2f, 0x2}, {0x3a, 0x5, 0x0, 0x9, 0x6, 0x1}, {0xe5f7, 0x4, 0x6, 0x0, 0x7, 0xfef0}, {0x9, 0x6624, 0x7ff, 0xad2a, 0x2, 0x10}, {0x800, 0x1, 0x9, 0x6, 0xfffff9ea, 0x4}, {0x0, 0x1, 0x0, 0x2, 0xef, 0xffffffff}, {0x9, 0x5, 0x4, 0x4, 0xc, 0x5}, {0x7f, 0xfff, 0x3, 0x10000, 0x1, 0x8000}, {0x6, 0x9, 0x7, 0x401, 0x112, 0x7}, {0x1, 0x52, 0x0, 0x1, 0x400, 0x9}, {0x101, 0x7fffffff, 0x8001, 0x6, 0x0, 0x7}, {0xa4, 0x40, 0x8, 0xfffffff6, 0x4, 0xfffffffc}, {0x80000001, 0x3, 0x3, 0x5, 0x2, 0x400}, {0x1, 0x5, 0x4, 0x6, 0xfffff800, 0x10000}, {0xfffffffb, 0x5, 0x10001, 0x5, 0x80000001}, {0x0, 0x40, 0x7, 0x6714, 0x8, 0x2}, {0x7fffffff, 0x7, 0xffff19e4, 0x800, 0xfff, 0x1}, {0x8, 0x5, 0x4b, 0x80000001, 0x6, 0x2b0}, {0xfffffffb, 0x3, 0x1, 0x6, 0x4, 0x387e}, {0xca, 0x0, 0x8, 0x4, 0x5, 0x9}, {0x3, 0x100, 0x8, 0xe000000, 0xa, 0x8}, {0x9, 0x9, 0x9, 0x0, 0x0, 0x6}, {0x54fb, 0x8001, 0x7, 0x8001, 0xf3e8, 0x2}, {0x4, 0x4, 0x7, 0x0, 0x101, 0x6}, {0x3, 0x8, 0x9, 0x3, 0x7, 0x28000000}, {0xbafe, 0x1ff, 0x5, 0x8, 0x7, 0x5}, {0x7, 0x8, 0x2, 0x2, 0x6, 0x7}, {0x4, 0x1a, 0x9, 0x4, 0x4cc, 0x5}, {0xfffffff7, 0xe, 0x1, 0x9, 0x5194e008, 0x7}, {0x5, 0x7, 0x2, 0xe, 0x1ff, 0x3}, {0x5, 0x28, 0x1, 0x0, 0x1562df21, 0x2}, {0x1, 0x81, 0x8b, 0x4, 0x2, 0x7fff}, {0x80, 0x7, 0x1000, 0x7f, 0x3, 0x5}, {0x0, 0x0, 0x5c8, 0x15, 0xffffff6b, 0x3f}, {0x71, 0x81, 0x0, 0x665, 0x0, 0x8}, {0x8b, 0x7, 0xeca, 0x5, 0x8, 0x3}, {0xe, 0x3, 0x8001, 0xe2c6, 0x82, 0x2}, {0x7ce, 0x8001, 0x7fff, 0x9b1a, 0x8001, 0x3}, {0xc, 0x5, 0x6, 0x5, 0xbd, 0xc6}, {0x2, 0x80000001, 0x0, 0x869b, 0x1, 0x5595}, {0xe7, 0x4, 0x4, 0x71b, 0xd69, 0x2}, {0xba, 0xfffffff7, 0x6, 0x40, 0x8, 0x6}, {0x7, 0x3, 0x8, 0x1, 0x9, 0x100}, {0x64ecce2d, 0x6, 0x5, 0x2, 0xf, 0x1}, {0x7, 0x9, 0x8, 0x2d08, 0x0, 0xbe}, {0x27b5, 0x7, 0x9196, 0x9, 0x6, 0x1000}, {0x2, 0x3e5f, 0xab0, 0x9, 0x200}, {0x2, 0x1, 0xd, 0x5, 0x3, 0x9}, {0x2, 0x6, 0x4d5, 0x3, 0x1ff, 0x2c9}, {0xd, 0x800, 0x3c49, 0x9, 0x7, 0xe}, {0x200, 0x7, 0x10, 0xffffffff, 0x1, 0x6}, {0x8, 0x8, 0xfffffff7, 0xc71, 0x1}, {0x7fff, 0x8, 0x3, 0x80000000, 0x3ff, 0x1}, {0x5, 0xc76, 0xfffffffb, 0x276, 0x4, 0x81}, {0xffff, 0x7, 0x8, 0xfffffeff, 0xf, 0x4}, {0xe, 0x7, 0x101, 0x1, 0x3, 0x1}, {0x0, 0xd8ad, 0x6, 0x5, 0x6, 0x7}, {0x2, 0x6fe, 0x0, 0x6, 0xfffffff8, 0x200}, {0x3ff, 0x384, 0x7, 0x7, 0x1, 0x5}, {0x1b, 0x5, 0x2, 0x813, 0x3, 0xfff}, {0x8000, 0x1000, 0x5, 0x401, 0x6d3, 0x4}, {0x9, 0x6, 0x4, 0x8, 0x3, 0xffff8001}, {0x4, 0x7, 0x9, 0xa9, 0x5, 0x6}, {0x10000, 0x9, 0x0, 0x80000001, 0x1, 0x7800000}, {0x9, 0xffffff34, 0x5, 0x8, 0x5cb, 0x8}, {0x4, 0x7, 0x3, 0x9957, 0x9, 0x3}, {0x4, 0x4, 0x2f4, 0x7, 0x8, 0x7f}, {0x6, 0x1, 0x6, 0x5218, 0x3, 0x6}, {0x5f22, 0xffffffff, 0x5, 0xb, 0x9}, {0x1, 0x7, 0x5, 0x3e, 0x8740, 0x180ee0b3}, {0x1, 0xb, 0xd5, 0x1, 0x4, 0xb}, {0xffffffff, 0x4, 0xd9be, 0x4, 0xffff, 0x3}, {0x9a, 0xff, 0x1, 0x1, 0x80000001, 0x6}, {0x2, 0x3, 0xfffffff8, 0x7, 0xffff, 0xffffffb4}, {0x5, 0x42, 0x3, 0x80000000, 0x9, 0x8}, {0x36f3, 0x5, 0x8, 0x1, 0x0, 0x1}, {0x8, 0x0, 0x7, 0xaa, 0x0, 0x4}, {0x2, 0x9, 0xa0, 0xfffffff8, 0x6c5d}, {0x91d, 0x8, 0x5, 0x9, 0x6, 0x2a8f}, {0xfffffff9, 0x10000, 0x2, 0x40, 0xfffffffc, 0xfffffffc}, {0xff, 0xb23, 0x8, 0x4d14, 0xfff, 0x5}, {0x2, 0x5, 0xfffffffe, 0x7, 0x9, 0xd74}, {0xffffffff, 0xfffffff8, 0x8, 0xfffffffa, 0x3, 0xbcbb}, {0x3, 0x6, 0xc, 0x5, 0x81, 0xfffff24c}, {0x80000001, 0x200, 0x1, 0x5523c58a, 0x98b2, 0x3}, {0x9, 0x3, 0x401, 0x1, 0x1ff, 0x4}, {0x0, 0x7, 0x7, 0x0, 0x0, 0x9}, {0x0, 0xe, 0x9, 0x1, 0x5, 0x3}, {0x8, 0x9, 0x1, 0xfa05, 0x8001, 0xad8}, {0x7ff, 0x2, 0x8fb, 0x7fff, 0x2, 0x80}, {0x6, 0x0, 0x7, 0x401, 0x2, 0x2}, {0x2, 0x43, 0x1ff, 0x8, 0xfffffffc, 0x6}, {0x87, 0x2, 0xb74, 0x6, 0x3, 0x3}, {0x3, 0x6, 0xe7ee, 0x3, 0x6461, 0x40}, {0xd, 0x3, 0x9, 0x8001, 0x2, 0x5c58f335}, {0x1, 0x101, 0x9, 0xf, 0x6}, {0x0, 0x5, 0x8, 0x3, 0x1, 0x1}, {0x2, 0x6, 0x5, 0xb141, 0x780, 0x40000}, {0x0, 0xf42, 0x2, 0xad5, 0x1, 0x9}, {0xf, 0x6, 0x7, 0x35, 0xfffffc01, 0x1000}, {0x1, 0x2, 0x6, 0x4, 0x0, 0xf2e}, {0x2, 0x0, 0x1, 0x9, 0x0, 0x7}, {0x9, 0x205cf756, 0xe204, 0x3, 0x8, 0x4}, {0x1, 0x0, 0x55ec, 0x7fff, 0x40}], [{}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x2, 0x971fb3afb9a3d83d}, {0x5}, {0x6, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x2}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x2}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0xa, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x1}, {}, {0x4}, {0x2}, {0x3}, {0x1}, {0x4}, {0x73a016b4584e9d1f}, {0x2}, {0x0, 0x1}, {0x2}, {0x3}, {}, {0x5, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x4}, {}, {0x1}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0xf3c}}, 0x4000800) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) (async) r2 = syz_io_uring_setup(0x647e, &(0x7f0000000440)={0x0, 0xa6c5, 0x10100, 0x3, 0xffffffbd}, &(0x7f0000000040)=0x0, &(0x7f0000000740)=0x0) socket$igmp6(0xa, 0x3, 0x2) (async) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000140)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x1, 0x28, 0x3, "42e6e77cd82fe0ca0f9c50ca1ac81edc3d6247b43ffe9ddf49abb812503d8bc826651f2ff44009d503672da8b087bd459dc47139042cfa6672c06933470dde", 0x1c}}) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) io_uring_enter(r2, 0x5b43, 0x0, 0x0, 0x0, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0xfffffffffffffffc, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000100)=""/203) (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 4m8.0944169s ago: executing program 1 (id=254): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) 4m8.031638853s ago: executing program 1 (id=256): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x8) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0xd, 0x5, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) write$cgroup_subtree(r2, 0x0, 0xfdef) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000000007111b70000000000160000100000e2944ede7cf0ff95007454b3c28d6cd099442a913106b5db9967e4c2f9524128b7fd4d9311f203aeeb7e66af7b56844e73367bdaae8337f3ba47b59e"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x22) 4m8.031249953s ago: executing program 1 (id=257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2400c890}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_dellink={0x2c, 0x11, 0x100, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, r2, 0x904, 0x8}, [@IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x4d}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000080), 0x0) mlock2(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)={0x2, 0x2, 0x7, 0x4000000008}) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000100)={0x8, 0xca, 0x2, 0x6, 0x27, 0x1ff}) 4m1.945901907s ago: executing program 33 (id=344): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x8000, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x68, 0x0, 0x0, 0x29, 0x0, @multicast1, @broadcast}}}}) mount$9p_rdma(0x0, 0x0, &(0x7f0000000200), 0xa04800, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20c1, 0x82) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet6(0x10, 0x3, 0x0) read(r2, &(0x7f0000000340)=""/254, 0xfe) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)={0x4bc, 0x1, 0x5, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [{{0x254, 0x1, {{0x1, 0x1}, 0x4, 0x8, 0x9, 0x7965, 0xf, 'syz0\x00', "dc9446f9640955fe7b2d1ed5c5f34fa6e42e3293dd4c81786ab6e7b9456411f4", "ed550ac5197ae294deef00eaa36b7c7c7407c790b925d65140bff1dfe7c7e408", [{0x8, 0x3, {0x0, 0x2}}, {0x3, 0x2, {0x3, 0x887}}, {0x215e, 0xa, {0x1, 0x2}}, {0x7f, 0x164, {0x1, 0x6}}, {0x0, 0x1000, {0x1, 0x4}}, {0x9, 0x1ff, {0x0, 0x3}}, {0xf, 0x9, {0x2, 0x4}}, {0x6, 0x7, {0x2, 0x9}}, {0x4eb, 0x8, {0x0, 0xfffffff7}}, {0x3, 0x2, {0x3, 0x6}}, {0x81, 0x6, {0x0, 0x3}}, {0x3, 0xe98d, {0x0, 0x5}}, {0x9, 0x6, {0x3, 0x2}}, {0xffff, 0x4, {0x1, 0xda5}}, {0x9, 0x6, {0x3, 0x4281}}, {0x6, 0x163, {0x1, 0x6}}, {0xb0c, 0x7fff, {0x0, 0xe}}, {0x0, 0x1e, {0x0, 0xfff}}, {0x3, 0xf395, {0x3, 0x400}}, {0x1ff, 0xa625, {0x1, 0x6}}, {0x1000, 0x9, {0x0, 0x848}}, {0x10, 0x4, {0x0, 0x4}}, {0x3, 0x6, {0x3, 0x7}}, {0xe7dc, 0x9, {0x2, 0xb}}, {0x1, 0x6, {0x0, 0x5}}, {0x1d12, 0x10, {0x1, 0x81}}, {0x3, 0x0, {0x3, 0x6}}, {0x8, 0x961, {0x2, 0x6e90}}, {0x0, 0x95c0, {0x2, 0x10000000}}, {0x1, 0xca25, {0x0, 0x6}}, {0x10, 0x1000, {0x2, 0x80000000}}, {0x7, 0x3, {0x0, 0x101}}, {0xa9, 0x9, {0x3, 0x5}}, {0x4, 0x0, {0x0, 0xfffffffb}}, {0x1, 0x0, {0x3, 0x3}}, {0x2, 0x1, {0x0, 0xf}}, {0x5, 0x1, {0x3, 0x10000}}, {0x8c95, 0x7, {0x0, 0x7}}, {0xafef, 0x6, {0x2, 0xd}}, {0x7, 0xd, {0x1, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x10001}, 0xf7, 0xf, 0x8, 0x0, 0xf, 'syz0\x00', "5098a65a975fd4133a63c7f0e941b9c57603c3f2f20f810f532c3f9c500849f9", "b82fef45560ec21c3b48ecbd4728b1c143d9e3f1b4a42f268ae07c0848ec4ba1", [{0x5, 0x7fff, {0x3, 0x7}}, {0x8, 0x5, {0x2, 0x3e}}, {0xf, 0x81, {0x2, 0x1}}, {0xb, 0x80, {0x3, 0x2}}, {0x6d2, 0xb8, {0x3, 0x8}}, {0x2, 0xc12, {0x2, 0x4}}, {0xc, 0xffff, {0x2, 0x7}}, {0x7fff, 0x10, {0x0, 0xffff7fff}}, {0x0, 0x6, {0x1, 0x1}}, {0xfff8, 0x5, {0x2, 0x4}}, {0x8, 0xd1, {0x0, 0x6}}, {0x400, 0x4, {0x1, 0xfffffffb}}, {0xb33, 0x2, {0x1, 0x7fffffff}}, {0x40, 0x349a, {0x2, 0x9}}, {0xac01, 0x5, {0x3, 0xc6e}}, {0x1, 0x3, {0x3, 0x80000001}}, {0x39, 0x5, {0x2, 0x63}}, {0x8, 0xfff7, {0x0, 0x9}}, {0x4, 0xd, {0x0, 0x73}}, {0x5, 0xe56, {0x3, 0x5}}, {0x4, 0x6, {0x0, 0x496c128d}}, {0x8b7, 0x1f7, {0x1, 0x1}}, {0x7, 0x6, {0xff9afaa6e292170e, 0x9}}, {0x8, 0x7, {0x0, 0x8}}, {0x4, 0x3, {0x1, 0x7f058e4b}}, {0x6, 0x8, {0x5, 0x8}}, {0x7, 0xfffd, {0x0, 0x3}}, {0x4, 0x5, {0x2, 0x1}}, {0xe3, 0x6, {0x0, 0x7f}}, {0xb65e, 0x0, {0x3, 0x8}}, {0x0, 0x4, {0x2, 0x5}}, {0x5, 0xf323, {0x2, 0xf}}, {0x9, 0x40, {0x1, 0x9}}, {0x1000, 0x3, {0x1, 0xd0}}, {0x7, 0xfffd, {0x2, 0x8}}, {0x5, 0x29, {0x2, 0x9}}, {0x401, 0x6, {0x3, 0x1}}, {0x3, 0x7ff, {0x1, 0x9}}, {0x8, 0x1, {0x2, 0x52}}, {0x2, 0x8, {0x1, 0xffff}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x4}, 0x40000) socket$kcm(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r4], 0x38}}, 0x10) 3m57.964031759s ago: executing program 3 (id=392): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x7}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x80000, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 3m57.959954079s ago: executing program 3 (id=393): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x7}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x80000, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) (fail_nth: 2) 3m57.715613863s ago: executing program 3 (id=394): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x40000000000016c, 0x0) 3m57.662633726s ago: executing program 3 (id=396): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x7}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240), &(0x7f0000000340)='./bus\x00', 0x6, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f00000003c0)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r2}, 0x8) r3 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$ARCH_SHSTK_DISABLE(0x1e, r5, 0x7ffffffff000, 0x1002) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(r0, 0x6, &(0x7f0000000380)={0x0, 0x0, 0x20000047f5, 0x1, r5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a36370000000000000000070000000900010073797a3000000000240000000c0a0101000000000000000003000009040003800900010073797a3000000000140000001000010000000000000000000084000a"], 0x6c}}, 0x800) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x4005, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001600156f00000000fddbdf", @ANYRES32=0x0, @ANYRES16], 0x2c}}, 0x0) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x80000, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x6}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0xffffffffffffffff, 0x8000000, 0xffffffffffffffff, 0x9) 3m57.551029063s ago: executing program 3 (id=398): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0], 0x38}}, 0x10) 3m57.192886343s ago: executing program 3 (id=401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x78}}, 0x2) 3m57.158704165s ago: executing program 34 (id=401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x78}}, 0x2) 3m52.977212728s ago: executing program 35 (id=257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2400c890}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_dellink={0x2c, 0x11, 0x100, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, r2, 0x904, 0x8}, [@IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x4d}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000080), 0x0) mlock2(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)={0x2, 0x2, 0x7, 0x4000000008}) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000100)={0x8, 0xca, 0x2, 0x6, 0x27, 0x1ff}) 3m43.573278205s ago: executing program 8 (id=542): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2010846, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$eJzs3d9rU+cbAPDnpK2/v18riGxjjIIXczhT2+6Hg124y7HJhO3ehfZYpKmRJhXbCdOLebObIYMxJozdb/e7lP0D+yuETZAhZbvYTcZJT2q0SRNrtNF8PnDkfXNO+p4n73le35M3IQEMrYnsn0LEyxHxTRJxMCKSfN9o5Dsn1o9bu391NtuSqNc//StpHJfVm3+r+bz9eeWliPjtq4jjhc3tVldWF0rlcrqU1ydri5cmqyurJy4slubT+fTi9MzMqbdnpt97952+xfrG2X++/+T2h6e+Prr23S93D91M4nQcyPe1xvEErrVWJmIif03G4vQjB071obFBkuz0CbAtI3mej0U2BhyMkTzrgRfflxFRB4ZUIv9hSDXnAc17+z7dBz837n2wfgO0Of7R9fdGYk/j3mjfWvLQnVF2vzveh/azNn7989bNbIv+vQ8B0NW16xFxcnR08/iX5OPf9p3s4ZhH2zD+wbNzO5v/vNlu/lPYmP9Em/nP/ja5ux3d879wtw/NdJTN/95vO//dWLQaH8lr/2vM+caS8xfKaTa2/T8ijsXY7qy+1XrOqbU79U77Wud/2Za135wL5udxd3T3w8+ZK9VKTxJzq3vXI15pO/9NNvo/adP/2etxtsc2jqS3Xuu0r3v8T1f9p4jX2/b/gxWtZOv1ycnG9TDZvCo2+/vGkd87tb/T8Wf9v2/r+MeT1vXa6uO38eOef9NO+x6KP3q//nclnzXKu/LHrpRqtaWpiF3Jx5sfn37w3Ga9eXwW/7GjW49/7a7/vRHxeY/x3zj886s9xd+t/5/CImsW/9xj9f/jF+589MUP248/6/+3GqVj+SO9jH+9nuCTvHYAAAAAAAAwaAoRcSCSQnGjXCgUi+uf7zgc+wrlSrV2/Hxl+eJcNL4rOx5jheZK98GWz0NM5Z+HbdanH6nPRMShiPh2ZG+jXpytlOd2OngAAAAAAAAAAAAAAAAAAAAYEPs7fP8/88fITp8d8NT5yW8YXl3zvx+/9AQMJP//w/CS/zC85D8ML/kPw0v+w/CS/zC85D8ML/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAAfXX2zJlsq6/dvzqb1ecurywvVC6fmEurC8XF5dnibGXpUnG+Upkvp8XZymK3v1euVC5NTcfylclaWq1NVldWzy1Wli/Wzl1YLM2n59KxZxIVAAAAAAAAAAAAAAAAAAAAPF+qK6sLpXI5XVJQ2FZhdDBOY3UhYiBO40Up7PTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//8NI25Q==") bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r0, 0x10, 0xed6, 0x8001) preadv2(0xffffffffffffffff, &(0x7f0000001040)=[{&(0x7f0000001900)=""/4096, 0x5491}], 0x1000000000000094, 0x1000, 0x4005, 0x8) 3m43.256582143s ago: executing program 8 (id=548): syz_emit_ethernet(0x4e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aabc9e0740aaaaaaaaaaaa0086dd607428dd001b3afffe8000000000000000000000000008bbff020000000000000000000000000001870400000000000000020000000000000000000000000001"], 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x21) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x794bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2c0c04}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x10}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x39}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0xa0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}}, 0x0) ptrace(0x4208, r3) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r1) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="400052040a000200aaaaaaaaaa"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close(r4) 3m42.885661765s ago: executing program 8 (id=555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0xe8c40, 0x0) vmsplice(r2, &(0x7f0000000940)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="e75bb2fb", @ANYRES16=r1, @ANYRESDEC=r2], 0x94}}, 0x0) 3m42.79564229s ago: executing program 8 (id=558): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bind$tipc(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) unlink(&(0x7f00000002c0)='./file1\x00') listen(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r3, 0x852ac000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)}], 0x1}, 0x4000005) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 3m42.62934886s ago: executing program 8 (id=563): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) 3m42.387671134s ago: executing program 8 (id=568): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x12100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x50, 0x1, 0x0, 0x0, 0x1c, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x10) write(r0, &(0x7f00000000c0)="9aee6967e85dc84b187fa605706ee25eb2d5ccf711097f1eaa5122c9fdd731f718c6a0bca06304e202bf32598049de5b35293eda956c02c3e2cfa90af9db193f07da54a4d28d0e0fa0be63ee51a3e514b20744dd95886b28fbb8f7209d655e1b3fbf54aa0e332d5f42dfefeb95a62acc136a1cd042a76d607de39fecce1d38", 0x7f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, &(0x7f00000008c0)=""/4096, 0x4}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x50) unshare(0x2000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073110f00000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) syz_open_procfs$namespace(r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m42.387410164s ago: executing program 36 (id=568): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x12100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x50, 0x1, 0x0, 0x0, 0x1c, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x10) write(r0, &(0x7f00000000c0)="9aee6967e85dc84b187fa605706ee25eb2d5ccf711097f1eaa5122c9fdd731f718c6a0bca06304e202bf32598049de5b35293eda956c02c3e2cfa90af9db193f07da54a4d28d0e0fa0be63ee51a3e514b20744dd95886b28fbb8f7209d655e1b3fbf54aa0e332d5f42dfefeb95a62acc136a1cd042a76d607de39fecce1d38", 0x7f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, &(0x7f00000008c0)=""/4096, 