last executing test programs: 12.364632016s ago: executing program 4 (id=1918): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (fail_nth: 12) 12.034329859s ago: executing program 4 (id=1920): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x44, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa, 0x0, 0x3f}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0xcf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 12.027608209s ago: executing program 4 (id=1923): socket$nl_rdma(0x10, 0x3, 0x14) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsopen(&(0x7f0000000140)='pipefs\x00', 0x1) fsopen(&(0x7f0000000180)='affs\x00', 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/sctp\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2, 0x100, 0x0, @loopback={0xff00000000000000}}}, 0x24) 11.809549534s ago: executing program 4 (id=1927): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4556, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1003, 0x3}, 0x18, 0x0, 0xfffffffe, 0x1, 0x5, 0xfffffffa, 0x103, 0x0, 0x2, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1b) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711235000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$eJzs3T+LHGUcB/Df7M3OrlrsFlYiOKCFVciltdlDEhCvMmyhFnqYC8jtItzBgX9wTWVrY2HhKxAEX4iN70CwFeyMEHhkZmeyu5dlcxuyJyafT5MnzzzfeX7Ps8PdXHHPffzq9OROGXfvffV79PtZdEYxivtZDKMTrW9ixei7AAD+z+6nFH+luW1yWUT0d1cWALBDl/v+ny+av1xJWQDADt1+/4N3Dw4Pb75Xlv24Nf32fFz9ZF/9O79+cDc+jUkcx/UYxIOI+kWhG/XbQtW8lVKa5WVlGG9MZ+fjKjn96Nfm/gd/RtT5/RjEsO56+LZR5985vLlfzi3lZ1UdLzbzj6r8jRjEyw/DK/kba/IxLuLN15fqvxaD+O2T+CwmcacuYpH/er8s307f//3lh1V5VT6bnY979biFtHfFHw0AAAAAAAAAAAAAAAAAAAAAAM+wa83ZOb2oz++puprzd/YeVP/pRtkarp7PM89n7Y2WzwdKKc1S/Nier3O9LMvUDFzk83glXz5YEAAAAAAAAAAAAAAAAAAAAJ5fZ59/cXI0mRyfPpVGexpAHhH/3I540vuMlnpei82De82cR5NJp2mujsmXe2KvHZNFbCyjWsST7kYeW639hUdqbho//bzt7P3Hj+mun+tpNtqn6+QoW7+HvWh7+s1G/VBELMYUccm5ios9aTC/T9rqIyjWXhpsvfbipbox2zAmsk2FvfXHfOeanuziKop6V9fGu01jKX7h2bjU8xz9efzRrxWZ0zoAAAAAAAAAAAAAAAAAAGCnFr/9u+bivY3RTurtrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuFKLv/+/RWPWhI9Pz/LHDC7i9Ow/XiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgX8DAAD//x0KWZ8=") r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x0, 0x160) open_by_handle_at(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00r', @ANYRES64=r0, @ANYRES32=r1], 0x531500) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000005a80)=@ethtool_eeprom={0xb, 0x1000, 0xceca}}) socket$packet(0x11, 0x3, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r3, 0x200, &(0x7f0000000480)={0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0x48, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_ACT={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) socket(0x10, 0x803, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd00) keyctl$read(0xb, 0x0, &(0x7f0000000280)=""/90, 0x5a) socket$l2tp6(0xa, 0x2, 0x73) socket$inet_smc(0x2b, 0x1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000008, 0x4010, 0xffffffffffffffff, 0x8000000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) 11.184332876s ago: executing program 4 (id=1941): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file2\x00', 0x8040, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1, 0x2d1, &(0x7f0000000740)="$eJzs3T9rJGUcB/DfbGb/qMVuYSWCA1pYHZdrbTbIHYipPLY4LTR4dyDZRUgg4h9cU4mdjaWvQBB8ITZ2loKtYGeEwMjMzmR3k3GzkWxE8/kUyZOZ5zvP73lmkkyTJ++9ONl/nMXT489+iV4vidawG3GSxCBaUfsilgy/DgDgv+wkz+P3fKbh9M9frcj2NlgXALA5l/z+r6Tlx0dFjx9urjYAYDMePnr7zZ3d3ftvZVkvHky+PBolEVF8np3feRofxDiexN3ox2lE+aLQjvJtoWg+yPN8mmaFQbwymR6NiuTk3R+r6+/8FlHmt6Mfg/LQ2dtGmX9j9/52NrOQnxZ1PFuNPyzy96Ifz5+Fl/L3GvIx6sSrLy/Ufyf68dP78WGM43FZxDz/+XaWvZ5/88en7xTlFflkejTqlv3m8q168OkN3yMAAAAAAAAAAAAAAAAAAAAAAP5/7lR753Sj3L+nOFTtv7N1WnzRjqw2WN6fZ5ZP6gvN9weKVp7n0zy+rffXuZtlWV51nOfTeCGtNhYEAAAAAAAAAAAAAAAAAACAW+7w40/298bjJwfX0qh3A0gj4s+HEf/0OsOFIy/F6s7dasy98bhVNZf7pItHYqvuk0SsLKOYxDUty2WNZy7UXDW++74xVczoMI2mU73LB203j3XFxkft2To29qmfrv29pHkNu2fF94obF+dvXCeaR2/HuSOdv6uwfhTXm06n8VT/ysvSea5sTFf0iWTV98Vrv87KXpjFUp9OuaqN8XbVWIifezbWep6jN4tf/FmR2K0DAAAAAAAAAAAAAAAAAAA2av7Xvw0nj1dGW3l3Y2UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI2a////dRrpcniNVCcODv+tuQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB7/BUAAP//vaZV2Q==") r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0xb) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r1, 0x1) poll(&(0x7f0000000100)=[{r1, 0x84}], 0x1, 0x3ff) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) accept4(r1, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xff}, 0x1c) creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000040)=0xc8, 0x4) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x401, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000180), 0xe}, 0x100b28, 0x6, 0x0, 0x2, 0x8, 0x6, 0x7, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r3, &(0x7f0000000440)}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000007ddc43870005f3ff94000c0000000000"], &(0x7f0000000040)='GPL\x00'}, 0x80) socket$unix(0x1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0xc, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x2, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xb, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000480)='net/xfrm_stat\x00') epoll_create1(0x0) 11.006826508s ago: executing program 4 (id=1942): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x0, 0x160) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00r'], 0x531500) 10.99075438s ago: executing program 32 (id=1942): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x0, 0x160) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00r'], 0x531500) 5.961352933s ago: executing program 3 (id=2001): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x81}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e008d2a0000010000000000", @ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) 5.927580426s ago: executing program 3 (id=2004): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x0, 0x1, 0x900, 0x0, 0xffffff80}}) (fail_nth: 5) 5.436901069s ago: executing program 3 (id=2007): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x0, 0x1, 0x904, 0x0, 0xffffff80}}) 5.390436922s ago: executing program 3 (id=2009): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) syz_pidfd_open(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) accept(r1, &(0x7f0000000180)=@l2tp, &(0x7f0000000200)=0x80) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x262) 5.327939466s ago: executing program 3 (id=2012): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x50148, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) (fail_nth: 7) 5.142253599s ago: executing program 3 (id=2018): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x1c, r1, 0x109, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44880}, 0x800) 5.142108249s ago: executing program 33 (id=2018): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x1c, r1, 0x109, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44880}, 0x800) 4.358423972s ago: executing program 0 (id=2027): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004500000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2c, '\x00', 0x0, @sk_msg}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) fcntl$addseals(r1, 0x409, 0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x78bd30, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x7}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x1, 0x4, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x7, 0x11, 0x80000000, 0xa81}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000300)={@ipv4={""/10, ""/2, @initdev}, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0x8, 0x5, {{0x1a, 0x4, 0x2, 0x31, 0x68, 0x64, 0x0, 0xff, 0x14, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x40}, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x3b, 0x0, [{0x2, 0x5, "163d37"}, {0x5, 0xb, "3789a7ce6d3db76a76"}, {0x2, 0x3, 'j'}, {0x2, 0x2}, {0x2, 0x9, "922d11619ab0cb"}, {0x6, 0x6, "e8a4ca3d"}, {0x2, 0x6, "470ac693"}, {0x2, 0xb, "504dd9f4a44f40db9b"}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x94, 0x3, 0x8, [{@rand_addr=0x64010101, 0x8}]}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x1a0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40041}, 0x24000800) 4.281820377s ago: executing program 0 (id=2029): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x5, 0x2}, @rumble={0x1, 0x8}}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x64942, 0x106) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/22, 0x16}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x804) madvise(&(0x7f00004fa000/0x1000)=nil, 0x1000, 0x15) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unshare(0x60000600) r1 = socket(0x840000000002, 0x3, 0xff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x1c, 0x4}, 0x0) futex(0x0, 0xa, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r3) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) listen(r4, 0x787) mount$9p_fd(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000200), 0x2004402, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x25, 0x1, 0x0) bind$packet(r1, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(0x0, &(0x7f0000000080)={0x0, 0x100, 0xe79c, 0x1, 0x3ff, 0xcdd7}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'}) 3.237633799s ago: executing program 0 (id=2037): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400000c, &(0x7f0000000140)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@nomblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x488, &(0x7f0000000440)="$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") sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x1c0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f0000000040)='m', 0x1}], 0x1, 0x2, 0x6, 0x1a) 2.933787009s ago: executing program 0 (id=2039): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x11004, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x1a0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018001000000000000c0000000c000000020000000000000000000006040000000000"], &(0x7f0000001f40)=""/4100, 0x26, 0x1004, 0xd, 0xfffffffa}, 0x28) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'bridge_slave_1\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x1b, 0x5, 0x5, "a83e6fc491"}}) (async) r2 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000340), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x88c, 0x30, 0xfbed, 0x70bd29, 0x25dfdbff, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x6, 0x0, 0x3, 0x4, 0x2, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x2, 0x5f41fde7, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7ff, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x1, 0x0, 0x100000, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x75b, 0x0, 0x0, 0xf, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xaa84911, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x3, 0x100, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xfff, 0x1, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x200, 0x0, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x40000, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x17a00, 0x0, 0x5, 0x80, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8db, 0xffffffff, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1401, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0xfffffffe, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7fffffff, 0x3ff, 0x0, 0x0, 0x4000, 0x10, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0xfffffff9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x319e, 0xfb18, 0x6, 0x9, 0x0, 0x484a, 0x0, 0x2, 0xffffffff, 0x6, 0x0, 0xfffffffc, 0x9, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfbfffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x5a62]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0xff, 0xfffc, 0x5}, {0x5, 0x0, 0x0, 0x9, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x2}}}}]}]}, 0x88c}}, 0x0) (async, rerun: 32) r3 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x80044940, &(0x7f00000010c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r9, 0x84, 0x15, &(0x7f0000000080), 0x1) (async) r10 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r10, 0x6b, 0x2, 0x0, &(0x7f0000000200)) (async, rerun: 32) sendto$inet6(r9, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 32) sendto$inet6(r9, &(0x7f0000000140)="87", 0x1, 0x20004000, 0x0, 0x0) (async) sendto$inet6(r9, &(0x7f0000000180)='`', 0x1, 0x1, 0x0, 0x0) (async) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x7) ptrace$setregs(0xf, r11, 0x2, 0x0) (async, rerun: 64) syz_open_procfs(r11, &(0x7f00000001c0)='cpuset\x00') (rerun: 64) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16=r8, @ANYRES64=r6, @ANYRES16=r5, @ANYRES16=r8, @ANYRES64=r6, @ANYRES16=r7, @ANYRES16, @ANYBLOB="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", @ANYRES32, @ANYRES32=r4], 0x5, 0x0, &(0x7f0000000000)) (async, rerun: 32) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000003c0)={{r0}, r8, 0x2, @unused=[0x6, 0x10, 0x80, 0x2b], @subvolid=0x5}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061107a000000000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x23) 2.557485155s ago: executing program 0 (id=2043): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfffffdff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mknod(0x0, 0x8001420, 0x1) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_proto_private(r1, 0x89ed, &(0x7f0000000280)="c3c699712657b9e43fc7") r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETGROUP(r5, 0x400454ce, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) tee(r3, r6, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x3, 0x7}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x3, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x26}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r7, &(0x7f0000004040)=[{{0x0, 0xffffffffffffff31, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/127, 0x7f}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/202, 0xc9}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x6, 0x40000002, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002540)=""/1, 0x1) 2.387212797s ago: executing program 0 (id=2046): ioprio_set$uid(0x0, 0x0, 0x2000) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@multicast2, @local}, 0xc) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000380)=@can, 0x80, &(0x7f0000000440)=[{&(0x7f0000000400)=""/47, 0x2f}], 0x1, &(0x7f0000000780)=""/124, 0x7c}, 0x3ff}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/111, 0x6f}, {&(0x7f0000000900)=""/87, 0x57}, {&(0x7f0000000980)=""/68, 0x44}, {&(0x7f0000000c00)=""/214, 0xffffff59}], 0x4, &(0x7f0000000b40)=""/14, 0xe}, 0xb}], 0x2, 0x2, 0x0) r3 = timerfd_create(0x7, 0x80000) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@minixdf}]}, 0x1, 0x27e, &(0x7f0000000500)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) r5 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000001040)={0xc000001c}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r3, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xb5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) socket$nl_rdma(0x10, 0x3, 0x14) 2.179518351s ago: executing program 2 (id=2052): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@nat={'nat\x00', 0x2, 0x5, 0x498, 0x0, 0x3c8, 0xffffffff, 0x2f8, 0xf0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'ip6gretap0\x00', 'veth0_to_batadv\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x15, @ipv6=@loopback, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}}}, {{@ipv6={@dev, @loopback, [0xffffffff], [0x0, 0x0, 0x0, 0xff000000], 'batadv0\x00', 'pimreg0\x00', {}, {}, 0x89}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0xac6, 0x1, 0x9, 0x6, 0xd28, 0x8, 0x5}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x10}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x10, @ipv6=@private1, @ipv6=@loopback, @icmp_id=0x65, @icmp_id=0x68}}}, {{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x0, 0x100000100], [0x0, 0x0, 0x0, 0xff000000], 'ipvlan0\x00', 'pim6reg\x00', {}, {}, 0x0, 0xfe}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f8) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x1c, r2, 0x109, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44880}, 0x800) 2.106309326s ago: executing program 2 (id=2053): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x81}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e008d2a0000010000000000", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) 2.079189768s ago: executing program 2 (id=2054): creat(&(0x7f0000000100)='./bus\x00', 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d1, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r0, &(0x7f00000002c0), 0xcd) open(&(0x7f00000000c0)='./bus\x00', 0x10507e, 0xa6) 2.04412227s ago: executing program 1 (id=2055): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r2, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}}, &(0x7f0000000200)) 2.017794202s ago: executing program 2 (id=2056): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x2}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x1}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x80000, 0x20000, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xc0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x8, 