last executing test programs: 23.429650806s ago: executing program 3 (id=1455): r0 = gettid() sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='fd\x00') getdents64(r1, &(0x7f0000000000)=""/77, 0x4d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, 0x0, 0x0) dup2(r2, r3) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000280)) fcntl$setown(r3, 0x8, r0) inotify_init() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x500c, 0x32, 0x43a1bd76, 0x7, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x9) tkill(r0, 0x13) socket$nl_route(0x10, 0x3, 0x0) 22.564157489s ago: executing program 3 (id=1471): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000000204000000000000000000000a030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x10000, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x9, 0xfd, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0xee01, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xfffffffffffffffb, 0x10000000000000, 0x7fff, 0x9b}) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r3, 0x0, 0xee01) 22.524486131s ago: executing program 3 (id=1472): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x6}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f000000", 0x0, 0x1, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 22.460771585s ago: executing program 3 (id=1473): syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x603}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x7, 0x8007, 0x400, 0x71, {{0x13, 0x4, 0x0, 0x4, 0x4c, 0x67, 0x0, 0xb, 0x2b, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@ssrr={0x89, 0x2b, 0xf1, [@local, @loopback, @loopback, @loopback, @multicast1, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x38}, @multicast1, @rand_addr=0x64010100, @empty]}, @generic={0x44, 0xb, "9b11a439281fcdd6ed"}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000802, 0xffffffffffffffff, &(0x7f0000000040)={0xb, 0x15f72d0e, 0x629, 0x6, 0x40, 0xfff8000000000000, 0x101, 0x5, 0x2f1}) 22.393836959s ago: executing program 3 (id=1474): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x6220, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@nodiscard}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0x20) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x200, 0x100000002, 0x7ab2, 0xfff}) futex(&(0x7f000000cffc)=0x2, 0x189, 0x2, 0x0, 0x0, 0x1) openat(r0, &(0x7f0000000280)='./file0/file0\x00', 0x10800, 0x92) futex(&(0x7f000000cffc), 0x8a, 0x0, 0x0, 0x0, 0x100007) r2 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x7fffffff}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xdfffffffffffffff, r2, 0xb) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0xf0, 0x10, 0x633, 0x70bd27, 0x25dfdbfc, {{@in6=@private0, @in=@broadcast, 0xffff, 0x4000, 0x0, 0x8001, 0x0, 0x20, 0xa0, 0x73}, {@in=@rand_addr=0x64010101, 0x4d2, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323}, {}, {}, 0x70bd27, 0x1, 0x2, 0x4, 0x0, 0x44}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r4 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 22.046248711s ago: executing program 3 (id=1484): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r0], 0x1, 0x291, &(0x7f0000000280)="$eJzs3M9r034YwPGn6dZ0+7Ifpy/oxQe96CXMelQPVTYQC0q3inoQMpZpaG1HErQVwZw97e8YHr0J4j+w/8LbEGSnnYyszbKs+4Wza2f7fkHJkzz5tE8SUp5PId16uv66uupbq3YgRl7FEAllR2RWXNmTiZe5dpxLtsvdgoRyY+7N9sfFZ88fFkul+bLqQnHpVkFVp698ffv+09VvwX9PPk+bpmzOvtj6Wfi++f/mpa1fS69cX11f641AbV1uNAJ7ueboiutXLdXHNcf2HXXrvuMdyK/WGmtrLbXrK1OTa57j+2rXW2pIS4OG5uOq6mpZlk5N7sZ5GSG5Px5R2SiX7eK5FIMLw/OKdlZEJg7dDZWNwVQEAAAG6fj+30j22ev/je7+X+SU/v9DvNf0l573/1lJ+v+q0+7/A6+l9kvbTff/ONHZ+n/jfIrB38iEqZV7B1KeV5w4ehD9PwAAAAAAAAAAAAAAAAAAAAAA/4KdKJqJomhmd2mISBSvmyKSTa0fMXSknq0fVunrH6VeZnyBT7j+GAKpB/fyIj/CZqVZybSXnfzCg9L8nLalHvzbbjYr2SR/s5PXg/lxmYzzhSPzObl+rZPfzd1/VErn15uVCVk5sfKwV6cAAAAAAIChZ2liNtmYl2R+b1lqSne+PX/vROH+7wNd8/sxuTzWv+MAAAAAAADH81vvqnat5nj9CbJ9/KwzByJnG347MntSRlZETtmnvCgy+BN1KDDlQpQxzMGdnr1hlBHpbBmPvwy67gIAAAAAw2V/PjDoSgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGF39+OuyQR8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFH8DgAA//8sg70h") sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x8085) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x0, 0x0}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', r3, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0907000000000400000005"], 0x24}}, 0x40) connect$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x4}, 0x1c) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x4}, 0x2f) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@random="79ee7c2eea00", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 22.045808801s ago: executing program 32 (id=1484): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r0], 0x1, 0x291, &(0x7f0000000280)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x8085) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x0, 0x0}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', r3, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0907000000000400000005"], 0x24}}, 0x40) connect$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x4}, 0x1c) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x4}, 0x2f) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@random="79ee7c2eea00", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 5.409703049s ago: executing program 1 (id=1725): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0xcfea12065024b03, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) pwrite64(r0, 0x0, 0x0, 0xfecc) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r5], 0x44}}, 0x0) 5.399260259s ago: executing program 1 (id=1726): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) exit(0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0xd, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x80, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x14, 0x16, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRESOCT=r0], &(0x7f0000000100)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x28, '\x00', r1, @fallback=0xd}, 0x94) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x2) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x4) socket$inet6(0xa, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) inotify_init() socket(0xa, 0x2, 0x88) socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_setup(0x1554, &(0x7f0000000400)={0x0, 0x542d, 0x1000, 0x1, 0x20002f7}) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r4, 0x8001}}, 0x48) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4.552171301s ago: executing program 1 (id=1741): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xb3a4, 0x8000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x111002, 0x3a, 0x4}, 0x18) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, 0x0, 0x800) mq_notify(r1, &(0x7f0000000200)={0x0, 0xe, 0x1, @thr={&(0x7f00000003c0)="4e838b763d9765ce201176a05462b835d1ba48e28cc294bb902b7b30b6e6c561a4ac6b80da99f7591e0096ce9250dbc19d77eef25d7cd742ec9c75da917ebf29a17a76b2afee998a76845853b7ec22669df710996e76b44cf21ad437d7e6360a7c35a12d344732bc0534686a38a75f1bea16d3d77fe1f3386e1d2efd7efd1e0a1b3883078cda39b7f8f96cd5663c15671fed0529ae8bb7d0c0080580c403ca61b1b6c5a8c2e4feda7e02fc8da04a8434261386389198eb438b5c5a36b313d11c2fc6226068e46c382e67d4f231de1ac9307d9cc9f05ee8f98d228a048b9114ce569e0979991183", &(0x7f0000000180)="e6c06115f5cce7d96fa5c3b1dfe6a354e0cffae72d8e863daf024cf895df8e0fa1ef0887ae1ffda66e1e90d582413799bb50899ee1f5e7"}}) futex(&(0x7f00000002c0), 0x100, 0x0, 0x0, &(0x7f0000000bc0)=0x2000000, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a000000030000000700000006"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002340)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dffbff, {0x0, 0x0, 0x0, r7, {0x6, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x100, 0x8, 0x6}, {0x1, 0x5, 0x4}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 4.120781607s ago: executing program 4 (id=1742): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@block_validity}, {}, {}, {@nodiscard}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r0 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) pwrite64(r0, &(0x7f0000000180)='q', 0x1, 0x100004) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000dc0)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66, 0x0, 0x30}]}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000001240)={0x0, "85a6d98002ee9530ea981074822b441fbf545b50907730ab1088ddd1b678dc3c76a7f25c172a97a1ba7daf0b2c55890372d58f56947ad5763d3e9140967e2d10ccea25bae2b93acd1a3f6cf789ebe34039e318ef64d5e12e0fc615e7ad35aa9f11a24facae77534750a135f5920ab59c95210ab7ef0274b715f39f8089c486a687c87121af013ee383eaea28735b319f4c3ce291a5c59a564b7852f4ca4c52e8287c4d9ba7e5d5cd178ba9e34192f6aaee1ba1cbd606b221f6e7edfa54365c218ad9afa9f3d4f0d4beeea19d01994e901d66836f430bf3805bf917e1d29771e36527c5dc59e2229392a186fb72a2312b391dba27f2b2457e7a2cf2a804e66c431f9868db06f7f0b46d731ecc4fa0f9308e4203a7cc5b4755c2b1ca8d8f8022300cbb6dd517b8dac5e9528598eb7aabae5103bdd869b50238675949858fa86862d6c27d9939973e42c2da2e5232a1ea4159eaa02a0ec3389d11554f9c0a3cbaf8e0cebc6a6e0e2d2a90d43a3e85c3447507fb2ea4f15294248022b6106c658786eab8f747127e36fbb92f346e80af653c910139c8d15c4634cdbfc195c7f5dfe8951dcd22042cd5a11205c387bc408b686fb858ca07e3507dcc55eba54b4270d59eaebf5651887c227acbdd369ab02f74e2b392e83bafc8d877344dbbad9d7d1432fe6a1281fad9ab7a4854f471cdf6efff50ceec785a6847e743f35681304b5c"}) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2, 0x6}, 0x1c) sendfile(r1, r0, 0x0, 0xd39a) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r8 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@delchain={0x30, 0x2c, 0xf31, 0x70bd2c, 0x2000, {0x0, 0x0, 0x0, r9, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 3.995423535s ago: executing program 4 (id=1743): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$eJzs2j+LXFUcBuDfXRMSN2xmxH8kIB60UJtLZmqLLJKAOKBoRoiC5Ma9o8NcZ5a5w8KImK209SNYi6WdIClttvETWNhts2UK8Uoya5INY7GIO2Kep5kXzrzccziXwynu/uvffDYa1PmgmMValsXa5diNO1m0Yy3+shuvvXL95xfeu/7BW5u93pV3U7q6ea3TTSmdf/GnD7/4/qXbs3Pv/3D+xzOx1/5o/6D7295zexf2/7j26bBOwzqNJ7NUpJuTyay4WZVpa1iP8pTeqcqiLtNwXJfTI+ODarK9PU/FeGtjfXta1nUqxvM0KudpNkmz6TwVnxTDccrzPG2sB/9E/7s7TRMHzekb0TTNk9/Gudux8Wu0InsqZU9fzp69kT2/m104aJrWqqfKv8L+P94eOtTPRlRf7/R3+ovfxfjmIIZRRRmXohW/x93X5NAiX32zd+VSuqcdX1W3Dvu3dvpPHO13ohXt5f3Oop+O9s/EesTpiMN+N1rxzPJ+d2n/bLz68kPPz6MVv3wck6hiK+52H/S/7KT0xtu9R/oX7/0PAOD/Jk/3Lb2/5fnfjS/6x7gfPnK/OhUXT6127UTU889HRVWVU0EQhPth1ScTJ+HBpq96JgAAAAAAAAAAABzHSXxOuOo1AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/21/BgAA//9DWtUg") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES32=r4], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000c40)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x150, 0x150, 0xfeffffff, 0x150, 0xa8, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffffff, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x11, @dev={0xac, 0x14, 0x14, 0xd}, @remote, @port=0x4e23, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0xff, 0x0, 'lo\x00', 'veth1_to_batadv\x00', {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0xffffff00, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private=0xa010101, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 3.92569278s ago: executing program 4 (id=1745): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r0], 0x1, 0x291, &(0x7f0000000280)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x8085) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100), 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x4}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x4}, 0x2f) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@random="79ee7c2eea00", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 3.891587082s ago: executing program 4 (id=1747): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="28000000140019"], 0x28}}, 0x0) recvmsg(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000800)=""/250, 0xfa}, {&(0x7f0000000900)=""/217, 0xd9}, {&(0x7f0000000600)=""/171, 0xab}, {&(0x7f0000000b00)=""/37, 0x25}, {&(0x7f0000000b40)=""/40, 0x28}], 0x5, &(0x7f0000000c00)=""/41, 0x29}, 0x0) 3.817788586s ago: executing program 4 (id=1748): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x6c, r2, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x31}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x18000050}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 3.338673565s ago: executing program 1 (id=1753): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000300)=""/219, &(0x7f0000000040)=0xdb) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000080)={r1}, &(0x7f0000000140)=0x8) 3.316821526s ago: executing program 1 (id=1754): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='fd\x00') getdents64(r1, &(0x7f0000000000)=""/77, 0x4d) socketpair$unix(0x1, 0x1, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000280)) fcntl$setown(0xffffffffffffffff, 0x8, r0) inotify_init() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x500c, 0x32, 0x43a1bd76, 0x7, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x9) tkill(r0, 0x13) socket$nl_route(0x10, 0x3, 0x0) 2.874712634s ago: executing program 4 (id=1761): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x7, &(0x7f0000006680)) select(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000cc0)={[{@nombcache}, {@oldalloc}, {@inlinecrypt}, {@delalloc}, {@noload}, {@delalloc}, {@noload}, {@resuid}, {@lazytime}]}, 0x3, 0x4ea, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x43, 0xa4781) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x3) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) 2.177468136s ago: executing program 2 (id=1773): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x97ff, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.177062786s ago: executing program 2 (id=1782): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="010101007f"], 0x38}, 0x1, 0x8000000, 0x0, 0x4}, 0x0) 1.581106823s ago: executing program 2 (id=1785): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x22, &(0x7f0000000540)=ANY=[@ANYBLOB="18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000e9080000850000000600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b700000000000000180100002020752500000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0100008500000006000000181100004a680e298a2395c0198f802a1c670a44a35476c460bd9e90e11b3a3c7b232d31d44c00"/134, @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x28, &(0x7f00000001c0)=""/40, 0x40f00, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x1, 0x1], &(0x7f0000000280)=[{0x3, 0x1, 0x10, 0xc}, {0x0, 0x4, 0x3, 0x7}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r0, 0x1f, 0x1, 0x17, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00') keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/201, 0xffffff47) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x10000000000001, 0x0, 0x0, 0x2) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x73, 0x0) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@map=r3, r1, 0xb, 0x2013, 0xffffffffffffffff, @value=r4, @void, @void, @void, r2}, 0x20) 1.257938813s ago: executing program 5 (id=1776): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x80000002}) (async, rerun: 64) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x30000001}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0xfffffff9) 1.256888693s ago: executing program 5 (id=1777): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x3, 'lc\x00', 0x1, 0x2, 0x6}, 0x2c) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000140)=0xfe, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/xfrm_stat\x00') read$qrtrtun(r1, &(0x7f00000004c0)=""/57, 0x39) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x2e, @multicast1, 0x4e23, 0x2, 'sh\x00', 0x4, 0x0, 0x1c}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x10000, 0x4, 0x12d5c, 0x1255c}}, 0x44) fchmod(r2, 0x144) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f22, 0x0, @dev={0xfe, 0x80, '\x00', 0x80}, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0x300}, 0x0) 1.211710765s ago: executing program 5 (id=1778): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) exit(0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0xd, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x80, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x14, 0x16, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRESOCT=r0], &(0x7f0000000100)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x28, '\x00', r1, @fallback=0xd}, 