0x4}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x50) unshare(0x2000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073110f00000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) syz_open_procfs$namespace(r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m18.827451581s ago: executing program 6 (id=863): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x1f, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) 2m18.719357707s ago: executing program 6 (id=865): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x8080c0, &(0x7f0000000080)={[{@fat=@dos1xfloppy}, {@nodots}]}, 0x1, 0x21f, &(0x7f0000000100)="$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") r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0xfd56, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) 2m18.647613981s ago: executing program 6 (id=868): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x794bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace(0x4208, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32, @ANYBLOB="400052040a000200aaaaaaaaaa"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 2m18.567849296s ago: executing program 6 (id=870): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x840, &(0x7f0000000000), 0x1, 0x241, &(0x7f0000000540)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$P9_RFLUSH(r4, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) read$char_usb(r3, &(0x7f0000000a40)=""/234, 0xea) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000040)={0x0, 0x0, 0xd1, 0xb1, ""/177}, &(0x7f0000000140)=0xd1, 0x1) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r5 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r7 = syz_open_procfs(r5, &(0x7f0000000400)='ns\x00') readlinkat(r7, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x3c}) lsm_get_self_attr(0x0, &(0x7f00000002c0)={0x0, 0x0, 0xd9, 0xb9, ""/185}, &(0x7f00000003c0)=0xd9, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) ioctl$KDSIGACCEPT(r6, 0x4b4e, 0x1c) syz_clone3(&(0x7f0000000080)={0xa6d14121e0ff0a45, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r10 = pidfd_getfd(r9, r9, 0x0) setns(r10, 0x64000080) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x108110, 0xffffffffffffffff, 0x2000) 2m18.449585633s ago: executing program 6 (id=872): set_mempolicy(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000480), 0x0, 0x800000ef, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x26, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x13a, 0x13a, 0x2, [@datasec={0xa, 0x5, 0x0, 0xf, 0x2, [{0x1, 0x7, 0x9}, {0x2, 0xffffff2c, 0x5eb}, {0x1, 0x0, 0x88}, {0x5, 0x1, 0x10001}, {0xfffffffe, 0x6, 0x10001}], "f4ef"}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x4}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x1, 0x1}, {0xc, 0x3}, {0x2}, {0x0, 0x3}, {0x6, 0x3}, {0xf, 0x1}, {0xb, 0x403}, {0xa, 0x2}, {0x0, 0x5}, {0x7, 0x5}]}, @enum64={0x3, 0x9, 0x0, 0x13, 0x1, 0x1, [{0x1, 0x1, 0x8}, {0x5, 0x1, 0xd1}, {0xf, 0x0, 0xc}, {0x7, 0x8, 0x9}, {0x4, 0x7ff}, {0x10, 0x5, 0x7f}, {0x5, 0x4, 0x6}, {0x1, 0x40000000, 0xfffffffd}, {0x5, 0x4, 0x2}]}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x4, 0xa}]}}, &(0x7f0000000880)=""/226, 0x156, 0xe2, 0x0, 0xffffff2a, 0x10000}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 2m17.926874653s ago: executing program 6 (id=875): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0)) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x2, 0x34, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x20000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) unshare(0x22020600) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32], 0x5c}}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) write$binfmt_script(r6, &(0x7f0000000000)={'#! ', './bus'}, 0x9) copy_file_range(r6, &(0x7f00000008c0)=0x800000000000008, r4, 0x0, 0x10, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40000001800090000000000000000001c14"], 0xb4}}, 0x24040810) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m17.900472115s ago: executing program 37 (id=875): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0)) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x2, 0x34, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x20000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) unshare(0x22020600) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32], 0x5c}}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) write$binfmt_script(r6, &(0x7f0000000000)={'#! ', './bus'}, 0x9) copy_file_range(r6, &(0x7f00000008c0)=0x800000000000008, r4, 0x0, 0x10, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40000001800090000000000000000001c14"], 0xb4}}, 0x24040810) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 37.33188504s ago: executing program 2 (id=1539): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setresuid(0x0, 0xee00, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xe}]}, 0x1c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000001030101000000000000000003618400"], 0x14}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r7 = socket$phonet(0x23, 0x2, 0x1) recvfrom(r7, 0x0, 0x0, 0x40, 0x0, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) r9 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x48, 0x15, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x7, 0x0, 0x1, 0x7e}}, {0x4}}]}]}, 0x48}}, 0x20000000) recvfrom(r9, &(0x7f0000000100)=""/222, 0xde, 0x40010021, &(0x7f0000000280)=@isdn={0x22, 0xff, 0x16, 0x8, 0xc3}, 0x80) socket$netlink(0x10, 0x3, 0x13) setsockopt$sock_int(r8, 0x1, 0x800000000f, &(0x7f0000000080)=0xe, 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) ioctl$BTRFS_IOC_ADD_DEV(r9, 0x5000940a, &(0x7f0000000300)={{r10}, "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"}) bind$inet6(r10, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) listen(r0, 0x0) 37.274923083s ago: executing program 2 (id=1540): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1208002, &(0x7f0000000780), 0x1, 0x5de, &(0x7f0000001840)="$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") setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 37.236715785s ago: executing program 2 (id=1542): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x1f, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 37.214611687s ago: executing program 2 (id=1544): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x2, 0x9, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x14000000}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f00000000c0)=0x6) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) 37.146341621s ago: executing program 2 (id=1545): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r1, 0x1, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6d", 0x8}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405"], 0x70}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="94000000000105050000000010000000000000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c9810a50a4912565a000100000000002c00018014000300ff0200000000001000000000000000011400040000000000000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$inet(r0, &(0x7f0000000480)={0x2, 0x0, @loopback}, &(0x7f00000004c0)=0x10, 0x80000) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000410c0002800500010000000000440001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400200100000000000000000000000000010600034000010000080007400000000004000d80"], 0xa0}}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000140)={0x2, 'veth0_virt_wifi\x00', 0x3}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r6, 0x0, 0x61, 0x0, &(0x7f0000000240)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r6, &(0x7f0000000380)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r8, &(0x7f0000001240)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c"], 0xfc}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='////\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x398, 0xffffffff, 0x0, 0x250, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'ip6tnl0\x00', 'nr0\x00', {}, {}, 0x2f}, 0x74000002, 0xe8, 0x110, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x0, 0x2f}}, @common=@unspec=@limit={{0x48}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x6, 0x1, 0x7, 0x3, 0x3], 0x1, 0xb}, {0x4, [0x2, 0x4, 0x2, 0x4, 0x8, 0x4], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) 36.587613743s ago: executing program 2 (id=1553): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1208002, &(0x7f0000000780), 0x1, 0x5de, &(0x7f0000001840)="$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") setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 36.583358403s ago: executing program 38 (id=1553): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1208002, &(0x7f0000000780), 0x1, 0x5de, &(0x7f0000001840)="$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") setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 2.22341811s ago: executing program 9 (id=2284): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x2, 0x128) 2.184058773s ago: executing program 9 (id=2285): syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getdents64(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r1, 0x0, r0}) 2.114835567s ago: executing program 0 (id=2287): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r5, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 1.963904425s ago: executing program 0 (id=2291): personality(0x4100001) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r0 = fsopen(&(0x7f0000000080)='iso9660\x00', 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xfffffffffffffe6b, &(0x7f0000000200)}, 0x10) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_dev$ptys(0xc, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.8973642s ago: executing program 5 (id=2294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r1, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x0) 1.811968704s ago: executing program 0 (id=2295): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f02, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)={@val={0xa, 0x10}, @void, @eth={@broadcast, @random="cf3f53f449aa", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x34, 0x1c, 0x64, 0x0, 0x1, 0x2, 0x0, @private=0xa010101, @multicast2}, {0x12, 0x3, 0x0, @local}}}}}}, 0x2e) 1.811784174s ago: executing program 5 (id=2296): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x71}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.783394286s ago: executing program 5 (id=2297): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) 1.671957533s ago: executing program 0 (id=2301): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}, 0x104}], 0x1, 0x0, 0x0) syz_emit_ethernet(0xfe0, &(0x7f0000001dc0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfd2, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0xfbe, 0x0, @gue={{0x1, 0x1, 0x2, 0xfe, 0x0, @void}, "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"}}}}}}, 0x0) 1.321259343s ago: executing program 9 (id=2304): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0) 1.235979158s ago: executing program 9 (id=2305): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket$nl_rdma(0x10, 0x3, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 924.552976ms ago: executing program 5 (id=2306): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') readlinkat(r0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000540)=""/76, 0x4c) 879.213579ms ago: executing program 5 (id=2307): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) 631.847143ms ago: executing program 7 (id=2308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x88fb}, @val={0x3, 0x5, 0x1, 0xffff, 0x80, 0x6}, @x25={0x1, 0x3, 0x13, "c6414b38cbaf9d890bd9c6c42d70e9c01ba63fbd0cba22562c7840fd5dda910084e32a6431439fd36634a9ee2222736635eaec66c5ba6c3caf1a7a8deb7a2e9e7cfd699f85c361b02c9d9a19a418f8914e34d6bd393266e9ef3de6fc38b953d71fd18ce0771b9dcc4c3ed8e708000000406542a089e0db0e702ed5d608f639fea3eff3531d"}}, 0x96) 631.401133ms ago: executing program 0 (id=2309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x903, 0x70bd2e, 0x25dfdc03, {0x0, 0x0, 0x0, r6, {0xffff, 0xb}, {0x10, 0xfff1}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x8000) 630.950513ms ago: executing program 5 (id=2311): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) setpriority(0x1, 0xff, 0x80000000008) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002d80)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00', {}, {}, 0x33}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0xffffff00], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x30}, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x428) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) 542.459438ms ago: executing program 7 (id=2313): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r7, &(0x7f0000000380)="c1858aec1d0a06756f6608f23687", 0xe, 0x24080000, &(0x7f0000000240)={0x11, 0x19, r6, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 495.816921ms ago: executing program 4 (id=2314): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0xce4e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000100), &(0x7f0000000180)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff73, &(0x7f0000000000)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70b52c, 0x2000, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x0, 0xfff1}, {0x3, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xb65943b125f5237e}, 0x840) 495.489121ms ago: executing program 0 (id=2315): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0), 0x10044, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 381.245948ms ago: executing program 9 (id=2316): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000340)={r2}, &(0x7f0000000240)=0x8) 359.699729ms ago: executing program 9 (id=2317): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc131b8e11e775ef7ff118fe91", 0x22) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 319.862571ms ago: executing program 7 (id=2318): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c", @ANYRESDEC=r0], 0x0) 305.672322ms ago: executing program 4 (id=2319): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) write$binfmt_misc(r0, &(0x7f0000000000), 0x0) r1 = creat(0x0, 0x10) splice(r1, 0x0, r0, &(0x7f0000000240), 0x100000001, 0x1) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/171, 0xab}, {&(0x7f0000000500)=""/51, 0x33}, {0x0}, {&(0x7f0000000540)=""/69, 0x45}], 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000180)=0x1) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r3 = syz_open_pts(0xffffffffffffffff, 0xc2040) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000180)={0x8, 0x8, 0x7, 0x2, 0x9, "ce623020a5173bfe1bde6fa7ce194fcd90ab63", 0x5, 0x2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) fchdir(r4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x105142, 0x2f6) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r5, r6, 0x0, 0x10002) 279.239223ms ago: executing program 7 (id=2320): sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x90) finit_module(0xffffffffffffffff, 0x0, 0x1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1c9) lseek(r0, 0x7f, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5}, 0x38) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x82) fchdir(r1) unlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x200) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) 245.984046ms ago: executing program 4 (id=2321): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x8) write(r2, 0x0, 0x0) 245.643925ms ago: executing program 7 (id=2322): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042004ffa"], 0x14}}, 0x4000844) readv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/70, 0x46}], 0x1) 152.174121ms ago: executing program 7 (id=2323): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/current\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000003d00)={0x1, &(0x7f0000003cc0)=[{0x6, 0xf8, 0x4, 0xbf}]}) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') 110.544813ms ago: executing program 4 (id=2324): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000000010000000100000600000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 67.758166ms ago: executing program 4 (id=2325): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=2326): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc131b8e11e775ef7ff118fe91", 0x22) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): d capacity change from 0 to 512 [ 218.982359][ T8175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback. [ 219.050760][ T8235] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a856c028, mo2=0002] [ 219.069555][ T8235] System zones: 0-2, 18-18, 34-35 [ 219.110258][ T8235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.179586][ T8235] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.210484][ T7089] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-0000002a0000. [ 219.226154][ T29] audit: type=1400 audit(1770266428.251:3410): avc: denied { read } for pid=8243 comm="syz.7.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 219.277106][ T29] audit: type=1400 audit(1770266428.261:3411): avc: denied { getopt } for pid=8241 comm="syz.9.