0x2, 0x7fffffff, 0x5, 0x0, 0x0, 0x0, 0x7ffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f8, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0) timer_settime(r2, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r2, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}}, &(0x7f0000000200)) 1.916461819s ago: executing program 1 (id=2058): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb9}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x14, r2, 0x4, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0xc040) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 1.806267806s ago: executing program 1 (id=2059): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000780), 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) write$binfmt_script(r0, &(0x7f0000001d00)={'#! ', './file1'}, 0xb) (fail_nth: 4) 1.589294691s ago: executing program 6 (id=2061): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x60, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xa5}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x5}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c4}, 0x4008040) (fail_nth: 5) 1.505318647s ago: executing program 1 (id=2062): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400d, &(0x7f0000000000), 0x6, 0x50d, &(0x7f00000006c0)="$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") syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000880)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x459, &(0x7f0000001680)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x324a038, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f0000004000), 0x5, 0x1, 0x0, &(0x7f0000004000), 0xa2020000) 1.344598978s ago: executing program 6 (id=2064): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x1c, 0x4e20, 0x8}}}}}, 0x0) 1.330203059s ago: executing program 6 (id=2065): creat(&(0x7f0000000100)='./bus\x00', 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d1, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r0, &(0x7f00000002c0), 0xcd) open(&(0x7f00000000c0)='./bus\x00', 0x10507e, 0xa6) 1.194788008s ago: executing program 5 (id=2066): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r2, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}}, &(0x7f0000000200)) 1.177622729s ago: executing program 6 (id=2067): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000005200ebffffffffffffff00001c"], 0x18}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26}, 0x28) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee00, &(0x7f00000000c0)={0xfff, 0xfff, 0x0, 0x8, 0x100000001, 0x4, 0x6, 0x4, 0xffffffff}) 977.739483ms ago: executing program 5 (id=2068): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f0000000080)=""/37) io_setup(0x5, &(0x7f0000000e80)=0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x300000000000000, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000080)="8c", 0x1}]) 416.603381ms ago: executing program 5 (id=2069): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000180)) (async) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80f93e24fc60049d0d", 0x13}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070ca00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) 338.511607ms ago: executing program 5 (id=2070): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback={0x2c01}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x200000001, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$cgroup_pid(r1, &(0x7f00000003c0), 0x12) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0xf}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 258.091702ms ago: executing program 6 (id=2071): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfffffdff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mknod(0x0, 0x8001420, 0x1) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_proto_private(r1, 0x89ed, &(0x7f0000000280)="c3c699712657b9e43fc76db0") r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETGROUP(r5, 0x400454ce, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) tee(r3, r6, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x3, 0x7}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x3, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x26}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r7, &(0x7f0000004040)=[{{0x0, 0xffffffffffffff31, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/127, 0x7f}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/202, 0xc9}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x6, 0x40000002, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002540)=""/1, 0x1) 257.375922ms ago: executing program 5 (id=2072): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'ip6gre0\x00'}}, 0x1e) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4840) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@allocspi={0x100, 0x16, 0x401, 0xfffffffd, 0xfffffffe, {{{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x4, 0x0, 0x4e20, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x40}, {0x4, 0xffffffffffffa55e, 0x3, 0x0, 0x3, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x2}, {0x10000000, 0x0, 0x3}, 0xfffffffe, 0x0, 0xa, 0x0, 0x0, 0x90}, 0xc, 0xfffffffd}, [@proto={0x5, 0x19, 0x33}]}, 0x100}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 228.258814ms ago: executing program 2 (id=2073): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x3c26c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x0, 0x44}, 0x10026, 0x10003, 0x1, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070000000000000000000500000000000600260000005bff0380200511257f9cdafdf3e29b3edb764d1ee8ff21abc409ac23853b754b0146927bc220ffdf9ebceebcde069d49266f2e5aecf36bbf2ad939f833de9e704fb51658e03fcc3f55f328e1b0b89eaba11901cf130965837998e0289fc55e185e418d9fde0f8d2c966e0fd041ad8f7004c43d8e1dbfa4f558f360329771711df3bab843aa49c58bdc6e0ac1"], 0x30}}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x80}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x18}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20020800}, 0x0) 177.192258ms ago: executing program 5 (id=2074): futex(&(0x7f00000000c0)=0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffd, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001040)="90", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[], 0x160}}], 0x2, 0x40480c0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000200)={0x6, r0, 'id0\x00'}) close(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x11, 0x3, 0x10001) r4 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xff05, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x1}}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f00)={&(0x7f0000000e80)=ANY=[@ANYBLOB="9feb01fd18000000000000001800000018000000060000000400000001000093010000000300000001000100ff000000006130612e00"], 0x0, 0x36, 0x0, 0x1}, 0x28) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000140)=0x3) 73.840255ms ago: executing program 6 (id=2075): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="760a00000000000061113c0000007015eaf000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000180001002dbd70000000000002100000fc08000900000005060015000200000014001687100008800c0003800500040006000000"], 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) listen(r5, 0x0) ptrace$setsig(0x4203, r4, 0xfffffffffffffffe, &(0x7f0000000240)={0x3a, 0x9, 0x1}) accept4(r5, 0x0, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', 0x1000, 0x8, 0x0) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f00000000c0)=0x7fc4, 0x4) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0xffff, r6}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)="eb5d039c4169adf8b83ed279994aa66a8760edcee7f55345c6fa4b7be8aa71493b3fefe01e238a522ffb4515f2c80000d0586f145da9a9b2d81a206e759f5c141969d019a4f38d06141476d1fc3ffbec655b0f3d56b72a1a68bb399e2357d219998513364118f94ea689c1f3dac8b442682aff0a828c829b9411d88d78ddd87599794f67bc827f35c0ec5eb3969ee4ab1d96dbe4dea15264f598aee737b358887675937dfb1640da80d2cbff", &(0x7f00000002c0), 0xff, r6, 0x0, 0xd88d02a0}, 0x38) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x8, &(0x7f0000000140)=[{0x1, 0x80, 0x0, 0xf}, {0x9, 0x80, 0x2, 0x7fff}, {0x0, 0x3, 0xfc, 0x8}, {0x9, 0x4, 0x0, 0x8}, {0x6, 0xff, 0x7f, 0x10001}, {0x50c, 0xc, 0x7, 0x7f}, {0x1, 0x0, 0x49, 0x6}, {0x0, 0x0, 0xa, 0x401}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = syz_io_uring_setup(0x2afc, &(0x7f00000003c0)={0x0, 0x59cd, 0x13090, 0x0, 0x72}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) io_uring_enter(r8, 0x21d2, 0x2707, 0x23, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a"], 0x54}}, 0x4800) 319.92µs ago: executing program 2 (id=2076): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000280)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f0000000540)}, 0x10000000) 0s ago: executing program 1 (id=2077): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) fcntl$getown(r0, 0x9) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100), 0x0) kernel console output (not intermixed with test programs): terval 1, probability 0, space 0, times 0 [ 236.083820][ T8885] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1637'. [ 236.107913][ T8883] CPU: 1 UID: 0 PID: 8883 Comm: syz.4.1636 Tainted: G W syzkaller #0 PREEMPT(full) [ 236.107945][ T8883] Tainted: [W]=WARN [ 236.107989][ T8883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 236.108003][ T8883] Call Trace: [ 236.108010][ T8883] [ 236.108019][ T8883] __dump_stack+0x1d/0x30 [ 236.108105][ T8883] dump_stack_lvl+0x95/0xd0 [ 236.108167][ T8883] dump_stack+0x15/0x1b [ 236.108192][ T8883] should_fail_ex+0x263/0x280 [ 236.108222][ T8883] should_failslab+0x8c/0xb0 [ 236.108291][ T8883] __kmalloc_noprof+0xb8/0x4e0 [ 236.108318][ T8883] ? bpf_uprobe_multi_link_fill_link_info+0x1cb/0x500 [ 236.108346][ T8883] bpf_uprobe_multi_link_fill_link_info+0x1cb/0x500 [ 236.108378][ T8883] bpf_obj_get_info_by_fd+0xe8b/0x2370 [ 236.108407][ T8883] ? _parse_integer+0x27/0x40 [ 236.108434][ T8883] ? kstrtoull+0x111/0x140 [ 236.108530][ T8883] ? kstrtouint_from_user+0xa8/0xf0 [ 236.108573][ T8883] ? __rcu_read_unlock+0x4e/0x70 [ 236.108619][ T8883] ? selinux_bpf+0xc7/0xe0 [ 236.108645][ T8883] __sys_bpf+0x557/0x7e0 [ 236.108670][ T8883] __x64_sys_bpf+0x41/0x50 [ 236.108689][ T8883] x64_sys_call+0x10cb/0x3020 [ 236.108714][ T8883] do_syscall_64+0x12c/0x370 [ 236.108785][ T8883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.108810][ T8883] RIP: 0033:0x7f53ee57c819 [ 236.108826][ T8883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.108844][ T8883] RSP: 002b:00007f53ecfd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 236.108864][ T8883] RAX: ffffffffffffffda RBX: 00007f53ee7f5fa0 RCX: 00007f53ee57c819 [ 236.108980][ T8883] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f [ 236.108996][ T8883] RBP: 00007f53ecfd7090 R08: 0000000000000000 R09: 0000000000000000 [ 236.109020][ T8883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.109032][ T8883] R13: 00007f53ee7f6038 R14: 00007f53ee7f5fa0 R15: 00007fff9093f0e8 [ 236.109116][ T8883] [ 236.312733][ T8885] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1637'. [ 236.422205][ T8886] loop1: detected capacity change from 0 to 512 [ 236.504715][ T8902] lo speed is unknown, defaulting to 1000 [ 236.528441][ T8902] dummy0 speed is unknown, defaulting to 1000 [ 236.576908][ T8913] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1643'. [ 236.606085][ T8886] EXT4-fs (loop1): 1 orphan inode deleted [ 236.613541][ T4222] __quota_error: 412 callbacks suppressed [ 236.613557][ T4222] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 236.663412][ T8925] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1644'. [ 236.683975][ T4222] EXT4-fs error (device loop1): ext4_release_dquot:7062: comm kworker/u8:10: Failed to release dquot type 1 [ 236.717880][ T4222] loop1: lost filesystem error report for type 5 error -117 [ 236.775303][ T8886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.035061][ T8935] loop2: detected capacity change from 0 to 512 [ 237.203813][ T8935] EXT4-fs (loop2): 1 orphan inode deleted [ 237.220764][ T8935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.236443][ T8935] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.842208][ T8886] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.931701][ T8932] netlink: 'syz.0.1646': attribute type 4 has an invalid length. [ 237.950393][ T6215] Bluetooth: hci0: Frame reassembly failed (-84) [ 237.963109][ T28] audit: type=1400 audit(2000032944.209:2379): avc: denied { ioctl } for pid=8948 comm="syz.3.1650" path="socket:[22203]" dev="sockfs" ino=22203 ioctlcmd=0x48cc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 238.142835][ T8950] lo speed is unknown, defaulting to 1000 [ 238.200836][ T8950] dummy0 speed is unknown, defaulting to 1000 [ 238.332352][ T8951] lo speed is unknown, defaulting to 1000 [ 238.365606][ T8951] dummy0 speed is unknown, defaulting to 1000 [ 238.517956][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.097780][ T28] audit: type=1400 audit(2000032945.395:2380): avc: denied { getopt } for pid=8966 comm="syz.0.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 239.842342][ T8969] syzkaller1: entered promiscuous mode [ 239.867698][ T8969] syzkaller1: entered allmulticast mode [ 239.876804][ T3515] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 239.928134][ T8977] netlink: 'syz.2.1657': attribute type 1 has an invalid length. [ 239.934722][ T28] audit: type=1400 audit(2000032946.266:2381): avc: denied { watch watch_reads } for pid=8970 comm="syz.2.1657" path="/341" dev="tmpfs" ino=1830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 239.984639][ T8977] 8021q: adding VLAN 0 to HW filter on device bond7 [ 240.001080][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1657'. [ 240.056655][ T28] audit: type=1400 audit(2000032946.403:2382): avc: denied { read } for pid=8973 comm="syz.3.1659" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 240.086354][ T28] audit: type=1400 audit(2000032946.403:2383): avc: denied { open } for pid=8973 comm="syz.3.1659" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 240.110652][ T28] audit: type=1400 audit(2000032946.445:2384): avc: denied { ioctl } for pid=8973 comm="syz.3.1659" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 240.113519][ T8977] macvlan4: entered promiscuous mode [ 240.137693][ T28] audit: type=1326 audit(2000032946.487:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8981 comm="syz.0.1660" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa429ac819 code=0x0 [ 240.169541][ T8977] macvlan4: entered allmulticast mode [ 240.176161][ T8977] bond7: entered promiscuous mode [ 240.181705][ T8977] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 240.201884][ T8977] bond7: left promiscuous mode [ 240.404815][ T8991] loop4: detected capacity change from 0 to 4096 [ 240.416891][ T8994] netlink: 'syz.0.1664': attribute type 7 has an invalid length. [ 240.448150][ T8991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.506716][ T8991] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #15: comm syz.4.1663: corrupted inode contents [ 240.529302][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.548285][ T8991] EXT4-fs error (device loop4): ext4_dirty_inode:6495: inode #15: comm syz.4.1663: mark_inode_dirty error [ 240.587795][ T28] audit: type=1400 audit(2000032946.949:2386): avc: denied { remove_name } for pid=8990 comm="syz.4.1663" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 240.620401][ T8991] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #15: comm syz.4.1663: corrupted inode contents [ 240.639326][ T8991] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.1663: mark_inode_dirty error [ 240.654804][ T9003] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1665'. [ 240.656693][ T28] audit: type=1400 audit(2000032946.949:2387): avc: denied { rename } for pid=8990 comm="syz.4.1663" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 240.701194][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1663'. [ 240.712873][ T8991] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #15: comm syz.4.1663: corrupted inode contents [ 240.757723][ T8991] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.1663: mark_inode_dirty error [ 240.786054][ T8991] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #15: comm syz.4.1663: corrupted inode contents [ 240.815593][ T8991] EXT4-fs error (device loop4): ext4_truncate:4602: inode #15: comm syz.4.1663: mark_inode_dirty error [ 240.841248][ T8991] EXT4-fs error (device loop4) in ext4_setattr:6028: Corrupt filesystem [ 240.859902][ T9000] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #15: comm syz.4.1663: corrupted inode contents [ 240.980856][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.040175][ T9011] FAULT_INJECTION: forcing a failure. [ 241.040175][ T9011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.067494][ T9011] CPU: 1 UID: 0 PID: 9011 Comm: syz.4.1667 Tainted: G W syzkaller #0 PREEMPT(full) [ 241.067535][ T9011] Tainted: [W]=WARN [ 241.067621][ T9011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 241.067634][ T9011] Call Trace: [ 241.067641][ T9011] [ 241.067650][ T9011] __dump_stack+0x1d/0x30 [ 241.067708][ T9011] dump_stack_lvl+0x95/0xd0 [ 241.067733][ T9011] dump_stack+0x15/0x1b [ 241.067756][ T9011] should_fail_ex+0x263/0x280 [ 241.067796][ T9011] should_fail+0xb/0x20 [ 241.067821][ T9011] should_fail_usercopy+0x1a/0x20 [ 241.067851][ T9011] _copy_from_iter+0xcf/0xea0 [ 241.067916][ T9011] ? __alloc_skb+0x4f6/0x690 [ 241.067947][ T9011] ? __alloc_skb+0x200/0x690 [ 241.067977][ T9011] netlink_sendmsg+0x4ae/0x6f0 [ 241.068002][ T9011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.068023][ T9011] ____sys_sendmsg+0x563/0x5b0 [ 241.068045][ T9011] ___sys_sendmsg+0x195/0x1e0 [ 241.068074][ T9011] __x64_sys_sendmsg+0xd4/0x160 [ 241.068178][ T9011] x64_sys_call+0x194c/0x3020 [ 241.068206][ T9011] do_syscall_64+0x12c/0x370 [ 241.068236][ T9011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.068259][ T9011] RIP: 0033:0x7f53ee57c819 [ 241.068355][ T9011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.068452][ T9011] RSP: 002b:00007f53ecfd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.068476][ T9011] RAX: ffffffffffffffda RBX: 00007f53ee7f5fa0 RCX: 00007f53ee57c819 [ 241.068533][ T9011] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 241.068548][ T9011] RBP: 00007f53ecfd7090 R08: 0000000000000000 R09: 0000000000000000 [ 241.068562][ T9011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.068576][ T9011] R13: 00007f53ee7f6038 R14: 00007f53ee7f5fa0 R15: 00007fff9093f0e8 [ 241.068595][ T9011] [ 241.400472][ T9018] loop2: detected capacity change from 0 to 512 [ 241.489343][ T9018] syzkaller0: entered promiscuous mode [ 241.500170][ T9018] syzkaller0: entered allmulticast mode [ 241.507023][ T9018] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 241.528601][ T9027] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20004 [ 241.602967][ T9034] x_tables: duplicate underflow at hook 2 [ 241.712825][ T9046] loop4: detected capacity change from 0 to 1024 [ 241.768111][ T9046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.812445][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 241.812464][ T28] audit: type=1400 audit(2000032948.251:2391): avc: denied { execute } for pid=9045 comm="syz.4.1679" path="/303/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 241.947245][ T9060] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1679'. [ 242.038497][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.221085][ T9065] loop4: detected capacity change from 0 to 8192 [ 242.263282][ T28] audit: type=1400 audit(2000032948.723:2392): avc: denied { mounton } for pid=9064 comm="syz.4.1684" path="/304/file1/bus" dev="loop4" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 242.519978][ T9075] FAULT_INJECTION: forcing a failure. [ 242.519978][ T9075] name failslab, interval 1, probability 0, space 0, times 0 [ 242.546003][ T9075] CPU: 0 UID: 0 PID: 9075 Comm: syz.0.1686 Tainted: G W syzkaller #0 PREEMPT(full) [ 242.546043][ T9075] Tainted: [W]=WARN [ 242.546051][ T9075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 242.546092][ T9075] Call Trace: [ 242.546098][ T9075] [ 242.546147][ T9075] __dump_stack+0x1d/0x30 [ 242.546249][ T9075] dump_stack_lvl+0x95/0xd0 [ 242.546276][ T9075] dump_stack+0x15/0x1b [ 242.546296][ T9075] should_fail_ex+0x263/0x280 [ 242.546329][ T9075] should_failslab+0x8c/0xb0 [ 242.546355][ T9075] kmem_cache_alloc_noprof+0x66/0x400 [ 242.546381][ T9075] ? __inet_bhash2_update_saddr+0x128/0xf70 [ 242.546437][ T9075] __inet_bhash2_update_saddr+0x128/0xf70 [ 242.546475][ T9075] ? xfrm_lookup_route+0xd6/0x110 [ 242.546508][ T9075] inet_bhash2_update_saddr+0x25/0x30 [ 242.546668][ T9075] tcp_v6_connect+0x7db/0xcc0 [ 242.546709][ T9075] ? avc_has_perm_noaudit+0xab/0x130 [ 242.546746][ T9075] __inet_stream_connect+0x169/0x7f0 [ 242.546777][ T9075] ? tcp_sendmsg_fastopen+0x172/0x520 [ 242.546849][ T9075] ? should_failslab+0x8c/0xb0 [ 242.546873][ T9075] ? __kmalloc_cache_noprof+0x18a/0x410 [ 242.546922][ T9075] tcp_sendmsg_fastopen+0x43a/0x520 [ 242.546953][ T9075] tcp_sendmsg_locked+0x2939/0x2de0 [ 242.546984][ T9075] ? __rcu_read_unlock+0x4e/0x70 [ 242.547098][ T9075] ? terminate_walk+0x1e6/0x210 [ 242.547128][ T9075] ? path_openat+0x1ab2/0x2050 [ 242.547224][ T9075] ? path_openat+0x1b01/0x2050 [ 242.547243][ T9075] ? __rcu_read_unlock+0x4e/0x70 [ 242.547266][ T9075] ? avc_has_perm_noaudit+0xab/0x130 [ 242.547314][ T9075] ? avc_has_perm+0x101/0x190 [ 242.547421][ T9075] ? _raw_spin_lock_bh+0x56/0xb0 [ 242.547455][ T9075] ? __pfx_tcp_sendmsg+0x10/0x10 [ 242.547480][ T9075] ? __pfx_inet6_sendmsg+0x10/0x10 [ 242.547508][ T9075] tcp_sendmsg+0x2f/0x50 [ 242.547562][ T9075] inet6_sendmsg+0x76/0xd0 [ 242.547589][ T9075] __sys_sendto+0x325/0x490 [ 242.547667][ T9075] __x64_sys_sendto+0x76/0x90 [ 242.547701][ T9075] x64_sys_call+0x2d35/0x3020 [ 242.547730][ T9075] do_syscall_64+0x12c/0x370 [ 242.547766][ T9075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.547809][ T9075] RIP: 0033:0x7faa429ac819 [ 242.547835][ T9075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.547858][ T9075] RSP: 002b:00007faa41407028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 242.547879][ T9075] RAX: ffffffffffffffda RBX: 00007faa42c25fa0 RCX: 00007faa429ac819 [ 242.547895][ T9075] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 242.547977][ T9075] RBP: 00007faa41407090 R08: 00002000000001c0 R09: 000000000000001c [ 242.547993][ T9075] R10: 0000000020008045 R11: 0000000000000246 R12: 0000000000000001 [ 242.548006][ T9075] R13: 00007faa42c26038 R14: 00007faa42c25fa0 R15: 00007ffc5d300f88 [ 242.548027][ T9075] [ 242.894728][ T9072] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 242.896114][ T28] audit: type=1400 audit(2000032949.374:2393): avc: denied { firmware_load } for pid=9058 comm="syz.2.1683" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 242.915509][ T9072] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 242.954615][ T9042] lo speed is unknown, defaulting to 1000 [ 242.977317][ T9042] dummy0 speed is unknown, defaulting to 1000 [ 243.199637][ T9087] FAULT_INJECTION: forcing a failure. [ 243.199637][ T9087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.213056][ T9087] CPU: 0 UID: 0 PID: 9087 Comm: syz.3.1691 Tainted: G W syzkaller #0 PREEMPT(full) [ 243.213161][ T9087] Tainted: [W]=WARN [ 243.213168][ T9087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 243.213181][ T9087] Call Trace: [ 243.213259][ T9087] [ 243.213267][ T9087] __dump_stack+0x1d/0x30 [ 243.213294][ T9087] dump_stack_lvl+0x95/0xd0 [ 243.213317][ T9087] dump_stack+0x15/0x1b [ 243.213417][ T9087] should_fail_ex+0x263/0x280 [ 243.213446][ T9087] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 243.213480][ T9087] should_fail+0xb/0x20 [ 243.213539][ T9087] should_fail_usercopy+0x1a/0x20 [ 243.213569][ T9087] _copy_from_user+0x1c/0xb0 [ 243.213598][ T9087] do_pagemap_cmd+0x77/0xc10 [ 243.213721][ T9087] ? do_vfs_ioctl+0x7c9/0xe70 [ 243.213748][ T9087] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 243.213934][ T9087] __se_sys_ioctl+0xce/0x140 [ 243.213957][ T9087] __x64_sys_ioctl+0x43/0x50 [ 243.213979][ T9087] x64_sys_call+0x1563/0x3020 [ 243.214086][ T9087] do_syscall_64+0x12c/0x370 [ 243.214119][ T9087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.214145][ T9087] RIP: 0033:0x7f3f37aac819 [ 243.214165][ T9087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.214187][ T9087] RSP: 002b:00007f3f364ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.214247][ T9087] RAX: ffffffffffffffda RBX: 00007f3f37d25fa0 RCX: 00007f3f37aac819 [ 243.214265][ T9087] RDX: 0000200000000140 RSI: 00000000c0606610 RDI: 0000000000000006 [ 243.214282][ T9087] RBP: 00007f3f364ff090 R08: 0000000000000000 R09: 0000000000000000 [ 243.214297][ T9087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.214312][ T9087] R13: 00007f3f37d26038 R14: 00007f3f37d25fa0 R15: 00007fff268d0548 [ 243.214365][ T9087] [ 243.477228][ T9095] loop3: detected capacity change from 0 to 1024 [ 243.486895][ T9095] EXT4-fs: test_dummy_encryption option not supported [ 243.569027][ T9102] loop2: detected capacity change from 0 to 512 [ 243.582607][ T9102] EXT4-fs (loop2): 1 truncate cleaned up [ 243.588734][ T9102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.610381][ T9105] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1699'. [ 243.702323][ T9107] bridge7: entered promiscuous mode [ 243.718174][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.761712][ T9113] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1702'. [ 243.798109][ T9120] loop0: detected capacity change from 0 to 512 [ 243.800145][ T9118] syzkaller0: entered promiscuous mode [ 243.810517][ T9118] syzkaller0: entered allmulticast mode [ 243.821705][ T9118] tipc: Enabled bearer , priority 0 [ 243.862378][ T9125] loop4: detected capacity change from 0 to 512 [ 243.879076][ T9120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.882612][ T9125] EXT4-fs: Ignoring removed orlov option [ 243.897702][ T9117] tipc: Resetting bearer [ 243.904104][ T9120] ext4 filesystem being mounted at /344/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.924984][ T9117] tipc: Disabling bearer [ 243.946660][ T28] audit: type=1400 audit(2000032950.487:2394): avc: denied { bind } for pid=9119 comm="syz.0.1705" lport=21717 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 243.998079][ T9125] ext4: Unknown parameter 'func' [ 244.017639][ T9129] FAULT_INJECTION: forcing a failure. [ 244.017639][ T9129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.033138][ T9129] CPU: 1 UID: 0 PID: 9129 Comm: syz.1.1708 Tainted: G W syzkaller #0 PREEMPT(full) [ 244.033218][ T9129] Tainted: [W]=WARN [ 244.033226][ T9129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 244.033239][ T9129] Call Trace: [ 244.033247][ T9129] [ 244.033321][ T9129] __dump_stack+0x1d/0x30 [ 244.033351][ T9129] dump_stack_lvl+0x95/0xd0 [ 244.033378][ T9129] dump_stack+0x15/0x1b [ 244.033473][ T9129] should_fail_ex+0x263/0x280 [ 244.033505][ T9129] should_fail+0xb/0x20 [ 244.033593][ T9129] should_fail_usercopy+0x1a/0x20 [ 244.033625][ T9129] _copy_to_user+0x20/0xa0 [ 244.033727][ T9129] simple_read_from_buffer+0xb5/0x130 [ 244.033779][ T9129] proc_fail_nth_read+0x10e/0x150 [ 244.033814][ T9129] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 244.033878][ T9129] vfs_read+0x1ab/0x7f0 [ 244.033897][ T9129] ? __rcu_read_unlock+0x4e/0x70 [ 244.033921][ T9129] ? __fget_files+0x184/0x1c0 [ 244.033986][ T9129] ? mutex_lock+0x57/0x90 [ 244.034008][ T9129] ksys_read+0xdc/0x1a0 [ 244.034029][ T9129] __x64_sys_read+0x40/0x50 [ 244.034050][ T9129] x64_sys_call+0x2886/0x3020 [ 244.034139][ T9129] do_syscall_64+0x12c/0x370 [ 244.034170][ T9129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.034194][ T9129] RIP: 0033:0x7f3ca9cdd04e [ 244.034264][ T9129] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 244.034305][ T9129] RSP: 002b:00007f3ca876efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 244.034332][ T9129] RAX: ffffffffffffffda RBX: 00007f3ca876f6c0 RCX: 00007f3ca9cdd04e [ 244.034350][ T9129] RDX: 000000000000000f RSI: 00007f3ca876f0a0 RDI: 0000000000000004 [ 244.034366][ T9129] RBP: 00007f3ca876f090 R08: 0000000000000000 R09: 0000000000000000 [ 244.034381][ T9129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.034396][ T9129] R13: 00007f3ca9f96038 R14: 00007f3ca9f95fa0 R15: 00007ffd8e8489b8 [ 244.034414][ T9129] [ 244.034881][ T28] audit: type=1400 audit(2000032950.508:2395): avc: denied { name_bind } for pid=9119 comm="syz.0.1705" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 244.047720][ T9125] loop4: detected capacity change from 0 to 1024 [ 244.058324][ T28] audit: type=1400 audit(2000032950.508:2396): avc: denied { node_bind } for pid=9119 comm="syz.0.1705" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 244.231737][ T9123] loop3: detected capacity change from 0 to 512 [ 244.304012][ T9125] EXT4-fs: test_dummy_encryption option not supported [ 244.327820][ T28] audit: type=1400 audit(2000032950.876:2397): avc: denied { lock } for pid=9119 comm="syz.0.1705" path="/344/file1/cpuacct.usage_percpu" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 244.355714][ T9120] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1705'. [ 244.375700][ T9125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1707'. [ 244.452651][ T9145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1714'. [ 244.525098][ T9123] EXT4-fs (loop3): 1 orphan inode deleted [ 244.534252][ T4223] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 244.586008][ T4223] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:11: Failed to release dquot type 1 [ 244.612619][ T9123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.649095][ T4223] loop3: lost filesystem error report for type 5 error -117 [ 244.650193][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.691424][ T9123] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.805345][ T9156] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1717'. [ 244.884708][ T9163] FAULT_INJECTION: forcing a failure. [ 244.884708][ T9163] name failslab, interval 1, probability 0, space 0, times 0 [ 244.916631][ T9163] CPU: 1 UID: 0 PID: 9163 Comm: syz.4.1719 Tainted: G W syzkaller #0 PREEMPT(full) [ 244.916714][ T9163] Tainted: [W]=WARN [ 244.916722][ T9163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 244.916792][ T9163] Call Trace: [ 244.916799][ T9163] [ 244.916807][ T9163] __dump_stack+0x1d/0x30 [ 244.916837][ T9163] dump_stack_lvl+0x95/0xd0 [ 244.916912][ T9163] dump_stack+0x15/0x1b [ 244.916941][ T9163] should_fail_ex+0x263/0x280 [ 244.916973][ T9163] should_failslab+0x8c/0xb0 [ 244.916997][ T9163] kmem_cache_alloc_noprof+0x66/0x400 [ 244.917081][ T9163] ? security_file_alloc+0x32/0xf0 [ 244.917107][ T9163] security_file_alloc+0x32/0xf0 [ 244.917130][ T9163] init_file+0x5b/0x1b0 [ 244.917192][ T9163] alloc_empty_file+0x8b/0x200 [ 244.917221][ T9163] path_openat+0x65/0x2050 [ 244.917241][ T9163] ? path_openat+0x1ab2/0x2050 [ 244.917316][ T9163] ? path_openat+0x1b01/0x2050 [ 244.917335][ T9163] ? _parse_integer_limit+0x170/0x190 [ 244.917394][ T9163] ? _parse_integer+0x27/0x40 [ 244.917419][ T9163] ? kstrtoull+0x111/0x140 [ 244.917444][ T9163] do_file_open+0x16c/0x290 [ 244.917539][ T9163] file_open_name+0xfa/0x120 [ 244.917613][ T9163] __se_sys_acct+0x8c/0x500 [ 244.917651][ T9163] __x64_sys_acct+0x1f/0x30 [ 244.917748][ T9163] x64_sys_call+0x2e7f/0x3020 [ 244.917777][ T9163] do_syscall_64+0x12c/0x370 [ 244.917807][ T9163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.917831][ T9163] RIP: 0033:0x7f53ee57c819 [ 244.917870][ T9163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.917891][ T9163] RSP: 002b:00007f53ecfd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 244.917934][ T9163] RAX: ffffffffffffffda RBX: 00007f53ee7f5fa0 RCX: 00007f53ee57c819 [ 244.917983][ T9163] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 244.917997][ T9163] RBP: 00007f53ecfd7090 R08: 0000000000000000 R09: 0000000000000000 [ 244.918011][ T9163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.918024][ T9163] R13: 00007f53ee7f6038 R14: 00007f53ee7f5fa0 R15: 00007fff9093f0e8 [ 244.918068][ T9163] [ 245.278060][ T9152] set_capacity_and_notify: 1 callbacks suppressed [ 245.278122][ T9152] loop2: detected capacity change from 0 to 512 [ 245.291664][ T9152] EXT4-fs: Ignoring removed mblk_io_submit option [ 245.298942][ T9152] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 245.335281][ T9152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.347868][ T9152] ext4 filesystem being mounted at /356/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 245.360544][ T9152] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1716'. [ 245.546507][ T9184] loop4: detected capacity change from 0 to 128 [ 245.555455][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.582668][ T9184] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 245.609074][ T9184] ext4 filesystem being mounted at /318/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 245.630174][ T9189] FAULT_INJECTION: forcing a failure. [ 245.630174][ T9189] name failslab, interval 1, probability 0, space 0, times 0 [ 245.749816][ T9189] CPU: 1 UID: 0 PID: 9189 Comm: syz.2.1726 Tainted: G W syzkaller #0 PREEMPT(full) [ 245.749854][ T9189] Tainted: [W]=WARN [ 245.749863][ T9189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 245.749876][ T9189] Call Trace: [ 245.749884][ T9189] [ 245.749944][ T9189] __dump_stack+0x1d/0x30 [ 245.750049][ T9189] dump_stack_lvl+0x95/0xd0 [ 245.750171][ T9189] dump_stack+0x15/0x1b [ 245.750252][ T9189] should_fail_ex+0x263/0x280 [ 245.750283][ T9189] should_failslab+0x8c/0xb0 [ 245.750369][ T9189] kmem_cache_alloc_noprof+0x66/0x400 [ 245.750414][ T9189] ? security_inode_alloc+0x37/0x100 [ 245.750451][ T9189] security_inode_alloc+0x37/0x100 [ 245.750542][ T9189] inode_init_always_gfp+0x4b7/0x500 [ 245.750602][ T9189] ? __pfx_proc_alloc_inode+0x10/0x10 [ 245.750644][ T9189] alloc_inode+0x58/0x170 [ 245.750669][ T9189] new_inode+0x1d/0xe0 [ 245.750696][ T9189] proc_pid_make_inode+0x1f/0xd0 [ 245.750765][ T9189] proc_map_files_instantiate+0x81/0x120 [ 245.750804][ T9189] proc_fill_cache+0x1e0/0x260 [ 245.750828][ T9189] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 245.750868][ T9189] proc_map_files_readdir+0x521/0x6a0 [ 245.750984][ T9189] iterate_dir+0x114/0x330 [ 245.751052][ T9189] __se_sys_getdents64+0xd2/0x230 [ 245.751075][ T9189] ? __pfx_filldir64+0x10/0x10 [ 245.751099][ T9189] __x64_sys_getdents64+0x43/0x50 [ 245.751174][ T9189] x64_sys_call+0x2408/0x3020 [ 245.751204][ T9189] do_syscall_64+0x12c/0x370 [ 245.751235][ T9189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.751259][ T9189] RIP: 0033:0x7f4bc436c819 [ 245.751351][ T9189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.751372][ T9189] RSP: 002b:00007f4bc2dbf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 245.751395][ T9189] RAX: ffffffffffffffda RBX: 00007f4bc45e5fa0 RCX: 00007f4bc436c819 [ 245.751411][ T9189] RDX: 00000000000000fe RSI: 0000200000000300 RDI: 0000000000000003 [ 245.751426][ T9189] RBP: 00007f4bc2dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 245.751440][ T9189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 245.751454][ T9189] R13: 00007f4bc45e6038 R14: 00007f4bc45e5fa0 R15: 00007ffef32eedb8 [ 245.751522][ T9189] [ 246.064410][ T9195] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1729'. [ 246.101172][ T28] audit: type=1400 audit(2000032952.744:2398): avc: denied { read } for pid=9190 comm="syz.0.