0x94) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x2) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x4) socket$inet6(0xa, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) inotify_init() socket(0xa, 0x2, 0x88) socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_setup(0x1554, &(0x7f0000000400)={0x0, 0x542d, 0x1000, 0x1, 0x20002f7}) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r4, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.183476827s ago: executing program 2 (id=1779): socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0x7800}, 0x0, 0x40000000, 0x7, 0x9, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) munlock(&(0x7f0000ffa000/0x6000)=nil, 0x6000) socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7fffc00000001, 0xffffffffffffffff, 0x1) msgrcv(0x0, 0x0, 0x0, 0xe4b43f0e2aa28c96, 0x2000) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2030}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 849.532247ms ago: executing program 0 (id=1780): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x23, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x7dc9, &(0x7f0000000200)={0x0, 0x849b, 0x10100, 0xfffffff8, 0x234}, 0x0, 0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0xf503, 0x40, 0x0, 0x10}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, 0x0, 0x0) pipe(&(0x7f0000000080)) pipe(&(0x7f00000000c0)) r7 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x24, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x2cbfb000) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000002c0)={'dvmrp1\x00', {0x2, 0x0, @broadcast}}) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0xf2, 0x0, &(0x7f0000048000), 0x21000000) 701.876457ms ago: executing program 0 (id=1781): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="28000000140019"], 0x28}}, 0x0) recvmsg(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0) 684.732577ms ago: executing program 0 (id=1783): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}}, 0x20}, 0x1, 0x0, 0x0, 0x2404c096}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@nogrpid}, {@journal_async_commit}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000001180)=[{0x6, 0x5, 0x5, 0x7ffc0001}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000200)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000000)) 349.535298ms ago: executing program 0 (id=1784): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000000)={[{@quota}, {@grpquota}, {@init_itable}]}, 0x1, 0x4d1, &(0x7f0000000500)="$eJzs3c9vI1cdAPDvTH5umjYpVOKHgC6lsKBV7cTbRlVP5QJCVSVExYnDNiTeKIodR7FTmrCH9H9AohIn+BM4IHFA6ok7N7ghpHJAKrACbZA4GM14nM0PO0TdrGcVfz7SyPPmxfP9vjjz3uQ58QtgbN2MiMOImI6IdyNioTieFFu82duyr3v44P7a0YP7a0l0u+/8I8nrs2Nx4jmZZ4pzzkbED74b8ePkfNz2/sHWaqNR3y3K1U5zp9reP/jLZnN1o75R367VVpZXll6/81rtytr6YvPXn3xn860f/u63X/74D4ff+mmW1nxRd7IdV6nX9KnjOJnJiHjrSQQrwUTRnumyE+FTSSPiMxHxUnb9d8vOBgAYhW53IboLJ8sAwHWX5nNgSVop5gLmI00rld4c3gsxlzZa7c7te6297fXeXNliTKX3Nhv1pWKucDGmkqy8nO8/KtfOlO9ExPMR8bOZG3m5stZqrJd54wMAY+yZM+P/v2d64z8AcM3Nlp0AADByxn8AGD/GfwAYP8Z/ABg/xn8AGD/GfwAYP8Z/ABgr33/77WzrHhWff73+3v7eVuu9V9br7a1Kc2+tstba3alstFob+Wf2NP/f+Rqt1s7yq7H3frVTb3eq7f2Du83W3nbnbv653nfrUyNpFQBwkedf/OhPSUQcvnEj3+LEWg7Garje0rITAEozUXYCQGkmy04AKI3f8YEBS/Se0v8TofmzFR8OfYquBZ5yt75g/h/Glfl/GF/m/2F8mf+H8dXtJtb8B4AxY44fuOz7/6dMX/j+PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFx78/mWpJViLfD5SNNKJeLZiFiMqeTeZqO+FBHPRcQfZ6ZmsvJy2UkDAI8p/VtSrP91a+Hl+bO108l/ZqJY6usnv3jn5++vdjq7y9nxfx4f73xYHK9dGMhSgwBQkv443R/H+x4+uL/W30aZzyff7i0umsU9KrZezWRM5o+z+Y3D3L+SotyT3a9MXEH8ww8i4vOD2p/kcyOLxcqnZ+NnsZ8dafz0VPw0r+s9Zt+Lz15BLjBuPsr6nzcHXX9p3MwfB1//s3kP9fj6/d/Ruf4vPe7/Job0fzcvG+PV339vaN0HEV+cHBQ/OY6fDIn/8iXj//lLX3lpWF33lxG3ooifxKn4J2NVO82danv/4JXN5upGfaO+XautLK8svX7ntVo1n6Ou9meqz/v7G7efu6j9czG4/bPD2z+bHfv6Jdv/q/+++6OvXhD/m18b/Pq/MDx+PiZ+45LxV+d+M3D57n789cHtL54z/PW/fe5sNwbG+PivB+uXTBUAGIH2/sHWaqNR37Uzsp3s3u0pSMNOaTvZT8BVnOdzTzDVsnsm4El7dNGXnQkAAAAAAAAAAAAAADDMKP7hqew2AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcH39LwAA//94utYi") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x462, 0x3a, 'q', 0x3a, ':$[%&2[@[}-', 0x3a, './file1'}, 0x33) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x161) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000380), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') clock_settime(0x1ed5d7403, &(0x7f0000000180)) ppoll(&(0x7f0000000000)=[{r1, 0x24b0}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000100)='./file0/../file0\x00', 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000000082000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000040000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000cf40000626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x70, 0x10, 0x403, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_MAP={0x0, 0xe, {0x8, 0x8000000000000001, 0x2, 0xd, 0x6, 0x8}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0xfffffffffffffca3}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) r12 = eventfd2(0x0, 0x0) writev(r12, &(0x7f0000000580)=[{0x0}], 0x1) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000b40)={{{@in=@broadcast, @in=@dev}}, {{@in=@loopback}}}, &(0x7f0000000340)=0xe8) rmdir(0x0) 315.46998ms ago: executing program 2 (id=1786): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x2, &(0x7f0000000100)=@raw=[@alu={0x7, 0x1, 0x1, 0x3, 0x0, 0x50, 0xfffffffffffffff0}, @alu={0x7, 0x0, 0x8, 0x1, 0xa, 0xfffffffffffffff8, 0xffffffffffffffff}], &(0x7f0000000140)='syzkaller\x00', 0x10000, 0x99, &(0x7f00000003c0)=""/153, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0xf, 0x1, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000300)=[0x1], &(0x7f0000000480)=[{0x4, 0x5, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x6}, {0x0, 0x5, 0x7, 0x6}]}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000000)={[{@errors_remount}]}, 0x1, 0x4ee, &(0x7f0000001100)="$eJzs3VFrHFsdAPD/TLL3pm2um4si14L3XmwkvWh3kxvvbRCpFUSfCmp9jzHZhJBNNmQ3tQlFU/wAgogKPvnki+AHEKQfQYSCvosWRbTVBx+0Izs7sW26m6Qkzaab3w9O95w5s/M/Z5o9s7NzmAngzHo3Iq5HxFBEvBcR5WJ5WqTZIrXXe/Twznw7JZFlN/+eRFIs291WuzwcERciYiciRiLiG1+N+HbyfNzm1vbKXL1e2yjK1dbqerW5tX1leXVuqbZUW5uenvpw5urMBzOTWeFI/bwYEde+/ODHP/jFV6795rPf+ePsXy9/t92sL3y80+6ImD9SgB462y7l+2JXex9tvIxgfTBU9KfU74YAAHAo4xFxKSI+lX//L8dQ/m0OAAAAGCTZF0fjP0lEBgAAAAysNCJGI0krxXzf0UjTSqUzh/djcT6tN5qtzyw2NtcW2nURY1FKF5frtclirvBYlJJ2eSrPPym/v6c8HRFvRsSPyufycmW+UV/o948fAAAAcEZceOfZ8/9/ldM8DwAAAAyYsZ4FAAAAYFA45QcAAIDB5/wfAAAABtrXbtxop2z3Od4Lt7Y2Vxq3rizUmiuV1c35ynxjY72y1Ggs5ffsWz1oe/VGY/1zsbZ5u9qqNVvV5tb27Gpjc601u/zMI7ABAACAE/TmO/f+kETEzufP5SmK+wDuNXTiLQNOlT/3uwHAcXJch7NruN8NAPqmdOAaRggYdMkB9T0n7/z2+NsCAAC8HBOfeP76/2tF3cG/DQCvsm5zfQCAwebqHpxdJTMA4cwb77y83qv+6Nf/s+yFGwUAAByr0TwlaaW4FjgaaVqpRLyRPxaglCwu12uTEfGRiPh9ufR6uzyVvzM5cM4wAAAAAAAAAAAAAAAAAAAAAAAAANCRZUlk3SRdlwIAAACvoIj0L0l+N/+IifL46N7fB15L/l2OB0XhZzd/cnuu1dqYai//Rzmvj4jWT4vl72ceCQAAAACnQOc8vXid6ndrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg0jx7emd9NJxn3b1+KiLFu8YdjJH8diVJEnP9nEsNPvS+JiKFjiL9zNyLe6hY/icdZlo0VregW/9xLjj+W75ru8dOIuHAM8eEsu9cef653+/yl8W7+2v3zN1yko+o9/qX/H/+Geow/bxwyxsX7v6r2jH834uJw9/FnN37SI/6lQ8b/1je3t3vVZT+PmOh6/EmeiVVtra5Xm1vbV5ZX55ZqS7W16empD2euznwwM1ldXK7Xin+7xvjhJ3/9eL/+n+8Rf+yA/o8fsv//vX/74Uc72VK3+JcvdT/+vtUjfloc+z5d5Nv1E7v5nU7+aW//8ndv79f/hR79P+j///Ih+//e17//p0OuCgCcgObW9spcvV7b2Cczcoh1ZF4kUzodzThFmex7nb/Ho23niG9/LpP1e7f0MdPvkQkAADhuT77097slAAAAAAAAAAAAAAAAAAAAcHadxO3E9sbc6U9XAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD29b8AAAD//3iP3Ow=") r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0xffffffff}, 0x6025, 0x4005, 0xb, 0x6, 0xc2d, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) sendmsg$NFT_BATCH(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x4000000}, 0x0) 267.947693ms ago: executing program 5 (id=1787): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYRES16=r2, @ANYRES32=r4], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000c40)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x150, 0x150, 0xfeffffff, 0x150, 0xa8, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffffff, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x11, @dev={0xac, 0x14, 0x14, 0xd}, @remote, @port=0x4e23, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0xff, 0x0, 'lo\x00', 'veth1_to_batadv\x00', {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0xffffff00, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private=0xa010101, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 181.869788ms ago: executing program 0 (id=1788): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070000000000000000000c0000001c00038008000400001000000800020020000000080005007180bbda180001801400020073797a5f74756e"], 0x48}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x801) 181.564848ms ago: executing program 0 (id=1789): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000ac0), 0x21) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000640)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)="f058fe7dad", 0x5}, {&(0x7f0000002380)="a5d6b57d6655", 0x6}], 0x2}, 0x4005) 169.911809ms ago: executing program 1 (id=1790): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x111002, 0x3a, 0x4}, 0x18) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, 0x0, 0x800) mq_notify(r1, &(0x7f0000000200)={0x0, 0xe, 0x1, @thr={&(0x7f00000003c0)="4e838b763d9765ce201176a05462b835d1ba48e28cc294bb902b7b30b6e6c561a4ac6b80da99f7591e0096ce9250dbc19d77eef25d7cd742ec9c75da917ebf29a17a76b2afee998a76845853b7ec22669df710996e76b44cf21ad437d7e6360a7c35a12d344732bc0534686a38a75f1bea16d3d77fe1f3386e1d2efd7efd1e0a1b3883078cda39b7f8f96cd5663c15671fed0529ae8bb7d0c0080580c403ca61b1b6c5a8c2e4feda7e02fc8da04a8434261386389198eb438b5c5a36b313d11c2fc6226068e46c382e67d4f231de1ac9307d9cc9f05ee8f98d228a048b9114ce569e0979991183", &(0x7f0000000180)="e6c06115f5cce7d96fa5c3b1dfe6a354e0cffae72d8e863daf024cf895df8e0fa1ef0887ae1ffda66e1e90d582413799bb50899ee1f5e7"}}) futex(&(0x7f00000002c0), 0x100, 0x0, 0x0, &(0x7f0000000bc0)=0x2000000, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a000000030000000700000006"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002340)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dffbff, {0x0, 0x0, 0x0, r7, {0x6, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x100, 0x8, 0x6}, {0x1, 0x5, 0x4}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 112.683653ms ago: executing program 5 (id=1791): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @local}}}, 0x84) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000004040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000004140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4845}, 0x20000080) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x480000, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfc038, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x80000000000006, 0x9}, 0x9092, 0x0, 0x7e4, 0x4, 0x2, 0xa772da53, 0x8, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c00000009060108fffffc0000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1.88675ms ago: executing program 5 (id=1792): socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x28020480) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x11223}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x80}, @IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x3}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x7}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 0s ago: executing program 2 (id=1793): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0xcfea12065024b03, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r4], 0x44}}, 0x0) kernel console output (not intermixed with test programs): 5411] RIP: 0033:0x7f23435daeb9 [ 76.160342][ T5411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.160366][ T5411] RSP: 002b:00007f234202f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 76.160383][ T5411] RAX: ffffffffffffffda RBX: 00007f2343855fa0 RCX: 00007f23435daeb9 [ 76.160398][ T5411] RDX: 0000000000101042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 76.160420][ T5411] RBP: 00007f234202f090 R08: 0000000000000000 R09: 0000000000000000 [ 76.160441][ T5411] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000001 [ 76.160454][ T5411] R13: 00007f2343856038 R14: 00007f2343855fa0 R15: 00007ffde7d18fe8 [ 76.160475][ T5411] [ 76.452070][ T5415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 76.470491][ T5411] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.760: deleted inode referenced: 15 [ 76.501282][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.510377][ T5411] EXT4-fs (loop2): Remounting filesystem read-only [ 76.511215][ T5422] netlink: 36 bytes leftover after parsing attributes in process `syz.0.765'. [ 76.546388][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.555902][ T5415] loop3: detected capacity change from 0 to 1024 [ 76.563530][ T5422] netlink: 'syz.0.765': attribute type 10 has an invalid length. [ 76.573235][ T5422] syz_tun: entered promiscuous mode [ 76.585474][ T5422] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 76.600910][ T5415] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 76.662088][ T5415] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 76.688627][ T5433] netlink: 'syz.1.769': attribute type 27 has an invalid length. [ 76.697228][ T5415] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 76.709697][ T5415] EXT4-fs (loop3): orphan cleanup on readonly fs [ 76.716929][ T5415] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.761: Freeing blocks not in datazone - block = 0, count = 4096 [ 76.734203][ T5415] EXT4-fs (loop3): Remounting filesystem read-only [ 76.761163][ T5415] EXT4-fs (loop3): 1 orphan inode deleted [ 76.767697][ T5415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.781511][ T5440] netlink: 20 bytes leftover after parsing attributes in process `syz.4.770'. [ 76.791588][ T5428] loop2: detected capacity change from 0 to 8192 [ 76.810170][ T5433] syz_tun: left promiscuous mode [ 76.817232][ T5433] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.824564][ T5433] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.857252][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.914393][ T5452] netlink: 72 bytes leftover after parsing attributes in process `syz.0.774'. [ 76.916316][ T5433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.956832][ T5433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.024865][ T5466] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 77.033673][ T37] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.049770][ T37] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.075532][ T5471] netlink: 36 bytes leftover after parsing attributes in process `syz.1.779'. [ 77.079078][ T37] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.097906][ T5471] netlink: 'syz.1.779': attribute type 10 has an invalid length. [ 77.115830][ T37] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.131765][ T5471] syz_tun: entered promiscuous mode [ 77.185895][ T5480] capability: warning: `syz.1.783' uses 32-bit capabilities (legacy support in use) [ 77.197694][ T5480] program syz.1.783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.235814][ T5480] netlink: 20 bytes leftover after parsing attributes in process `syz.1.783'. [ 77.245897][ T5480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=5480 comm=syz.1.783 [ 77.292165][ T5487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.784'. [ 77.418641][ T5496] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 77.485475][ T5492] EXT4-fs: Ignoring removed orlov option [ 77.499367][ T5492] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 77.543198][ T5504] netlink: 'syz.4.793': attribute type 10 has an invalid length. [ 77.607791][ T5507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.681383][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.742041][ T5520] random: crng reseeded on system resumption [ 77.766315][ T5521] netlink: 'syz.4.798': attribute type 10 has an invalid length. [ 77.793609][ T5521] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 77.803229][ T5521] team0: Failed to send options change via netlink (err -105) [ 77.805459][ T5523] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.810738][ T5521] team0: Port device netdevsim1 added [ 77.913703][ T5537] netlink: 'syz.1.805': attribute type 10 has an invalid length. [ 78.030199][ T5544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.089543][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.139532][ T5556] Illegal XDP return value 4294967274 on