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 219.451897][ T8249] loop9: detected capacity change from 0 to 128 [ 219.563969][ T8255] loop9: detected capacity change from 0 to 2048 [ 219.603350][ T8255] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.681214][ T5824] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.891479][ T29] audit: type=1326 audit(1770266428.921:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8264 comm="syz.9.1168" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0911b9aeb9 code=0x0 [ 219.954008][ T8267] loop0: detected capacity change from 0 to 128 [ 220.024596][ T8267] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 220.331966][ T8267] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 220.398434][ T8275] FAULT_INJECTION: forcing a failure. [ 220.398434][ T8275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.411552][ T8275] CPU: 1 UID: 0 PID: 8275 Comm: syz.7.1171 Not tainted syzkaller #0 PREEMPT(voluntary) [ 220.411577][ T8275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 220.411588][ T8275] Call Trace: [ 220.411595][ T8275] [ 220.411604][ T8275] __dump_stack+0x1d/0x30 [ 220.411670][ T8275] dump_stack_lvl+0x95/0xd0 [ 220.411690][ T8275] dump_stack+0x15/0x1b [ 220.411712][ T8275] should_fail_ex+0x263/0x280 [ 220.411776][ T8275] should_fail+0xb/0x20 [ 220.411799][ T8275] should_fail_usercopy+0x1a/0x20 [ 220.411834][ T8275] _copy_to_user+0x20/0xa0 [ 220.411885][ T8275] simple_read_from_buffer+0xb5/0x130 [ 220.411997][ T8275] proc_fail_nth_read+0x10e/0x150 [ 220.412068][ T8275] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.412098][ T8275] vfs_read+0x1ab/0x7f0 [ 220.412115][ T8275] ? __rcu_read_unlock+0x4e/0x70 [ 220.412163][ T8275] ? __fget_files+0x184/0x1c0 [ 220.412187][ T8275] ? mutex_lock+0x57/0x90 [ 220.412249][ T8275] ksys_read+0xdc/0x1a0 [ 220.412272][ T8275] __x64_sys_read+0x40/0x50 [ 220.412343][ T8275] x64_sys_call+0x2889/0x3000 [ 220.412384][ T8275] do_syscall_64+0xc0/0x2a0 [ 220.412410][ T8275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.412435][ T8275] RIP: 0033:0x7f0e3184b78e [ 220.412468][ T8275] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 220.412486][ T8275] RSP: 002b:00007f0e302e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 220.412507][ T8275] RAX: ffffffffffffffda RBX: 00007f0e302e76c0 RCX: 00007f0e3184b78e [ 220.412524][ T8275] RDX: 000000000000000f RSI: 00007f0e302e70a0 RDI: 0000000000000005 [ 220.412565][ T8275] RBP: 00007f0e302e7090 R08: 0000000000000000 R09: 0000000000000000 [ 220.412578][ T8275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.412591][ T8275] R13: 00007f0e31b06038 R14: 00007f0e31b05fa0 R15: 00007ffcce1ac398 [ 220.412622][ T8275] [ 220.655619][ T7089] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.683122][ T8277] loop5: detected capacity change from 0 to 512 [ 220.707925][ T8277] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.721049][ T8277] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.723559][ T8281] loop7: detected capacity change from 0 to 128 [ 220.772962][ T29] audit: type=1326 audit(1770266429.791:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.9.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0911b9aeb9 code=0x7ffc0000 [ 220.781689][ T8277] 9p: Could not find request transport: xen [ 220.821176][ T8281] __nla_validate_parse: 2 callbacks suppressed [ 220.821192][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1174'. [ 220.828619][ T8285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.858407][ T8290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1173'. [ 220.873929][ T8285] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.883820][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.903034][ T8285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.982472][ T8292] loop5: detected capacity change from 0 to 512 [ 221.003405][ T8292] EXT4-fs: Ignoring removed i_version option [ 221.009554][ T8292] EXT4-fs: Ignoring removed bh option [ 221.054294][ T8292] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.074907][ T8296] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1178'. [ 221.118716][ T8292] ext4 filesystem being mounted at /225/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.212004][ T8302] loop0: detected capacity change from 0 to 512 [ 221.230579][ T8292] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.1176: iget: bad i_size value: 2533274857506816 [ 221.273232][ T8292] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.1176: iget: bad i_size value: 2533274857506816 [ 221.292152][ T8309] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.306202][ T8314] netlink: 'syz.9.1183': attribute type 27 has an invalid length. [ 221.320033][ T8302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.349958][ T8309] ext4 filesystem being mounted at /205/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.375832][ T8302] ext4 filesystem being mounted at /42/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.406448][ T8309] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #4: comm syz.7.1182: corrupted inode contents [ 221.408089][ T8302] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #4: comm syz.0.1181: corrupted inode contents [ 221.419830][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.449181][ T8302] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #4: comm syz.0.1181: mark_inode_dirty error [ 221.449755][ T8309] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #4: comm syz.7.1182: mark_inode_dirty error [ 221.464792][ T8319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.480491][ T8302] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #4: comm syz.0.1181: corrupted inode contents [ 221.492678][ T8302] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.1181: mark_inode_dirty error [ 221.506406][ T8319] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.516038][ T8302] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1181: Failed to acquire dquot type 1 [ 221.516671][ T8309] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #4: comm syz.7.1182: corrupted inode contents [ 221.539203][ T8319] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.556112][ T8309] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #4: comm syz.7.1182: mark_inode_dirty error [ 221.587257][ T8309] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1182: Failed to acquire dquot type 1 [ 221.599872][ T7089] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.662123][ T5047] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.676204][ T8328] vhci_hcd vhci_hcd.0: invalid port number 255 [ 221.740825][ T8336] netlink: 'syz.7.1187': attribute type 27 has an invalid length. [ 221.810642][ T8338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.820933][ T8338] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.831693][ T8338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.849069][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.943404][ T8342] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1190'. [ 222.000796][ T8344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.013487][ T8344] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.035182][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.168934][ T8361] FAULT_INJECTION: forcing a failure. [ 222.168934][ T8361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.182060][ T8361] CPU: 1 UID: 0 PID: 8361 Comm: syz.2.1197 Not tainted syzkaller #0 PREEMPT(voluntary) [ 222.182085][ T8361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 222.182105][ T8361] Call Trace: [ 222.182112][ T8361] [ 222.182119][ T8361] __dump_stack+0x1d/0x30 [ 222.182174][ T8361] dump_stack_lvl+0x95/0xd0 [ 222.182196][ T8361] dump_stack+0x15/0x1b [ 222.182216][ T8361] should_fail_ex+0x263/0x280 [ 222.182250][ T8361] should_fail+0xb/0x20 [ 222.182366][ T8361] should_fail_usercopy+0x1a/0x20 [ 222.182398][ T8361] _copy_to_user+0x20/0xa0 [ 222.182419][ T8361] copy_to_sockptr+0x5e/0xa0 [ 222.182471][ T8361] do_tcp_getsockopt+0xe1f/0x1ba0 [ 222.182500][ T8361] ? call_rcu+0x2bb/0x430 [ 222.182513][ T8361] ? __srcu_read_unlock+0x1f/0x40 [ 222.182524][ T8361] ? rcu_segcblist_enqueue+0x92/0xb0 [ 222.182564][ T8361] ? call_rcu+0x2bb/0x430 [ 222.182651][ T8361] ? locks_free_lock_context+0x2c/0x60 [ 222.182663][ T8361] ? __pfx_sock_free_inode+0x10/0x10 [ 222.182718][ T8361] ? evict+0x4b1/0x510 [ 222.182736][ T8361] ? subflow_ulp_init+0x26b/0x2c0 [ 222.182750][ T8361] ? tcp_release_cb+0xf1/0x370 [ 222.182768][ T8361] ? iput+0x4b9/0x650 [ 222.182810][ T8361] tcp_getsockopt+0x6e/0xe0 [ 222.182896][ T8361] mptcp_getsockopt+0x76b/0x1850 [ 222.182911][ T8361] ? lockref_put_return+0xf7/0x130 [ 222.182997][ T8361] ? __rcu_read_unlock+0x4e/0x70 [ 222.183014][ T8361] ? terminate_walk+0x1e6/0x210 [ 222.183029][ T8361] ? path_openat+0x1d94/0x23c0 [ 222.183048][ T8361] ? path_openat+0x1e8e/0x23c0 [ 222.183072][ T8361] ? _parse_integer_limit+0x170/0x190 [ 222.183149][ T8361] ? _parse_integer+0x27/0x40 [ 222.183164][ T8361] ? __rcu_read_unlock+0x4e/0x70 [ 222.183181][ T8361] ? avc_has_perm_noaudit+0xab/0x130 [ 222.183233][ T8361] ? avc_has_perm+0x101/0x190 [ 222.183252][ T8361] ? selinux_socket_getsockopt+0x192/0x1c0 [ 222.183266][ T8361] sock_common_getsockopt+0x60/0x70 [ 222.183321][ T8361] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 222.183336][ T8361] do_sock_getsockopt+0x1c4/0x210 [ 222.183356][ T8361] __x64_sys_getsockopt+0x11d/0x1a0 [ 222.183406][ T8361] x64_sys_call+0x2dc7/0x3000 [ 222.183489][ T8361] do_syscall_64+0xc0/0x2a0 [ 222.183520][ T8361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.183575][ T8361] RIP: 0033:0x7f359621aeb9 [ 222.183589][ T8361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.183606][ T8361] RSP: 002b:00007f3594c77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 222.183624][ T8361] RAX: ffffffffffffffda RBX: 00007f3596495fa0 RCX: 00007f359621aeb9 [ 222.183637][ T8361] RDX: 000000000000000d RSI: 0000000000000006 RDI: 0000000000000003 [ 222.183648][ T8361] RBP: 00007f3594c77090 R08: 0000200000000280 R09: 0000000000000000 [ 222.183683][ T8361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 222.183723][ T8361] R13: 00007f3596496038 R14: 00007f3596495fa0 R15: 00007ffd67ce3178 [ 222.183809][ T8361] [ 222.520900][ T8364] vhci_hcd vhci_hcd.0: invalid port number 255 [ 222.584855][ T8370] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1201'. [ 222.643237][ T8368] set_capacity_and_notify: 2 callbacks suppressed [ 222.643253][ T8368] loop9: detected capacity change from 0 to 8192 [ 222.662498][ T8380] loop0: detected capacity change from 0 to 512 [ 222.690502][ T8380] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a856c028, mo2=0002] [ 222.703421][ T8380] System zones: 0-2, 18-18, 34-35 [ 222.711879][ T8368] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 222.712571][ T8380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.747158][ T8380] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.776044][ T8368] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 222.784911][ T8368] FAT-fs (loop9): Filesystem has been set read-only [ 222.801521][ T8389] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1208'. [ 222.819754][ T8368] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 222.838336][ T8368] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 222.857489][ T8368] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 222.879641][ T8368] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 222.899334][ T8368] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 222.917139][ T8368] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 222.926857][ T8393] loop5: detected capacity change from 0 to 8192 [ 222.934491][ T8393] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 222.948453][ T8397] loop2: detected capacity change from 0 to 128 [ 222.962601][ T8368] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 222.977822][ T8397] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 222.997768][ T8368] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 223.009449][ T8393] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 223.018254][ T8393] FAT-fs (loop5): Filesystem has been set read-only [ 223.027091][ T8368] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 223.028339][ T8397] ext4 filesystem being mounted at /239/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 223.036491][ T8393] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 223.081640][ T8393] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 223.090577][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1200'. [ 223.099569][ T8393] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 223.108385][ T8393] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 223.117316][ T8393] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 223.126378][ T8393] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 223.135218][ T8393] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 223.144096][ T8393] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 223.153869][ T8402] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 223.164515][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1210'. [ 223.278423][ T3324] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.312413][ T8405] can0: slcan on ttyS3. [ 223.380767][ T8405] loop2: detected capacity change from 0 to 256 [ 223.413289][ T8405] msdos: Unknown parameter '' [ 223.479083][ T8404] can0 (unregistered): slcan off ttyS3. [ 223.614025][ T8429] loop9: detected capacity change from 0 to 1024 [ 223.653622][ T8429] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.704693][ T8441] loop2: detected capacity change from 0 to 512 [ 223.743035][ T8441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.747571][ T8429] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1213'. [ 223.769219][ T8439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.778974][ T8441] ext4 filesystem being mounted at /242/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.795198][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 223.795223][ T29] audit: type=1326 audit(1770266432.811:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8438 comm="syz.7.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3188aeb9 code=0x7ffc0000 [ 223.824810][ T29] audit: type=1326 audit(1770266432.811:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8438 comm="syz.7.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3188aeb9 code=0x7ffc0000 [ 223.879972][ T8450] loop7: detected capacity change from 0 to 128 [ 223.893290][ T8451] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1213'. [ 223.908725][ T29] audit: type=1400 audit(1770266432.941:3453): avc: denied { rename } for pid=8428 comm="syz.9.1213" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 223.908914][ T8451] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #11: comm syz.9.1213: missing EA_INODE flag [ 223.931629][ T29] audit: type=1400 audit(1770266432.941:3454): avc: denied { unlink } for pid=8428 comm="syz.9.1213" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 223.968148][ T8451] EXT4-fs (loop9): Remounting filesystem read-only [ 223.982809][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.019162][ T8458] loop5: detected capacity change from 0 to 512 [ 224.050204][ T8458] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.077229][ T8462] loop2: detected capacity change from 0 to 8192 [ 224.088544][ T8458] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.099397][ T8462] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 224.113494][ T8466] vhci_hcd vhci_hcd.0: invalid port number 255 [ 224.130111][ T8462] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 224.138996][ T8462] FAT-fs (loop2): Filesystem has been set read-only [ 224.146726][ T8462] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 224.155658][ T8462] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 224.164858][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.175163][ T8462] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 224.191678][ T29] audit: type=1400 audit(1770266433.211:3455): avc: denied { shutdown } for pid=8467 comm="syz.7.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 224.201747][ T8468] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.211970][ T29] audit: type=1400 audit(1770266433.211:3456): avc: denied { write } for pid=8467 comm="syz.7.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 224.240696][ T8462] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 224.250066][ T8462] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 224.259284][ T8462] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 224.268076][ T8462] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 224.277122][ T8462] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 224.287325][ T8471] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 224.366655][ T29] audit: type=1326 audit(1770266433.391:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8480 comm="syz.7.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3188aeb9 code=0x7ffc0000 [ 224.395418][ T8479] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 224.407984][ T8479] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 224.416868][ T8479] FAT-fs (loop5): Filesystem has been set read-only [ 224.423716][ T29] audit: type=1326 audit(1770266433.391:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8480 comm="syz.7.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3188aeb9 code=0x7ffc0000 [ 224.447126][ T29] audit: type=1326 audit(1770266433.421:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8480 comm="syz.7.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e3188aeb9 code=0x7ffc0000 [ 224.447155][ T29] audit: type=1326 audit(1770266433.421:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8480 comm="syz.7.