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 246.156092][ T28] audit: type=1400 audit(2000032952.807:2399): avc: denied { execute_no_trans } for pid=9190 comm="syz.0.1728" path="/347/file0" dev="tmpfs" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 246.296664][ T4222] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x9 [ 246.403456][ T9209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1731'. [ 246.415471][ T3310] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 246.453856][ T9218] loop4: detected capacity change from 0 to 1024 [ 246.461018][ T9218] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 246.461018][ T9218] [ 246.549406][ T9226] loop4: detected capacity change from 0 to 1024 [ 246.564789][ T9226] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 246.564789][ T9226] [ 246.600111][ T9232] loop0: detected capacity change from 0 to 512 [ 246.610713][ T9226] loop4: detected capacity change from 0 to 1024 [ 246.638096][ T9232] EXT4-fs (loop0): 1 orphan inode deleted [ 246.648557][ T9232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.687812][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.708807][ T9241] loop4: detected capacity change from 0 to 512 [ 246.730020][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1740'. [ 246.854166][ T9255] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1745'. [ 247.065201][ T9264] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1749'. [ 247.118883][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 247.118973][ T28] audit: type=1400 audit(2000032953.815:2401): avc: denied { bind } for pid=9277 comm="syz.0.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 247.146630][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.158090][ T28] audit: type=1400 audit(2000032953.857:2402): avc: denied { ioctl } for pid=9277 comm="syz.0.1753" path="socket:[23793]" dev="sockfs" ino=23793 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 247.184037][ T28] audit: type=1326 audit(2000032953.857:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9268 comm="syz.4.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ee57c819 code=0x7ffc0000 [ 247.218848][ T28] audit: type=1326 audit(2000032953.857:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9268 comm="syz.4.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ee57c819 code=0x7ffc0000 [ 247.243034][ T28] audit: type=1326 audit(2000032953.857:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9268 comm="syz.4.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f53ee57c819 code=0x7ffc0000 [ 247.267472][ T28] audit: type=1326 audit(2000032953.857:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9268 comm="syz.4.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ee57c819 code=0x7ffc0000 [ 247.296152][ T9286] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.302016][ T9290] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1757'. [ 247.323806][ T28] audit: type=1326 audit(2000032953.857:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9268 comm="syz.4.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ee57c819 code=0x7ffc0000 [ 247.361603][ T28] audit: type=1326 audit(2000032953.857:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9268 comm="syz.4.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f53ee57c819 code=0x7ffc0000 [ 247.387607][ T9300] FAULT_INJECTION: forcing a failure. [ 247.387607][ T9300] name failslab, interval 1, probability 0, space 0, times 0 [ 247.400804][ T9300] CPU: 1 UID: 0 PID: 9300 Comm: syz.0.1761 Tainted: G W syzkaller #0 PREEMPT(full) [ 247.400863][ T9300] Tainted: [W]=WARN [ 247.400872][ T9300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 247.400886][ T9300] Call Trace: [ 247.400893][ T9300] [ 247.400903][ T9300] __dump_stack+0x1d/0x30 [ 247.400976][ T9300] dump_stack_lvl+0x95/0xd0 [ 247.401003][ T9300] dump_stack+0x15/0x1b [ 247.401033][ T9300] should_fail_ex+0x263/0x280 [ 247.401106][ T9300] should_failslab+0x8c/0xb0 [ 247.401131][ T9300] kmem_cache_alloc_noprof+0x66/0x400 [ 247.401156][ T9300] ? alloc_empty_file+0x76/0x200 [ 247.401227][ T9300] alloc_empty_file+0x76/0x200 [ 247.401256][ T9300] path_openat+0x65/0x2050 [ 247.401278][ T9300] ? _parse_integer_limit+0x170/0x190 [ 247.401323][ T9300] ? _parse_integer+0x27/0x40 [ 247.401363][ T9300] ? kstrtoull+0x111/0x140 [ 247.401389][ T9300] ? kstrtouint+0x76/0xc0 [ 247.401415][ T9300] do_file_open+0x16c/0x290 [ 247.401504][ T9300] do_sys_openat2+0x94/0x130 [ 247.401538][ T9300] __x64_sys_open+0xe6/0x110 [ 247.401631][ T9300] x64_sys_call+0x14b9/0x3020 [ 247.401661][ T9300] do_syscall_64+0x12c/0x370 [ 247.401691][ T9300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.401762][ T9300] RIP: 0033:0x7faa429ac819 [ 247.401783][ T9300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.401804][ T9300] RSP: 002b:00007faa41407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 247.401916][ T9300] RAX: ffffffffffffffda RBX: 00007faa42c25fa0 RCX: 00007faa429ac819 [ 247.401934][ T9300] RDX: 000000000000018e RSI: 0000000000000600 RDI: 0000200000000080 [ 247.401950][ T9300] RBP: 00007faa41407090 R08: 0000000000000000 R09: 0000000000000000 [ 247.401966][ T9300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.401981][ T9300] R13: 00007faa42c26038 R14: 00007faa42c25fa0 R15: 00007ffc5d300f88 [ 247.402003][ T9300] [ 247.428692][ T28] audit: type=1326 audit(2000032953.857:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9268 comm="syz.4.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ee57c819 code=0x7ffc0000 [ 247.492700][ T9307] loop0: detected capacity change from 0 to 512 [ 247.494746][ T28] audit: type=1326 audit(2000032953.857:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9268 comm="syz.4.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ee57c819 code=0x7ffc0000 [ 247.515995][ T9307] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 247.663762][ T9307] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1763: bg 0: block 393: padding at end of block bitmap is not set [ 247.674137][ T9302] lo speed is unknown, defaulting to 1000 [ 247.678168][ T9307] loop0: lost filesystem error report for type 5 error -117 [ 247.684303][ T9302] dummy0 speed is unknown, defaulting to 1000 [ 247.687097][ T9307] EXT4-fs (loop0): Remounting filesystem read-only [ 247.697813][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 247.697836][ C1] EXT4-fs (loop0): initial error at time 2000032954: ext4_validate_block_bitmap:441 [ 247.697861][ C1] EXT4-fs (loop0): last error at time 2000032954: ext4_validate_block_bitmap:441 [ 247.738867][ T9307] EXT4-fs (loop0): 2 truncates cleaned up [ 247.765215][ T9307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.825616][ T9322] loop1: detected capacity change from 0 to 1024 [ 247.845943][ T9322] EXT4-fs: test_dummy_encryption option not supported [ 247.858714][ T9327] netlink: 'syz.2.1767': attribute type 2 has an invalid length. [ 247.917042][ T9331] netlink: 'syz.4.1771': attribute type 2 has an invalid length. [ 247.936751][ T9331] netlink: 'syz.4.1771': attribute type 1 has an invalid length. [ 247.953771][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1771'. [ 247.991668][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.055497][ T9343] FAULT_INJECTION: forcing a failure. [ 248.055497][ T9343] name failslab, interval 1, probability 0, space 0, times 0 [ 248.100265][ T9343] CPU: 1 UID: 0 PID: 9343 Comm: syz.0.1773 Tainted: G W syzkaller #0 PREEMPT(full) [ 248.100304][ T9343] Tainted: [W]=WARN [ 248.100312][ T9343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 248.100326][ T9343] Call Trace: [ 248.100334][ T9343] [ 248.100405][ T9343] __dump_stack+0x1d/0x30 [ 248.100435][ T9343] dump_stack_lvl+0x95/0xd0 [ 248.100462][ T9343] dump_stack+0x15/0x1b [ 248.100486][ T9343] should_fail_ex+0x263/0x280 [ 248.100591][ T9343] should_failslab+0x8c/0xb0 [ 248.100613][ T9343] kmem_cache_alloc_noprof+0x66/0x400 [ 248.100661][ T9343] ? skb_clone+0x151/0x1f0 [ 248.100691][ T9343] skb_clone+0x151/0x1f0 [ 248.100710][ T9343] __netlink_deliver_tap+0x2c9/0x500 [ 248.100736][ T9343] netlink_unicast+0x66b/0x690 [ 248.100898][ T9343] netlink_sendmsg+0x5c8/0x6f0 [ 248.100923][ T9343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.100943][ T9343] ____sys_sendmsg+0x563/0x5b0 [ 248.100968][ T9343] ___sys_sendmsg+0x195/0x1e0 [ 248.101000][ T9343] __x64_sys_sendmsg+0xd4/0x160 [ 248.101107][ T9343] x64_sys_call+0x194c/0x3020 [ 248.101132][ T9343] do_syscall_64+0x12c/0x370 [ 248.101156][ T9343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.101180][ T9343] RIP: 0033:0x7faa429ac819 [ 248.101246][ T9343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.101267][ T9343] RSP: 002b:00007faa41407028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.101291][ T9343] RAX: ffffffffffffffda RBX: 00007faa42c25fa0 RCX: 00007faa429ac819 [ 248.101385][ T9343] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 248.101401][ T9343] RBP: 00007faa41407090 R08: 0000000000000000 R09: 0000000000000000 [ 248.101443][ T9343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.101459][ T9343] R13: 00007faa42c26038 R14: 00007faa42c25fa0 R15: 00007ffc5d300f88 [ 248.101481][ T9343] [ 248.101506][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1773'. [ 248.512186][ T9349] loop1: detected capacity change from 0 to 512 [ 248.684854][ T9349] EXT4-fs (loop1): 1 orphan inode deleted [ 248.726973][ T4222] EXT4-fs error (device loop1): ext4_release_dquot:7062: comm kworker/u8:10: Failed to release dquot type 1 [ 248.743355][ T9349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.772667][ T4222] loop1: lost filesystem error report for type 5 error -117 [ 248.780022][ T9351] lo speed is unknown, defaulting to 1000 [ 248.803770][ T9356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.826243][ T9356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.830001][ T9349] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.849527][ T9351] dummy0 speed is unknown, defaulting to 1000 [ 249.275508][ T9379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1782'. [ 249.308374][ T9383] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.844488][ T9392] EXT4-fs (loop4): 1 orphan inode deleted [ 249.865110][ T9392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.882693][ T9392] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.509450][ T9397] set_capacity_and_notify: 1 callbacks suppressed [ 250.509467][ T9397] loop0: detected capacity change from 0 to 512 [ 250.563023][ T9397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.601595][ T9397] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.208905][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.287547][ T9404] loop4: detected capacity change from 0 to 1024 [ 251.322293][ T9404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.398400][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1790'. [ 251.422155][ T9404] program syz.4.1790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.478965][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.493953][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.503879][ T9408] nfs: Unknown parameter '…' [ 251.596486][ T9420] macvlan4: entered promiscuous mode [ 251.602329][ T9420] bond0: (slave macvlan4): Error -98 calling set_mac_address [ 251.679101][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1798'. [ 251.684832][ T9362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 251.703359][ T9427] loop4: detected capacity change from 0 to 128 [ 251.717068][ T9427] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 251.734529][ T9427] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.824023][ T9432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.832709][ T9432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.852441][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.344389][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 252.344434][ T28] audit: type=1400 audit(2000032959.233:2441): avc: denied { rename } for pid=9426 comm="syz.4.1799" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 253.036349][ T9441] loop1: detected capacity change from 0 to 8192 [ 253.075069][ T9441] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 253.228098][ T9430] lo speed is unknown, defaulting to 1000 [ 253.253789][ T9430] dummy0 speed is unknown, defaulting to 1000 [ 253.478892][ T9452] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1806'. [ 253.599175][ T9460] loop2: detected capacity change from 0 to 1024 [ 253.626844][ T9458] sctp: [Deprecated]: syz.1.1810 (pid 9458) Use of int in max_burst socket option deprecated. [ 253.626844][ T9458] Use struct sctp_assoc_value instead [ 253.649349][ T28] audit: type=1400 audit(2000032960.671:2442): avc: denied { listen } for pid=9455 comm="syz.0.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 253.679521][ T28] audit: type=1400 audit(2000032960.682:2443): avc: denied { accept } for pid=9455 comm="syz.0.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 253.739416][ T9460] EXT4-fs: test_dummy_encryption option not supported [ 253.756456][ T28] audit: type=1400 audit(2000032960.745:2444): avc: denied { shutdown } for pid=9455 comm="syz.0.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 253.771987][ T9466] loop0: detected capacity change from 0 to 1024 [ 253.784235][ T3310] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 253.801472][ T9466] EXT4-fs: Ignoring removed bh option [ 253.823617][ T9466] EXT4-fs warning (device loop0): read_mmp_block:111: Error -117 while reading MMP block 64 [ 253.867057][ T9464] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.958896][ T9466] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.979683][ T9466] bridge_slave_1: left allmulticast mode [ 253.996110][ T9466] bridge_slave_1: left promiscuous mode [ 254.006809][ T9466] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.031336][ T9466] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 254.075633][ T9487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.086084][ T9487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.095626][ T9487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.104921][ T9487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.116266][ T9489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.125462][ T9489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.173255][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1815'. [ 254.185834][ T9493] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1818'. [ 254.290262][ T9510] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1822'. [ 254.300043][ T9510] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1822'. [ 254.309723][ T9510] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1822'. [ 254.436282][ T9529] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1829'. [ 254.462356][ T9488] loop2: detected capacity change from 0 to 512 [ 254.479995][ T9531] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1830'. [ 254.597590][ T28] audit: type=1400 audit(2000032961.669:2445): avc: denied { mount } for pid=9541 comm="syz.1.1835" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 254.689328][ T9546] lo speed is unknown, defaulting to 1000 [ 254.717273][ T9548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1835'. [ 254.729262][ T28] audit: type=1400 audit(2000032961.805:2446): avc: denied { write } for pid=9549 comm="syz.4.1836" name="usbmon4" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 254.773275][ T9546] dummy0 speed is unknown, defaulting to 1000 [ 255.056714][ T9488] EXT4-fs (loop2): 1 orphan inode deleted [ 255.068367][ T6207] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 255.090897][ T6207] EXT4-fs error (device loop2): ext4_release_dquot:7062: comm kworker/u8:20: Failed to release dquot type 1 [ 255.108668][ T6207] loop2: lost filesystem error report for type 5 error -117 [ 255.115905][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 255.129753][ C0] EXT4-fs (loop2): initial error at time 2000032962: ext4_release_dquot:7062 [ 255.138630][ C0] EXT4-fs (loop2): last error at time 2000032962: ext4_release_dquot:7062 [ 255.155308][ T9488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.170545][ T9488] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.475438][ T9580] loop3: detected capacity change from 0 to 512 [ 255.492725][ T9580] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 255.531407][ T9580] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1846: bad orphan inode 131083 [ 255.554459][ T9580] loop3: lost filesystem error report for type 5 error -117 [ 255.560383][ T9580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.940693][ T9592] lo speed is unknown, defaulting to 1000 [ 255.946815][ T9592] dummy0 speed is unknown, defaulting to 1000 [ 256.666828][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.705131][ T9600] __nla_validate_parse: 5 callbacks suppressed [ 256.705151][ T9600] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1853'. [ 256.831216][ T28] audit: type=1400 audit(2000032964.021:2447): avc: denied { bind } for pid=9604 comm="syz.3.