prog (id 20) dev N/A, expect packet loss! [ 78.240534][ T5564] netlink: 'syz.1.817': attribute type 10 has an invalid length. [ 78.294215][ T5569] 9p: Bad value for 'rfdno' [ 78.315192][ T5572] netlink: 'syz.0.830': attribute type 10 has an invalid length. [ 78.371765][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 78.371779][ T29] audit: type=1326 audit(1770584069.152:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5575 comm="syz.2.824" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23435daeb9 code=0x0 [ 78.472280][ T2109] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 78.566246][ T5591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.664864][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.902606][ T5616] set_capacity_and_notify: 8 callbacks suppressed [ 78.902624][ T5616] loop1: detected capacity change from 0 to 8192 [ 79.038444][ T5622] loop4: detected capacity change from 0 to 1024 [ 79.045297][ T5622] EXT4-fs: inline encryption not supported [ 79.063458][ T5622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.084713][ T5622] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.841: deleted inode referenced: 15 [ 79.100774][ T5622] EXT4-fs (loop4): Remounting filesystem read-only [ 79.156022][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.251960][ T5635] loop4: detected capacity change from 0 to 1024 [ 79.292548][ T5640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5640 comm=syz.1.842 [ 79.305616][ T5635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.325290][ T29] audit: type=1400 audit(1770584070.012:1856): avc: denied { ioctl } for pid=5633 comm="syz.1.842" path="socket:[12145]" dev="sockfs" ino=12145 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.340523][ T5641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5641 comm=syz.1.842 [ 79.490144][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.500392][ T5646] FAULT_INJECTION: forcing a failure. [ 79.500392][ T5646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.513572][ T5646] CPU: 1 UID: 0 PID: 5646 Comm: syz.2.846 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.513601][ T5646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 79.513640][ T5646] Call Trace: [ 79.513646][ T5646] [ 79.513651][ T5646] __dump_stack+0x1d/0x30 [ 79.513743][ T5646] dump_stack_lvl+0x95/0xd0 [ 79.513768][ T5646] dump_stack+0x15/0x1b [ 79.513790][ T5646] should_fail_ex+0x263/0x280 [ 79.513839][ T5646] should_fail+0xb/0x20 [ 79.513899][ T5646] should_fail_usercopy+0x1a/0x20 [ 79.513929][ T5646] _copy_from_user+0x1c/0xb0 [ 79.513953][ T5646] sock_do_ioctl+0xe5/0x230 [ 79.513975][ T5646] sock_ioctl+0x41b/0x610 [ 79.514064][ T5646] ? mutex_lock+0x57/0x90 [ 79.514091][ T5646] ? __pfx_sock_ioctl+0x10/0x10 [ 79.514117][ T5646] __se_sys_ioctl+0xce/0x140 [ 79.514214][ T5646] __x64_sys_ioctl+0x43/0x50 [ 79.514246][ T5646] x64_sys_call+0x14b0/0x3000 [ 79.514272][ T5646] do_syscall_64+0xc0/0x2a0 [ 79.514335][ T5646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.514360][ T5646] RIP: 0033:0x7f23435daeb9 [ 79.514377][ T5646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.514401][ T5646] RSP: 002b:00007f234202f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.514462][ T5646] RAX: ffffffffffffffda RBX: 00007f2343855fa0 RCX: 00007f23435daeb9 [ 79.514477][ T5646] RDX: 0000200000000040 RSI: 0000000000008943 RDI: 0000000000000003 [ 79.514492][ T5646] RBP: 00007f234202f090 R08: 0000000000000000 R09: 0000000000000000 [ 79.514507][ T5646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.514521][ T5646] R13: 00007f2343856038 R14: 00007f2343855fa0 R15: 00007ffde7d18fe8 [ 79.514543][ T5646] [ 79.858897][ T5666] FAULT_INJECTION: forcing a failure. [ 79.858897][ T5666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.872119][ T5666] CPU: 0 UID: 0 PID: 5666 Comm: syz.1.855 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.872189][ T5666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 79.872211][ T5666] Call Trace: [ 79.872219][ T5666] [ 79.872229][ T5666] __dump_stack+0x1d/0x30 [ 79.872260][ T5666] dump_stack_lvl+0x95/0xd0 [ 79.872289][ T5666] dump_stack+0x15/0x1b [ 79.872316][ T5666] should_fail_ex+0x263/0x280 [ 79.872409][ T5666] should_fail+0xb/0x20 [ 79.872515][ T5666] should_fail_usercopy+0x1a/0x20 [ 79.872549][ T5666] _copy_to_user+0x20/0xa0 [ 79.872581][ T5666] simple_read_from_buffer+0xb5/0x130 [ 79.872624][ T5666] proc_fail_nth_read+0x10e/0x150 [ 79.872653][ T5666] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 79.872737][ T5666] vfs_read+0x1ab/0x7f0 [ 79.872759][ T5666] ? __rcu_read_unlock+0x4e/0x70 [ 79.872802][ T5666] ? __fget_files+0x184/0x1c0 [ 79.872857][ T5666] ? mutex_lock+0x57/0x90 [ 79.872944][ T5666] ksys_read+0xdc/0x1a0 [ 79.872970][ T5666] __x64_sys_read+0x40/0x50 [ 79.873057][ T5666] x64_sys_call+0x2889/0x3000 [ 79.873090][ T5666] do_syscall_64+0xc0/0x2a0 [ 79.873242][ T5666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.873264][ T5666] RIP: 0033:0x7fcba70bb78e [ 79.873279][ T5666] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 79.873326][ T5666] RSP: 002b:00007fcba5b4efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 79.873358][ T5666] RAX: ffffffffffffffda RBX: 00007fcba5b4f6c0 RCX: 00007fcba70bb78e [ 79.873490][ T5666] RDX: 000000000000000f RSI: 00007fcba5b4f0a0 RDI: 0000000000000004 [ 79.873503][ T5666] RBP: 00007fcba5b4f090 R08: 0000000000000000 R09: 0000000000000000 [ 79.873519][ T5666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.873533][ T5666] R13: 00007fcba7376038 R14: 00007fcba7375fa0 R15: 00007ffe12260b88 [ 79.873554][ T5666] [ 79.880267][ T5669] usb usb1: usbfs: process 5669 (syz.3.856) did not claim interface 0 before use [ 80.079908][ T29] audit: type=1400 audit(1770584070.652:1857): avc: denied { write } for pid=5668 comm="syz.3.856" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 80.084070][ T5663] loop2: detected capacity change from 0 to 8192 [ 80.130361][ T29] audit: type=1400 audit(1770584070.902:1858): avc: denied { create } for pid=5668 comm="syz.3.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 80.151039][ T29] audit: type=1400 audit(1770584070.902:1859): avc: denied { write } for pid=5668 comm="syz.3.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 80.175971][ T5673] __nla_validate_parse: 11 callbacks suppressed [ 80.175985][ T5673] netlink: 36 bytes leftover after parsing attributes in process `syz.3.858'. [ 80.222333][ T5673] netlink: 28 bytes leftover after parsing attributes in process `syz.3.858'. [ 80.233991][ T5673] netlink: 'syz.3.858': attribute type 10 has an invalid length. [ 80.336637][ T5688] loop3: detected capacity change from 0 to 8192 [ 80.575708][ T5707] loop0: detected capacity change from 0 to 8192 [ 80.727885][ T5712] loop0: detected capacity change from 0 to 8192 [ 80.815194][ T5716] capability: warning: `syz.3.874' uses deprecated v2 capabilities in a way that may be insecure [ 80.827312][ T29] audit: type=1400 audit(1770584071.602:1860): avc: denied { mounton } for pid=5715 comm="syz.3.874" path="/193/file0" dev="tmpfs" ino=1011 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 80.856026][ T5718] netlink: 36 bytes leftover after parsing attributes in process `syz.3.875'. [ 80.865415][ T5718] netlink: 28 bytes leftover after parsing attributes in process `syz.3.875'. [ 80.874729][ T5718] netlink: 'syz.3.875': attribute type 10 has an invalid length. [ 80.906827][ T5722] netlink: 'syz.3.876': attribute type 8 has an invalid length. [ 80.916532][ T29] audit: type=1400 audit(1770584071.692:1861): avc: denied { create } for pid=5723 comm="syz.0.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 80.941061][ T29] audit: type=1400 audit(1770584071.712:1862): avc: denied { read } for pid=5723 comm="syz.0.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 80.980477][ T29] audit: type=1326 audit(1770584071.762:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.0.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db7a6aeb9 code=0x7ffc0000 [ 81.011953][ T5730] loop3: detected capacity change from 0 to 1024 [ 81.018773][ T5730] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.025814][ T5730] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.032563][ T5730] EXT4-fs: Ignoring removed i_version option [ 81.042465][ T29] audit: type=1326 audit(1770584071.782:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.0.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f9db7a6aeb9 code=0x7ffc0000 [ 81.066703][ T5730] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 81.082035][ T5730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.134571][ T5733] loop1: detected capacity change from 0 to 8192 [ 81.149219][ T5730] netlink: 'syz.3.879': attribute type 1 has an invalid length. [ 81.187100][ T5730] 9p: Bad value for 'wfdno' [ 81.226448][ T5730] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.332840][ T5743] loop3: detected capacity change from 0 to 8192 [ 81.411061][ T5748] netlink: 36 bytes leftover after parsing attributes in process `syz.0.887'. [ 81.427110][ T5748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.887'. [ 81.436906][ T5748] netlink: 'syz.0.887': attribute type 10 has an invalid length. [ 81.516654][ T5766] syzkaller0: entered promiscuous mode [ 81.522301][ T5766] syzkaller0: entered allmulticast mode [ 81.555904][ T5759] tipc: Started in network mode [ 81.560980][ T5759] tipc: Node identity badfea6c433e, cluster identity 4711 [ 81.568186][ T5759] tipc: Enabled bearer , priority 0 [ 81.615526][ T5772] tipc: Resetting bearer [ 81.636029][ T5772] tipc: Disabling bearer [ 81.673451][ T5777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.702741][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.714405][ T5785] raw_sendmsg: syz.2.898 forgot to set AF_INET. Fix it! [ 81.756900][ T5791] netlink: 36 bytes leftover after parsing attributes in process `syz.2.902'. [ 81.766397][ T5791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.902'. [ 81.875890][ T5811] FAULT_INJECTION: forcing a failure. [ 81.875890][ T5811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.889060][ T5811] CPU: 0 UID: 0 PID: 5811 Comm: syz.3.911 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.889084][ T5811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 81.889104][ T5811] Call Trace: [ 81.889112][ T5811] [ 81.889121][ T5811] __dump_stack+0x1d/0x30 [ 81.889149][ T5811] dump_stack_lvl+0x95/0xd0 [ 81.889222][ T5811] dump_stack+0x15/0x1b [ 81.889241][ T5811] should_fail_ex+0x263/0x280 [ 81.889322][ T5811] should_fail+0xb/0x20 [ 81.889355][ T5811] should_fail_usercopy+0x1a/0x20 [ 81.889468][ T5811] strncpy_from_user+0x27/0x250 [ 81.889494][ T5811] getname_flags+0xad/0x3b0 [ 81.889563][ T5811] user_path_at+0x28/0x130 [ 81.889595][ T5811] __se_sys_mount+0x25b/0x2e0 [ 81.889613][ T5811] ? fput+0x8f/0xc0 [ 81.889640][ T5811] __x64_sys_mount+0x67/0x80 [ 81.889660][ T5811] x64_sys_call+0x2cca/0x3000 [ 81.889714][ T5811] do_syscall_64+0xc0/0x2a0 [ 81.889752][ T5811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.889773][ T5811] RIP: 0033:0x7fb18b25aeb9 [ 81.889787][ T5811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.889859][ T5811] RSP: 002b:00007fb189caf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 81.889881][ T5811] RAX: ffffffffffffffda RBX: 00007fb18b4d5fa0 RCX: 00007fb18b25aeb9 [ 81.889893][ T5811] RDX: 0000200000000480 RSI: 00002000000000c0 RDI: 0000000000000000 [ 81.889908][ T5811] RBP: 00007fb189caf090 R08: 0000200000000280 R09: 0000000000000000 [ 81.890009][ T5811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.890020][ T5811] R13: 00007fb18b4d6038 R14: 00007fb18b4d5fa0 R15: 00007ffcb38b8508 [ 81.890038][ T5811] [ 82.063484][ T5812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.912'. [ 82.122146][ T5815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.190874][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.262384][ T5828] netlink: 36 bytes leftover after parsing attributes in process `syz.2.918'. [ 82.428406][ T5844] SET target dimension over the limit! [ 82.467384][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.485816][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.495751][ T5846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.515713][ T5849] ..0ªî{X¹¦: renamed from gretap0 (while UP) [ 82.530449][ T5849] ..0ªî{X¹¦: entered allmulticast mode [ 82.551234][ T5849] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 82.582482][ T5853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.619153][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.634199][ T5846] ..0ªî{X¹¦: left allmulticast mode [ 82.662736][ T5846] syz_tun: left promiscuous mode [ 82.696105][ T5846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.756618][ T5862] validate_nla: 3 callbacks suppressed [ 82.756632][ T5862] netlink: 'syz.1.931': attribute type 10 has an invalid length. [ 82.771306][ T5862] syz_tun: entered promiscuous mode [ 82.974537][ T5889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.008821][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.212188][ T5923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.231174][ T5928] FAULT_INJECTION: forcing a failure. [ 83.231174][ T5928] name failslab, interval 1, probability 0, space 0, times 0 [ 83.243878][ T5928] CPU: 1 UID: 0 PID: 5928 Comm: syz.2.955 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.243916][ T5928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 83.243930][ T5928] Call Trace: [ 83.243936][ T5928] [ 83.243942][ T5928] __dump_stack+0x1d/0x30 [ 83.243965][ T5928] dump_stack_lvl+0x95/0xd0 [ 83.243985][ T5928] dump_stack+0x15/0x1b [ 83.244067][ T5928] should_fail_ex+0x263/0x280 [ 83.244106][ T5928] ? __pfx_proc_alloc_inode+0x10/0x10 [ 83.244213][ T5928] should_failslab+0x8c/0xb0 [ 83.244241][ T5928] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 83.244340][ T5928] ? proc_alloc_inode+0x34/0x90 [ 83.244391][ T5928] ? __pfx_proc_alloc_inode+0x10/0x10 [ 83.244426][ T5928] proc_alloc_inode+0x34/0x90 [ 83.244516][ T5928] alloc_inode+0x40/0x170 [ 83.244540][ T5928] new_inode+0x1d/0xe0 [ 83.244561][ T5928] proc_pid_make_inode+0x1f/0xd0 [ 83.244643][ T5928] proc_pident_instantiate+0x44/0x180 [ 83.244672][ T5928] proc_pident_lookup+0x115/0x1a0 [ 83.244700][ T5928] proc_tgid_base_lookup+0x2b/0x40 [ 83.244726][ T5928] __lookup_slow+0x19d/0x260 [ 83.244790][ T5928] lookup_slow+0x3c/0x60 [ 83.244825][ T5928] link_path_walk+0x946/0xe30 [ 83.244862][ T5928] path_openat+0x1bf/0x23c0 [ 83.244975][ T5928] ? _parse_integer_limit+0x170/0x190 [ 83.245016][ T5928] ? kstrtouint+0x76/0xc0 [ 83.245051][ T5928] do_filp_open+0x15d/0x280 [ 83.245137][ T5928] ? __pfx_kfree_link+0x10/0x10 [ 83.245165][ T5928] do_sys_openat2+0xa6/0x150 [ 83.245211][ T5928] __x64_sys_openat+0xf2/0x120 [ 83.245245][ T5928] x64_sys_call+0x2b07/0x3000 [ 83.245294][ T5928] do_syscall_64+0xc0/0x2a0 [ 83.245387][ T5928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.245413][ T5928] RIP: 0033:0x7f234359b78e [ 83.245431][ T5928] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 83.245451][ T5928] RSP: 002b:00007f234202eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 83.245555][ T5928] RAX: ffffffffffffffda RBX: 00007f234202f6c0 RCX: 00007f234359b78e [ 83.245570][ T5928] RDX: 0000000000000002 RSI: 00007f234202ef90 RDI: ffffffffffffff9c [ 83.245586][ T5928] RBP: 00007f234202f090 R08: 0000000000000000 R09: 0000000000000000 [ 83.245599][ T5928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.245666][ T5928] R13: 00007f2343856038 R14: 00007f2343855fa0 R15: 00007ffde7d18fe8 [ 83.245690][ T5928] [ 83.246200][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.519138][ T5932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.542170][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 83.542185][ T29] audit: type=1400 audit(1770584074.322:1908): avc: denied { create } for pid=5931 comm="syz.0.956" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 83.596542][ T29] audit: type=1400 audit(1770584074.372:1909): avc: denied { write } for pid=5931 comm="syz.0.956" name=E91F7189591E9233614B dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 83.634576][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.722949][ T5938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.808508][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.846789][ T5953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.879280][ T5962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.922308][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.936111][ T29] audit: type=1400 audit(1770584074.712:1910): avc: denied { mounton } for pid=5961 comm="syz.1.969" path="/204/file1/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.976634][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.017404][ T5977] set_capacity_and_notify: 15 callbacks suppressed [ 84.017460][ T5977] loop2: detected capacity change from 0 to 1024 [ 84.061856][ T29] audit: type=1400 audit(1770584074.842:1911): avc: denied { read } for pid=5990 comm="syz.1.979" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 84.086117][ T29] audit: type=1400 audit(1770584074.842:1912): avc: denied { open } for pid=5990 comm="syz.1.979" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 84.097707][ T5989] netlink: 'syz.3.978': attribute type 10 has an invalid length. [ 84.110738][ T29] audit: type=1400 audit(1770584074.842:1913): avc: denied { ioctl } for pid=5990 comm="syz.1.979" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 84.123832][ T5977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.189182][ T29] audit: type=1400 audit(1770584074.962:1914): avc: denied { map } for pid=5975 comm="syz.2.974" path="/182/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.212272][ T29] audit: type=1400 audit(1770584074.962:1915): avc: denied { execute } for pid=5975 comm="syz.2.974" path="/182/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.261615][ T29] audit: type=1400 audit(1770584075.042:1916): avc: denied { write } for pid=5975 comm="syz.2.974" path="/182/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 84.296704][ T5987] geneve0: entered promiscuous mode [ 84.301984][ T5987] geneve0: entered allmulticast mode [ 84.345320][ T6000] xt_connbytes: Forcing CT accounting to be enabled [ 84.358045][ T29] audit: type=1400 audit(1770584075.042:1917): avc: denied { mounton } for pid=5975 comm="syz.2.974" path="/182/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 84.372650][ T6000] xt_NFQUEUE: number of total queues is 0 [ 84.395311][ T5996] loop3: detected capacity change from 0 to 8192 [ 84.484810][ T6007] loop1: detected capacity change from 0 to 1024 [ 84.514891][ T6007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.572320][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.582452][ T6009] loop3: detected capacity change from 0 to 8192 [ 84.617361][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.633439][ T6013] loop4: detected capacity change from 0 to 8192 [ 84.792165][ T6027] netlink: 'syz.2.990': attribute type 10 has an invalid length. [ 84.842711][ T6040] netlink: 'syz.2.997': attribute type 6 has an invalid length. [ 84.853460][ T6040] loop2: detected capacity change from 0 to 512 [ 84.860193][ T6040] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.869184][ T6040] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=885ec129, mo2=0006] [ 84.877611][ T6040] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.997: Invalid inode bitmap blk 4 in block_group 0 [ 84.912207][ T6040] EXT4-fs (loop2): Remounting filesystem read-only [ 84.919175][ T6040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.998963][ T6051] xt_TCPMSS: Only works on TCP SYN packets [ 85.036586][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.066005][ T6050] loop1: detected capacity change from 0 to 8192 [ 85.253991][ T6075] __nla_validate_parse: 18 callbacks suppressed [ 85.254008][ T6075] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1008'. [ 85.271804][ T12] bond0: (slave bond_slave_0): interface is now down [ 85.278621][ T12] bond0: (slave bond_slave_1): interface is now down [ 85.285426][ T12] bond0: (slave syz_tun): interface is now down [ 85.336609][ T1732] bond0: (slave bond_slave_0): interface is now down [ 85.343363][ T1732] bond0: (slave bond_slave_1): interface is now down [ 85.350129][ T1732] bond0: (slave syz_tun): interface is now down [ 85.357417][ T1732] bond0: now running without any active interface! [ 85.367908][ T6086] FAULT_INJECTION: forcing a failure. [ 85.367908][ T6086] name failslab, interval 1, probability 0, space 0, times 0 [ 85.380596][ T6086] CPU: 0 UID: 0 PID: 6086 Comm: syz.2.1012 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.380694][ T6086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 85.380705][ T6086] Call Trace: [ 85.380711][ T6086] [ 85.380717][ T6086] __dump_stack+0x1d/0x30 [ 85.380743][ T6086] dump_stack_lvl+0x95/0xd0 [ 85.380767][ T6086] dump_stack+0x15/0x1b [ 85.380790][ T6086] should_fail_ex+0x263/0x280 [ 85.380829][ T6086] should_failslab+0x8c/0xb0 [ 85.380849][ T6086] kmem_cache_alloc_noprof+0x68/0x490 [ 85.380881][ T6086] ? audit_log_start+0x34c/0x730 [ 85.380944][ T6086] audit_log_start+0x34c/0x730 [ 85.380986][ T6086] ? kstrtouint+0x76/0xc0 [ 85.381100][ T6086] audit_seccomp+0x47/0x100 [ 85.381226][ T6086] ? __seccomp_filter+0x8db/0x1350 [ 85.381250][ T6086] __seccomp_filter+0x8ec/0x1350 [ 85.381270][ T6086] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 85.381295][ T6086] ? vfs_write+0x86e/0x9f0 [ 85.381388][ T6086] ? __rcu_read_unlock+0x4e/0x70 [ 85.381441][ T6086] ? __fget_files+0x184/0x1c0 [ 85.381527][ T6086] __secure_computing+0x81/0x150 [ 85.381606][ T6086] syscall_trace_enter+0xce/0x1e0 [ 85.381647][ T6086] do_syscall_64+0x9a/0x2a0 [ 85.381728][ T6086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.381751][ T6086] RIP: 0033:0x7f23435daeb9 [ 85.381764][ T6086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.381783][ T6086] RSP: 002b:00007f234202f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 85.381840][ T6086] RAX: ffffffffffffffda RBX: 00007f2343855fa0 RCX: 00007f23435daeb9 [ 85.381938][ T6086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000020 [ 85.381952][ T6086] RBP: 00007f234202f090 R08: 0000000000000000 R09: 0000000000000000 [ 85.381965][ T6086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.381993][ T6086] R13: 00007f2343856038 R14: 00007f2343855fa0 R15: 00007ffde7d18fe8 [ 85.382011][ T6086] [ 85.718807][ T6106] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1021'. [ 85.728260][ T1732] bond0: (slave bond_slave_0): interface is now down [ 85.735108][ T1732] bond0: (slave bond_slave_1): interface is now down [ 85.741877][ T1732] bond0: (slave syz_tun): interface is now down [ 85.790423][ T1732] bond0: (slave bond_slave_0): interface is now down [ 85.797237][ T1732] bond0: (slave bond_slave_1): interface is now down [ 85.803989][ T1732] bond0: (slave syz_tun): interface is now down [ 85.824723][ T6097] loop2: detected capacity change from 0 to 8192 [ 85.829776][ T1732] bond0: now running without any active interface! [ 85.959642][ T6131] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1031'. [ 85.975021][ T6125] loop1: detected capacity change from 0 to 8192 [ 86.018429][ T6137] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1032'. [ 86.278351][ T6173] loop4: detected capacity change from 0 to 8192 [ 86.381991][ T6180] EXT4-fs: Ignoring removed oldalloc option [ 86.387966][ T6180] EXT4-fs: inline encryption not supported [ 86.410174][ T6180] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 86.442628][ T6180] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1045: bg 0: block 64: padding at end of block bitmap is not set [ 86.477468][ T6180] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1045: Failed to acquire dquot type 0 [ 86.542879][ T6180] EXT4-fs (loop2): 1 truncate cleaned up [ 86.561241][ T6180] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.614624][ T6180] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1045: Failed to acquire dquot type 0 [ 86.627643][ T6187] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1047'. [ 86.637828][ T2109] bond0: (slave bond_slave_0): interface is now down [ 86.644658][ T2109] bond0: (slave bond_slave_1): interface is now down [ 86.651377][ T2109] bond0: (slave syz_tun): interface is now down [ 86.658320][ T2109] bond0: now running without any active interface! [ 86.678990][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1045'. [ 86.687887][ T6188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1045'. [ 86.712612][ T6190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.745633][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.072354][ T6206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.084955][ T6206] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.194538][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.241076][ T6210] usb usb8: usbfs: process 6210 (syz.1.1055) did not claim interface 0 before use [ 87.251080][ T6212] usb usb8: usbfs: process 6212 (syz.1.1055) did not claim interface 0 before use [ 87.379110][ T6218] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1058'. [ 87.511486][ T6222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.536710][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.141099][ T6151] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 89.228425][ T6243] netlink: 'syz.3.1066': attribute type 30 has an invalid length. [ 89.245498][ T6247] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1069'. [ 89.262202][ T6240] set_capacity_and_notify: 7 callbacks suppressed [ 89.262217][ T6240] loop4: detected capacity change from 0 to 8192 [ 89.280336][ T6245] loop1: detected capacity change from 0 to 8192 [ 89.378016][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.388596][ T6254] ieee802154 phy0 wpan0: encryption failed: -22 [ 89.459718][ T6256] loop2: detected capacity change from 0 to 8192 [ 89.523618][ T6267] loop4: detected capacity change from 0 to 1024 [ 89.561556][ T6267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.713882][ T6267] xt_connbytes: Forcing CT accounting to be enabled [ 89.739331][ T6267] xt_NFQUEUE: number of total queues is 0 [ 89.819013][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.843251][ T6283] loop4: detected capacity change from 0 to 1024 [ 89.863916][ T6283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.905361][ T6288] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.920348][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.973880][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 89.973949][ T29] audit: type=1400 audit(1770584080.752:1952): avc: denied { create } for pid=6287 comm="syz.0.1080" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_tcpdiag_socket permissive=1 [ 90.056095][ T6291] loop4: detected capacity change from 0 to 512 [ 90.066774][ T6291] EXT4-fs: Ignoring removed oldalloc option [ 90.072774][ T6291] EXT4-fs: inline encryption not supported [ 90.079377][ T6291] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.099055][ T6293] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1082'. [ 90.109783][ T6291] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1081: bg 0: block 64: padding at end of block bitmap is not set [ 90.138572][ T6291] Quota error (device loop4): write_blk: dquota write failed [ 90.147301][ T6291] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 90.157943][ T6291] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1081: Failed to acquire dquot type 0 [ 90.207999][ T6291] EXT4-fs (loop4): 1 truncate cleaned up [ 90.221077][ T6291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.243930][ T6291] Quota error (device loop4): write_blk: dquota write failed [ 90.259276][ T6291] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 90.272306][ T6291] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1081: Failed to acquire dquot type 0 [ 90.345635][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1081'. [ 90.354555][ T6300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1081'. [ 90.394799][ T6305] team0: Device gtp0 is of different type [ 92.740607][ T6275] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.789346][ T6317] netlink: 'syz.3.1091': attribute type 8 has an invalid length. [ 92.803925][ T6319] loop2: detected capacity change from 0 to 1024 [ 92.821088][ T6323] xt_CT: You must specify a L4 protocol and not use inversions on it [ 92.859155][ T29] audit: type=1400 audit(1770584083.632:1953): avc: denied { allowed } for pid=6320 comm="syz.0.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 92.892987][ T6325] loop3: detected capacity change from 0 to 8192 [ 92.909468][ T6319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.942494][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.967160][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.098674][ T6330] loop2: detected capacity change from 0 to 8192 [ 93.112425][ T6340] loop4: detected capacity change from 0 to 8192 [ 96.212874][ T6348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.251257][ T6366] loop3: detected capacity change from 0 to 1024 [ 96.275088][ T6366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.299890][ T6374] can0: slcan on ptm0. [ 96.311504][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.359046][ T6371] loop1: detected capacity change from 0 to 8192 [ 96.370447][ T6369] can0 (unregistered): slcan off ptm0. [ 96.466882][ T6385] loop2: detected capacity change from 0 to 8192 [ 96.551421][ T6390] loop4: detected capacity change from 0 to 8192 [ 96.573795][ T6400] loop3: detected capacity change from 0 to 512 [ 96.586815][ T6400] EXT4-fs: Ignoring removed oldalloc option [ 96.592810][ T6400] EXT4-fs: inline encryption not supported [ 96.634946][ T6404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1122'. [ 96.657636][ T6400] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 96.692025][ T6400] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1117: bg 0: block 64: padding at end of block bitmap is not set [ 96.712919][ T6412] loop2: detected capacity change from 0 to 1024 [ 96.720882][ T6400] Quota error (device loop3): write_blk: dquota write failed [ 96.733474][ T6400] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 96.743718][ T6412] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.744688][ T6400] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1117: Failed to acquire dquot type 0 [ 96.768515][ T6400] EXT4-fs (loop3): 1 truncate cleaned up [ 96.774783][ T6400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.805030][ T6400] Quota error (device loop3): write_blk: dquota write failed [ 96.805512][ T6417] loop1: detected capacity change from 0 to 1024 [ 96.823670][ T6400] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 96.834756][ T6400] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1117: Failed to acquire dquot type 0 [ 96.852767][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.868477][ T6417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.907533][ T6423] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.920572][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1117'. [ 96.932842][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.009149][ T6433] loop4: detected capacity change from 0 to 8192 [ 97.118163][ T6440] loop2: detected capacity change from 0 to 8192 [ 99.533536][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.553516][ T6448] netlink: 'syz.3.1135': attribute type 1 has an invalid length. [ 99.569129][ T6448] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.582843][ T6448] bond1: (slave dummy0): making interface the new active one [ 99.592195][ T6448] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 99.631289][ T6403] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.736168][ T6459] loop4: detected capacity change from 0 to 1024 [ 99.779624][ T6465] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.881394][ T6468] netlink: 'syz.2.1145': attribute type 1 has an invalid length. [ 99.889153][ T6468] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1145'. [ 99.966862][ T6472] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.057516][ T29] audit: type=1400 audit(1770584090.832:1954): avc: denied { remount } for pid=6477 comm="syz.3.1148" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 103.031427][ T6479] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.086801][ T6513] set_capacity_and_notify: 5 callbacks suppressed [ 103.086917][ T6513] loop3: detected capacity change from 0 to 1024 [ 103.099927][ T6511] loop4: detected capacity change from 0 to 128 [ 103.146957][ T6515] loop2: detected capacity change from 0 to 8192 [ 103.160936][ T6511] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.178750][ T6511] EXT4-fs error (device loop4): ext4_validate_block_bitmap:423: comm syz.4.1161: bg 0: bad block bitmap checksum [ 103.218474][ T6510] loop1: detected capacity change from 0 to 8192 [ 103.263427][ T29] audit: type=1400 audit(1770584094.042:1955): avc: denied { write } for pid=6508 comm="syz.4.