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3188aeb9 code=0x7ffc0000 [ 224.470551][ T8481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.495139][ T8479] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 224.525415][ T8479] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 224.536555][ T8479] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 224.545758][ T8479] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 224.555488][ T8479] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 224.564509][ T8479] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 224.573529][ T8479] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 224.582430][ T8479] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 224.591576][ T8479] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 224.641832][ T5824] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.740145][ T8485] SELinux: failed to load policy [ 224.773390][ T8489] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 224.844734][ T8491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58896 sclass=netlink_route_socket pid=8491 comm=syz.7.1230 [ 224.942480][ T8489] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 225.079954][ T8502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.102677][ T8498] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.119198][ T8498] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.129795][ T8502] ext4 filesystem being mounted at /245/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.167594][ T5047] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.189221][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.279752][ T8513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 225.297228][ T8513] ext4 filesystem being mounted at /247/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.317024][ T8513] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1236: Failed to acquire dquot type 0 [ 225.331611][ T8519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.341571][ T8519] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.351644][ T8519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.387372][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 225.397459][ T8523] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.502108][ T8528] SELinux: failed to load policy [ 225.560702][ T7089] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.601948][ T8538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.650966][ T8548] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.676357][ T8538] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.735960][ T8554] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.757419][ T8554] ext4 filesystem being mounted at /245/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 225.760127][ T7089] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.813620][ T3669] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.832875][ T8556] SELinux: failed to load policy [ 225.880315][ T8562] FAULT_INJECTION: forcing a failure. [ 225.880315][ T8562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.893466][ T8562] CPU: 0 UID: 0 PID: 8562 Comm: syz.5.1255 Not tainted syzkaller #0 PREEMPT(voluntary) [ 225.893493][ T8562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.893505][ T8562] Call Trace: [ 225.893512][ T8562] [ 225.893562][ T8562] __dump_stack+0x1d/0x30 [ 225.893665][ T8562] dump_stack_lvl+0x95/0xd0 [ 225.893689][ T8562] dump_stack+0x15/0x1b [ 225.893773][ T8562] should_fail_ex+0x263/0x280 [ 225.893835][ T8562] should_fail+0xb/0x20 [ 225.893851][ T8562] should_fail_usercopy+0x1a/0x20 [ 225.893908][ T8562] _copy_from_user+0x1c/0xb0 [ 225.893921][ T8562] ____sys_sendmsg+0x1e2/0x600 [ 225.893936][ T8562] ___sys_sendmsg+0x195/0x1e0 [ 225.893968][ T8562] __sys_sendmmsg+0x185/0x320 [ 225.894017][ T8562] __x64_sys_sendmmsg+0x57/0x70 [ 225.894030][ T8562] x64_sys_call+0x1e28/0x3000 [ 225.894045][ T8562] do_syscall_64+0xc0/0x2a0 [ 225.894120][ T8562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.894139][ T8562] RIP: 0033:0x7f4e140eaeb9 [ 225.894149][ T8562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.894160][ T8562] RSP: 002b:00007f4e12b47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 225.894188][ T8562] RAX: ffffffffffffffda RBX: 00007f4e14365fa0 RCX: 00007f4e140eaeb9 [ 225.894196][ T8562] RDX: 040000000000016c RSI: 00002000000017c0 RDI: 0000000000000006 [ 225.894204][ T8562] RBP: 00007f4e12b47090 R08: 0000000000000000 R09: 0000000000000000 [ 225.894212][ T8562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.894220][ T8562] R13: 00007f4e14366038 R14: 00007f4e14365fa0 R15: 00007ffed8960a18 [ 225.894231][ T8562] [ 226.104114][ T8565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.120676][ T8570] __nla_validate_parse: 13 callbacks suppressed [ 226.120696][ T8570] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1258'. [ 226.136964][ T8565] FAULT_INJECTION: forcing a failure. [ 226.136964][ T8565] name failslab, interval 1, probability 0, space 0, times 0 [ 226.149651][ T8565] CPU: 1 UID: 0 PID: 8565 Comm: syz.0.1257 Not tainted syzkaller #0 PREEMPT(voluntary) [ 226.149677][ T8565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 226.149788][ T8565] Call Trace: [ 226.149795][ T8565] [ 226.149802][ T8565] __dump_stack+0x1d/0x30 [ 226.149870][ T8565] dump_stack_lvl+0x95/0xd0 [ 226.149890][ T8565] dump_stack+0x15/0x1b [ 226.149908][ T8565] should_fail_ex+0x263/0x280 [ 226.149947][ T8565] should_failslab+0x8c/0xb0 [ 226.149968][ T8565] __kmalloc_noprof+0xb8/0x580 [ 226.149989][ T8565] ? iovec_from_user+0x84/0x200 [ 226.150010][ T8565] iovec_from_user+0x84/0x200 [ 226.150039][ T8565] __import_iovec+0xf3/0x530 [ 226.150060][ T8565] import_iovec+0x60/0x80 [ 226.150151][ T8565] vfs_readv+0xf1/0x6e0 [ 226.150173][ T8565] ? get_pid_task+0x96/0xd0 [ 226.150255][ T8565] __se_sys_preadv2+0xfc/0x1c0 [ 226.150276][ T8565] __x64_sys_preadv2+0x67/0x80 [ 226.150296][ T8565] x64_sys_call+0xc61/0x3000 [ 226.150322][ T8565] do_syscall_64+0xc0/0x2a0 [ 226.150399][ T8565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.150418][ T8565] RIP: 0033:0x7feb35bbaeb9 [ 226.150433][ T8565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.150449][ T8565] RSP: 002b:00007feb34617028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 226.150467][ T8565] RAX: ffffffffffffffda RBX: 00007feb35e35fa0 RCX: 00007feb35bbaeb9 [ 226.150480][ T8565] RDX: 1000000000000094 RSI: 0000200000001040 RDI: 0000000000000006 [ 226.150541][ T8565] RBP: 00007feb34617090 R08: 0000000000004005 R09: 0000000000000008 [ 226.150553][ T8565] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 226.150595][ T8565] R13: 00007feb35e36038 R14: 00007feb35e35fa0 R15: 00007fff18aeca08 [ 226.150611][ T8565] [ 226.344955][ T8568] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a856c028, mo2=0002] [ 226.353198][ T8568] System zones: 0-2, 18-18, 34-35 [ 226.366089][ T8568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.384854][ T8568] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.397556][ T7089] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.427628][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1260'. [ 226.471679][ T8581] ext4 filesystem being mounted at /248/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.492227][ T8587] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1263'. [ 226.537270][ T8574] SELinux: failed to load policy [ 226.569172][ T8589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.577700][ T8589] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.595499][ T8589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 226.650127][ T8599] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1267'. [ 226.663184][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1267'. [ 226.678739][ T8602] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 226.689858][ T8603] can: request_module (can-proto-5) failed. [ 226.774585][ T8610] netlink: 'syz.0.1269': attribute type 27 has an invalid length. [ 226.827468][ T8611] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1270'. [ 226.856820][ T8610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.865253][ T8610] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.875617][ T8610] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 226.975303][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1272'. [ 227.021034][ T8622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8622 comm=syz.9.1274 [ 227.034710][ T8622] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1274'. [ 227.044379][ T8622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8622 comm=syz.9.1274 [ 227.057460][ T8622] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1274'. [ 227.093670][ T8625] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1275'. [ 227.123710][ T8627] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 227.339787][ T8643] ext4 filesystem being mounted at /159/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.377970][ T8649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8649 comm=syz.5.1285 [ 227.392294][ T8649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8649 comm=syz.5.1285 [ 227.460690][ T6339] hid-generic 0000:FFFFFFFE:0007.0001: unknown main item tag 0x0 [ 227.468583][ T6339] hid-generic 0000:FFFFFFFE:0007.0001: unknown main item tag 0x0 [ 227.476322][ T6339] hid-generic 0000:FFFFFFFE:0007.0001: unknown main item tag 0x0 [ 227.484287][ T6339] hid-generic 0000:FFFFFFFE:0007.0001: unknown main item tag 0x0 [ 227.492178][ T6339] hid-generic 0000:FFFFFFFE:0007.0001: unknown main item tag 0x0 [ 227.499941][ T6339] hid-generic 0000:FFFFFFFE:0007.0001: unknown main item tag 0x0 [ 227.507735][ T6339] hid-generic 0000:FFFFFFFE:0007.0001: unknown main item tag 0x0 [ 227.515510][ T6339] hid-generic 0000:FFFFFFFE:0007.0001: unknown main item tag 0x0 [ 227.523285][ T6339] hid-generic 0000:FFFFFFFE:0007.0001: unknown main item tag 0x0 [ 227.531172][ T6339] hid-generic 0000:FFFFFFFE:0007.0001: unknown main item tag 0x0 [ 227.547926][ T6339] hid-generic 0000:FFFFFFFE:0007.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 227.627767][ T8659] fido_id[8659]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 227.645379][ T8666] EXT4-fs: Ignoring removed nomblk_io_submit option [ 227.689182][ T8666] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 227.704528][ T8666] System zones: 0-1, 3-36 [ 227.749111][ T8686] vhci_hcd vhci_hcd.0: invalid port number 255 [ 227.767320][ T8688] set_capacity_and_notify: 17 callbacks suppressed [ 227.767337][ T8688] loop7: detected capacity change from 0 to 512 [ 227.792245][ T8688] ext4 filesystem being mounted at /228/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.812921][ T8688] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 227.828587][ T8688] SELinux: failed to load policy [ 227.862882][ T8699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8699 comm=syz.5.1299 [ 227.906675][ T8707] loop7: detected capacity change from 0 to 512 [ 227.922864][ T8713] FAULT_INJECTION: forcing a failure. [ 227.922864][ T8713] name failslab, interval 1, probability 0, space 0, times 0 [ 227.926067][ T8699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8699 comm=syz.5.1299 [ 227.935521][ T8713] CPU: 0 UID: 0 PID: 8713 Comm: syz.0.1302 Not tainted syzkaller #0 PREEMPT(voluntary) [ 227.935575][ T8713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 227.935586][ T8713] Call Trace: [ 227.935593][ T8713] [ 227.935601][ T8713] __dump_stack+0x1d/0x30 [ 227.935625][ T8713] dump_stack_lvl+0x95/0xd0 [ 227.935714][ T8713] dump_stack+0x15/0x1b [ 227.935836][ T8713] should_fail_ex+0x263/0x280 [ 227.935869][ T8713] should_failslab+0x8c/0xb0 [ 227.935894][ T8713] __kmalloc_cache_noprof+0x64/0x4a0 [ 227.935922][ T8713] ? bus_add_driver+0x11f/0x450 [ 227.935980][ T8713] bus_add_driver+0x11f/0x450 [ 227.936002][ T8713] driver_register+0x162/0x220 [ 227.936034][ T8713] usb_gadget_register_driver_owner+0x92/0x1a0 [ 227.936200][ T8713] raw_ioctl+0xc6c/0x1e10 [ 227.936235][ T8713] ? ioctl_has_perm+0x27e/0x2d0 [ 227.936266][ T8713] ? do_vfs_ioctl+0x84f/0xe70 [ 227.936298][ T8713] ? selinux_file_ioctl+0x5f7/0xcb0 [ 227.936378][ T8713] ? __rcu_read_unlock+0x4e/0x70 [ 227.936410][ T8713] ? __fget_files+0x184/0x1c0 [ 227.936436][ T8713] ? __pfx_raw_ioctl+0x10/0x10 [ 227.936491][ T8713] __se_sys_ioctl+0xce/0x140 [ 227.936643][ T8713] __x64_sys_ioctl+0x43/0x50 [ 227.936751][ T8713] x64_sys_call+0x14b0/0x3000 [ 227.936812][ T8713] do_syscall_64+0xc0/0x2a0 [ 227.936843][ T8713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.936866][ T8713] RIP: 0033:0x7feb35bbab4b [ 227.936957][ T8713] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 227.936975][ T8713] RSP: 002b:00007feb34614f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.936997][ T8713] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007feb35bbab4b [ 227.937091][ T8713] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 227.937106][ T8713] RBP: 00007feb34615fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 227.937120][ T8713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.937139][ T8713] R13: 0000200000000080 R14: 0000000000000003 R15: 0000000000000000 [ 227.937186][ T8713] [ 227.937195][ T8713] UDC core: USB Raw Gadget: driver registration failed: -12 [ 228.079402][ T8707] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.080532][ T8713] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 228.261387][ T8732] loop5: detected capacity change from 0 to 128 [ 228.279714][ T8732] ext4 filesystem being mounted at /259/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 228.336042][ T8741] vhci_hcd vhci_hcd.0: invalid port number 255 [ 228.369011][ T8745] Illegal XDP return value 4294967294 on prog (id 236) dev syz_tun, expect packet loss! [ 228.382277][ T8745] loop5: detected capacity change from 0 to 512 [ 228.400506][ T8745] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 228.408730][ T8745] EXT4-fs (loop5): orphan cleanup on readonly fs [ 228.415478][ T8745] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 228.430103][ T8745] EXT4-fs (loop5): Cannot turn on quotas: error -5 [ 228.437250][ T8745] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.1313: corrupted inode contents [ 228.449309][ T8745] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #16: comm syz.5.1313: mark_inode_dirty error [ 228.460820][ T8745] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.1313: corrupted inode contents [ 228.472927][ T8745] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.1313: mark_inode_dirty error [ 228.484483][ T8745] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.1313: corrupted inode contents [ 228.496494][ T8745] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 228.505432][ T8745] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.1313: corrupted inode contents [ 228.517462][ T8745] EXT4-fs error (device loop5): ext4_truncate:4635: inode #16: comm syz.5.1313: mark_inode_dirty error [ 228.529477][ T8745] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 228.539424][ T8745] EXT4-fs (loop5): 1 truncate cleaned up [ 228.573563][ T8751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8751 comm=syz.7.1315 [ 228.587408][ T8751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8751 comm=syz.7.1315 [ 228.736531][ T8764] loop0: detected capacity change from 0 to 512 [ 228.751483][ T8762] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.753799][ T8764] EXT4-fs: Ignoring removed i_version option [ 228.765700][ T8764] EXT4-fs: Ignoring removed bh option [ 228.780545][ T8764] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 228.810350][ T29] kauditd_printk_skb: 553 callbacks suppressed [ 228.810366][ T29] audit: type=1400 audit(1770266437.842:4011): avc: denied { rename } for pid=8763 comm="syz.0.1321" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 228.840315][ T8764] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1321: iget: bad i_size value: 2533274857506816 [ 228.853700][ T8764] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1321: iget: bad i_size value: 2533274857506816 [ 228.941506][ T8775] vhci_hcd vhci_hcd.0: invalid port number 255 [ 229.016646][ T8780] loop7: detected capacity change from 0 to 1024 [ 229.023853][ T8780] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.042300][ T8780] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 229.050418][ T8780] System zones: 0-1, 3-36 [ 229.109618][ T8784] loop2: detected capacity change from 0 to 8192 [ 229.268380][ T29] audit: type=1400 audit(1770266438.292:4012): avc: denied { read write } for pid=8790 comm="syz.2.1331" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 229.292014][ T29] audit: type=1400 audit(1770266438.302:4013): avc: denied { open } for pid=8790 comm="syz.2.1331" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 229.315227][ T29] audit: type=1400 audit(1770266438.312:4014): avc: denied { ioctl } for pid=8790 comm="syz.2.1331" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 229.340009][ T29] audit: type=1326 audit(1770266438.312:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8790 comm="syz.2.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359621aeb9 code=0x7ffc0000 [ 229.363574][ T29] audit: type=1326 audit(1770266438.312:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8790 comm="syz.2.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f359621aeb9 code=0x7ffc0000 [ 229.388288][ T29] audit: type=1326 audit(1770266438.422:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8790 comm="syz.2.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359621aeb9 code=0x7ffc0000 [ 229.411800][ T29] audit: type=1326 audit(1770266438.422:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8790 comm="syz.2.