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 257.830658][ T28] audit: type=1326 audit(2000032965.060:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9612 comm="syz.4.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ee57c819 code=0x7ffc0000 [ 257.895183][ T28] audit: type=1326 audit(2000032965.060:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9612 comm="syz.4.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ee57c819 code=0x7ffc0000 [ 257.954742][ T28] audit: type=1326 audit(2000032965.060:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9612 comm="syz.4.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ee57c819 code=0x7ffc0000 [ 257.998843][ T28] audit: type=1326 audit(2000032965.060:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9612 comm="syz.4.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ee57c819 code=0x7ffc0000 [ 258.023114][ T28] audit: type=1326 audit(2000032965.060:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9612 comm="syz.4.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f53ee57c819 code=0x7ffc0000 [ 258.047801][ T28] audit: type=1326 audit(2000032965.060:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9612 comm="syz.4.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ee57c819 code=0x7ffc0000 [ 258.079893][ T28] audit: type=1326 audit(2000032965.060:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9612 comm="syz.4.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ee57c819 code=0x7ffc0000 [ 258.116313][ T28] audit: type=1326 audit(2000032965.060:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9612 comm="syz.4.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ee57c819 code=0x7ffc0000 [ 258.140894][ T28] audit: type=1326 audit(2000032965.060:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9612 comm="syz.4.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53ee57c819 code=0x7ffc0000 [ 258.167311][ T28] audit: type=1326 audit(2000032965.091:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9612 comm="syz.4.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ee57c819 code=0x7ffc0000 [ 258.224136][ T9633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1864'. [ 258.377187][ T9642] loop1: detected capacity change from 0 to 1024 [ 258.385267][ T9642] EXT4-fs: Ignoring removed orlov option [ 258.423056][ T9642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.674248][ T9653] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 258.693666][ T9653] netlink: 'syz.0.1866': attribute type 11 has an invalid length. [ 258.704860][ T9654] nfs: Unknown parameter '…' [ 259.061746][ T9660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1869'. [ 259.444982][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.464976][ T9682] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 259.511356][ T9682] syz_tun: entered promiscuous mode [ 259.516841][ T9682] macsec1: entered allmulticast mode [ 259.522170][ T9682] syz_tun: entered allmulticast mode [ 259.536691][ T9682] syz_tun: left allmulticast mode [ 259.541843][ T9682] syz_tun: left promiscuous mode [ 259.554429][ T9684] netlink: 'syz.1.1874': attribute type 39 has an invalid length. [ 259.594069][ T9684] hsr_slave_1 (unregistering): left promiscuous mode [ 259.751205][ T9687] loop1: detected capacity change from 0 to 4096 [ 259.766685][ T9687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.792901][ T9687] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.082311][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.168559][ T9693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1875'. [ 260.205514][ T9693] bond8: entered promiscuous mode [ 260.211035][ T9693] 8021q: adding VLAN 0 to HW filter on device bond8 [ 260.225326][ T9693] bridge9: entered promiscuous mode [ 260.231455][ T9693] bond8: (slave bridge9): Enslaving as an active interface with an up link [ 260.254521][ T9693] bond8: left promiscuous mode [ 260.266543][ T9693] bridge9: left promiscuous mode [ 260.271789][ T9693] bond8: entered allmulticast mode [ 260.276955][ T9693] bridge9: entered allmulticast mode [ 260.304853][ T9700] No such timeout policy "syz1" [ 260.372378][ T9706] loop0: detected capacity change from 0 to 764 [ 260.419523][ T9706] lo speed is unknown, defaulting to 1000 [ 260.426715][ T9706] dummy0 speed is unknown, defaulting to 1000 [ 260.603285][ T9728] loop0: detected capacity change from 0 to 764 [ 260.773217][ T9739] loop1: detected capacity change from 0 to 512 [ 260.797233][ T9739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.830523][ T9739] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.856035][ T9739] EXT4-fs (loop1): shut down requested (0) [ 260.880013][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.069252][ T9752] ipvlan0: entered promiscuous mode [ 261.087243][ T9752] team0: Device ipvlan0 is VLAN challenged and team device has VLAN set up [ 261.193250][ T9758] loop1: detected capacity change from 0 to 512 [ 261.224938][ T9758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.238546][ T9758] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.250115][ T9758] EXT4-fs (loop1): shut down requested (0) [ 261.267504][ T9758] FAULT_INJECTION: forcing a failure. [ 261.267504][ T9758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.311158][ T9758] CPU: 1 UID: 0 PID: 9758 Comm: syz.1.1896 Tainted: G W syzkaller #0 PREEMPT(full) [ 261.311192][ T9758] Tainted: [W]=WARN [ 261.311199][ T9758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 261.311210][ T9758] Call Trace: [ 261.311218][ T9758] [ 261.311228][ T9758] __dump_stack+0x1d/0x30 [ 261.311282][ T9758] dump_stack_lvl+0x95/0xd0 [ 261.311304][ T9758] dump_stack+0x15/0x1b [ 261.311324][ T9758] should_fail_ex+0x263/0x280 [ 261.311351][ T9758] should_fail+0xb/0x20 [ 261.311401][ T9758] should_fail_usercopy+0x1a/0x20 [ 261.311431][ T9758] strncpy_from_user+0x27/0x250 [ 261.311488][ T9758] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 261.311517][ T9758] do_getname+0x59/0x1c0 [ 261.311544][ T9758] getname_flags+0x1d/0x30 [ 261.311571][ T9758] do_sys_openat2+0x60/0x130 [ 261.311634][ T9758] __x64_sys_creat+0x65/0x90 [ 261.311743][ T9758] x64_sys_call+0x2ea0/0x3020 [ 261.311771][ T9758] do_syscall_64+0x12c/0x370 [ 261.311818][ T9758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.311844][ T9758] RIP: 0033:0x7f3ca9d1c819 [ 261.311863][ T9758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.311881][ T9758] RSP: 002b:00007f3ca876f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 261.311902][ T9758] RAX: ffffffffffffffda RBX: 00007f3ca9f95fa0 RCX: 00007f3ca9d1c819 [ 261.311979][ T9758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 261.311994][ T9758] RBP: 00007f3ca876f090 R08: 0000000000000000 R09: 0000000000000000 [ 261.312010][ T9758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.312124][ T9758] R13: 00007f3ca9f96038 R14: 00007f3ca9f95fa0 R15: 00007ffd8e8489b8 [ 261.312182][ T9758] [ 261.537916][ T9766] nfs: Unknown parameter '…' [ 261.571965][ T9769] loop3: detected capacity change from 0 to 128 [ 261.625866][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.802527][ T9776] lo speed is unknown, defaulting to 1000 [ 261.825231][ T9776] dummy0 speed is unknown, defaulting to 1000 [ 261.921216][ T9781] loop4: detected capacity change from 0 to 764 [ 261.940929][ T9778] netlink: 'syz.1.1901': attribute type 10 has an invalid length. [ 262.016961][ T9783] loop0: detected capacity change from 0 to 512 [ 262.066120][ T9781] FAULT_INJECTION: forcing a failure. [ 262.066120][ T9781] name failslab, interval 1, probability 0, space 0, times 0 [ 262.081146][ T9783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.093815][ T9783] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.188428][ T9781] CPU: 1 UID: 0 PID: 9781 Comm: syz.4.1902 Tainted: G W syzkaller #0 PREEMPT(full) [ 262.188458][ T9781] Tainted: [W]=WARN [ 262.188465][ T9781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 262.188476][ T9781] Call Trace: [ 262.188482][ T9781] [ 262.188491][ T9781] __dump_stack+0x1d/0x30 [ 262.188528][ T9781] dump_stack_lvl+0x95/0xd0 [ 262.188551][ T9781] dump_stack+0x15/0x1b [ 262.188571][ T9781] should_fail_ex+0x263/0x280 [ 262.188600][ T9781] should_failslab+0x8c/0xb0 [ 262.188673][ T9781] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 262.188730][ T9781] ? __d_alloc+0x37/0x340 [ 262.188766][ T9781] __d_alloc+0x37/0x340 [ 262.188792][ T9781] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 262.188851][ T9781] d_alloc_parallel+0x54/0xce0 [ 262.188946][ T9781] ? rcu_read_unlock_special+0x9f/0x200 [ 262.188969][ T9781] ? __rcu_read_unlock+0x6b/0x70 [ 262.188993][ T9781] ? try_to_unlazy+0x39d/0x580 [ 262.189021][ T9781] __lookup_slow+0x96/0x260 [ 262.189062][ T9781] lookup_slow+0x3c/0x60 [ 262.189121][ T9781] path_lookupat+0x2f7/0x500 [ 262.189155][ T9781] filename_lookup+0x190/0x390 [ 262.189192][ T9781] __se_sys_name_to_handle_at+0xfb/0x640 [ 262.189294][ T9781] ? exit_to_user_mode_loop+0xef/0x6f0 [ 262.189316][ T9781] __x64_sys_name_to_handle_at+0x67/0x80 [ 262.189344][ T9781] x64_sys_call+0x2818/0x3020 [ 262.189414][ T9781] do_syscall_64+0x12c/0x370 [ 262.189441][ T9781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.189462][ T9781] RIP: 0033:0x7f53ee57c819 [ 262.189528][ T9781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.189550][ T9781] RSP: 002b:00007f53ecfd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 262.189576][ T9781] RAX: ffffffffffffffda RBX: 00007f53ee7f5fa0 RCX: 00007f53ee57c819 [ 262.189646][ T9781] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 262.189663][ T9781] RBP: 00007f53ecfd7090 R08: 0000000000000000 R09: 0000000000000000 [ 262.189677][ T9781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.189689][ T9781] R13: 00007f53ee7f6038 R14: 00007f53ee7f5fa0 R15: 00007fff9093f0e8 [ 262.189707][ T9781] [ 262.376805][ T9778] team0: Device xfrm0 is of different type [ 262.481117][ T9782] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1901'. [ 262.551327][ T9794] FAULT_INJECTION: forcing a failure. [ 262.551327][ T9794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.568044][ T9794] CPU: 0 UID: 0 PID: 9794 Comm: syz.4.1904 Tainted: G W syzkaller #0 PREEMPT(full) [ 262.568096][ T9794] Tainted: [W]=WARN [ 262.568114][ T9794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 262.568127][ T9794] Call Trace: [ 262.568135][ T9794] [ 262.568143][ T9794] __dump_stack+0x1d/0x30 [ 262.568169][ T9794] dump_stack_lvl+0x95/0xd0 [ 262.568262][ T9794] dump_stack+0x15/0x1b [ 262.568360][ T9794] should_fail_ex+0x263/0x280 [ 262.568387][ T9794] should_fail+0xb/0x20 [ 262.568409][ T9794] should_fail_usercopy+0x1a/0x20 [ 262.568442][ T9794] _copy_from_user+0x1c/0xb0 [ 262.568495][ T9794] sctp_getsockopt_connectx3+0xd9/0x340 [ 262.568522][ T9794] sctp_getsockopt+0x910/0xaa0 [ 262.568545][ T9794] sock_common_getsockopt+0x60/0x70 [ 262.568627][ T9794] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 262.568809][ T9794] do_sock_getsockopt+0x1c4/0x210 [ 262.568856][ T9794] __x64_sys_getsockopt+0x11d/0x1a0 [ 262.568963][ T9794] x64_sys_call+0x2dcf/0x3020 [ 262.568994][ T9794] do_syscall_64+0x12c/0x370 [ 262.569026][ T9794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.569051][ T9794] RIP: 0033:0x7f53ee57c819 [ 262.569071][ T9794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.569131][ T9794] RSP: 002b:00007f53ecfd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 262.569158][ T9794] RAX: ffffffffffffffda RBX: 00007f53ee7f5fa0 RCX: 00007f53ee57c819 [ 262.569174][ T9794] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 262.569324][ T9794] RBP: 00007f53ecfd7090 R08: 0000200000000180 R09: 0000000000000000 [ 262.569341][ T9794] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.569354][ T9794] R13: 00007f53ee7f6038 R14: 00007f53ee7f5fa0 R15: 00007fff9093f0e8 [ 262.569372][ T9794] [ 262.849836][ T28] kauditd_printk_skb: 970 callbacks suppressed [ 262.849856][ T28] audit: type=1326 audit(2000032970.331:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.3.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f3f37aac819 code=0x7ffc0000 [ 262.880386][ T28] audit: type=1326 audit(2000032970.331:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.3.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f37aac819 code=0x7ffc0000 [ 262.880790][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.904033][ T28] audit: type=1326 audit(2000032970.331:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.3.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f37aac819 code=0x7ffc0000 [ 262.937440][ T9769] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1898'. [ 262.947087][ T28] audit: type=1326 audit(2000032970.373:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.3.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3f37aac819 code=0x7ffc0000 [ 262.973630][ T28] audit: type=1326 audit(2000032970.373:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.3.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f37aac819 code=0x7ffc0000 [ 263.040449][ T28] audit: type=1326 audit(2000032970.373:3433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.3.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f37aac819 code=0x7ffc0000 [ 263.079737][ T28] audit: type=1326 audit(2000032970.425:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.3.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3f37aac819 code=0x7ffc0000 [ 263.107726][ T28] audit: type=1326 audit(2000032970.425:3435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.3.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f37aac819 code=0x7ffc0000 [ 263.137613][ T9801] netlink: 'syz.1.1907': attribute type 1 has an invalid length. [ 263.144604][ T28] audit: type=1326 audit(2000032970.425:3436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.3.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f37aac819 code=0x7ffc0000 [ 263.172665][ T9803] netlink: 'syz.2.1909': attribute type 1 has an invalid length. [ 263.176987][ T28] audit: type=1326 audit(2000032970.425:3437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.3.