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.325636][ T29] audit: type=1400 audit(1770584094.102:1956): avc: denied { getopt } for pid=6508 comm="syz.4.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.401138][ T6527] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.445550][ T29] audit: type=1400 audit(1770584094.222:1957): avc: denied { append } for pid=6508 comm="syz.4.1161" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 103.517367][ T29] audit: type=1400 audit(1770584094.272:1958): avc: denied { read } for pid=3043 comm="dhcpcd" name="n26" dev="tmpfs" ino=6372 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.539113][ T29] audit: type=1400 audit(1770584094.272:1959): avc: denied { open } for pid=3043 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=6372 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.557503][ T6542] netlink: 'syz.2.1170': attribute type 1 has an invalid length. [ 103.562162][ T29] audit: type=1400 audit(1770584094.272:1960): avc: denied { getattr } for pid=3043 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=6372 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.589311][ T6542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.626925][ T6542] bond1: (slave dummy0): making interface the new active one [ 103.649304][ T6542] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 103.662555][ T29] audit: type=1400 audit(1770584094.402:1961): avc: denied { read open } for pid=6547 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.688124][ T29] audit: type=1400 audit(1770584094.402:1962): avc: denied { getattr } for pid=6547 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.786931][ T6561] loop2: detected capacity change from 0 to 8192 [ 103.809027][ T29] audit: type=1400 audit(1770584094.582:1963): avc: denied { add_name } for pid=6545 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.831555][ T29] audit: type=1400 audit(1770584094.582:1964): avc: denied { create } for pid=6545 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.854607][ T6566] loop3: detected capacity change from 0 to 1024 [ 103.943647][ T6581] vhci_hcd vhci_hcd.0: invalid port number 255 [ 104.307565][ T6632] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1182'. [ 104.323628][ T6632] bridge0: entered promiscuous mode [ 104.906714][ T6652] xt_hashlimit: size too large, truncated to 1048576 [ 106.008583][ T6659] loop3: detected capacity change from 0 to 512 [ 106.015323][ T6659] EXT4-fs: Ignoring removed oldalloc option [ 106.021314][ T6659] EXT4-fs: inline encryption not supported [ 106.029860][ T6659] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.044602][ T6659] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1186: bg 0: block 64: padding at end of block bitmap is not set [ 106.059107][ T6659] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1186: Failed to acquire dquot type 0 [ 106.073582][ T6659] EXT4-fs (loop3): 1 truncate cleaned up [ 106.080372][ T6659] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1186: Failed to acquire dquot type 0 [ 106.143804][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1186'. [ 106.735262][ T6554] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 106.795559][ T6665] loop4: detected capacity change from 0 to 1024 [ 106.815324][ T6666] loop1: detected capacity change from 0 to 8192 [ 106.826724][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1189'. [ 106.835758][ T6668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1189'. [ 106.847639][ T6665] EXT4-fs mount: 7 callbacks suppressed [ 106.847717][ T6665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.865561][ T6668] mmap: syz.2.1189 (6668) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 106.904563][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.027500][ T6685] loop4: detected capacity change from 0 to 8192 [ 107.098036][ T6689] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.813419][ T6706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.838338][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.001071][ T6726] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.977354][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.005826][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 109.005841][ T29] audit: type=1400 audit(1770584099.782:1979): avc: denied { mounton } for pid=6734 comm="syz.0.1215" path="/242/file0" dev="tmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.926616][ T6758] xt_CT: You must specify a L4 protocol and not use inversions on it [ 110.219876][ T6695] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 110.388822][ T29] audit: type=1400 audit(1770584101.162:1980): avc: denied { setopt } for pid=6781 comm="syz.2.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.400900][ T6783] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1234'. [ 110.447354][ T6780] set_capacity_and_notify: 2 callbacks suppressed [ 110.447371][ T6780] loop4: detected capacity change from 0 to 8192 [ 110.537430][ T6787] loop3: detected capacity change from 0 to 8192 [ 110.634287][ T6788] loop1: detected capacity change from 0 to 8192 [ 110.667761][ T6800] loop3: detected capacity change from 0 to 512 [ 110.697034][ T6800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.728660][ T6800] ext4 filesystem being mounted at /270/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.841799][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1241'. [ 110.850729][ T6800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1241'. [ 110.859702][ T6800] netlink: 'syz.3.1241': attribute type 12 has an invalid length. [ 110.871475][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1241'. [ 110.880372][ T6800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1241'. [ 110.889474][ T6800] netlink: 'syz.3.1241': attribute type 12 has an invalid length. [ 110.898150][ T1732] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.959491][ T1732] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.968825][ T1732] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.979146][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.983150][ T1732] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.045155][ T3399] hid-generic 0080:0005:FFFFFFFD.0004: unknown main item tag 0x0 [ 111.053077][ T3399] hid-generic 0080:0005:FFFFFFFD.0004: unknown main item tag 0x0 [ 111.063213][ T3399] hid-generic 0080:0005:FFFFFFFD.0004: hidraw0: HID v0.03 Device [syz0] on syz1 [ 111.096450][ T6826] fido_id[6826]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 111.098109][ T6829] netlink: 264 bytes leftover after parsing attributes in process `syz.3.1252'. [ 111.171347][ T6831] loop3: detected capacity change from 0 to 8192 [ 111.308658][ T29] audit: type=1326 audit(1770584102.082:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db7a6aeb9 code=0x7ffc0000 [ 111.332173][ T29] audit: type=1326 audit(1770584102.082:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db7a6aeb9 code=0x7ffc0000 [ 111.356417][ T29] audit: type=1326 audit(1770584102.082:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f9db7a6aeb9 code=0x7ffc0000 [ 111.379945][ T29] audit: type=1326 audit(1770584102.082:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db7a6aeb9 code=0x7ffc0000 [ 111.403412][ T29] audit: type=1326 audit(1770584102.082:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db7a6aeb9 code=0x7ffc0000 [ 111.426867][ T29] audit: type=1326 audit(1770584102.092:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9db7a6aeb9 code=0x7ffc0000 [ 111.452998][ T29] audit: type=1326 audit(1770584102.232:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9db7a2b78e code=0x7ffc0000 [ 111.476894][ T29] audit: type=1326 audit(1770584102.232:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db7a6aeb9 code=0x7ffc0000 [ 112.158547][ T6856] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1263'. [ 112.168898][ T6856] netlink: 'syz.3.1263': attribute type 1 has an invalid length. [ 112.176700][ T6856] netlink: 'syz.3.1263': attribute type 2 has an invalid length. [ 112.448310][ T6860] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1264'. [ 112.704277][ T6878] netlink: 'syz.0.1273': attribute type 1 has an invalid length. [ 112.717208][ T6878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.730305][ T6878] bond1: (slave dummy0): making interface the new active one [ 112.738788][ T6878] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 113.530025][ T6792] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 113.602347][ T6888] loop1: detected capacity change from 0 to 512 [ 113.608982][ T6888] EXT4-fs: Ignoring removed bh option [ 113.614517][ T6888] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.630360][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1279'. [ 113.645771][ T6887] loop4: detected capacity change from 0 to 8192 [ 113.664896][ T6891] loop2: detected capacity change from 0 to 8192 [ 113.672011][ T6888] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 113.706743][ T6888] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 113.777565][ T6888] EXT4-fs (loop1): orphan cleanup on readonly fs [ 113.816214][ T6902] FAULT_INJECTION: forcing a failure. [ 113.816214][ T6902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.829440][ T6902] CPU: 1 UID: 0 PID: 6902 Comm: syz.3.1283 Not tainted syzkaller #0 PREEMPT(voluntary) [ 113.829471][ T6902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 113.829487][ T6902] Call Trace: [ 113.829494][ T6902] [ 113.829523][ T6902] __dump_stack+0x1d/0x30 [ 113.829553][ T6902] dump_stack_lvl+0x95/0xd0 [ 113.829614][ T6902] dump_stack+0x15/0x1b [ 113.829687][ T6902] should_fail_ex+0x263/0x280 [ 113.829724][ T6902] should_fail+0xb/0x20 [ 113.829755][ T6902] should_fail_usercopy+0x1a/0x20 [ 113.829792][ T6902] _copy_from_user+0x1c/0xb0 [ 113.829895][ T6902] ___sys_sendmsg+0xc1/0x1e0 [ 113.829931][ T6902] __x64_sys_sendmsg+0xd4/0x160 [ 113.829957][ T6902] x64_sys_call+0x17ba/0x3000 [ 113.829983][ T6902] do_syscall_64+0xc0/0x2a0 [ 113.830061][ T6902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.830089][ T6902] RIP: 0033:0x7fb18b25aeb9 [ 113.830107][ T6902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.830127][ T6902] RSP: 002b:00007fb189caf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.830193][ T6902] RAX: ffffffffffffffda RBX: 00007fb18b4d5fa0 RCX: 00007fb18b25aeb9 [ 113.830209][ T6902] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 113.830266][ T6902] RBP: 00007fb189caf090 R08: 0000000000000000 R09: 0000000000000000 [ 113.830284][ T6902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.830298][ T6902] R13: 00007fb18b4d6038 R14: 00007fb18b4d5fa0 R15: 00007ffcb38b8508 [ 113.830320][ T6902] [ 113.891072][ T6888] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1277: Failed to acquire dquot type 1 [ 114.050756][ T6888] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1277: Invalid block bitmap block 0 in block_group 0 [ 114.053022][ T6925] loop4: detected capacity change from 0 to 1024 [ 114.066659][ T6888] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1277: Invalid block bitmap block 0 in block_group 0 [ 114.089773][ T6888] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1277: Invalid block bitmap block 0 in block_group 0 [ 114.106951][ T6888] __quota_error: 74 callbacks suppressed [ 114.106962][ T6888] Quota error (device loop1): write_blk: dquota write failed [ 114.120053][ T6888] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 114.129974][ T6888] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1277: Failed to acquire dquot type 1 [ 114.134948][ T6925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.143833][ T6888] Quota error (device loop1): write_blk: dquota write failed [ 114.160722][ T6888] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 114.170614][ T6888] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1277: Failed to acquire dquot type 1 [ 114.185103][ T6888] EXT4-fs (loop1): 1 orphan inode deleted [ 114.192060][ T6888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.193474][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.377951][ T6888] syz.1.1277 (6888) used greatest stack depth: 9008 bytes left [ 114.398454][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.418223][ T6939] loop1: detected capacity change from 0 to 512 [ 114.427651][ T29] audit: type=1400 audit(1770584105.202:2061): avc: denied { getopt } for pid=6938 comm="syz.1.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.451008][ T29] audit: type=1400 audit(1770584105.222:2062): avc: denied { create } for pid=6938 comm="syz.1.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 114.482177][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 114.493588][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 114.505208][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 114.516549][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 117.009862][ T6915] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 117.093685][ T6971] xt_CT: You must specify a L4 protocol and not use inversions on it [ 117.397119][ T7003] IPVS: set_ctl: invalid protocol: 137 172.30.0.3:20002 [ 120.167719][ T6983] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.348530][ T7030] loop2: detected capacity change from 0 to 8192 [ 120.363187][ T7036] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.597606][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1339'. [ 120.730195][ T7088] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1335'. [ 120.773572][ T7095] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.947705][ T29] audit: type=1400 audit(1770584111.722:2063): avc: denied { bind } for pid=7098 comm="syz.1.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.967596][ T29] audit: type=1400 audit(1770584111.722:2064): avc: denied { listen } for pid=7098 comm="syz.1.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.987293][ T29] audit: type=1400 audit(1770584111.722:2065): avc: denied { connect } for pid=7098 comm="syz.1.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.007299][ T29] audit: type=1400 audit(1770584111.722:2066): avc: denied { read } for pid=7098 comm="syz.1.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.257348][ T29] audit: type=1326 audit(1770584112.032:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.1.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba70faeb9 code=0x7ffc0000 [ 121.273716][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1353'. [ 121.283459][ T29] audit: type=1326 audit(1770584112.032:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.1.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba70faeb9 code=0x7ffc0000 [ 121.313125][ T29] audit: type=1326 audit(1770584112.032:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.1.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fcba70faeb9 code=0x7ffc0000 [ 121.336623][ T29] audit: type=1326 audit(1770584112.032:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.1.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba70faeb9 code=0x7ffc0000 [ 121.360314][ T29] audit: type=1326 audit(1770584112.032:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.1.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcba70faeb9 code=0x7ffc0000 [ 121.383687][ T29] audit: type=1326 audit(1770584112.032:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.1.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba70faeb9 code=0x7ffc0000 [ 121.407891][ T7113] bond0: (slave syz_tun): Releasing backup interface [ 123.362403][ T7038] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 123.435683][ T7131] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.472845][ T7126] loop3: detected capacity change from 0 to 2048 [ 123.530654][ T7126] loop3: p1 p3 p4 [ 123.535848][ T7126] loop3: p4 size 589824 extends beyond EOD, truncated [ 123.574762][ T7135] loop4: detected capacity change from 0 to 1024 [ 123.602170][ T7135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.617564][ T7137] loop3: detected capacity change from 0 to 1024 [ 123.633397][ T7137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.660377][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.696878][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.792519][ T7155] syz_tun: left promiscuous mode [ 123.827709][ T7155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.838093][ T7155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.874371][ T1732] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.887682][ T1732] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.896887][ T1732] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.906153][ T1732] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.045046][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1373'. [ 126.120327][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 126.120344][ T29] audit: type=1326 audit(1770584116.892:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7209 comm="syz.0.