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359621aeb9 code=0x7ffc0000 [ 229.505129][ T8797] netlink: 'syz.5.1333': attribute type 27 has an invalid length. [ 229.521969][ T29] audit: type=1400 audit(1770266438.552:4019): avc: denied { create } for pid=8798 comm="syz.2.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 229.549277][ T29] audit: type=1400 audit(1770266438.552:4020): avc: denied { bind } for pid=8798 comm="syz.2.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 229.655995][ T8801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.663905][ T8806] loop2: detected capacity change from 0 to 128 [ 229.697576][ T8808] vhci_hcd vhci_hcd.0: invalid port number 255 [ 229.709538][ T8801] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.724423][ T8806] ext4 filesystem being mounted at /260/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 229.738791][ T8801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.870041][ T8815] netlink: 'syz.7.1340': attribute type 21 has an invalid length. [ 229.917516][ T8826] loop0: detected capacity change from 0 to 512 [ 229.942425][ T8826] ext4 filesystem being mounted at /62/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.981883][ T8833] x_tables: ip_tables: ah match: only valid for protocol 51 [ 229.990449][ T8826] SELinux: ebitmap: truncated map [ 229.995750][ T8826] SELinux: failed to load policy [ 230.014473][ T8833] loop7: detected capacity change from 0 to 512 [ 230.026765][ T8833] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 230.061969][ T8837] vhci_hcd vhci_hcd.0: invalid port number 255 [ 230.089949][ T8838] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 230.123601][ T8838] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 230.132540][ T8838] FAT-fs (loop0): Filesystem has been set read-only [ 230.145379][ T8838] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 230.154400][ T8838] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 230.163455][ T8838] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 230.172380][ T8838] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 230.192257][ T8838] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 230.202162][ T8838] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 230.211096][ T8838] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 230.220353][ T8838] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 230.229466][ T8838] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 230.242263][ T8844] IPv6: sit1: Disabled Multicast RS [ 230.451915][ T8867] vhci_hcd vhci_hcd.0: invalid port number 255 [ 230.458767][ T8863] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 230.465158][ T8863] pim6reg1: linktype set to 776 [ 230.482582][ T8863] pim6reg1: tun_chr_ioctl cmd 1074812117 [ 230.530691][ T8869] ext4 filesystem being mounted at /162/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.544004][ T8869] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.1362: Failed to acquire dquot type 0 [ 230.557217][ T8869] FAULT_INJECTION: forcing a failure. [ 230.557217][ T8869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.570454][ T8869] CPU: 0 UID: 0 PID: 8869 Comm: syz.9.1362 Not tainted syzkaller #0 PREEMPT(voluntary) [ 230.570512][ T8869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 230.570526][ T8869] Call Trace: [ 230.570535][ T8869] [ 230.570544][ T8869] __dump_stack+0x1d/0x30 [ 230.570571][ T8869] dump_stack_lvl+0x95/0xd0 [ 230.570646][ T8869] dump_stack+0x15/0x1b [ 230.570668][ T8869] should_fail_ex+0x263/0x280 [ 230.570779][ T8869] should_fail+0xb/0x20 [ 230.570809][ T8869] should_fail_usercopy+0x1a/0x20 [ 230.570894][ T8869] strncpy_from_user+0x27/0x250 [ 230.570978][ T8869] getname_flags+0xad/0x3b0 [ 230.571052][ T8869] do_sys_openat2+0x60/0x150 [ 230.571084][ T8869] __x64_sys_openat+0xf2/0x120 [ 230.571121][ T8869] x64_sys_call+0x2b07/0x3000 [ 230.571155][ T8869] do_syscall_64+0xc0/0x2a0 [ 230.571270][ T8869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.571289][ T8869] RIP: 0033:0x7f0911b9aeb9 [ 230.571305][ T8869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.571321][ T8869] RSP: 002b:00007f09105f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 230.571403][ T8869] RAX: ffffffffffffffda RBX: 00007f0911e15fa0 RCX: 00007f0911b9aeb9 [ 230.571419][ T8869] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c [ 230.571435][ T8869] RBP: 00007f09105f7090 R08: 0000000000000000 R09: 0000000000000000 [ 230.571448][ T8869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.571461][ T8869] R13: 00007f0911e16038 R14: 00007f0911e15fa0 R15: 00007ffd59539038 [ 230.571482][ T8869] [ 231.096787][ T8895] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 231.293644][ T8893] Cannot find map_set index 135 as target [ 231.294399][ T8893] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 231.332808][ T8907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.387344][ T8911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.498854][ T8919] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 231.578213][ T8924] EXT4-fs (loop7): cluster size (2048) smaller than block size (4096) [ 231.606872][ T8923] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 231.631604][ T8923] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 231.640478][ T8923] FAT-fs (loop0): Filesystem has been set read-only [ 231.647252][ T8923] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 231.658166][ T8923] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 231.679262][ T8923] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 231.690652][ T8923] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 231.699967][ T8923] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 231.709176][ T8923] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 231.718097][ T8923] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 231.730165][ T8923] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 231.739146][ T8929] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 231.755615][ T8923] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 231.759490][ T8929] System zones: 0-2, 18-18, 34-35 [ 231.772561][ T8928] __nla_validate_parse: 31 callbacks suppressed [ 231.772576][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1381'. [ 231.793635][ T8929] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.070466][ T8941] EXT4-fs: Ignoring removed bh option [ 232.081299][ T8941] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 232.136127][ T8940] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 232.158625][ T8947] ext4 filesystem being mounted at /272/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.177158][ T8940] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 232.186012][ T8940] FAT-fs (loop9): Filesystem has been set read-only [ 232.220526][ T8940] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 232.233168][ T8947] SELinux: ebitmap: truncated map [ 232.248148][ T8947] SELinux: failed to load policy [ 232.253478][ T8940] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 232.282152][ T8940] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 232.318320][ T8940] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 232.327176][ T8940] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 232.388032][ T8940] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 232.413156][ T8940] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 232.422423][ T8940] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 232.438089][ T8940] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 232.449792][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1387'. [ 232.482706][ T8965] ext4 filesystem being mounted at /275/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 232.529821][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1395'. [ 232.538834][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1395'. [ 232.576363][ T8970] wireguard0: entered promiscuous mode [ 232.581880][ T8970] wireguard0: entered allmulticast mode [ 232.710704][ T8977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8977 comm=syz.0.1399 [ 232.736929][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1399'. [ 232.768477][ T8977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8977 comm=syz.0.1399 [ 232.782047][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1399'. [ 232.994771][ T8987] nfs4: Unknown parameter 'Z9st:?>.2>[J :f-#' [ 233.078668][ T8991] set_capacity_and_notify: 14 callbacks suppressed [ 233.078686][ T8991] loop0: detected capacity change from 0 to 2048 [ 233.154270][ T8993] loop9: detected capacity change from 0 to 8192 [ 233.180425][ T8993] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 233.208367][ T9000] loop7: detected capacity change from 0 to 128 [ 233.216189][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1406'. [ 233.236027][ T9000] ext4 filesystem being mounted at /265/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 233.287185][ T9006] batadv_slave_0: entered promiscuous mode [ 233.308844][ T8998] xt_hashlimit: size too large, truncated to 1048576 [ 233.316572][ T9010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9010 comm=syz.7.1411 [ 233.408956][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1411'. [ 233.418935][ T9010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9010 comm=syz.7.1411 [ 233.433368][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1411'. [ 233.526239][ T9015] loop9: detected capacity change from 0 to 736 [ 233.549893][ T8997] batadv_slave_0: left promiscuous mode [ 233.621941][ T9023] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1417'. [ 233.676046][ T9025] loop7: detected capacity change from 0 to 512 [ 233.734777][ T9031] FAULT_INJECTION: forcing a failure. [ 233.734777][ T9031] name failslab, interval 1, probability 0, space 0, times 0 [ 233.739122][ T9025] EXT4-fs: Ignoring removed i_version option [ 233.747546][ T9031] CPU: 0 UID: 0 PID: 9031 Comm: syz.5.1413 Not tainted syzkaller #0 PREEMPT(voluntary) [ 233.747574][ T9031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 233.747610][ T9031] Call Trace: [ 233.747618][ T9031] [ 233.747630][ T9031] __dump_stack+0x1d/0x30 [ 233.747656][ T9031] dump_stack_lvl+0x95/0xd0 [ 233.747693][ T9031] dump_stack+0x15/0x1b [ 233.747714][ T9031] should_fail_ex+0x263/0x280 [ 233.747745][ T9031] should_failslab+0x8c/0xb0 [ 233.747830][ T9031] __kmalloc_cache_noprof+0x64/0x4a0 [ 233.747856][ T9031] ? v9fs_get_tree+0x49/0x5e0 [ 233.747935][ T9031] v9fs_get_tree+0x49/0x5e0 [ 233.747993][ T9031] ? security_capable+0x7b/0x90 [ 233.748023][ T9031] vfs_get_tree+0x57/0x1d0 [ 233.748044][ T9031] do_new_mount+0x288/0x700 [ 233.748087][ T9031] ? security_capable+0x7b/0x90 [ 233.748117][ T9031] path_mount+0x4d0/0xbc0 [ 233.748137][ T9031] ? user_path_at+0xbf/0x130 [ 233.748219][ T9031] __se_sys_mount+0x28c/0x2e0 [ 233.748240][ T9031] ? fput+0x8f/0xc0 [ 233.748267][ T9031] __x64_sys_mount+0x67/0x80 [ 233.748291][ T9031] x64_sys_call+0x2cca/0x3000 [ 233.748317][ T9031] do_syscall_64+0xc0/0x2a0 [ 233.748348][ T9031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.748371][ T9031] RIP: 0033:0x7f4e140eaeb9 [ 233.748468][ T9031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.748487][ T9031] RSP: 002b:00007f4e12b47028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 233.748508][ T9031] RAX: ffffffffffffffda RBX: 00007f4e14365fa0 RCX: 00007f4e140eaeb9 [ 233.748524][ T9031] RDX: 0000200000000440 RSI: 0000200000000140 RDI: 0000000000000000 [ 233.748613][ T9031] RBP: 00007f4e12b47090 R08: 0000200000000580 R09: 0000000000000000 [ 233.748638][ T9031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.748651][ T9031] R13: 00007f4e14366038 R14: 00007f4e14365fa0 R15: 00007ffed8960a18 [ 233.748727][ T9031] [ 233.797369][ T9028] loop2: detected capacity change from 0 to 8192 [ 233.801826][ T9025] EXT4-fs: Ignoring removed bh option [ 233.840561][ T9028] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 233.979183][ T9025] ext4 filesystem being mounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 234.129728][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 234.129804][ T29] audit: type=1400 audit(1770266443.143:4280): avc: denied { execute_no_trans } for pid=9045 comm="syz.9.1425" path="/171/file0" dev="tmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 234.171458][ T9025] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.1418: iget: bad i_size value: 2533274857506816 [ 234.202713][ T9048] loop2: detected capacity change from 0 to 128 [ 234.214825][ T9025] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.1418: iget: bad i_size value: 2533274857506816 [ 234.217665][ T29] audit: type=1400 audit(1770266443.203:4281): avc: denied { open } for pid=9024 comm="syz.7.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 234.230706][ T9050] loop0: detected capacity change from 0 to 512 [ 234.246570][ T29] audit: type=1400 audit(1770266443.203:4282): avc: denied { kernel } for pid=9024 comm="syz.7.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 234.272181][ T29] audit: type=1400 audit(1770266443.203:4283): avc: denied { tracepoint } for pid=9024 comm="syz.7.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 234.356418][ T9048] ext4 filesystem being mounted at /283/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 234.399865][ T9061] loop9: detected capacity change from 0 to 128 [ 234.401586][ T9050] ext4 filesystem being mounted at /82/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.463161][ T9064] loop7: detected capacity change from 0 to 512 [ 234.494557][ T29] audit: type=1400 audit(1770266443.523:4284): avc: denied { sys_module } for pid=9060 comm="syz.9.1431" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 234.518127][ T9067] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 234.529009][ T9067] SELinux: failed to load policy [ 234.570824][ T9064] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 234.611604][ T29] audit: type=1400 audit(1770266443.643:4285): avc: denied { create } for pid=9063 comm="syz.7.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 234.631097][ T29] audit: type=1400 audit(1770266443.643:4286): avc: denied { ioctl } for pid=9063 comm="syz.7.1430" path="socket:[25356]" dev="sockfs" ino=25356 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 234.841863][ T9071] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 234.909041][ T29] audit: type=1400 audit(1770266443.943:4287): avc: denied { bind } for pid=9091 comm="syz.9.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 234.932904][ T9092] geneve2: entered promiscuous mode [ 234.938346][ T9092] geneve2: entered allmulticast mode [ 235.027950][ T9098] ext4 filesystem being mounted at /289/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.083940][ T9098] SELinux: ebitmap: truncated map [ 235.101185][ T9098] SELinux: failed to load policy [ 235.309096][ T29] audit: type=1400 audit(1770266444.323:4288): avc: denied { create } for pid=9111 comm="syz.2.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 235.328594][ T29] audit: type=1400 audit(1770266444.323:4289): avc: denied { write } for pid=9111 comm="syz.2.