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3f37aac819 code=0x7ffc0000 [ 263.230113][ T9804] bond15: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 263.293206][ T9812] loop1: detected capacity change from 0 to 512 [ 263.303062][ T9803] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 263.341017][ T9816] nfs: Unknown parameter '…' [ 263.354025][ T9812] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1911: inode has both inline data and extents flags [ 263.384567][ T9812] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 263.384746][ T9812] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1911: couldn't read orphan inode 15 (err -117) [ 263.390450][ T9803] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1909'. [ 263.393988][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 263.406366][ T4222] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 263.414883][ C0] EXT4-fs (loop1): initial error at time 2000032970: ext4_orphan_get:1397: inode 15 [ 263.440656][ C0] EXT4-fs (loop1): last error at time 2000032970: ext4_orphan_get:1397: inode 15 [ 263.449952][ T9812] loop1: lost filesystem error report for type 5 error -117 [ 263.450603][ T9812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.471374][ T9803] 8021q: adding VLAN 0 to HW filter on device bond9 [ 263.486501][ T9812] netlink: 'syz.1.1911': attribute type 12 has an invalid length. [ 263.549187][ T9824] loop2: detected capacity change from 0 to 164 [ 263.555808][ T6215] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 263.569070][ T9824] isofs_fill_super: bread failed, dev=loop2, iso_blknum=41, block=82 [ 263.659630][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1914'. [ 263.785771][ T9834] FAULT_INJECTION: forcing a failure. [ 263.785771][ T9834] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 263.799224][ T9834] CPU: 1 UID: 0 PID: 9834 Comm: syz.4.1918 Tainted: G W syzkaller #0 PREEMPT(full) [ 263.799299][ T9834] Tainted: [W]=WARN [ 263.799306][ T9834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 263.799318][ T9834] Call Trace: [ 263.799325][ T9834] [ 263.799333][ T9834] __dump_stack+0x1d/0x30 [ 263.799358][ T9834] dump_stack_lvl+0x95/0xd0 [ 263.799437][ T9834] dump_stack+0x15/0x1b [ 263.799459][ T9834] should_fail_ex+0x263/0x280 [ 263.799513][ T9834] should_fail_alloc_page+0xf2/0x100 [ 263.799537][ T9834] __alloc_frozen_pages_noprof+0x108/0x360 [ 263.799568][ T9834] alloc_pages_mpol+0xb3/0x260 [ 263.799712][ T9834] alloc_pages_noprof+0x8f/0x140 [ 263.799752][ T9834] pte_alloc_one+0x1c/0xc0 [ 263.799773][ T9834] handle_mm_fault+0x15bc/0x3020 [ 263.799807][ T9834] ? __rcu_read_unlock+0x4e/0x70 [ 263.799832][ T9834] ? check_vma_flags+0x2e0/0x330 [ 263.799927][ T9834] __get_user_pages+0x1023/0x1ea0 [ 263.800065][ T9834] __mm_populate+0x242/0x390 [ 263.800097][ T9834] vm_mmap_pgoff+0x23b/0x2d0 [ 263.800189][ T9834] ksys_mmap_pgoff+0xc1/0x310 [ 263.800213][ T9834] ? __x64_sys_mmap+0x49/0x70 [ 263.800232][ T9834] x64_sys_call+0x14df/0x3020 [ 263.800263][ T9834] do_syscall_64+0x12c/0x370 [ 263.800305][ T9834] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 263.800380][ T9834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.800402][ T9834] RIP: 0033:0x7f53ee57c819 [ 263.800419][ T9834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.800468][ T9834] RSP: 002b:00007f53ecfd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 263.800491][ T9834] RAX: ffffffffffffffda RBX: 00007f53ee7f5fa0 RCX: 00007f53ee57c819 [ 263.800548][ T9834] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 263.800562][ T9834] RBP: 00007f53ecfd7090 R08: ffffffffffffffff R09: 0000000000000000 [ 263.800575][ T9834] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 263.800589][ T9834] R13: 00007f53ee7f6038 R14: 00007f53ee7f5fa0 R15: 00007fff9093f0e8 [ 263.800681][ T9834] [ 264.062162][ T9840] IPv6: NLM_F_CREATE should be specified when creating new route [ 264.070487][ T9840] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 264.077765][ T9840] IPv6: NLM_F_CREATE should be set when creating new route [ 264.085079][ T9840] IPv6: NLM_F_CREATE should be set when creating new route [ 264.117964][ T9846] FAULT_INJECTION: forcing a failure. [ 264.117964][ T9846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.134241][ T9846] CPU: 0 UID: 0 PID: 9846 Comm: syz.3.1922 Tainted: G W syzkaller #0 PREEMPT(full) [ 264.134276][ T9846] Tainted: [W]=WARN [ 264.134282][ T9846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 264.134330][ T9846] Call Trace: [ 264.134337][ T9846] [ 264.134345][ T9846] __dump_stack+0x1d/0x30 [ 264.134373][ T9846] dump_stack_lvl+0x95/0xd0 [ 264.134430][ T9846] dump_stack+0x15/0x1b [ 264.134500][ T9846] should_fail_ex+0x263/0x280 [ 264.134530][ T9846] should_fail+0xb/0x20 [ 264.134570][ T9846] should_fail_usercopy+0x1a/0x20 [ 264.134600][ T9846] _copy_from_user+0x1c/0xb0 [ 264.134629][ T9846] __ia32_sys_rt_sigreturn+0x127/0x350 [ 264.134700][ T9846] x64_sys_call+0x2823/0x3020 [ 264.134785][ T9846] do_syscall_64+0x12c/0x370 [ 264.134811][ T9846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.134842][ T9846] RIP: 0033:0x7f3f37a4db99 [ 264.134860][ T9846] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 264.134878][ T9846] RSP: 002b:00007f3f364fea80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 264.134955][ T9846] RAX: ffffffffffffffda RBX: 00007f3f37d25fa0 RCX: 00007f3f37a4db99 [ 264.134974][ T9846] RDX: 00007f3f364fea80 RSI: 00007f3f364febb0 RDI: 0000000000000021 [ 264.134990][ T9846] RBP: 00007f3f364ff090 R08: 0000000000000000 R09: 0000000000000000 [ 264.135005][ T9846] R10: 0000000000000102 R11: 0000000000000202 R12: 0000000000000002 [ 264.135019][ T9846] R13: 00007f3f37d26038 R14: 00007f3f37d25fa0 R15: 00007fff268d0548 [ 264.135075][ T9846] [ 264.319897][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.337425][ T9851] loop4: detected capacity change from 0 to 256 [ 264.365268][ T9862] IPv6: NLM_F_CREATE should be specified when creating new route [ 264.383978][ T9856] ext3: Unknown parameter 'mask' [ 264.386699][ T9857] EXT4-fs: Ignoring removed mblk_io_submit option [ 264.412746][ T9857] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 264.483835][ T9857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.560238][ T9882] nfs: Unknown parameter '…' [ 264.582690][ T9885] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 264.590466][ T9885] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 264.607974][ T9885] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1934'. [ 264.617741][ T9885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1934'. [ 264.706714][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1936'. [ 264.716487][ T9892] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1936'. [ 264.930097][ T3310] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 264.931904][ T9857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=127 sclass=netlink_route_socket pid=9857 comm=syz.0.1929 [ 264.937931][ T3310] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 265.177879][ T4222] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.243917][ T4222] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.254535][ T9918] set_capacity_and_notify: 2 callbacks suppressed [ 265.254553][ T9918] loop3: detected capacity change from 0 to 4096 [ 265.279661][ T9918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.294958][ T9910] lo speed is unknown, defaulting to 1000 [ 265.308059][ T9918] io-wq is not configured for unbound workers [ 265.312645][ T4222] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.334478][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.338991][ T9910] dummy0 speed is unknown, defaulting to 1000 [ 265.387338][ T4222] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.409785][ T9927] loop3: detected capacity change from 0 to 256 [ 265.437319][ T9927] FAULT_INJECTION: forcing a failure. [ 265.437319][ T9927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.453550][ T9910] chnl_net:caif_netlink_parms(): no params data found [ 265.460702][ T9927] CPU: 1 UID: 0 PID: 9927 Comm: syz.3.1947 Tainted: G W syzkaller #0 PREEMPT(full) [ 265.460734][ T9927] Tainted: [W]=WARN [ 265.460742][ T9927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 265.460823][ T9927] Call Trace: [ 265.460832][ T9927] [ 265.460841][ T9927] __dump_stack+0x1d/0x30 [ 265.460887][ T9927] dump_stack_lvl+0x95/0xd0 [ 265.460913][ T9927] dump_stack+0x15/0x1b [ 265.460934][ T9927] should_fail_ex+0x263/0x280 [ 265.460960][ T9927] should_fail+0xb/0x20 [ 265.461078][ T9927] should_fail_usercopy+0x1a/0x20 [ 265.461107][ T9927] _copy_from_user+0x1c/0xb0 [ 265.461165][ T9927] do_handle_open+0x40b/0x790 [ 265.461280][ T9927] __x64_sys_open_by_handle_at+0x44/0x50 [ 265.461364][ T9927] x64_sys_call+0x153d/0x3020 [ 265.461394][ T9927] do_syscall_64+0x12c/0x370 [ 265.461462][ T9927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.461568][ T9927] RIP: 0033:0x7f3f37aac819 [ 265.461587][ T9927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.461638][ T9927] RSP: 002b:00007f3f364ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 265.461663][ T9927] RAX: ffffffffffffffda RBX: 00007f3f37d25fa0 RCX: 00007f3f37aac819 [ 265.461688][ T9927] RDX: 0000000000531500 RSI: 0000200000000080 RDI: 0000000000000004 [ 265.461703][ T9927] RBP: 00007f3f364ff090 R08: 0000000000000000 R09: 0000000000000000 [ 265.461719][ T9927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.461763][ T9927] R13: 00007f3f37d26038 R14: 00007f3f37d25fa0 R15: 00007fff268d0548 [ 265.461780][ T9927] [ 265.795982][ T4222] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 265.904629][ T9948] loop2: detected capacity change from 0 to 512 [ 265.936287][ T9948] EXT4-fs (loop2): inodes count not valid: 1 vs 32 [ 265.977114][ T4222] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 266.014475][ T4222] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 266.052463][ T4222] bond7 (unregistering): (slave bridge6): Releasing backup interface [ 266.138807][ T4222] bond0 (unregistering): Released all slaves [ 266.147313][ T4222] bond1 (unregistering): Released all slaves [ 266.157965][ T4222] bond2 (unregistering): Released all slaves [ 266.169999][ T4222] bond3 (unregistering): Released all slaves [ 266.180933][ T4222] bond4 (unregistering): Released all slaves [ 266.192076][ T4222] bond5 (unregistering): Released all slaves [ 266.203500][ T4222] bond6 (unregistering): Released all slaves [ 266.214715][ T4222] bond7 (unregistering): Released all slaves [ 266.240759][ T9910] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.248950][ T9910] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.256567][ T9910] bridge_slave_0: entered allmulticast mode [ 266.263515][ T9910] bridge_slave_0: entered promiscuous mode [ 266.277956][ T9910] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.285628][ T9910] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.292977][ T9910] bridge_slave_1: entered allmulticast mode [ 266.310600][ T9910] bridge_slave_1: entered promiscuous mode [ 266.333720][ T9910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.343575][ T4222] tipc: Left network mode [ 266.344999][ T9910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.400595][ T4222] veth1_macvtap: left promiscuous mode [ 266.406220][ T4222] veth0_macvtap: left promiscuous mode [ 266.411767][ T4222] veth1_vlan: left promiscuous mode [ 266.417219][ T4222] veth0_vlan: left promiscuous mode [ 266.465757][ T9952] nfs: Unknown parameter '…' [ 266.492666][ T4222] team0 (unregistering): Port device dummy0 removed [ 266.508619][ T9910] team0: Port device team_slave_0 added [ 266.515088][ T9910] team0: Port device team_slave_1 added [ 266.530649][ T9910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.537664][ T9910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.565229][ T9910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.576646][ T9910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.583705][ T9910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.609916][ T9910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.634244][ T9910] hsr_slave_0: entered promiscuous mode [ 266.640338][ T9910] hsr_slave_1: entered promiscuous mode [ 266.646271][ T9910] debugfs: 'hsr0' already exists in 'hsr' [ 266.652042][ T9910] Cannot create hsr debugfs directory [ 267.661487][ T9901] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.727135][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.753886][ T9910] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 267.772812][ T9910] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 267.801882][ T9910] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 267.858552][ T9910] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 267.974490][ T9910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.989378][ T9910] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.000677][ T1713] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.007862][ T1713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.036869][ T1713] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.044030][ T1713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.081134][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 268.081150][ T28] audit: type=1400 audit(2000032975.832:3474): avc: denied { write } for pid=9998 comm="syz.0.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 268.229013][ T9910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.241394][T10014] xt_hashlimit: max too large, truncated to 1048576 [ 268.266351][T10014] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1966'. [ 268.297860][T10014] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1966'. [ 268.308854][ T28] audit: type=1400 audit(2000032976.063:3475): avc: denied { ioctl } for pid=10017 comm="syz.3.1968" path="socket:[27242]" dev="sockfs" ino=27242 ioctlcmd=0x2406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 268.315175][T10016] batadv_slave_0: entered promiscuous mode [ 268.358096][T10015] batadv_slave_0: left promiscuous mode [ 268.403416][T10026] loop0: detected capacity change from 0 to 1024 [ 268.426984][T10037] loop3: detected capacity change from 0 to 2048 [ 268.434411][T10026] ext4: Unknown parameter 'obj_type' [ 268.455719][ T3525] udevd[3525]: incorrect ext4 checksum on /dev/loop0 [ 268.479466][ T3508] loop3: p3 p4 < > [ 268.508996][ T3508] loop3: p3 start 11362048 is beyond EOD, truncated [ 268.527116][T10037] loop3: p3 p4 < > [ 268.534599][T10037] loop3: p3 start 11362048 is beyond EOD, truncated [ 268.603235][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 268.655541][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 268.668605][ T9910] veth0_vlan: entered promiscuous mode [ 268.691003][T10071] FAULT_INJECTION: forcing a failure. [ 268.691003][T10071] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 268.710226][T10071] CPU: 1 UID: 0 PID: 10071 Comm: syz.3.1977 Tainted: G W syzkaller #0 PREEMPT(full) [ 268.710263][T10071] Tainted: [W]=WARN [ 268.710308][T10071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 268.710321][T10071] Call Trace: [ 268.710328][T10071] [ 268.710337][T10071] __dump_stack+0x1d/0x30 [ 268.710367][T10071] dump_stack_lvl+0x95/0xd0 [ 268.710393][T10071] dump_stack+0x15/0x1b [ 268.710476][T10071] should_fail_ex+0x263/0x280 [ 268.710652][T10071] should_fail_alloc_page+0xf2/0x100 [ 268.710678][T10071] __alloc_frozen_pages_noprof+0x108/0x360 [ 268.710770][T10071] alloc_pages_mpol+0xb3/0x260 [ 268.710802][T10071] alloc_pages_noprof+0x8f/0x140 [ 268.710834][T10071] __pmd_alloc+0x47/0x430 [ 268.710906][T10071] handle_mm_fault+0x1ebb/0x3020 [ 268.710941][T10071] ? mt_find+0x291/0x3d0 [ 268.710976][T10071] ? lock_mm_and_find_vma+0x8b/0x440 [ 268.711083][T10071] do_user_addr_fault+0x3fd/0x1050 [ 268.711120][T10071] exc_page_fault+0x62/0xa0 [ 268.711144][T10071] asm_exc_page_fault+0x26/0x30 [ 268.711167][T10071] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 268.711223][T10071] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 19 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 268.711278][T10071] RSP: 0018:ffffc9000fbc3df8 EFLAGS: 00050212 [ 268.711298][T10071] RAX: ffff888109e5ef48 RBX: 0000000000000032 RCX: 0000000000000032 [ 268.711314][T10071] RDX: 0000000000000001 RSI: 0000200000000180 RDI: ffffc9000fbc3e20 [ 268.711361][T10071] RBP: 0000000000000032 R08: 000000000000017f R09: 0000000000000000 [ 268.711377][T10071] R10: 0001c9000fbc3e20 R11: 0001c9000fbc3e51 R12: 0000000000000000 [ 268.711393][T10071] R13: ffff888109e5e480 R14: ffffc9000fbc3e20 R15: 0000200000000180 [ 268.711414][T10071] _copy_from_user+0x6f/0xb0 [ 268.711449][T10071] __sys_connect+0xd0/0x2a0 [ 268.711594][T10071] __x64_sys_connect+0x3f/0x50 [ 268.711684][T10071] x64_sys_call+0x2df0/0x3020 [ 268.711754][T10071] do_syscall_64+0x12c/0x370 [ 268.711782][T10071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.711806][T10071] RIP: 0033:0x7f3f37aac819 [ 268.711865][T10071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.711893][T10071] RSP: 002b:00007f3f364ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 268.711966][T10071] RAX: ffffffffffffffda RBX: 00007f3f37d25fa0 RCX: 00007f3f37aac819 [ 268.711982][T10071] RDX: 0000000000000032 RSI: 0000200000000180 RDI: 0000000000000003 [ 268.711995][T10071] RBP: 00007f3f364ff090 R08: 0000000000000000 R09: 0000000000000000 [ 268.712008][T10071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.712041][T10071] R13: 00007f3f37d26038 R14: 00007f3f37d25fa0 R15: 00007fff268d0548 [ 268.712062][T10071] [ 268.718268][ T9910] veth1_vlan: entered promiscuous mode [ 268.964553][ T28] audit: type=1400 audit(2000032976.714:3476): avc: denied { accept } for pid=10076 comm="syz.1.1980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 269.006975][ T9910] veth0_macvtap: entered promiscuous mode [ 269.033014][ T9910] veth1_macvtap: entered promiscuous mode [ 269.037977][ T9910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.056387][ T9910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.084586][ T6213] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.119220][ T6213] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.135341][ T28] audit: type=1400 audit(2000032976.935:3477): avc: denied { mounton } for pid=9910 comm="syz-executor" path="/root/syzkaller.xuGoyJ/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 269.163815][ T6213] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.173114][ T6213] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.186163][ T28] audit: type=1400 audit(2000032976.966:3478): avc: denied { mounton } for pid=9910 comm="syz-executor" path="/root/syzkaller.xuGoyJ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 269.222911][ T28] audit: type=1400 audit(2000032976.966:3479): avc: denied { mounton } for pid=9910 comm="syz-executor" path="/root/syzkaller.xuGoyJ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=27385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 269.226078][T10100] loop0: detected capacity change from 0 to 1024 [ 269.251422][ T28] audit: type=1400 audit(2000032976.977:3480): avc: denied { mounton } for pid=9910 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 269.258359][T10100] EXT4-fs: Ignoring removed bh option [ 269.302576][ T28] audit: type=1400 audit(2000032976.977:3481): avc: denied { mount } for pid=9910 comm="syz-executor" name="/" dev="gadgetfs" ino=4439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 269.349609][T10100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.608599][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.709768][T10144] program syz.0.1992 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.719444][T10144] ucma_write: process 1108 (syz.0.1992) changed security contexts after opening file descriptor, this is not allowed. [ 269.732438][T10146] program syz.2.1991 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.740858][ T28] audit: type=1400 audit(2000032977.564:3482): avc: denied { create } for pid=10130 comm="syz.5.