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db7a6aeb9 code=0x7fc00000 [ 126.149951][ T29] audit: type=1326 audit(1770584116.892:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7209 comm="syz.0.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9db7a6aeb9 code=0x7fc00000 [ 126.173493][ T29] audit: type=1326 audit(1770584116.892:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7209 comm="syz.0.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db7a6aeb9 code=0x7fc00000 [ 126.196931][ T29] audit: type=1326 audit(1770584116.892:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7209 comm="syz.0.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db7a6aeb9 code=0x7fc00000 [ 126.220361][ T29] audit: type=1326 audit(1770584116.892:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7209 comm="syz.0.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db7a6aeb9 code=0x7fc00000 [ 126.243838][ T29] audit: type=1326 audit(1770584116.892:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7209 comm="syz.0.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db7a6aeb9 code=0x7fc00000 [ 126.267644][ T29] audit: type=1326 audit(1770584116.892:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7209 comm="syz.0.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db7a6aeb9 code=0x7fc00000 [ 126.291127][ T29] audit: type=1326 audit(1770584116.892:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7209 comm="syz.0.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db7a6aeb9 code=0x7fc00000 [ 126.314583][ T29] audit: type=1326 audit(1770584116.892:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7209 comm="syz.0.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db7a6aeb9 code=0x7fc00000 [ 126.337999][ T29] audit: type=1326 audit(1770584116.892:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7209 comm="syz.0.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db7a6aeb9 code=0x7fc00000 [ 126.406603][ T7118] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.477970][ T7219] loop2: detected capacity change from 0 to 1024 [ 126.491616][ T7223] xt_ipcomp: unknown flags 1D [ 126.511617][ T7219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.535375][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.558839][ T7233] loop2: detected capacity change from 0 to 128 [ 126.703140][ T7248] loop2: detected capacity change from 0 to 512 [ 126.721925][ T7248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.734772][ T7248] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.770134][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.789645][ T7253] loop2: detected capacity change from 0 to 512 [ 126.801458][ T7253] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1397: inode has both inline data and extents flags [ 126.815074][ T7253] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1397: couldn't read orphan inode 15 (err -117) [ 126.827905][ T7253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.842272][ T7253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1397'. [ 126.855019][ T7253] vlan2: entered promiscuous mode [ 126.860228][ T7253] vlan2: entered allmulticast mode [ 126.865461][ T7253] hsr_slave_1: entered allmulticast mode [ 126.961357][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.057678][ T7267] loop3: detected capacity change from 0 to 1024 [ 127.078488][ T7267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.104124][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.144879][ T7273] loop3: detected capacity change from 0 to 1024 [ 127.161741][ T7273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.185655][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.261254][ T7279] loop3: detected capacity change from 0 to 8192 [ 127.344566][ T7283] loop4: detected capacity change from 0 to 512 [ 127.361804][ T7283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.374505][ T7283] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.419340][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.439026][ T7293] loop4: detected capacity change from 0 to 512 [ 127.446569][ T7293] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 127.455351][ T7293] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.482769][ T7293] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1410: Allocating blocks 41-42 which overlap fs metadata [ 127.497176][ T7293] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1410: Allocating blocks 41-42 which overlap fs metadata [ 127.511236][ T7293] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1410: Failed to acquire dquot type 1 [ 127.523017][ T7293] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 127.537779][ T7293] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.1410: corrupted inode contents [ 127.549981][ T7293] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.1410: mark_inode_dirty error [ 127.562357][ T7293] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.1410: corrupted inode contents [ 127.574633][ T7293] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.1410: mark_inode_dirty error [ 127.586225][ T7293] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.1410: corrupted inode contents [ 127.598573][ T7293] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 127.607417][ T7293] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.1410: corrupted inode contents [ 127.619531][ T7293] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.1410: mark_inode_dirty error [ 127.631857][ T7293] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 127.645387][ T7293] EXT4-fs (loop4): 1 truncate cleaned up [ 127.651682][ T7293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.671666][ T7293] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 127.709865][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.756302][ T7308] loop4: detected capacity change from 0 to 128 [ 127.776011][ T7308] msdos: Unknown parameter '' [ 127.808798][ T7308] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1414'. [ 127.903091][ T7320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.917575][ T7320] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.972641][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.983322][ T7325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.011081][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.036075][ T7334] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.045350][ T7334] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 128.054262][ T7334] EXT4-fs (loop2): orphan cleanup on readonly fs [ 128.061063][ T7334] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1424: bad orphan inode 15 [ 128.071636][ T7334] ext4_test_bit(bit=14, block=18) = 1 [ 128.077101][ T7334] is_bad_inode(inode)=0 [ 128.081312][ T7334] NEXT_ORPHAN(inode)=1023 [ 128.085687][ T7334] max_ino=32 [ 128.088884][ T7334] i_nlink=0 [ 128.092287][ T7334] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #15: comm syz.2.1424: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 128.109250][ T7334] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 128.119261][ T7334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 128.149916][ T7339] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1425'. [ 128.150613][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.187072][ T7342] netlink: 'syz.3.1427': attribute type 3 has an invalid length. [ 128.196644][ T7343] netlink: 'syz.2.1426': attribute type 1 has an invalid length. [ 128.202842][ T7342] bridge1: entered promiscuous mode [ 128.209593][ T7342] bridge1: entered allmulticast mode [ 128.222448][ T7343] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.240486][ T7343] bond2: (slave gretap1): making interface the new active one [ 128.248538][ T7343] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 128.283773][ T7346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.309333][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.369097][ T7354] msdos: Unknown parameter '' [ 128.407398][ T7354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1431'. [ 128.493522][ T7362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.506293][ T7362] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.540643][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.251996][ T7407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.276439][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.596445][ T7429] dummy0: Device is already in use. [ 129.651691][ T7431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.675417][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.155076][ T7445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.172820][ T36] hid-generic 974B:80000:E0000.0005: item fetching failed at offset 3/9 [ 130.181354][ T36] hid-generic 974B:80000:E0000.0005: probe with driver hid-generic failed with error -22 [ 130.323880][ T7460] EXT4-fs: Ignoring removed orlov option [ 130.330463][ T7460] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 130.339434][ T7460] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 130.348215][ T7460] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.1473: corrupted in-inode xattr: e_value size too large [ 130.362837][ T7460] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1473: couldn't read orphan inode 15 (err -117) [ 130.375394][ T7460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.430696][ T3317] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 130.442874][ T3317] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 130.484445][ T7462] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.523885][ T7466] netlink: 'syz.0.1476': attribute type 8 has an invalid length. [ 130.679046][ T6091] bond0: (slave syz_tun): Releasing backup interface [ 130.725968][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.792640][ T7485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.822059][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.963164][ T36] IPVS: starting estimator thread 0... [ 131.022122][ T7521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.047139][ T7490] chnl_net:caif_netlink_parms(): no params data found [ 131.054160][ T7516] IPVS: using max 2592 ests per chain, 129600 per kthread [ 131.069256][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.112422][ T7490] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.118129][ T7532] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1499'. [ 131.119500][ T7490] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.135821][ T7490] bridge_slave_0: entered allmulticast mode [ 131.142456][ T7490] bridge_slave_0: entered promiscuous mode [ 131.149385][ T7490] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.156548][ T7490] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.163951][ T7490] bridge_slave_1: entered allmulticast mode [ 131.170401][ T7490] bridge_slave_1: entered promiscuous mode [ 131.179950][ T29] kauditd_printk_skb: 853 callbacks suppressed [ 131.179962][ T29] audit: type=1400 audit(1770584121.952:2966): avc: denied { write } for pid=7531 comm="syz.2.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 131.206521][ T7490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.217151][ T7490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.237343][ T7490] team0: Port device team_slave_0 added [ 131.244001][ T7490] team0: Port device team_slave_1 added [ 131.271086][ T7490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.278210][ T7490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.304230][ T7490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.318824][ T7490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.325861][ T7490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.351808][ T7490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.392208][ T7490] hsr_slave_0: entered promiscuous mode [ 131.398391][ T7490] hsr_slave_1: entered promiscuous mode [ 131.412908][ T7490] debugfs: 'hsr0' already exists in 'hsr' [ 131.418663][ T7490] Cannot create hsr debugfs directory [ 131.437793][ T29] audit: type=1326 audit(1770584122.212:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7553 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23435daeb9 code=0x7ffc0000 [ 131.461354][ T29] audit: type=1326 audit(1770584122.212:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7553 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23435daeb9 code=0x7ffc0000 [ 131.487746][ T29] audit: type=1326 audit(1770584122.212:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7553 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f23435daeb9 code=0x7ffc0000 [ 131.511210][ T29] audit: type=1326 audit(1770584122.212:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7553 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23435daeb9 code=0x7ffc0000 [ 131.534625][ T29] audit: type=1326 audit(1770584122.212:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7553 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f23435daeb9 code=0x7ffc0000 [ 131.558068][ T29] audit: type=1326 audit(1770584122.242:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7553 comm="syz.2.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23435daeb9 code=0x7ffc0000 [ 131.594361][ T7561] set_capacity_and_notify: 16 callbacks suppressed [ 131.594389][ T7561] loop2: detected capacity change from 0 to 512 [ 131.655595][ T7561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.674464][ T7490] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 131.681445][ T7561] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.702016][ T7490] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 131.711335][ T7490] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 131.720240][ T7490] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 131.737521][ T7490] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.744602][ T7490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.752004][ T7490] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.759067][ T7490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.782528][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.793542][ T7490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.817803][ T2109] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.836544][ T2109] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.854505][ T7490] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.867087][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.874281][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.900891][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.908059][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.936228][ T29] audit: type=1326 audit(1770584122.712:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7587 comm="syz.4.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eab4daeb9 code=0x7ffc0000 [ 131.959728][ T29] audit: type=1326 audit(1770584122.712:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7587 comm="syz.4.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f8eab4daeb9 code=0x7ffc0000 [ 131.983206][ T29] audit: type=1326 audit(1770584122.712:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7587 comm="syz.4.