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 235.707950][ T9126] ext4 filesystem being mounted at /177/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.298173][ T9141] ext4 filesystem being mounted at /91/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.366797][ T9141] SELinux: ebitmap: truncated map [ 236.372252][ T9141] SELinux: failed to load policy [ 236.563699][ T9152] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.1451: Failed to acquire dquot type 0 [ 236.580164][ T9153] wireguard1: entered promiscuous mode [ 236.585761][ T9153] wireguard1: entered allmulticast mode [ 236.776793][ T9162] netlink: 'syz.2.1462': attribute type 27 has an invalid length. [ 236.882204][ T9162] bridge0: port 3(syz_tun) entered disabled state [ 236.913784][ T9171] FAULT_INJECTION: forcing a failure. [ 236.913784][ T9171] name failslab, interval 1, probability 0, space 0, times 0 [ 236.926532][ T9171] CPU: 1 UID: 0 PID: 9171 Comm: syz.5.1466 Not tainted syzkaller #0 PREEMPT(voluntary) [ 236.926558][ T9171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 236.926570][ T9171] Call Trace: [ 236.926577][ T9171] [ 236.926585][ T9171] __dump_stack+0x1d/0x30 [ 236.926623][ T9171] dump_stack_lvl+0x95/0xd0 [ 236.926679][ T9171] dump_stack+0x15/0x1b [ 236.926702][ T9171] should_fail_ex+0x263/0x280 [ 236.926735][ T9171] should_failslab+0x8c/0xb0 [ 236.926762][ T9171] kmem_cache_alloc_noprof+0x68/0x490 [ 236.926794][ T9171] ? alloc_empty_file+0x76/0x200 [ 236.926883][ T9171] alloc_empty_file+0x76/0x200 [ 236.926908][ T9171] path_openat+0x62/0x23c0 [ 236.926939][ T9171] ? _parse_integer_limit+0x170/0x190 [ 236.926972][ T9171] ? _parse_integer+0x27/0x40 [ 236.927001][ T9171] ? kstrtoull+0x111/0x140 [ 236.927030][ T9171] ? kstrtouint+0x76/0xc0 [ 236.927098][ T9171] do_filp_open+0x15d/0x280 [ 236.927134][ T9171] do_sys_openat2+0xa6/0x150 [ 236.927209][ T9171] __x64_sys_open+0xe6/0x110 [ 236.927235][ T9171] x64_sys_call+0x166f/0x3000 [ 236.927315][ T9171] do_syscall_64+0xc0/0x2a0 [ 236.927404][ T9171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.927426][ T9171] RIP: 0033:0x7f4e140eaeb9 [ 236.927441][ T9171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.927505][ T9171] RSP: 002b:00007f4e12b26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 236.927523][ T9171] RAX: ffffffffffffffda RBX: 00007f4e14366090 RCX: 00007f4e140eaeb9 [ 236.927537][ T9171] RDX: 0000000000000025 RSI: 0000000000109200 RDI: 0000200000000040 [ 236.927552][ T9171] RBP: 00007f4e12b26090 R08: 0000000000000000 R09: 0000000000000000 [ 236.927566][ T9171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.927650][ T9171] R13: 00007f4e14366128 R14: 00007f4e14366090 R15: 00007ffed8960a18 [ 236.927682][ T9171] [ 237.341376][ T9180] __nla_validate_parse: 10 callbacks suppressed [ 237.341414][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1470'. [ 237.425062][ T9182] FAULT_INJECTION: forcing a failure. [ 237.425062][ T9182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.438204][ T9182] CPU: 1 UID: 0 PID: 9182 Comm: syz.0.1471 Not tainted syzkaller #0 PREEMPT(voluntary) [ 237.438234][ T9182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 237.438248][ T9182] Call Trace: [ 237.438262][ T9182] [ 237.438270][ T9182] __dump_stack+0x1d/0x30 [ 237.438297][ T9182] dump_stack_lvl+0x95/0xd0 [ 237.438436][ T9182] dump_stack+0x15/0x1b [ 237.438519][ T9182] should_fail_ex+0x263/0x280 [ 237.438552][ T9182] should_fail+0xb/0x20 [ 237.438580][ T9182] should_fail_usercopy+0x1a/0x20 [ 237.438671][ T9182] _copy_from_user+0x1c/0xb0 [ 237.438694][ T9182] do_ipt_set_ctl+0x3a9/0x8e0 [ 237.438733][ T9182] nf_setsockopt+0x199/0x1b0 [ 237.438761][ T9182] ip_setsockopt+0x102/0x110 [ 237.438866][ T9182] udp_setsockopt+0x99/0xb0 [ 237.438966][ T9182] sock_common_setsockopt+0x69/0x80 [ 237.439030][ T9182] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 237.439056][ T9182] __sys_setsockopt+0x184/0x200 [ 237.439088][ T9182] __x64_sys_setsockopt+0x64/0x80 [ 237.439156][ T9182] x64_sys_call+0x21d5/0x3000 [ 237.439178][ T9182] do_syscall_64+0xc0/0x2a0 [ 237.439228][ T9182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.439252][ T9182] RIP: 0033:0x7feb35bbaeb9 [ 237.439275][ T9182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.439295][ T9182] RSP: 002b:00007feb34617028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 237.439349][ T9182] RAX: ffffffffffffffda RBX: 00007feb35e35fa0 RCX: 00007feb35bbaeb9 [ 237.439379][ T9182] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 237.439393][ T9182] RBP: 00007feb34617090 R08: 0000000000000310 R09: 0000000000000000 [ 237.439409][ T9182] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000001 [ 237.439424][ T9182] R13: 00007feb35e36038 R14: 00007feb35e35fa0 R15: 00007fff18aeca08 [ 237.439445][ T9182] [ 237.654929][ T9186] wireguard2: entered promiscuous mode [ 237.660511][ T9186] wireguard2: entered allmulticast mode [ 237.739201][ T9184] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.941139][ T9208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.967261][ T9208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.149121][ T9216] xt_CT: You must specify a L4 protocol and not use inversions on it [ 238.310990][ T9223] wireguard0: entered promiscuous mode [ 238.316534][ T9223] wireguard0: entered allmulticast mode [ 238.590140][ T9232] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1488'. [ 238.695187][ T9236] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1490'. [ 238.700604][ T9238] set_capacity_and_notify: 7 callbacks suppressed [ 238.700620][ T9238] loop7: detected capacity change from 0 to 512 [ 238.721246][ T9238] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.1491: inode has both inline data and extents flags [ 238.734739][ T9238] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1491: couldn't read orphan inode 15 (err -117) [ 238.784923][ T9248] 9p: Bad value for 'wfdno' [ 238.857352][ T9255] loop0: detected capacity change from 0 to 512 [ 238.891333][ T9257] loop5: detected capacity change from 0 to 764 [ 238.909368][ T9259] loop9: detected capacity change from 0 to 512 [ 238.916696][ T9255] ext4 filesystem being mounted at /105/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.929882][ T9257] tc_dump_action: action bad kind [ 238.932524][ T9260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9260 comm=syz.2.1500 [ 238.981771][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1500'. [ 238.992510][ T9255] SELinux: failed to load policy [ 239.076051][ T9260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9260 comm=syz.2.1500 [ 239.119483][ T9259] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 239.129893][ T9274] loop0: detected capacity change from 0 to 512 [ 239.137563][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1500'. [ 239.158278][ T9269] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1502'. [ 239.161028][ T9259] EXT4-fs (loop9): orphan cleanup on readonly fs [ 239.183145][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1502'. [ 239.193162][ T9274] ext4 filesystem being mounted at /106/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.225584][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 239.225598][ T29] audit: type=1326 audit(1770266448.253:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9283 comm="syz.5.1506" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e140eaeb9 code=0x0 [ 239.251630][ T9259] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.1493: corrupted inode contents [ 239.277996][ T9274] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 239.333280][ T9274] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 239.336267][ T9290] FAULT_INJECTION: forcing a failure. [ 239.336267][ T9290] name failslab, interval 1, probability 0, space 0, times 0 [ 239.355897][ T9290] CPU: 0 UID: 0 PID: 9290 Comm: syz.0.1503 Not tainted syzkaller #0 PREEMPT(voluntary) [ 239.355949][ T9290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.355961][ T9290] Call Trace: [ 239.355968][ T9290] [ 239.356044][ T9290] __dump_stack+0x1d/0x30 [ 239.356071][ T9290] dump_stack_lvl+0x95/0xd0 [ 239.356113][ T9290] dump_stack+0x15/0x1b [ 239.356135][ T9290] should_fail_ex+0x263/0x280 [ 239.356213][ T9290] should_failslab+0x8c/0xb0 [ 239.356237][ T9290] kmem_cache_alloc_noprof+0x68/0x490 [ 239.356265][ T9290] ? alloc_empty_file+0x76/0x200 [ 239.356295][ T9290] alloc_empty_file+0x76/0x200 [ 239.356402][ T9290] path_openat+0x62/0x23c0 [ 239.356430][ T9290] ? _parse_integer_limit+0x170/0x190 [ 239.356463][ T9290] ? _parse_integer+0x27/0x40 [ 239.356501][ T9290] ? kstrtoull+0x111/0x140 [ 239.356530][ T9290] ? kstrtouint+0x76/0xc0 [ 239.356558][ T9290] do_filp_open+0x15d/0x280 [ 239.356655][ T9290] do_sys_openat2+0xa6/0x150 [ 239.356686][ T9290] __x64_sys_openat+0xf2/0x120 [ 239.356755][ T9290] x64_sys_call+0x2b07/0x3000 [ 239.356778][ T9290] do_syscall_64+0xc0/0x2a0 [ 239.356813][ T9290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.356837][ T9290] RIP: 0033:0x7feb35bbaeb9 [ 239.356855][ T9290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.356874][ T9290] RSP: 002b:00007feb345f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 239.356897][ T9290] RAX: ffffffffffffffda RBX: 00007feb35e36090 RCX: 00007feb35bbaeb9 [ 239.356910][ T9290] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c [ 239.356959][ T9290] RBP: 00007feb345f6090 R08: 0000000000000000 R09: 0000000000000000 [ 239.356973][ T9290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.356985][ T9290] R13: 00007feb35e36128 R14: 00007feb35e36090 R15: 00007fff18aeca08 [ 239.357002][ T9290] [ 239.379227][ T9274] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1503: Failed to acquire dquot type 0 [ 239.417002][ T9259] EXT4-fs (loop9): Remounting filesystem read-only [ 239.644625][ T9259] EXT4-fs (loop9): 1 truncate cleaned up [ 239.645061][ T405] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 239.660919][ T405] Quota error (device loop9): write_blk: dquota write failed [ 239.668331][ T405] Quota error (device loop9): remove_free_dqentry: Can't write block (5) with free entries [ 239.678450][ T405] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 239.689004][ T405] Quota error (device loop9): write_blk: dquota write failed [ 239.696367][ T405] Quota error (device loop9): free_dqentry: Can't move quota data block (5) to free list [ 239.708723][ T405] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 239.718851][ T405] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 239.753899][ T9293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=9293 comm=syz.2.1508 [ 239.758100][ T405] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 239.815330][ T9295] loop7: detected capacity change from 0 to 128 [ 239.876088][ T9295] ext4 filesystem being mounted at /275/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 240.029883][ T9306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9306 comm=syz.2.1515 [ 240.052443][ T9309] delete_channel: no stack [ 240.073877][ T29] audit: type=1400 audit(1770266449.093:4432): avc: denied { bind } for pid=9303 comm="syz.0.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 240.094593][ T9313] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1517'. [ 240.124793][ T9312] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1516'. [ 240.135451][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1515'. [ 240.197347][ T9306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9306 comm=syz.2.1515 [ 300.296929][ T9335] loop5: detected capacity change from 0 to 128 [ 300.325100][ T9337] FAULT_INJECTION: forcing a failure. [ 300.325100][ T9337] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 300.338479][ T9337] CPU: 1 UID: 0 PID: 9337 Comm: syz.9.1524 Not tainted syzkaller #0 PREEMPT(voluntary) [ 300.338510][ T9337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 300.338530][ T9337] Call Trace: [ 300.338541][ T9337] [ 300.338551][ T9337] __dump_stack+0x1d/0x30 [ 300.338679][ T9337] dump_stack_lvl+0x95/0xd0 [ 300.338702][ T9337] dump_stack+0x15/0x1b [ 300.338724][ T9337] should_fail_ex+0x263/0x280 [ 300.338756][ T9337] should_fail_alloc_page+0xf2/0x100 [ 300.338827][ T9337] __alloc_frozen_pages_noprof+0x108/0x350 [ 300.338861][ T9337] alloc_pages_mpol+0xb3/0x260 [ 300.338892][ T9337] alloc_pages_noprof+0x8f/0x130 [ 300.338920][ T9337] pte_alloc_one+0x1e/0xd0 [ 300.338987][ T9337] __do_fault+0x7b/0x200 [ 300.339006][ T9337] handle_mm_fault+0x11d7/0x3030 [ 300.339070][ T9337] ? path_openat+0x1e8e/0x23c0 [ 300.339106][ T9337] do_user_addr_fault+0x3fd/0x1050 [ 300.339135][ T9337] exc_page_fault+0x62/0xa0 [ 300.339161][ T9337] asm_exc_page_fault+0x26/0x30 [ 300.339190][ T9337] RIP: 0010:strncpy_from_user+0xa4/0x250 [ 300.339216][ T9337] Code: fa 58 ff 49 83 ff 07 0f 86 85 00 00 00 48 c7 04 24 00 00 00 00 4c 89 64 24 10 48 8b 6c 24 08 4c 89 7c 24 18 4d 89 fd 4d 89 e6 <4d> 8b 24 24 48 b8 ff fe fe fe fe fe fe fe 4d 8d 3c 04 4c 89 e3 48 [ 300.339233][ T9337] RSP: 0018:ffffc900067f3e50 EFLAGS: 00050212 [ 300.339249][ T9337] RAX: ffffffff82000a2d RBX: ffff888100bdb000 RCX: ffff8881189e1080 [ 300.339329][ T9337] RDX: 0000000000000000 RSI: 0000000000000fe0 RDI: 0000000000000007 [ 300.339350][ T9337] RBP: ffff888100bdb020 R08: 0001888100bdb007 R09: 0000000000000000 [ 300.339364][ T9337] R10: ffff888100bdb000 R11: 0001888100bdbfff R12: 0000200000000040 [ 300.339450][ T9337] R13: 0000000000000fe0 R14: 0000200000000040 R15: 0000000000000fe0 [ 300.339466][ T9337] ? strncpy_from_user+0x7d/0x250 [ 300.339572][ T9337] getname_flags+0xad/0x3b0 [ 300.339603][ T9337] __x64_sys_rename+0x40/0x70 [ 300.339677][ T9337] x64_sys_call+0x24e/0x3000 [ 300.339704][ T9337] do_syscall_64+0xc0/0x2a0 [ 300.339735][ T9337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.339755][ T9337] RIP: 0033:0x7f0911b9aeb9 [ 300.339793][ T9337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.339873][ T9337] RSP: 002b:00007f09105f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 300.339895][ T9337] RAX: ffffffffffffffda RBX: 00007f0911e15fa0 RCX: 00007f0911b9aeb9 [ 300.339911][ T9337] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 300.339925][ T9337] RBP: 00007f09105f7090 R08: 0000000000000000 R09: 0000000000000000 [ 300.339940][ T9337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.339954][ T9337] R13: 00007f0911e16038 R14: 00007f0911e15fa0 R15: 00007ffd59539038 [ 300.340026][ T9337] [ 300.371009][ T9335] EXT4-fs mount: 67 callbacks suppressed [ 300.371024][ T9335] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 300.533043][ T9342] loop7: detected capacity change from 0 to 512 [ 300.553230][ T9335] ext4 filesystem being mounted at /304/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 300.696328][ T9352] loop0: detected capacity change from 0 to 512 [ 300.709863][ T29] audit: type=1400 audit(1770266509.731:4433): avc: denied { setopt } for pid=9351 comm="syz.0.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 300.724565][ T9354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9354 comm=syz.9.1528 [ 300.744555][ T3669] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 300.754168][ T9354] __nla_validate_parse: 1 callbacks suppressed [ 300.754182][ T9354] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1528'. [ 300.754180][ T9352] EXT4-fs (loop0): first meta block group too large: 3584 (group descriptor block count 1) [ 300.790636][ T9357] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1530'. [ 300.814325][ T29] audit: type=1326 audit(1770266509.851:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9358 comm="syz.5.1529" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e140eaeb9 code=0x0 [ 300.837833][ T9354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9354 comm=syz.9.1528 [ 300.871152][ T9342] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 300.887843][ T9342] EXT4-fs (loop7): orphan cleanup on readonly fs [ 300.925888][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1528'. [ 300.935224][ T9342] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.1525: corrupted inode contents [ 300.959750][ T9342] EXT4-fs (loop7): Remounting filesystem read-only [ 300.966395][ T9342] EXT4-fs (loop7): 1 truncate cleaned up [ 300.973024][ T5320] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 300.983610][ T5320] Quota error (device loop7): write_blk: dquota write failed [ 300.991007][ T5320] Quota error (device loop7): remove_free_dqentry: Can't write block (5) with free entries [ 301.001025][ T5320] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 301.011566][ T5320] Quota error (device loop7): write_blk: dquota write failed [ 301.018989][ T5320] Quota error (device loop7): free_dqentry: Can't move quota data block (5) to free list [ 301.040575][ T29] audit: type=1326 audit(1770266510.071:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9370 comm="syz.9.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0911b9aeb9 code=0x7ffc0000 [ 301.064095][ T29] audit: type=1326 audit(1770266510.071:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9370 comm="syz.9.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0911b9aeb9 code=0x7ffc0000 [ 301.087673][ T29] audit: type=1326 audit(1770266510.071:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9370 comm="syz.9.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0911b9aeb9 code=0x7ffc0000 [ 301.111153][ T29] audit: type=1326 audit(1770266510.071:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9370 comm="syz.9.