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 269.750751][T10146] SELinux: policydb version 523999049 does not match my version range 15-35 [ 269.781847][T10146] SELinux: failed to load policy [ 269.792019][ T28] audit: type=1400 audit(2000032977.617:3483): avc: denied { write } for pid=10145 comm="syz.2.1991" path="socket:[26300]" dev="sockfs" ino=26300 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 269.859717][T10152] loop2: detected capacity change from 0 to 7 [ 269.866610][ T3525] loop2: [ 269.870814][T10152] loop2: [ 269.917402][T10156] FAULT_INJECTION: forcing a failure. [ 269.917402][T10156] name failslab, interval 1, probability 0, space 0, times 0 [ 269.938768][T10156] CPU: 1 UID: 0 PID: 10156 Comm: syz.0.1996 Tainted: G W syzkaller #0 PREEMPT(full) [ 269.938879][T10156] Tainted: [W]=WARN [ 269.938885][T10156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 269.938897][T10156] Call Trace: [ 269.938903][T10156] [ 269.938962][T10156] __dump_stack+0x1d/0x30 [ 269.938994][T10156] dump_stack_lvl+0x95/0xd0 [ 269.939046][T10156] dump_stack+0x15/0x1b [ 269.939067][T10156] should_fail_ex+0x263/0x280 [ 269.939094][T10156] should_failslab+0x8c/0xb0 [ 269.939134][T10156] __kmalloc_noprof+0xb8/0x4e0 [ 269.939161][T10156] ? bpf_uprobe_multi_link_fill_link_info+0x1cb/0x500 [ 269.939247][T10156] bpf_uprobe_multi_link_fill_link_info+0x1cb/0x500 [ 269.939322][T10156] bpf_obj_get_info_by_fd+0xe8b/0x2370 [ 269.939349][T10156] ? _parse_integer+0x27/0x40 [ 269.939438][T10156] ? kstrtoull+0x111/0x140 [ 269.939464][T10156] ? kstrtouint_from_user+0xa8/0xf0 [ 269.939489][T10156] ? __rcu_read_unlock+0x4e/0x70 [ 269.939551][T10156] ? selinux_bpf+0xc7/0xe0 [ 269.939576][T10156] __sys_bpf+0x557/0x7e0 [ 269.939604][T10156] __x64_sys_bpf+0x41/0x50 [ 269.939624][T10156] x64_sys_call+0x10cb/0x3020 [ 269.939714][T10156] do_syscall_64+0x12c/0x370 [ 269.939747][T10156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.939772][T10156] RIP: 0033:0x7faa429ac819 [ 269.939792][T10156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.939810][T10156] RSP: 002b:00007faa41407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 269.939887][T10156] RAX: ffffffffffffffda RBX: 00007faa42c25fa0 RCX: 00007faa429ac819 [ 269.939901][T10156] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f [ 269.939913][T10156] RBP: 00007faa41407090 R08: 0000000000000000 R09: 0000000000000000 [ 269.939926][T10156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.939938][T10156] R13: 00007faa42c26038 R14: 00007faa42c25fa0 R15: 00007ffc5d300f88 [ 269.940037][T10156] [ 270.186183][T10171] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2001'. [ 270.222987][T10176] FAULT_INJECTION: forcing a failure. [ 270.222987][T10176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.236431][T10164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8181 sclass=netlink_route_socket pid=10164 comm=syz.5.1997 [ 270.250595][T10178] FAULT_INJECTION: forcing a failure. [ 270.250595][T10178] name failslab, interval 1, probability 0, space 0, times 0 [ 270.265076][T10176] CPU: 0 UID: 0 PID: 10176 Comm: syz.3.2004 Tainted: G W syzkaller #0 PREEMPT(full) [ 270.265181][T10176] Tainted: [W]=WARN [ 270.265269][T10176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 270.265282][T10176] Call Trace: [ 270.265289][T10176] [ 270.265296][T10176] __dump_stack+0x1d/0x30 [ 270.265322][T10176] dump_stack_lvl+0x95/0xd0 [ 270.265347][T10176] dump_stack+0x15/0x1b [ 270.265428][T10176] should_fail_ex+0x263/0x280 [ 270.265530][T10176] should_fail+0xb/0x20 [ 270.265546][T10176] should_fail_usercopy+0x1a/0x20 [ 270.265605][T10176] _copy_to_user+0x20/0xa0 [ 270.265625][T10176] simple_read_from_buffer+0xb5/0x130 [ 270.265642][T10176] proc_fail_nth_read+0x10e/0x150 [ 270.265732][T10176] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 270.265772][T10176] vfs_read+0x1ab/0x7f0 [ 270.265784][T10176] ? __rcu_read_unlock+0x4e/0x70 [ 270.265798][T10176] ? __fget_files+0x184/0x1c0 [ 270.265881][T10176] ? mutex_lock+0x57/0x90 [ 270.265943][T10176] ksys_read+0xdc/0x1a0 [ 270.265957][T10176] __x64_sys_read+0x40/0x50 [ 270.265976][T10176] x64_sys_call+0x2886/0x3020 [ 270.265993][T10176] do_syscall_64+0x12c/0x370 [ 270.266058][T10176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.266116][T10176] RIP: 0033:0x7f3f37a6d04e [ 270.266128][T10176] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 270.266142][T10176] RSP: 002b:00007f3f364fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 270.266157][T10176] RAX: ffffffffffffffda RBX: 00007f3f364ff6c0 RCX: 00007f3f37a6d04e [ 270.266166][T10176] RDX: 000000000000000f RSI: 00007f3f364ff0a0 RDI: 0000000000000004 [ 270.266175][T10176] RBP: 00007f3f364ff090 R08: 0000000000000000 R09: 0000000000000000 [ 270.266258][T10176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.266266][T10176] R13: 00007f3f37d26038 R14: 00007f3f37d25fa0 R15: 00007fff268d0548 [ 270.266280][T10176] [ 270.269527][T10178] CPU: 1 UID: 0 PID: 10178 Comm: syz.0.2003 Tainted: G W syzkaller #0 PREEMPT(full) [ 270.269590][T10178] Tainted: [W]=WARN [ 270.269597][T10178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 270.269608][T10178] Call Trace: [ 270.269615][T10178] [ 270.269623][T10178] __dump_stack+0x1d/0x30 [ 270.269738][T10178] dump_stack_lvl+0x95/0xd0 [ 270.269763][T10178] dump_stack+0x15/0x1b [ 270.269785][T10178] should_fail_ex+0x263/0x280 [ 270.269818][T10178] should_failslab+0x8c/0xb0 [ 270.269870][T10178] __kmalloc_noprof+0xb8/0x4e0 [ 270.269893][T10178] ? iter_file_splice_write+0x101/0xa80 [ 270.269918][T10178] iter_file_splice_write+0x101/0xa80 [ 270.269994][T10178] ? copy_splice_read+0x675/0x6c0 [ 270.270017][T10178] ? copy_splice_read+0x675/0x6c0 [ 270.270040][T10178] ? __pfx_iter_file_splice_write+0x10/0x10 [ 270.270063][T10178] direct_splice_actor+0x156/0x2a0 [ 270.270096][T10178] splice_direct_to_actor+0x311/0x670 [ 270.270120][T10178] ? __pfx_direct_splice_actor+0x10/0x10 [ 270.270146][T10178] do_splice_direct+0x119/0x1a0 [ 270.270247][T10178] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 270.270273][T10178] do_sendfile+0x382/0x650 [ 270.270354][T10178] __x64_sys_sendfile64+0x105/0x150 [ 270.270380][T10178] x64_sys_call+0x2dc4/0x3020 [ 270.270406][T10178] do_syscall_64+0x12c/0x370 [ 270.270445][T10178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.270467][T10178] RIP: 0033:0x7faa429ac819 [ 270.270484][T10178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.270503][T10178] RSP: 002b:00007faa41407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 270.270558][T10178] RAX: ffffffffffffffda RBX: 00007faa42c25fa0 RCX: 00007faa429ac819 [ 270.270571][T10178] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 270.270584][T10178] RBP: 00007faa41407090 R08: 0000000000000000 R09: 0000000000000000 [ 270.270621][T10178] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 270.270634][T10178] R13: 00007faa42c26038 R14: 00007faa42c25fa0 R15: 00007ffc5d300f88 [ 270.270654][T10178] [ 270.800921][T10194] loop5: detected capacity change from 0 to 256 [ 270.856367][T10201] loop1: detected capacity change from 0 to 1024 [ 270.879508][T10203] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2015'. [ 270.883969][T10201] EXT4-fs: Ignoring removed bh option [ 270.908766][T10201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 271.001453][T10209] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 271.029095][T10209] SELinux: failed to load policy [ 271.115959][T10213] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.123210][T10213] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.220137][T10213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.231159][T10213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.276058][ T6213] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.285651][ T6213] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.306054][ T6213] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.326552][ T6213] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.405387][T10212] lo speed is unknown, defaulting to 1000 [ 271.432060][T10212] dummy0 speed is unknown, defaulting to 1000 [ 271.538087][T10244] loop0: detected capacity change from 0 to 128 [ 271.543080][T10212] chnl_net:caif_netlink_parms(): no params data found [ 271.546195][T10244] FAULT_INJECTION: forcing a failure. [ 271.546195][T10244] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 271.564500][T10244] CPU: 0 UID: 0 PID: 10244 Comm: syz.0.2025 Tainted: G W syzkaller #0 PREEMPT(full) [ 271.564535][T10244] Tainted: [W]=WARN [ 271.564543][T10244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 271.564556][T10244] Call Trace: [ 271.564563][T10244] [ 271.564572][T10244] __dump_stack+0x1d/0x30 [ 271.564646][T10244] dump_stack_lvl+0x95/0xd0 [ 271.564670][T10244] dump_stack+0x15/0x1b [ 271.564698][T10244] should_fail_ex+0x263/0x280 [ 271.564724][T10244] should_fail_alloc_page+0xf2/0x100 [ 271.564832][T10244] alloc_pages_bulk_noprof+0x101/0x530 [ 271.564877][T10244] copy_splice_read+0xf3/0x6c0 [ 271.564901][T10244] ? __pfx_filemap_splice_read+0x10/0x10 [ 271.564925][T10244] splice_direct_to_actor+0x28f/0x670 [ 271.564946][T10244] ? __pfx_direct_splice_actor+0x10/0x10 [ 271.565015][T10244] do_splice_direct+0x119/0x1a0 [ 271.565096][T10244] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 271.565125][T10244] do_sendfile+0x382/0x650 [ 271.565179][T10244] __x64_sys_sendfile64+0x105/0x150 [ 271.565208][T10244] x64_sys_call+0x2dc4/0x3020 [ 271.565235][T10244] do_syscall_64+0x12c/0x370 [ 271.565264][T10244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.565325][T10244] RIP: 0033:0x7faa429ac819 [ 271.565342][T10244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.565360][T10244] RSP: 002b:00007faa41407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 271.565381][T10244] RAX: ffffffffffffffda RBX: 00007faa42c25fa0 RCX: 00007faa429ac819 [ 271.565395][T10244] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 271.565477][T10244] RBP: 00007faa41407090 R08: 0000000000000000 R09: 0000000000000000 [ 271.565489][T10244] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 271.565520][T10244] R13: 00007faa42c26038 R14: 00007faa42c25fa0 R15: 00007ffc5d300f88 [ 271.565556][T10244] [ 271.795676][T10248] FAULT_INJECTION: forcing a failure. [ 271.795676][T10248] name failslab, interval 1, probability 0, space 0, times 0 [ 271.814987][T10248] CPU: 1 UID: 0 PID: 10248 Comm: syz.5.2026 Tainted: G W syzkaller #0 PREEMPT(full) [ 271.815022][T10248] Tainted: [W]=WARN [ 271.815029][T10248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 271.815041][T10248] Call Trace: [ 271.815047][T10248] [ 271.815057][T10248] __dump_stack+0x1d/0x30 [ 271.815159][T10248] dump_stack_lvl+0x95/0xd0 [ 271.815247][T10248] dump_stack+0x15/0x1b [ 271.815271][T10248] should_fail_ex+0x263/0x280 [ 271.815351][T10248] should_failslab+0x8c/0xb0 [ 271.815453][T10248] kmem_cache_alloc_noprof+0x66/0x400 [ 271.815477][T10248] ? security_file_alloc+0x32/0xf0 [ 271.815504][T10248] security_file_alloc+0x32/0xf0 [ 271.815529][T10248] init_file+0x5b/0x1b0 [ 271.815557][T10248] alloc_empty_file+0x8b/0x200 [ 271.815642][T10248] path_openat+0x65/0x2050 [ 271.815659][T10248] ? path_openat+0x1ab2/0x2050 [ 271.815679][T10248] ? path_openat+0x1b01/0x2050 [ 271.815702][T10248] ? _parse_integer_limit+0x170/0x190 [ 271.815787][T10248] ? _parse_integer+0x27/0x40 [ 271.815808][T10248] ? kstrtoull+0x111/0x140 [ 271.815829][T10248] do_file_open+0x16c/0x290 [ 271.815876][T10248] file_open_name+0xfa/0x120 [ 271.815944][T10248] __se_sys_acct+0x8c/0x500 [ 271.815975][T10248] __x64_sys_acct+0x1f/0x30 [ 271.816042][T10248] x64_sys_call+0x2e7f/0x3020 [ 271.816073][T10248] do_syscall_64+0x12c/0x370 [ 271.816136][T10248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.816162][T10248] RIP: 0033:0x7f27669fc819 [ 271.816226][T10248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.816245][T10248] RSP: 002b:00007f276544f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 271.816269][T10248] RAX: ffffffffffffffda RBX: 00007f2766c75fa0 RCX: 00007f27669fc819 [ 271.816286][T10248] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 271.816302][T10248] RBP: 00007f276544f090 R08: 0000000000000000 R09: 0000000000000000 [ 271.816359][T10248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.816373][T10248] R13: 00007f2766c76038 R14: 00007f2766c75fa0 R15: 00007ffc684c5a08 [ 271.816390][T10248] [ 272.050801][T10212] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.063986][T10254] loop0: detected capacity change from 0 to 4096 [ 272.079264][T10212] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.098331][T10212] bridge_slave_0: entered allmulticast mode [ 272.100219][T10255] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2028'. [ 272.104912][T10212] bridge_slave_0: entered promiscuous mode [ 272.133796][T10254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.140066][T10212] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.168006][T10212] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.175525][T10212] bridge_slave_1: entered allmulticast mode [ 272.182192][T10212] bridge_slave_1: entered promiscuous mode [ 272.199648][T10254] lo speed is unknown, defaulting to 1000 [ 272.205810][T10254] dummy0 speed is unknown, defaulting to 1000 [ 272.235626][T10212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.252623][T10201] kexec: Could not allocate control_code_buffer [ 272.254227][T10212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.279792][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 272.340017][T10212] team0: Port device team_slave_0 added [ 272.359927][T10212] team0: Port device team_slave_1 added [ 272.379352][T10212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.386362][T10212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.412964][T10212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.444957][T10212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.447674][T10276] loop1: detected capacity change from 0 to 512 [ 272.452230][T10212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.458847][T10276] EXT4-fs: Ignoring removed nomblk_io_submit option [ 272.490282][T10212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.506559][T10276] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8843c198, mo2=0002] [ 272.515929][T10276] EXT4-fs error (device loop1): ext4_iget_extra_inode:5040: inode #15: comm syz.1.2034: corrupted in-inode xattr: e_value size too large [ 272.536889][T10276] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 272.537206][T10276] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2034: couldn't read orphan inode 15 (err -117) [ 272.546452][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 272.546475][ C0] EXT4-fs (loop1): initial error at time 2000032980: ext4_iget_extra_inode:5040: inode 15 [ 272.546506][ C0] EXT4-fs (loop1): last error at time 2000032980: ext4_iget_extra_inode:5040: inode 15 [ 272.559456][T10212] hsr_slave_0: entered promiscuous mode [ 272.567755][T10276] loop1: lost filesystem error report for type 5 error -117 [ 272.582645][T10212] hsr_slave_1: entered promiscuous mode [ 272.604349][T10212] debugfs: 'hsr0' already exists in 'hsr' [ 272.604868][T10276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.610088][T10212] Cannot create hsr debugfs directory [ 272.656240][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.747513][T10212] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 272.756851][T10212] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 272.851450][T10212] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 272.870565][T10212] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 272.898907][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.909081][ T4222] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.918511][ T4222] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.951221][T10290] loop0: detected capacity change from 0 to 512 [ 272.958693][T10290] EXT4-fs: Ignoring removed nomblk_io_submit option [ 272.971875][ T6215] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.980867][ T6215] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.003864][T10290] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8843c198, mo2=0002] [ 273.022179][T10290] EXT4-fs error (device loop0): ext4_iget_extra_inode:5040: inode #15: comm syz.0.2037: corrupted in-inode xattr: e_value size too large [ 273.025214][T10295] loop5: detected capacity change from 0 to 512 [ 273.036359][T10290] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 273.047516][T10295] EXT4-fs: Ignoring removed nomblk_io_submit option [ 273.051285][T10290] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2037: couldn't read orphan inode 15 (err -117) [ 273.056685][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 273.056703][ C1] EXT4-fs (loop0): initial