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eab4daeb9 code=0x7ffc0000 [ 132.014310][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1517'. [ 132.093612][ T7490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.106349][ T7598] loop4: detected capacity change from 0 to 8192 [ 132.269727][ T7490] veth0_vlan: entered promiscuous mode [ 132.278659][ T7490] veth1_vlan: entered promiscuous mode [ 132.297818][ T7490] veth0_macvtap: entered promiscuous mode [ 132.306535][ T7490] veth1_macvtap: entered promiscuous mode [ 132.319317][ T7490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.367221][ T7490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.379465][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.417722][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.441285][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.450242][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.609568][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 132.643973][ T7646] loop5: detected capacity change from 0 to 8192 [ 132.647524][ T7647] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.657389][ T7647] bridge0: port 2(bridge_slave_1) entered listening state [ 132.664676][ T7647] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.671751][ T7647] bridge0: port 1(bridge_slave_0) entered listening state [ 132.694391][ T7647] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.784267][ T7643] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 133.123803][ T7685] loop2: detected capacity change from 0 to 8192 [ 133.215685][ T7691] loop2: detected capacity change from 0 to 512 [ 133.242424][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1551'. [ 133.242834][ T7691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.279060][ T7691] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.320005][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.683612][ T7727] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.168621][ T7741] netlink: 'syz.4.1562': attribute type 27 has an invalid length. [ 134.199202][ T36] IPVS: starting estimator thread 0... [ 134.310410][ T7744] IPVS: using max 2688 ests per chain, 134400 per kthread [ 134.397063][ T7753] bridge1: entered promiscuous mode [ 134.550254][ T7755] FAULT_INJECTION: forcing a failure. [ 134.550254][ T7755] name failslab, interval 1, probability 0, space 0, times 0 [ 134.550407][ T7755] CPU: 1 UID: 0 PID: 7755 Comm: syz.0.1566 Not tainted syzkaller #0 PREEMPT(voluntary) [ 134.550433][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 134.550444][ T7755] Call Trace: [ 134.550449][ T7755] [ 134.550503][ T7755] __dump_stack+0x1d/0x30 [ 134.550553][ T7755] dump_stack_lvl+0x95/0xd0 [ 134.550601][ T7755] dump_stack+0x15/0x1b [ 134.550624][ T7755] should_fail_ex+0x263/0x280 [ 134.550662][ T7755] should_failslab+0x8c/0xb0 [ 134.550688][ T7755] __kmalloc_noprof+0xb8/0x580 [ 134.550758][ T7755] ? kobject_get_path+0x92/0x1c0 [ 134.550800][ T7755] kobject_get_path+0x92/0x1c0 [ 134.550847][ T7755] kobject_uevent_env+0x1da/0x570 [ 134.550878][ T7755] kobject_uevent+0x1d/0x30 [ 134.550942][ T7755] device_del+0x70f/0x790 [ 134.550974][ T7755] device_destroy+0x66/0xa0 [ 134.551003][ T7755] vcs_remove_sysfs+0x21/0x60 [ 134.551069][ T7755] vc_deallocate+0x106/0x250 [ 134.551101][ T7755] vt_disallocate_all+0x175/0x200 [ 134.551156][ T7755] vt_ioctl+0x15c7/0x18d0 [ 134.551333][ T7755] ? tty_jobctrl_ioctl+0x29c/0x810 [ 134.551409][ T7755] tty_ioctl+0x7d7/0xb80 [ 134.551440][ T7755] ? __pfx_tty_ioctl+0x10/0x10 [ 134.551466][ T7755] __se_sys_ioctl+0xce/0x140 [ 134.551511][ T7755] __x64_sys_ioctl+0x43/0x50 [ 134.551613][ T7755] x64_sys_call+0x14b0/0x3000 [ 134.551657][ T7755] do_syscall_64+0xc0/0x2a0 [ 134.551699][ T7755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.551727][ T7755] RIP: 0033:0x7f9db7a6aeb9 [ 134.551753][ T7755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.551801][ T7755] RSP: 002b:00007f9db64bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.551828][ T7755] RAX: ffffffffffffffda RBX: 00007f9db7ce5fa0 RCX: 00007f9db7a6aeb9 [ 134.551844][ T7755] RDX: 0000000000000000 RSI: 0000000000005608 RDI: 0000000000000005 [ 134.551861][ T7755] RBP: 00007f9db64bf090 R08: 0000000000000000 R09: 0000000000000000 [ 134.551884][ T7755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.551921][ T7755] R13: 00007f9db7ce6038 R14: 00007f9db7ce5fa0 R15: 00007ffcf41723c8 [ 134.551947][ T7755] [ 135.694119][ T7767] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.426030][ T7718] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 136.471652][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 136.471673][ T29] audit: type=1326 audit(1770584127.252:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.4.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eab4daeb9 code=0x7ffc0000 [ 136.502583][ T29] audit: type=1326 audit(1770584127.282:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.4.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f8eab4daeb9 code=0x7ffc0000 [ 136.526111][ T29] audit: type=1326 audit(1770584127.282:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.4.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eab4daeb9 code=0x7ffc0000 [ 136.547585][ T7778] loop5: detected capacity change from 0 to 512 [ 136.549541][ T29] audit: type=1326 audit(1770584127.282:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.4.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f8eab4daeb9 code=0x7ffc0000 [ 136.557333][ T29] audit: type=1326 audit(1770584127.302:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.4.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eab4daeb9 code=0x7ffc0000 [ 136.608493][ T7778] ext2: Unknown parameter 'smackfsroot' [ 136.615706][ T29] audit: type=1326 audit(1770584127.392:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.5.1575" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f07c347aeb9 code=0x0 [ 136.663390][ T3399] IPVS: starting estimator thread 0... [ 136.679848][ T29] audit: type=1400 audit(1770584127.452:3063): avc: denied { override_creds } for pid=7777 comm="syz.5.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 136.770428][ T7785] IPVS: using max 2592 ests per chain, 129600 per kthread [ 136.866960][ T29] audit: type=1326 audit(1770584127.642:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.1.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba70faeb9 code=0x7ffc0000 [ 136.890904][ T29] audit: type=1326 audit(1770584127.642:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.1.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba70faeb9 code=0x7ffc0000 [ 136.914362][ T29] audit: type=1326 audit(1770584127.642:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.1.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fcba70faeb9 code=0x7ffc0000 [ 137.514872][ T7824] loop4: detected capacity change from 0 to 512 [ 137.521511][ T7824] journal_path: Non-blockdev passed as './bus' [ 137.527693][ T7824] EXT4-fs: error: could not find journal device path [ 137.609036][ T7834] loop4: detected capacity change from 0 to 512 [ 137.634028][ T7834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.652022][ T7834] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.704020][ T7844] loop2: detected capacity change from 0 to 1024 [ 137.712491][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.748248][ T7844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.774923][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.222948][ T7867] 9p: Bad value for 'wfdno' [ 138.647966][ T7877] loop4: detected capacity change from 0 to 512 [ 138.665946][ T7877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.679088][ T7877] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.726493][ T7883] loop2: detected capacity change from 0 to 1024 [ 138.764299][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.775426][ T7883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.804814][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.842246][ T7889] loop4: detected capacity change from 0 to 8192 [ 138.850369][ T7891] tipc: Can't bind to reserved service type 2 [ 139.766948][ T7916] loop2: detected capacity change from 0 to 512 [ 139.792714][ T7916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.805588][ T7916] ext4 filesystem being mounted at /307/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.841507][ T7921] loop4: detected capacity change from 0 to 8192 [ 139.884164][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.905552][ T7923] loop2: detected capacity change from 0 to 1024 [ 139.924060][ T7923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.958684][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.979653][ T7813] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 140.017555][ T7929] loop2: detected capacity change from 0 to 8192 [ 141.175258][ T7986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.187944][ T7986] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.259801][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.937430][ T8008] msdos: Unknown parameter '' [ 142.013855][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 142.013875][ T29] audit: type=1326 audit(1770584132.792:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8016 comm="syz.4.1660" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8eab4daeb9 code=0x0 [ 142.069366][ T8018] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.076428][ T8018] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 142.169126][ T8020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.183083][ T8020] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.230111][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.301019][ T8026] EXT4-fs: Ignoring removed oldalloc option [ 142.307083][ T8026] EXT4-fs: inline encryption not supported [ 142.313710][ T8026] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 142.341746][ T8026] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1662: bg 0: block 64: padding at end of block bitmap is not set [ 142.356248][ T8026] Quota error (device loop2): write_blk: dquota write failed [ 142.363920][ T8026] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 142.374002][ T8026] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1662: Failed to acquire dquot type 0 [ 142.385666][ T8026] EXT4-fs (loop2): 1 truncate cleaned up [ 142.391784][ T8026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.405703][ T8026] Quota error (device loop2): write_blk: dquota write failed [ 142.413148][ T8026] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 142.423076][ T8026] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1662: Failed to acquire dquot type 0 [ 142.485824][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'. [ 142.817670][ T8039] set_capacity_and_notify: 10 callbacks suppressed [ 142.817683][ T8039] loop5: detected capacity change from 0 to 8192 [ 143.396213][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1669'. [ 143.407469][ T8051] ip6gre1: entered promiscuous mode [ 143.412910][ T8051] ip6gre1: entered allmulticast mode [ 143.597016][ T7960] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 143.880923][ T8079] loop5: detected capacity change from 0 to 8192 [ 144.526971][ T8089] loop4: detected capacity change from 0 to 8192 [ 144.614558][ T8103] SELinux: Context system_u:object_r:xen_device_t:s0 is not valid (left unmapped). [ 144.619709][ T29] audit: type=1400 audit(1770584135.392:3078): avc: denied { mac_admin } for pid=8101 comm="syz.1.1684" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 144.645567][ T29] audit: type=1400 audit(1770584135.402:3079): avc: denied { relabelto } for pid=8101 comm="syz.1.1684" name="file2" dev="tmpfs" ino=2007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:xen_device_t:s0" [ 144.658778][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 144.672368][ T29] audit: type=1400 audit(1770584135.402:3080): avc: denied { associate } for pid=8101 comm="syz.1.1684" name="file2" dev="tmpfs" ino=2007 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:xen_device_t:s0" [ 144.681553][ T8103] x_tables: duplicate underflow at hook 1 [ 144.709121][ T29] audit: type=1400 audit(1770584135.422:3081): avc: denied { setopt } for pid=8101 comm="syz.1.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.717370][ T8103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8103 comm=syz.1.1684 [ 144.746486][ T29] audit: type=1400 audit(1770584135.522:3082): avc: denied { ioctl } for pid=8101 comm="syz.1.1684" path="/381/file2" dev="tmpfs" ino=2007 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:xen_device_t:s0" [ 145.260622][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.530251][ T8121] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 145.530281][ T8121] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 145.530405][ T8121] vhci_hcd vhci_hcd.0: Device attached [ 145.549877][ T8123] vhci_hcd: connection closed [ 145.550798][ T1732] vhci_hcd vhci_hcd.4: stop threads [ 145.550820][ T1732] vhci_hcd vhci_hcd.4: release socket [ 145.550863][ T1732] vhci_hcd vhci_hcd.4: disconnect device [ 145.913411][ T8126] loop5: detected capacity change from 0 to 2048 [ 145.918170][ T8126] EXT4-fs (loop5): #clusters per group too big: 16384 [ 146.086792][ T8132] loop4: detected capacity change from 0 to 128 [ 146.116371][ T8132] msdos: Unknown parameter '' [ 146.158046][ T8128] loop5: detected capacity change from 0 to 4096 [ 146.183934][ T8128] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.202080][ T8142] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1698'. [ 146.211891][ T8142] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1698'. [ 146.243082][ T8145] loop4: detected capacity change from 0 to 1024 [ 146.253981][ T8146] loop2: detected capacity change from 0 to 512 [ 146.261534][ T8146] EXT4-fs: Ignoring removed oldalloc option [ 146.267501][ T8146] EXT4-fs: inline encryption not supported [ 146.274071][ T8145] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 146.284873][ T8145] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 146.295299][ T8145] EXT4-fs (loop4): invalid journal inode [ 146.301187][ T8145] EXT4-fs (loop4): can't get journal size [ 146.307296][ T8145] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 17104912: comm syz.4.1699: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 146.330403][ T8146] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 146.340142][ T8145] EXT4-fs (loop4): failed to initialize system zone (-117) [ 146.347650][ T8145] EXT4-fs (loop4): mount failed [ 146.373495][ T8146] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1697: bg 0: block 64: padding at end of block bitmap is not set [ 146.388164][ T8146] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1697: Failed to acquire dquot type 0 [ 146.404835][ T8146] EXT4-fs (loop2): 1 truncate cleaned up [ 146.406852][ T7490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.411554][ T8146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.439060][ T8146] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1697: Failed to acquire dquot type 0 [ 146.515164][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1697'. [ 146.577425][ T8153] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1700'. [ 146.710316][ T5065] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 146.712029][ T8104] Bluetooth: hci0: command 0x1003 tx timeout [ 147.042925][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 147.042942][ T29] audit: type=1400 audit(1770584137.822:3234): avc: denied { accept } for pid=8187 comm="syz.1.1715" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 147.271507][ T29] audit: type=1400 audit(1770584138.052:3235): avc: denied { getopt } for pid=8217 comm="syz.0.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 147.483753][ T29] audit: type=1400 audit(1770584138.262:3236): avc: denied { listen } for pid=8235 comm="syz.4.1728" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.528096][ T29] audit: type=1400 audit(1770584138.302:3237): avc: denied { ioctl } for pid=8238 comm="syz.4.1729" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 147.630837][ T8247] loop5: detected capacity change from 0 to 8192 [ 147.673866][ T8249] loop5: detected capacity change from 0 to 128 [ 147.680698][ T8249] msdos: Unknown parameter '' [ 147.699518][ T29] audit: type=1400 audit(1770584138.462:3238): avc: denied { create } for pid=8250 comm="syz.4.