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0911b9aeb9 code=0x7ffc0000 [ 301.114422][ T5320] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 301.165828][ T9342] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback. [ 301.224275][ T5047] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-0000002a0000. [ 301.304263][ T9381] loop7: detected capacity change from 0 to 512 [ 301.425059][ T9393] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1543'. [ 301.440297][ T9381] SELinux: ebitmap: truncated map [ 301.449860][ T9381] SELinux: failed to load policy [ 301.487086][ T9393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9393 comm=syz.9.1543 [ 301.509695][ T9393] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1543'. [ 301.576936][ T9399] netlink: 'syz.7.1546': attribute type 27 has an invalid length. [ 301.645874][ T9401] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1547'. [ 301.749851][ T9404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.774040][ T9404] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.794879][ T9404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.810482][ T9407] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1548'. [ 301.822136][ T6647] syz_tun (unregistering): left allmulticast mode [ 301.828663][ T6647] syz_tun (unregistering): left promiscuous mode [ 301.835071][ T6647] bridge0: port 3(syz_tun) entered disabled state [ 301.898429][ T9414] netlink: 'syz.9.1550': attribute type 4 has an invalid length. [ 302.553461][ T9447] loop0: detected capacity change from 0 to 8192 [ 302.680784][ T9454] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1564'. [ 302.692248][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1564'. [ 302.718470][ T9457] loop7: detected capacity change from 0 to 8192 [ 302.733796][ T9457] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 302.759178][ T9457] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 302.768059][ T9457] FAT-fs (loop7): Filesystem has been set read-only [ 302.803709][ T9457] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 302.812878][ T9457] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 302.821906][ T9457] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 302.833198][ T9457] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 302.833461][ T52] bridge_slave_1: left allmulticast mode [ 302.847985][ T52] bridge_slave_1: left promiscuous mode [ 302.853799][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.861496][ T9457] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 302.871139][ T52] bridge_slave_0: left allmulticast mode [ 302.876833][ T52] bridge_slave_0: left promiscuous mode [ 302.880814][ T9457] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 302.882734][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.899489][ T9457] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 302.908373][ T9457] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 302.927910][ T9457] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 303.012205][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.022702][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.038500][ T52] bond0 (unregistering): Released all slaves [ 303.049758][ T52] bond1 (unregistering): Released all slaves [ 303.101648][ T9422] chnl_net:caif_netlink_parms(): no params data found [ 303.126871][ T52] hsr_slave_0: left promiscuous mode [ 303.150949][ T52] hsr_slave_1: left promiscuous mode [ 303.168196][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.208186][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.215114][ T9499] loop9: detected capacity change from 0 to 1024 [ 303.341112][ T52] team0 (unregistering): Port device team_slave_1 removed [ 303.348559][ T9509] loop5: detected capacity change from 0 to 8192 [ 303.355152][ T52] team0 (unregistering): Port device team_slave_0 removed [ 303.475963][ T9515] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1575'. [ 303.486797][ T9422] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.493984][ T9422] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.523086][ T9422] bridge_slave_0: entered allmulticast mode [ 303.534496][ T9422] bridge_slave_0: entered promiscuous mode [ 303.548980][ T9422] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.556208][ T9422] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.587684][ T9422] bridge_slave_1: entered allmulticast mode [ 303.594448][ T9422] bridge_slave_1: entered promiscuous mode [ 303.620688][ T9528] loop9: detected capacity change from 0 to 512 [ 303.631504][ T9422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.639763][ T9528] EXT4-fs: Ignoring removed i_version option [ 303.646646][ T9528] EXT4-fs: Ignoring removed bh option [ 303.649881][ T9422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.664229][ T9529] netlink: 'syz.5.1578': attribute type 27 has an invalid length. [ 303.674299][ T9529] wireguard0: left promiscuous mode [ 303.679676][ T9529] wireguard0: left allmulticast mode [ 303.694851][ T9422] team0: Port device team_slave_0 added [ 303.710347][ T9528] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.715469][ T9529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.731761][ T9529] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.747379][ T9529] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 303.763432][ T9528] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 303.767834][ T9422] team0: Port device team_slave_1 added [ 303.806176][ T9422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.813359][ T9422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.839483][ T9422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.853520][ T9422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.853459][ T9528] EXT4-fs error (device loop9): ext4_lookup:1785: inode #12: comm syz.9.1579: iget: bad i_size value: 2533274857506816 [ 303.860556][ T9422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.899658][ T9422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.913773][ T9528] EXT4-fs error (device loop9): ext4_lookup:1785: inode #12: comm syz.9.1579: iget: bad i_size value: 2533274857506816 [ 303.938026][ T9422] hsr_slave_0: entered promiscuous mode [ 303.958723][ T9422] hsr_slave_1: entered promiscuous mode [ 303.958810][ T9554] loop7: detected capacity change from 0 to 1024 [ 303.969572][ T9422] debugfs: 'hsr0' already exists in 'hsr' [ 303.976491][ T9422] Cannot create hsr debugfs directory [ 303.995232][ T9554] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.013669][ T5824] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.065068][ T5047] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.211459][ T9569] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 304.233541][ T9569] EXT4-fs (loop9): orphan cleanup on readonly fs [ 304.307839][ T9569] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.1584: corrupted inode contents [ 304.382460][ T9422] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 304.395699][ T9569] EXT4-fs (loop9): Remounting filesystem read-only [ 304.410313][ T9422] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 304.417142][ T9569] EXT4-fs (loop9): 1 truncate cleaned up [ 304.422912][ T52] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 304.433496][ T52] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 304.444426][ T52] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 304.462390][ T9422] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 304.465302][ T9569] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback. [ 304.491465][ T9422] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 304.592744][ T9422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.625593][ T9422] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.652008][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.659216][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.691604][ T405] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.698715][ T405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.818928][ T5824] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-0000002a0000. [ 304.863739][ T9422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.965870][ T9645] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 304.986226][ T9645] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 305.099892][ T9666] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 305.122424][ T9666] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 305.172405][ T9670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9670 comm=syz.5.1601 [ 305.192957][ T7089] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 305.214767][ T9422] veth0_vlan: entered promiscuous mode [ 305.229668][ T9422] veth1_vlan: entered promiscuous mode [ 305.307818][ T9690] set_capacity_and_notify: 4 callbacks suppressed [ 305.307836][ T9690] loop5: detected capacity change from 0 to 4096 [ 305.362899][ T9690] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.393355][ T9687] loop0: detected capacity change from 0 to 8192 [ 305.568604][ T9697] loop0: detected capacity change from 0 to 2048 [ 305.665202][ T9422] veth0_macvtap: entered promiscuous mode [ 305.674626][ T9422] veth1_macvtap: entered promiscuous mode [ 305.697663][ T9422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.735767][ T9422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.761412][ T405] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.785220][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.796697][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 305.796748][ T29] audit: type=1400 audit(1770266514.841:4515): avc: denied { mount } for pid=9422 comm="syz-executor" name="/" dev="gadgetfs" ino=3747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 305.839552][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.848336][ T405] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.871514][ T9336] loop0: unable to read partition table [ 305.877340][ T9336] loop0: partition table beyond EOD, truncated [ 305.971588][ T9697] loop0: unable to read partition table [ 305.982765][ T9697] loop0: partition table beyond EOD, truncated [ 305.989050][ T9697] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 306.022843][ T9721] __nla_validate_parse: 6 callbacks suppressed [ 306.022861][ T9721] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1607'. [ 306.068774][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1607'. [ 306.071031][ T3001] loop0: unable to read partition table [ 306.092521][ T3001] loop0: partition table beyond EOD, truncated [ 306.140040][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.197111][ T9738] FAULT_INJECTION: forcing a failure. [ 306.197111][ T9738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.210294][ T9738] CPU: 0 UID: 0 PID: 9738 Comm: syz.7.1612 Not tainted syzkaller #0 PREEMPT(voluntary) [ 306.210321][ T9738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 306.210402][ T9738] Call Trace: [ 306.210409][ T9738] [ 306.210417][ T9738] __dump_stack+0x1d/0x30 [ 306.210477][ T9738] dump_stack_lvl+0x95/0xd0 [ 306.210500][ T9738] dump_stack+0x15/0x1b [ 306.210587][ T9738] should_fail_ex+0x263/0x280 [ 306.210616][ T9738] should_fail+0xb/0x20 [ 306.210791][ T9738] should_fail_usercopy+0x1a/0x20 [ 306.210824][ T9738] _copy_from_iter+0xcf/0xea0 [ 306.210846][ T9738] ? __alloc_skb+0x397/0x4b0 [ 306.210877][ T9738] ? __alloc_skb+0x219/0x4b0 [ 306.210930][ T9738] netlink_sendmsg+0x4ae/0x6f0 [ 306.210960][ T9738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.210977][ T9738] ____sys_sendmsg+0x5af/0x600 [ 306.211004][ T9738] ___sys_sendmsg+0x195/0x1e0 [ 306.211031][ T9738] __x64_sys_sendmsg+0xd4/0x160 [ 306.211119][ T9738] x64_sys_call+0x17ba/0x3000 [ 306.211147][ T9738] do_syscall_64+0xc0/0x2a0 [ 306.211180][ T9738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.211253][ T9738] RIP: 0033:0x7f0e3188aeb9 [ 306.211269][ T9738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.211287][ T9738] RSP: 002b:00007f0e302e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.211310][ T9738] RAX: ffffffffffffffda RBX: 00007f0e31b05fa0 RCX: 00007f0e3188aeb9 [ 306.211407][ T9738] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 306.211423][ T9738] RBP: 00007f0e302e7090 R08: 0000000000000000 R09: 0000000000000000 [ 306.211438][ T9738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.211453][ T9738] R13: 00007f0e31b06038 R14: 00007f0e31b05fa0 R15: 00007ffcce1ac398 [ 306.211474][ T9738] [ 306.399317][ T29] audit: type=1326 audit(1770266515.251:4516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.5.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e140eaeb9 code=0x7ffc0000 [ 306.422794][ T29] audit: type=1326 audit(1770266515.251:4517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.5.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e140eaeb9 code=0x7ffc0000 [ 306.446276][ T29] audit: type=1326 audit(1770266515.251:4518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.5.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e140eaeb9 code=0x7ffc0000 [ 306.469729][ T29] audit: type=1326 audit(1770266515.251:4519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.5.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4e140eaeb9 code=0x7ffc0000 [ 306.493217][ T29] audit: type=1326 audit(1770266515.251:4520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.5.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4e140eac22 code=0x7ffc0000 [ 306.516594][ T29] audit: type=1326 audit(1770266515.251:4521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.5.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4e140eac22 code=0x7ffc0000 [ 306.524074][ T9746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1613'. [ 306.539910][ T29] audit: type=1326 audit(1770266515.251:4522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.5.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e140eaeb9 code=0x7ffc0000 [ 306.566970][ T9746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9746 comm=syz.0.1613 [ 306.572473][ T29] audit: type=1326 audit(1770266515.251:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.5.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e140eaeb9 code=0x7ffc0000 [ 306.597378][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1613'. [ 306.608992][ T29] audit: type=1326 audit(1770266515.251:4524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.5.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e140eaeb9 code=0x7ffc0000 [ 306.656901][ T9753] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1614'. [ 306.715495][ T9759] loop7: detected capacity change from 0 to 512 [ 306.784554][ T9765] syzkaller0: entered promiscuous mode [ 306.790155][ T9765] syzkaller0: entered allmulticast mode [ 307.034147][ T9789] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 307.042040][ T9789] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 307.953565][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1660'. [ 308.216313][ T9935] Process accounting resumed [ 308.509887][ T9977] bond1: entered promiscuous mode [ 308.514953][ T9977] bond1: entered allmulticast mode [ 308.592417][ T9977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1682'. [ 308.646199][ T9977] bond1: left promiscuous mode [ 308.651174][ T9977] bond1: left allmulticast mode [ 308.656651][ T9977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 308.666114][T10000] netlink: 75 bytes leftover after parsing attributes in process `syz.9.1687'. [ 308.809857][T10020] loop4: detected capacity change from 0 to 764 [ 308.852491][T10020] Symlink component flag not implemented [ 308.865199][T10020] Symlink component flag not implemented (116) [ 309.230786][T10050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1705'. [ 311.150649][T10118] FAULT_INJECTION: forcing a failure. [ 311.150649][T10118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.163807][T10118] CPU: 1 UID: 0 PID: 10118 Comm: syz.4.1730 Not tainted syzkaller #0 PREEMPT(voluntary) [ 311.163837][T10118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 311.163927][T10118] Call Trace: [ 311.163934][T10118] [ 311.163942][T10118] __dump_stack+0x1d/0x30 [ 311.163965][T10118] dump_stack_lvl+0x95/0xd0 [ 311.164008][T10118] dump_stack+0x15/0x1b [ 311.164168][T10118] should_fail_ex+0x263/0x280 [ 311.164201][T10118] should_fail+0xb/0x20 [ 311.164296][T10118] should_fail_usercopy+0x1a/0x20 [ 311.164333][T10118] _copy_to_user+0x20/0xa0 [ 311.164357][T10118] simple_read_from_buffer+0xb5/0x130 [ 311.164408][T10118] proc_fail_nth_read+0x10e/0x150 [ 311.164438][T10118] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 311.164463][T10118] vfs_read+0x1ab/0x7f0 [ 311.164482][T10118] ? __rcu_read_unlock+0x4e/0x70 [ 311.164511][T10118] ? __fget_files+0x184/0x1c0 [ 311.164558][T10118] ? mutex_lock+0x57/0x90 [ 311.164584][T10118] ksys_read+0xdc/0x1a0 [ 311.164607][T10118] __x64_sys_read+0x40/0x50 [ 311.164725][T10118] x64_sys_call+0x2889/0x3000 [ 311.164748][T10118] do_syscall_64+0xc0/0x2a0 [ 311.164779][T10118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.164845][T10118] RIP: 0033:0x7f9add4cb78e [ 311.164861][T10118] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 311.164943][T10118] RSP: 002b:00007f9adbf66fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 311.164966][T10118] RAX: ffffffffffffffda RBX: 00007f9adbf676c0 RCX: 00007f9add4cb78e [ 311.164983][T10118] RDX: 000000000000000f RSI: 00007f9adbf670a0 RDI: 0000000000000005 [ 311.164996][T10118] RBP: 00007f9adbf67090 R08: 0000000000000000 R09: 0000000000000000 [ 311.165062][T10118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.165075][T10118] R13: 00007f9add786038 R14: 00007f9add785fa0 R15: 00007ffe6809d568 [ 311.165096][T10118] [ 311.455307][T10120] loop4: detected capacity change from 0 to 512 [ 311.535190][T10121] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1731'. [ 311.582249][T10120] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 311.618333][T10120] SELinux: failed to load policy [ 311.675603][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1732'. [ 311.684584][T10123] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1732'. [ 311.696595][T10123] vlan2: entered allmulticast mode [ 311.766840][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 311.766854][ T29] audit: type=1400 audit(1770266520.802:4538): avc: denied { mounton } for pid=10122 comm="syz.4.1732" path="/proc/96/task/97/net" dev="proc" ino=29259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 312.460509][T10132] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1735'. [ 312.475510][T10132] bond2: entered promiscuous mode [ 312.480838][T10132] bond2: entered allmulticast mode [ 312.491641][T10132] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1735'. [ 312.502578][T10132] bond2: left promiscuous mode [ 312.507418][T10132] bond2: left allmulticast mode [ 312.516369][T10132] 8021q: adding VLAN 0 to HW filter on device bond2 [ 312.599883][T10137] loop4: detected capacity change from 0 to 764 [ 312.612004][T10137] ISOFS: unable to read i-node block [ 312.771683][ T29] audit: type=1400 audit(1770266521.812:4539): avc: denied { audit_write } for pid=10147 comm="syz.4.1742" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 312.809550][T10149] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 312.809550][T10149] The task syz.5.1741 (10149) triggered the difference, watch for misbehavior. [ 312.880089][T10155] loop4: detected capacity change from 0 to 7 [ 312.886387][T10155] buffer_io_error: 1088 callbacks suppressed [ 312.886398][T10155] Buffer I/O error on dev loop4, logical block 0, async page read [ 312.900439][T10155] Buffer I/O error on dev loop4, logical block 0, async page read [ 312.908299][T10155] loop4: unable to read partition table [ 312.913938][T10155] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 312.915038][ T9336] Buffer I/O error on dev loop4, logical block 0, async page read [ 312.926400][T10153] 9pnet: p9_errstr2errno: server reported unknown error [ 312.949785][ T9336] Buffer I/O error on dev loop4, logical block 0, async page read [ 312.968286][ T9336] Buffer I/O error on dev loop4, logical block 0, async page read [ 312.982663][ T9336] Buffer I/O error on dev loop4, logical block 0, async page read [ 312.991033][ T9336] Buffer I/O error on dev loop4, logical block 0, async page read [ 313.008262][ T9336] Buffer I/O error on dev loop4, logical block 0, async page read [ 313.017050][ T9336] Buffer I/O error on dev loop4, logical block 0, async page read [ 313.029367][ T9336] Buffer I/O error on dev loop4, logical block 0, async page read [ 313.197905][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1756'. [ 314.331939][ T29] audit: type=1400 audit(1770266523.372:4540): avc: denied { lock } for pid=10226 comm="syz.0.1773" path="pid:[4026532370]" dev="nsfs" ino=4026532370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 314.748008][T10269] program syz.4.1783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.778739][T10272] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1784'. [ 314.834937][T10276] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1786'. [ 314.844441][T10276] gretap0: entered promiscuous mode [ 314.931849][T10283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 314.939308][T10283] IPv6: NLM_F_CREATE should be set when creating new route [ 315.340995][ T29] audit: type=1400 audit(1770266524.382:4541): avc: denied { read } for pid=10338 comm="syz.7.1815" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 315.432708][T10359] loop4: detected capacity change from 0 to 764 [ 315.939206][T10389] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1830'. [ 316.005149][T10397] tmpfs: Unsupported parameter 'huge' [ 316.241087][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1840'. [ 316.280657][ T29] audit: type=1400 audit(1770266525.323:4542): avc: denied { getopt } for pid=10414 comm="syz.7.