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 147.770987][ T8254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.799575][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.859017][ T8268] set_capacity_and_notify: 1 callbacks suppressed [ 147.859110][ T8268] loop5: detected capacity change from 0 to 8192 [ 148.715769][ T8283] loop4: detected capacity change from 0 to 2048 [ 148.732641][ T8283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.745002][ T8283] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.758832][ T8283] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1742'. [ 148.774354][ T8283] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8283 comm=syz.4.1742 [ 148.797119][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.851962][ T8289] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1744'. [ 148.851988][ T8287] loop4: detected capacity change from 0 to 8192 [ 148.876402][ T8289] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1744'. [ 148.887301][ T8289] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.930133][ T8294] loop5: detected capacity change from 0 to 1024 [ 148.968192][ T8298] tipc: Started in network mode [ 148.973238][ T8298] tipc: Node identity , cluster identity 4711 [ 148.979399][ T8298] tipc: Failed to set node id, please configure manually [ 148.986540][ T8298] tipc: Enabling of bearer rejected, failed to enable media [ 149.004760][ T8298] ------------[ cut here ]------------ [ 149.010554][ T8298] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0xfffffffefffff630, 0xffffffff00000000] s64=[0xfffffffefffff630, 0xffffffff00000000] u32=[0x30, 0x8000050] s32=[0x30, 0x0] var_off=(0xfffffffe00000030, 0x10fffffc0) [ 149.034613][ T8298] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.4.1748/8298 [ 149.045667][ T8298] Modules linked in: [ 149.049668][ T8298] CPU: 1 UID: 0 PID: 8298 Comm: syz.4.1748 Not tainted syzkaller #0 PREEMPT(voluntary) [ 149.059478][ T8298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 149.069612][ T8298] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 149.076001][ T8298] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 149.095661][ T8298] RSP: 0018:ffffc900103ff388 EFLAGS: 00010246 [ 149.101831][ T8298] RAX: ffff88811aee2b90 RBX: 0000000000000000 RCX: fffffffefffff630 [ 149.109890][ T8298] RDX: ffffffff867f0c86 RSI: ffffffff867c5870 RDI: ffffffff86fb99b0 [ 149.117996][ T8298] RBP: ffff88811c15b190 R08: ffffffff00000000 R09: fffffffefffff630 [ 149.126211][ T8298] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88811c15b150 [ 149.134347][ T8298] R13: fffffffe00000030 R14: ffff88811c15b19c R15: ffff88811c15b188 [ 149.142565][ T8298] FS: 00007f8ea9f2f6c0(0000) GS:ffff8882aec57000(0000) knlGS:0000000000000000 [ 149.151599][ T8298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.158206][ T8298] CR2: 0000200000004000 CR3: 00000001157e0000 CR4: 00000000003506f0 [ 149.166311][ T8298] Call Trace: [ 149.169683][ T8298] [ 149.172665][ T8298] reg_set_min_max+0x21c/0x260 [ 149.177493][ T8298] check_cond_jmp_op+0x13bd/0x1a80 [ 149.182757][ T8298] do_check+0x440c/0x9060 [ 149.187153][ T8298] do_check_common+0xd0f/0x1630 [ 149.192115][ T8298] bpf_check+0x2f6d/0xc7e0 [ 149.196569][ T8298] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 149.202622][ T8298] ? alloc_pages_bulk_noprof+0x4a1/0x520 [ 149.208291][ T8298] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 149.214323][ T8298] ? try_charge_memcg+0x215/0xa10 [ 149.219447][ T8298] ? _find_next_zero_bit+0x64/0xa0 [ 149.224702][ T8298] ? pcpu_block_refresh_hint+0x10b/0x170 [ 149.230464][ T8298] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 149.236611][ T8298] ? pcpu_next_fit_region+0x27e/0x380 [ 149.242120][ T8298] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 149.248356][ T8298] ? css_rstat_updated+0xbb/0x280 [ 149.253437][ T8298] ? mod_memcg_state+0x182/0x260 [ 149.258399][ T8298] ? __rcu_read_unlock+0x4e/0x70 [ 149.263489][ T8298] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 149.269439][ T8298] ? pcpu_alloc_noprof+0xb08/0x1010 [ 149.274744][ T8298] ? should_fail_ex+0x30/0x280 [ 149.279537][ T8298] ? selinux_bpf_prog_load+0x62/0xd0 [ 149.285077][ T8298] ? selinux_bpf_prog_load+0xac/0xd0 [ 149.290448][ T8298] ? security_bpf_prog_load+0x9e/0x140 [ 149.295926][ T8298] bpf_prog_load+0xf76/0x1140 [ 149.300772][ T8298] ? security_bpf+0x2b/0x90 [ 149.302269][ T8294] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.305298][ T8298] __sys_bpf+0x469/0x7b0 [ 149.321582][ T8298] __x64_sys_bpf+0x41/0x50 [ 149.325995][ T8298] x64_sys_call+0x28e1/0x3000 [ 149.330716][ T8298] do_syscall_64+0xc0/0x2a0 [ 149.335386][ T8298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.341505][ T8298] RIP: 0033:0x7f8eab4daeb9 [ 149.345967][ T8298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.365726][ T8298] RSP: 002b:00007f8ea9f2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 149.374222][ T8298] RAX: ffffffffffffffda RBX: 00007f8eab755fa0 RCX: 00007f8eab4daeb9 [ 149.382257][ T8298] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 149.390249][ T8298] RBP: 00007f8eab548c1f R08: 0000000000000000 R09: 0000000000000000 [ 149.398276][ T8298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.406323][ T8298] R13: 00007f8eab756038 R14: 00007f8eab755fa0 R15: 00007fff6990b838 [ 149.414323][ T8298] [ 149.417359][ T8298] ---[ end trace 0000000000000000 ]--- [ 149.425947][ T7490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.435692][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.572098][ T8310] loop5: detected capacity change from 0 to 512 [ 149.618109][ T8310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.619789][ T8318] loop2: detected capacity change from 0 to 8192 [ 149.660827][ T8310] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.775422][ T7490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.787238][ T8324] veth1_macvtap: left promiscuous mode [ 149.796604][ T8324] macsec0: entered allmulticast mode [ 149.829259][ T8328] loop2: detected capacity change from 0 to 512 [ 149.841228][ T29] audit: type=1400 audit(1770584140.622:3239): avc: granted { setsecparam } for pid=8323 comm="syz.0.1757" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 149.872110][ T8329] veth1_macvtap: entered promiscuous mode [ 149.877880][ T8329] veth1_macvtap: entered allmulticast mode [ 149.906198][ T8329] macsec0: entered promiscuous mode [ 149.915495][ T8331] loop5: detected capacity change from 0 to 8192 [ 149.929417][ T8328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.951282][ T8328] ext4 filesystem being mounted at /325/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.005559][ T8338] loop4: detected capacity change from 0 to 512 [ 150.015684][ T8338] EXT4-fs: Ignoring removed oldalloc option [ 150.021853][ T8338] EXT4-fs: inline encryption not supported [ 150.041302][ T8338] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.051783][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.089912][ T8346] cgroup: fork rejected by pids controller in /syz0 [ 150.097565][ T8338] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1761: bg 0: block 64: padding at end of block bitmap is not set [ 150.113277][ T8345] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20003 [ 150.132589][ T8338] Quota error (device loop4): write_blk: dquota write failed [ 150.140767][ T8346] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1765'. [ 150.152883][ T8338] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 150.163290][ T8338] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1761: Failed to acquire dquot type 0 [ 150.180709][ T8338] EXT4-fs (loop4): 1 truncate cleaned up [ 150.186830][ T8338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.201386][ T8338] Quota error (device loop4): write_blk: dquota write failed [ 150.209595][ T8338] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 150.223275][ T8350] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1766'. [ 150.246296][ T8338] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1761: Failed to acquire dquot type 0 [ 150.322913][ T8352] loop2: detected capacity change from 0 to 8192 [ 150.361842][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1761'. [ 150.528111][ T6845] bond0: (slave syz_tun): Releasing backup interface [ 150.528937][ T3407] kernel write not supported for file bpf-prog (pid: 3407 comm: kworker/1:3) [ 150.771587][ T8368] chnl_net:caif_netlink_parms(): no params data found [ 150.811453][ T8368] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.818551][ T8368] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.825803][ T8368] bridge_slave_0: entered allmulticast mode [ 150.832209][ T8368] bridge_slave_0: entered promiscuous mode [ 150.838865][ T8368] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.846018][ T8368] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.853286][ T8368] bridge_slave_1: entered allmulticast mode [ 150.859630][ T8368] bridge_slave_1: entered promiscuous mode [ 150.876380][ T8368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.886717][ T8368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.906459][ T8368] team0: Port device team_slave_0 added [ 150.913137][ T8368] team0: Port device team_slave_1 added [ 150.928506][ T8368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.935479][ T8368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.961473][ T8368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.972762][ T8368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.979700][ T8368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.005675][ T8368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.032634][ T8368] hsr_slave_0: entered promiscuous mode [ 151.038818][ T8368] hsr_slave_1: entered promiscuous mode [ 151.044813][ T8368] debugfs: 'hsr0' already exists in 'hsr' [ 151.050536][ T8368] Cannot create hsr debugfs directory [ 151.106594][ T8368] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.142964][ T8368] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.202997][ T8368] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.246739][ T8368] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.309842][ T8386] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.323239][ T8386] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.336098][ T8368] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 151.358817][ T8368] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 151.369359][ T8368] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 151.382049][ T8368] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 151.419947][ T7490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.444873][ T8368] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.452022][ T8368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.459350][ T8368] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.466515][ T8368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.533268][ T8368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.556308][ T2145] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.564866][ T2145] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.579526][ T3399] IPVS: starting estimator thread 0... [ 151.586268][ T8403] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20003 [ 151.600487][ T8368] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.622179][ T2145] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.629331][ T2145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.648764][ T2145] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.655993][ T2145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.670475][ T8404] IPVS: using max 2592 ests per chain, 129600 per kthread [ 151.727741][ T8368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.793777][ T8368] veth0_vlan: entered promiscuous mode [ 151.802081][ T8368] veth1_vlan: entered promiscuous mode [ 151.817924][ T8368] veth0_macvtap: entered promiscuous mode [ 151.825578][ T8368] veth1_macvtap: entered promiscuous mode [ 151.837125][ T8368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.848147][ T8368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.858891][ T2145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.869916][ T2145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.879388][ T2145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.889573][ T2145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.144375][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 152.144405][ T29] audit: type=1326 audit(1770584142.922:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8430 comm="syz.0.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e6ffaeb9 code=0x7ffc0000 [ 152.174374][ T29] audit: type=1326 audit(1770584142.922:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8430 comm="syz.0.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e6ffaeb9 code=0x7ffc0000 [ 152.197836][ T29] audit: type=1326 audit(1770584142.922:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8430 comm="syz.0.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f87e6ffaeb9 code=0x7ffc0000 [ 152.221280][ T29] audit: type=1326 audit(1770584142.922:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8430 comm="syz.0.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e6ffaeb9 code=0x7ffc0000 [ 152.244722][ T29] audit: type=1326 audit(1770584142.922:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8430 comm="syz.0.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e6ffaeb9 code=0x7ffc0000 [ 152.268144][ T29] audit: type=1326 audit(1770584142.932:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8430 comm="syz.0.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87e6ffaeb9 code=0x7ffc0000 [ 152.291638][ T29] audit: type=1400 audit(1770584142.932:3251): avc: denied { read write } for pid=8430 comm="syz.0.1783" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 152.314981][ T29] audit: type=1326 audit(1770584142.932:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8430 comm="syz.0.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e6ffaeb9 code=0x7ffc0000 [ 152.338520][ T29] audit: type=1326 audit(1770584142.932:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8430 comm="syz.0.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f87e6ffaeb9 code=0x7ffc0000 [ 152.361839][ T29] audit: type=1400 audit(1770584142.932:3254): avc: denied { ioctl } for pid=8430 comm="syz.0.1783" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 152.500320][ T8433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1784'. [ 152.517566][ T8433] macvlan2: entered promiscuous mode [ 152.555764][ T8436] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1786: couldn't read orphan inode 26 (err -116) [ 152.578133][ T8436] EXT4-fs (loop2): Remounting filesystem read-only [ 152.585085][ T8436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.597983][ T8436] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.610878][ T8436] EXT4-fs (loop2): shut down requested (0) [ 152.682728][ T8444] syzkaller0: entered promiscuous mode [ 152.688208][ T8444] syzkaller0: entered allmulticast mode [ 152.820570][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.851560][ T8455] bond1: down delay (128) is not a multiple of miimon (7), value rounded to 126 ms [ 152.860949][ T8455] bond1: peer notification delay (3) is not a multiple of miimon (7), value rounded to 0 ms [ 152.871190][ T8455] bond1: entered allmulticast mode [ 152.884418][ T8454] set_capacity_and_notify: 3 callbacks suppressed [ 152.884434][ T8454] loop2: detected capacity change from 0 to 8192 [ 152.900774][ T3004] ================================================================== [ 152.908988][ T3004] BUG: KCSAN: data-race in dont_mount / step_into_slowpath [ 152.916213][ T3004] [ 152.918555][ T3004] read-write to 0xffff8881079f8d80 of 4 bytes by task 3310 on cpu 0: [ 152.926634][ T3004] dont_mount+0x2a/0x40 [ 152.930800][ T3004] vfs_unlink+0x2ae/0x440 [ 152.935144][ T3004] do_unlinkat+0x1e2/0x4b0 [ 152.939574][ T3004] __x64_sys_unlink+0x2e/0x40 [ 152.944263][ T3004] x64_sys_call+0x2f48/0x3000 [ 152.948954][ T3004] do_syscall_64+0xc0/0x2a0 [ 152.953475][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.959373][ T3004] [ 152.961723][ T3004] read to 0xffff8881079f8d80 of 4 bytes by task 3004 on cpu 1: [ 152.969271][ T3004] step_into_slowpath+0xea/0x4c0 [ 152.974239][ T3004] path_lookupat+0x330/0x500 [ 152.978843][ T3004] filename_lookup+0x190/0x390 [ 152.983642][ T3004] do_readlinkat+0x7d/0x340 [ 152.988164][ T3004] __x64_sys_readlink+0x47/0x60 [ 152.993030][ T3004] x64_sys_call+0x2af1/0x3000 [ 152.997724][ T3004] do_syscall_64+0xc0/0x2a0 [ 153.002250][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.008153][ T3004] [ 153.010481][ T3004] value changed: 0x00300080 -> 0x00004080 [ 153.016199][ T3004] [ 153.018531][ T3004] Reported by Kernel Concurrency Sanitizer on: [ 153.024687][ T3004] CPU: 1 UID: 0 PID: 3004 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 153.035550][ T3004] Tainted: [W]=WARN [ 153.039356][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 153.049415][ T3004] ================================================================== [ 153.065851][ T8338] syz.4.1761 (8338) used greatest stack depth: 8672 bytes left [ 153.098222][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.