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 316.599829][T10472] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1869'. [ 316.616370][T10472] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1869'. [ 316.655460][ T29] audit: type=1400 audit(1770266525.693:4543): avc: denied { execute } for pid=10480 comm="syz.5.1873" path="/proc/locks" dev="proc" ino=4026532031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 316.799370][ T29] audit: type=1400 audit(1770266525.843:4544): avc: denied { write } for pid=10494 comm="syz.9.1878" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 316.822912][ T29] audit: type=1400 audit(1770266525.843:4545): avc: denied { ioctl } for pid=10494 comm="syz.9.1878" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 316.876336][T10499] syzkaller0: entered promiscuous mode [ 316.881971][T10499] syzkaller0: entered allmulticast mode [ 317.346558][T10535] syzkaller0: entered promiscuous mode [ 317.352234][T10535] syzkaller0: entered allmulticast mode [ 317.600304][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1903'. [ 317.609355][ T29] audit: type=1400 audit(1770266526.643:4546): avc: denied { ioctl } for pid=10554 comm="syz.4.1903" path="socket:[30498]" dev="sockfs" ino=30498 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 317.883234][T10564] loop5: detected capacity change from 0 to 256 [ 317.898395][T10564] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 317.922192][T10564] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 319.199445][T10623] netlink: 71 bytes leftover after parsing attributes in process `syz.7.1927'. [ 320.158999][T10669] syzkaller0: entered promiscuous mode [ 320.164489][T10669] syzkaller0: entered allmulticast mode [ 320.239928][T10675] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 320.432936][ T29] audit: type=1400 audit(1770266529.473:4547): avc: denied { ioctl } for pid=10682 comm="syz.0.1948" path="/177/file0" dev="tmpfs" ino=978 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 321.162827][T10721] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1955'. [ 321.471501][T10747] syzkaller0: entered promiscuous mode [ 321.476999][T10747] syzkaller0: entered allmulticast mode [ 321.548506][T10753] raw_sendmsg: syz.0.1967 forgot to set AF_INET. Fix it! [ 321.780174][T10765] syz.5.1975 (10765): /proc/10764/oom_adj is deprecated, please use /proc/10764/oom_score_adj instead. [ 322.198466][ T29] audit: type=1326 audit(1770266531.063:4548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.9.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0911b9aeb9 code=0x7ff00000 [ 322.222089][ T29] audit: type=1326 audit(1770266531.063:4549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.9.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0911b9aeb9 code=0x7ff00000 [ 322.245597][ T29] audit: type=1326 audit(1770266531.063:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.9.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0911b9aeb9 code=0x7ff00000 [ 322.275066][ T29] audit: type=1326 audit(1770266531.063:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.9.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0911b9aeb9 code=0x7ff00000 [ 322.298773][ T29] audit: type=1326 audit(1770266531.063:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.9.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0911b9aeb9 code=0x7ff00000 [ 322.322335][ T29] audit: type=1326 audit(1770266531.063:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.9.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0911b9aeb9 code=0x7ff00000 [ 322.345867][ T29] audit: type=1326 audit(1770266531.063:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.9.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0911b9aeb9 code=0x7ff00000 [ 322.369396][ T29] audit: type=1326 audit(1770266531.063:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.9.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0911b9aeb9 code=0x7ff00000 [ 322.393190][ T29] audit: type=1326 audit(1770266531.063:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.9.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0911b9aeb9 code=0x7ff00000 [ 322.416709][ T29] audit: type=1400 audit(1770266531.173:4557): avc: denied { lock } for pid=10797 comm="syz.4.1988" path="socket:[31457]" dev="sockfs" ino=31457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 322.622259][T10816] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1995'. [ 322.810918][T10830] syzkaller0: entered promiscuous mode [ 322.816441][T10830] syzkaller0: entered allmulticast mode [ 323.082313][T10869] ip6erspan0: entered allmulticast mode [ 323.119253][T10876] loop7: detected capacity change from 0 to 128 [ 323.159479][T10880] syzkaller0: entered promiscuous mode [ 323.164990][T10880] syzkaller0: entered allmulticast mode [ 323.307990][T10876] bio_check_eod: 1092 callbacks suppressed [ 323.308007][T10876] syz.7.2022: attempt to access beyond end of device [ 323.308007][T10876] loop7: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 323.318398][T10895] netlink: 'syz.4.2029': attribute type 4 has an invalid length. [ 323.327745][T10876] buffer_io_error: 2 callbacks suppressed [ 323.327799][T10876] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 323.359043][T10876] syz.7.2022: attempt to access beyond end of device [ 323.359043][T10876] loop7: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 323.372765][T10876] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 323.478884][T10907] loop7: detected capacity change from 0 to 164 [ 323.505610][T10909] loop7: detected capacity change from 0 to 512 [ 323.517741][T10909] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 323.777960][T10949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2056'. [ 324.468002][T10966] loop4: detected capacity change from 0 to 128 [ 324.560106][T10975] bond1: entered promiscuous mode [ 324.565202][T10975] bond1: entered allmulticast mode [ 324.577491][T10975] ip6gretap1: entered promiscuous mode [ 324.583121][T10975] ip6gretap1: entered allmulticast mode [ 324.590754][T10975] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 324.601489][T10975] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2067'. [ 324.610897][T10975] bond1: left promiscuous mode [ 324.615668][T10975] ip6gretap1: left promiscuous mode [ 324.621158][T10975] bond1: left allmulticast mode [ 324.626008][T10975] ip6gretap1: left allmulticast mode [ 324.632402][T10975] 8021q: adding VLAN 0 to HW filter on device bond1 [ 324.791120][T10997] loop5: detected capacity change from 0 to 128 [ 327.277846][T11097] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.066922][T11119] loop4: detected capacity change from 0 to 512 [ 328.103713][T11119] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 328.197471][T11124] syzkaller0: entered promiscuous mode [ 328.202997][T11124] syzkaller0: entered allmulticast mode [ 328.385246][T11130] syzkaller0: entered promiscuous mode [ 328.390830][T11130] syzkaller0: entered allmulticast mode [ 328.803596][T11149] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2133'. [ 330.757563][T11216] ip_vti0: entered allmulticast mode [ 331.545649][T11257] syzkaller0: entered promiscuous mode [ 331.551195][T11257] syzkaller0: entered allmulticast mode [ 331.788732][T11265] program syz.9.2182 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 332.313731][T11319] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2201'. [ 332.324464][T11319] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2201'. [ 333.014006][T11364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2216'. [ 333.146195][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 333.146210][ T29] audit: type=1400 audit(1770266542.195:4563): avc: denied { getattr } for pid=11371 comm="syz.0.2219" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=32638 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 333.661882][T11386] bond0: (slave bond_slave_0): Releasing backup interface [ 333.767229][T11394] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2229'. [ 333.788210][T11396] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2230'. [ 333.807118][T11396] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2230'. [ 333.816206][T11396] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2230'. [ 334.043158][ T29] audit: type=1400 audit(1770266543.085:4564): avc: denied { append } for pid=11415 comm="syz.7.2237" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 334.106109][T11422] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2239'. [ 334.134757][T11423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11423 comm=syz.0.2238 [ 334.196241][T11427] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 334.513671][ T29] audit: type=1400 audit(1770266543.555:4565): avc: denied { mount } for pid=11444 comm="syz.4.2248" name="/" dev="hugetlbfs" ino=32732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 334.547242][T11445] loop4: detected capacity change from 0 to 8192 [ 334.665778][ T9336] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 334.671041][ T9336] loop4: partition table partially beyond EOD, truncated [ 334.681979][ T9336] loop4: p1 size 67108864 extends beyond EOD, truncated [ 334.690116][ T9336] loop4: p2 start 150995200 is beyond EOD, truncated [ 334.696880][ T9336] loop4: p3 start 327168 is beyond EOD, truncated [ 334.704210][ T9336] loop4: p5 size 67108864 extends beyond EOD, truncated [ 334.712662][ T9336] loop4: p6 start 150995200 is beyond EOD, truncated [ 335.021810][T11471] 9p: Bad value for 'wfdno' [ 335.105569][ T29] audit: type=1400 audit(1770266544.065:4566): avc: denied { mounton } for pid=11470 comm="syz.5.2258" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 335.199068][T11445] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 335.204320][T11445] loop4: partition table partially beyond EOD, truncated [ 335.223473][T11445] loop4: p1 size 67108864 extends beyond EOD, truncated [ 335.232016][T11445] loop4: p2 start 150995200 is beyond EOD, truncated [ 335.238881][T11445] loop4: p3 start 327168 is beyond EOD, truncated [ 335.246816][T11445] loop4: p5 size 67108864 extends beyond EOD, truncated [ 335.276727][T11445] loop4: p6 start 150995200 is beyond EOD, truncated [ 335.383326][T11489] netlink: 'syz.9.2261': attribute type 1 has an invalid length. [ 335.608960][ T29] audit: type=1400 audit(1770266544.385:4567): avc: denied { listen } for pid=11483 comm="syz.9.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 335.871155][ T9332] udevd[9332]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 335.882399][ T9461] udevd[9461]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 335.893713][ T9336] udevd[9336]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 335.940100][ T9332] udevd[9332]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 335.940211][ T9464] udevd[9464]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 335.962310][ T9452] udevd[9452]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 336.063345][T11521] netlink: 'syz.0.2262': attribute type 1 has an invalid length. [ 336.079493][ T29] audit: type=1400 audit(1770266545.125:4568): avc: denied { create } for pid=11520 comm="syz.0.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 336.105518][ T29] audit: type=1400 audit(1770266545.145:4569): avc: denied { write } for pid=11520 comm="syz.0.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 336.129735][T11521] bond2: (slave gretap1): making interface the new active one [ 336.161753][T11521] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 336.200427][T11528] macvlan4: entered promiscuous mode [ 336.205776][T11528] macvlan4: entered allmulticast mode [ 336.234902][T11528] bond2: entered promiscuous mode [ 336.240092][T11528] gretap1: entered promiscuous mode [ 336.248731][T11528] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 336.257272][T11528] bond2: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 336.274270][T11528] bond2: left promiscuous mode [ 336.279131][T11528] gretap1: left promiscuous mode [ 336.290791][T11535] syzkaller0: entered promiscuous mode [ 336.296382][T11535] syzkaller0: entered allmulticast mode [ 336.405783][T11547] syzkaller0: entered promiscuous mode [ 336.411300][T11547] syzkaller0: entered allmulticast mode [ 336.455089][ T29] audit: type=1400 audit(1770266545.495:4570): avc: denied { write } for pid=11556 comm="syz.4.2286" path="socket:[33964]" dev="sockfs" ino=33964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 336.479236][ T29] audit: type=1400 audit(1770266545.495:4571): avc: denied { setopt } for pid=11556 comm="syz.4.2286" lport=52005 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 336.540844][ T29] audit: type=1400 audit(1770266545.585:4572): avc: denied { mount } for pid=11562 comm="syz.5.2289" name="/" dev="ramfs" ino=33967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 336.565791][T11566] sctp: [Deprecated]: syz.4.2288 (pid 11566) Use of struct sctp_assoc_value in delayed_ack socket option. [ 336.565791][T11566] Use struct sctp_sack_info instead [ 336.741072][T11581] team0: No ports can be present during mode change [ 336.748874][T11573] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 336.852818][T11590] loop4: detected capacity change from 0 to 256 [ 336.918013][T11594] syzkaller0: entered promiscuous mode [ 336.923605][T11594] syzkaller0: entered allmulticast mode [ 338.015385][T11628] loop4: detected capacity change from 0 to 256 [ 338.105353][T11637] syzkaller0: entered promiscuous mode [ 338.106940][T11638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2314'. [ 338.110888][T11637] syzkaller0: entered allmulticast mode [ 338.149556][T11638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.172189][T11638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.186739][T11643] 9p: Bad value for 'wfdno' [ 338.188179][T11638] bond0 (unregistering): Released all slaves [ 338.442535][ T29] audit: type=1326 audit(1770266547.485:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11659 comm="syz.7.2323" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e3188aeb9 code=0x0 [ 338.730310][T11668] ================================================================== [ 338.738431][T11668] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 338.747053][T11668] [ 338.749412][T11668] write to 0xffff88810529a228 of 8 bytes by task 11669 on cpu 1: [ 338.757131][T11668] shmem_file_splice_read+0x470/0x600 [ 338.762517][T11668] splice_direct_to_actor+0x26e/0x670 [ 338.767888][T11668] do_splice_direct+0x119/0x1a0 [ 338.772735][T11668] do_sendfile+0x382/0x650 [ 338.777148][T11668] __x64_sys_sendfile64+0x105/0x150 [ 338.782344][T11668] x64_sys_call+0x2db1/0x3000 [ 338.787026][T11668] do_syscall_64+0xc0/0x2a0 [ 338.791540][T11668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.797439][T11668] [ 338.799759][T11668] write to 0xffff88810529a228 of 8 bytes by task 11668 on cpu 0: [ 338.807466][T11668] shmem_file_splice_read+0x470/0x600 [ 338.812853][T11668] splice_direct_to_actor+0x26e/0x670 [ 338.818325][T11668] do_splice_direct+0x119/0x1a0 [ 338.823201][T11668] do_sendfile+0x382/0x650 [ 338.827629][T11668] __x64_sys_sendfile64+0x105/0x150 [ 338.832834][T11668] x64_sys_call+0x2db1/0x3000 [ 338.837516][T11668] do_syscall_64+0xc0/0x2a0 [ 338.842031][T11668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.847935][T11668] [ 338.850256][T11668] value changed: 0x00000000000258d6 -> 0x00000000000259a2 [ 338.857424][T11668] [ 338.859754][T11668] Reported by Kernel Concurrency Sanitizer on: [ 338.865908][T11668] CPU: 0 UID: 0 PID: 11668 Comm: syz.4.2326 Not tainted syzkaller #0 PREEMPT(voluntary) [ 338.875713][T11668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 338.885853][T11668] ==================================================================