error at time 2000032981: ext4_iget_extra_inode:5040: inode 15 [ 273.056736][ C1] EXT4-fs (loop0): last error at time 2000032981: ext4_iget_extra_inode:5040 [ 273.083284][T10290] loop0: lost filesystem error report for type 5 error -117 [ 273.091533][ C1] : inode 15 [ 273.114339][T10295] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8843c198, mo2=0002] [ 273.115938][T10290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.123068][T10295] EXT4-fs error (device loop5): ext4_iget_extra_inode:5040: inode #15: comm syz.5.2038: corrupted in-inode xattr: e_value size too large [ 273.150748][T10295] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 273.150971][T10295] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2038: couldn't read orphan inode 15 (err -117) [ 273.160197][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 273.160219][ C0] EXT4-fs (loop5): initial error at time 2000032981: ext4_iget_extra_inode:5040: inode 15 [ 273.160253][ C0] EXT4-fs (loop5): last error at time 2000032981: ext4_iget_extra_inode:5040: inode 15 [ 273.201755][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.209172][T10212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.223892][T10212] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.236432][T10295] loop5: lost filesystem error report for type 5 error -117 [ 273.237977][ T4222] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.252460][ T4222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.269001][T10295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.283073][T10295] FAULT_INJECTION: forcing a failure. [ 273.283073][T10295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.283102][ T4222] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.283137][ T4222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.296759][T10295] CPU: 1 UID: 0 PID: 10295 Comm: syz.5.2038 Tainted: G W syzkaller #0 PREEMPT(full) [ 273.296900][T10295] Tainted: [W]=WARN [ 273.296907][T10295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 273.296919][T10295] Call Trace: [ 273.296926][T10295] [ 273.296934][T10295] __dump_stack+0x1d/0x30 [ 273.296961][T10295] dump_stack_lvl+0x95/0xd0 [ 273.296985][T10295] dump_stack+0x15/0x1b [ 273.297128][T10295] should_fail_ex+0x263/0x280 [ 273.297155][T10295] should_fail+0xb/0x20 [ 273.297180][T10295] should_fail_usercopy+0x1a/0x20 [ 273.297208][T10295] _copy_to_user+0x20/0xa0 [ 273.297313][T10295] simple_read_from_buffer+0xb5/0x130 [ 273.297338][T10295] proc_fail_nth_read+0x10e/0x150 [ 273.297370][T10295] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.297447][T10295] vfs_read+0x1ab/0x7f0 [ 273.297519][T10295] ? __rcu_read_unlock+0x4e/0x70 [ 273.297541][T10295] ? __fget_files+0x184/0x1c0 [ 273.297566][T10295] ? mutex_lock+0x57/0x90 [ 273.297587][T10295] ksys_read+0xdc/0x1a0 [ 273.297634][T10295] __x64_sys_read+0x40/0x50 [ 273.297653][T10295] x64_sys_call+0x2886/0x3020 [ 273.297721][T10295] do_syscall_64+0x12c/0x370 [ 273.297748][T10295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.297826][T10295] RIP: 0033:0x7f27669bd04e [ 273.297843][T10295] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 273.297861][T10295] RSP: 002b:00007f276544efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 273.297897][T10295] RAX: ffffffffffffffda RBX: 00007f276544f6c0 RCX: 00007f27669bd04e [ 273.297980][T10295] RDX: 000000000000000f RSI: 00007f276544f0a0 RDI: 0000000000000005 [ 273.298051][T10295] RBP: 00007f276544f090 R08: 0000000000000000 R09: 0000000000000000 [ 273.298065][T10295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.298078][T10295] R13: 00007f2766c76038 R14: 00007f2766c75fa0 R15: 00007ffc684c5a08 [ 273.298176][T10295] [ 273.510643][ T9910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.568361][T10212] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 273.579738][T10212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.608306][T10316] 9p: Bad value for 'rfdno' [ 273.615193][T10316] loop1: detected capacity change from 0 to 256 [ 273.686572][T10212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.770956][T10332] loop5: detected capacity change from 0 to 256 [ 273.783252][T10334] xt_hashlimit: max too large, truncated to 1048576 [ 273.809718][T10332] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 273.843604][T10334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2047'. [ 273.854740][T10341] loop0: detected capacity change from 0 to 128 [ 273.865541][T10341] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 273.878489][T10334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2047'. [ 273.898876][T10341] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 273.912966][T10341] ext2 filesystem being mounted at /421/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.924238][T10341] EXT4-fs (loop0): shut down requested (2) [ 273.982253][T10345] ext4: Unknown parameter 'obj_type' [ 274.022910][T10212] veth0_vlan: entered promiscuous mode [ 274.032197][T10212] veth1_vlan: entered promiscuous mode [ 274.048885][T10212] veth0_macvtap: entered promiscuous mode [ 274.057992][T10212] veth1_macvtap: entered promiscuous mode [ 274.068848][T10212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.077806][T10212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.100913][ T4231] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.110865][ T4231] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.128132][ T4231] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.137625][ T4231] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.153350][T10362] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2055'. [ 274.193189][T10368] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2057'. [ 274.223208][ T28] kauditd_printk_skb: 383 callbacks suppressed [ 274.223226][ T28] audit: type=1400 audit(2000032982.279:3867): avc: denied { ioctl } for pid=10369 comm="syz.6.2019" path="socket:[28065]" dev="sockfs" ino=28065 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 274.234167][T10372] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2058'. [ 274.314500][T10370] can0: slcan on ptm0. [ 274.354270][T10374] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 274.374289][T10374] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.380664][T10388] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2060'. [ 274.417514][T10374] FAULT_INJECTION: forcing a failure. [ 274.417514][T10374] name failslab, interval 1, probability 0, space 0, times 0 [ 274.430311][T10374] CPU: 1 UID: 0 PID: 10374 Comm: syz.1.2059 Tainted: G W syzkaller #0 PREEMPT(full) [ 274.430342][T10374] Tainted: [W]=WARN [ 274.430348][T10374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 274.430360][T10374] Call Trace: [ 274.430366][T10374] [ 274.430427][T10374] __dump_stack+0x1d/0x30 [ 274.430456][T10374] dump_stack_lvl+0x95/0xd0 [ 274.430500][T10374] dump_stack+0x15/0x1b [ 274.430524][T10374] should_fail_ex+0x263/0x280 [ 274.430554][T10374] should_failslab+0x8c/0xb0 [ 274.430620][T10374] kmem_cache_alloc_noprof+0x66/0x400 [ 274.430646][T10374] ? __es_insert_extent+0x508/0xee0 [ 274.430681][T10374] __es_insert_extent+0x508/0xee0 [ 274.430782][T10374] ext4_es_insert_extent+0x46f/0x1c90 [ 274.430821][T10374] ext4_map_create_blocks+0x2f8/0x3a0 [ 274.430934][T10374] ext4_map_blocks+0x594/0x970 [ 274.430970][T10374] _ext4_get_block+0x117/0x370 [ 274.431006][T10374] ext4_get_block_unwritten+0x2a/0xb0 [ 274.431119][T10374] ext4_block_write_begin+0x650/0xcf0 [ 274.431192][T10374] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 274.431229][T10374] ? folio_mapping+0xb9/0xe0 [ 274.431255][T10374] ext4_write_begin+0x636/0xea0 [ 274.431287][ T28] audit: type=1400 audit(2000032982.489:3868): avc: denied { write } for pid=10364 comm="syz.2.2056" path="socket:[28075]" dev="sockfs" ino=28075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 274.431291][T10374] ext4_da_write_begin+0x1f0/0x6c0 [ 274.431378][T10374] ? inode_to_bdi+0x47/0xa0 [ 274.431399][T10374] ? balance_dirty_pages_ratelimited_flags+0x420/0x800 [ 274.431434][T10374] generic_perform_write+0x183/0x490 [ 274.431543][T10374] ext4_buffered_write_iter+0x1ee/0x3c0 [ 274.431565][T10374] ? ext4_file_write_iter+0x100/0xfa0 [ 274.431606][T10374] ext4_file_write_iter+0x380/0xfa0 [ 274.431626][T10374] ? kstrtouint+0x76/0xc0 [ 274.431656][T10374] ? selinux_file_permission+0x1f2/0x690 [ 274.431687][T10374] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 274.431733][T10374] vfs_write+0x5a6/0x9f0 [ 274.431756][T10374] ksys_write+0xdc/0x1a0 [ 274.431808][T10374] __x64_sys_write+0x40/0x50 [ 274.431882][T10374] x64_sys_call+0x27e1/0x3020 [ 274.431909][T10374] do_syscall_64+0x12c/0x370 [ 274.431936][T10374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.431958][T10374] RIP: 0033:0x7f3ca9d1c819 [ 274.432051][T10374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.432072][T10374] RSP: 002b:00007f3ca876f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 274.432143][T10374] RAX: ffffffffffffffda RBX: 00007f3ca9f95fa0 RCX: 00007f3ca9d1c819 [ 274.432158][T10374] RDX: 000000000000000b RSI: 0000200000001d00 RDI: 0000000000000004 [ 274.432172][T10374] RBP: 00007f3ca876f090 R08: 0000000000000000 R09: 0000000000000000 [ 274.432185][T10374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.432199][T10374] R13: 00007f3ca9f96038 R14: 00007f3ca9f95fa0 R15: 00007ffd8e8489b8 [ 274.432218][T10374] [ 274.729785][T10412] FAULT_INJECTION: forcing a failure. [ 274.729785][T10412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.766171][ T3309] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 274.769676][T10412] CPU: 1 UID: 0 PID: 10412 Comm: syz.6.2061 Tainted: G W syzkaller #0 PREEMPT(full) [ 274.769709][T10412] Tainted: [W]=WARN [ 274.769716][T10412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 274.769728][T10412] Call Trace: [ 274.769734][T10412] [ 274.769742][T10412] __dump_stack+0x1d/0x30 [ 274.769816][T10412] dump_stack_lvl+0x95/0xd0 [ 274.769840][T10412] dump_stack+0x15/0x1b [ 274.769863][T10412] should_fail_ex+0x263/0x280 [ 274.769891][T10412] should_fail+0xb/0x20 [ 274.769959][T10412] should_fail_usercopy+0x1a/0x20 [ 274.769988][T10412] _copy_from_iter+0xcf/0xea0 [ 274.770092][T10412] ? __alloc_skb+0x4f6/0x690 [ 274.770120][T10412] ? __alloc_skb+0x200/0x690 [ 274.770157][T10412] netlink_sendmsg+0x4ae/0x6f0 [ 274.770180][T10412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.770200][T10412] ____sys_sendmsg+0x563/0x5b0 [ 274.770222][T10412] ___sys_sendmsg+0x195/0x1e0 [ 274.770290][T10412] __x64_sys_sendmsg+0xd4/0x160 [ 274.770365][T10412] x64_sys_call+0x194c/0x3020 [ 274.770392][T10412] do_syscall_64+0x12c/0x370 [ 274.770454][T10412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.770476][T10412] RIP: 0033:0x7f5a72c2c819 [ 274.770558][T10412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.770585][T10412] RSP: 002b:00007f5a7167f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.770686][T10412] RAX: ffffffffffffffda RBX: 00007f5a72ea5fa0 RCX: 00007f5a72c2c819 [ 274.770701][T10412] RDX: 0000000004008040 RSI: 0000200000000e00 RDI: 0000000000000003 [ 274.770818][T10412] RBP: 00007f5a7167f090 R08: 0000000000000000 R09: 0000000000000000 [ 274.770831][T10412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.770845][T10412] R13: 00007f5a72ea6038 R14: 00007f5a72ea5fa0 R15: 00007fff09f4c778 [ 274.770864][T10412] [ 274.979546][T10423] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.2066'. [ 275.013520][T10378] can0 (unregistered): slcan off ptm0. [ 275.029969][T10429] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 275.096414][T10429] EXT4-fs (loop1): orphan cleanup on readonly fs [ 275.161791][T10429] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #17: comm syz.1.2062: inode has both inline data and extents flags [ 275.212258][T10429] loop1: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 275.212501][T10429] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2062: couldn't read orphan inode 17 (err -117) [ 275.221705][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 275.221724][ C1] EXT4-fs (loop1): initial error at time 2000032983: ext4_orphan_get:1397: inode 17 [ 275.221756][ C1] EXT4-fs (loop1): last error at time 2000032983: ext4_orphan_get:1397: inode 17 [ 275.438326][T10429] loop1: lost filesystem error report for type 5 error -117 [ 275.438890][T10429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 275.559009][T10429] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 275.693932][T10429] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 275.757529][T10447] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.2069'. [ 275.825967][T10429] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 275.883527][T10457] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2072'. [ 275.970608][T10429] futex_wake_op: syz.1.2062 tries to shift op by 32; fix this program [ 275.995350][T10459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2073'. [ 276.026012][T10463] random: crng reseeded on system resumption [ 276.030916][ T28] audit: type=1400 audit(2000032984.168:3869): avc: denied { write } for pid=10461 comm="syz.5.2074" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 276.094435][ T28] audit: type=1400 audit(2000032984.242:3870): avc: denied { listen } for pid=10464 comm="syz.6.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 276.114671][ T28] audit: type=1400 audit(2000032984.242:3871): avc: denied { accept } for pid=10464 comm="syz.6.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 276.135716][T10463] ================================================================== [ 276.143836][T10463] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 276.151147][T10463] [ 276.153478][T10463] write to 0xffff88810a6e0d00 of 8 bytes by task 10461 on cpu 0: [ 276.161202][T10463] mas_wmb_replace+0x20d/0x1610 [ 276.166066][T10463] mas_wr_store_entry+0x16b6/0x2ed0 [ 276.171277][T10463] mas_store_prealloc+0x72e/0xa70 [ 276.176320][T10463] vma_complete+0x3c7/0x850 [ 276.180845][T10463] __split_vma+0x5db/0x640 [ 276.185295][T10463] vma_modify+0xbc9/0xd00 [ 276.189645][T10463] vma_modify_flags+0x182/0x210 [ 276.194513][T10463] mprotect_fixup+0x312/0x5d0 [ 276.199371][T10463] do_mprotect_pkey+0x67b/0x920 [ 276.204237][T10463] __x64_sys_mprotect+0x48/0x60 [ 276.209096][T10463] x64_sys_call+0x2768/0x3020 [ 276.213788][T10463] do_syscall_64+0x12c/0x370 [ 276.218398][T10463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.224310][T10463] [ 276.226638][T10463] read to 0xffff88810a6e0d00 of 8 bytes by task 10463 on cpu 1: [ 276.234270][T10463] mas_state_walk+0x119/0x650 [ 276.238954][T10463] mas_walk+0x60/0x150 [ 276.243033][T10463] lock_vma_under_rcu+0xc9/0x210 [ 276.247985][T10463] do_user_addr_fault+0x232/0x1050 [ 276.253115][T10463] exc_page_fault+0x62/0xa0 [ 276.257633][T10463] asm_exc_page_fault+0x26/0x30 [ 276.262490][T10463] [ 276.264813][T10463] value changed: 0xffff8881043543c1 -> 0xffff88810a6e0d00 [ 276.271929][T10463] [ 276.274253][T10463] Reported by Kernel Concurrency Sanitizer on: [ 276.280414][T10463] CPU: 1 UID: 0 PID: 10463 Comm: syz.5.2074 Tainted: G W syzkaller #0 PREEMPT(full) [ 276.291365][T10463] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 276.295168][T10463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 276.306117][T10463] ================================================================== [ 276.323996][ T28] audit: type=1400 audit(2000032984.473:3872): avc: denied { write } for pid=3298 comm="syz-executor" path="pipe:[2651]" dev="pipefs" ino=2651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 276.347357][ T28] audit: type=1400 audit(2000032984.473:3873): avc: denied { recv } for pid=10466 comm="syz.6.2075" saddr=10.128.0.163 src=42630 daddr=10.128.1.186 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 276.403405][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.686252][T10336] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 276.803569][ T4223] bridge_slave_1: left allmulticast mode [ 276.809720][ T4223] bridge_slave_1: left promiscuous mode [ 276.815612][ T4223] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.824218][ T4223] bridge_slave_0: left allmulticast mode [ 276.829853][ T4223] bridge_slave_0: left promiscuous mode [ 276.835785][ T4223] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.910635][ T4223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.919946][ T4223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.929171][ T4223] bond0 (unregistering): Released all slaves [ 276.973813][ T4223] hsr_slave_0: left promiscuous mode [ 276.979756][ T4223] hsr_slave_1: left promiscuous mode [ 276.985673][ T4223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.993350][ T4223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.031541][ T4223] team0 (unregistering): Port device team_slave_1 removed [ 277.041470][ T4223] team0 (unregistering): Port device team_slave_0 removed [ 277.608271][ T4223] bridge_slave_1: left allmulticast mode [ 277.614487][ T4223] bridge_slave_1: left promiscuous mode [ 277.620204][ T4223] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.628259][ T4223] bridge_slave_0: left allmulticast mode [ 277.633953][ T4223] bridge_slave_0: left promiscuous mode [ 277.639688][ T4223] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.656257][ T4223] bond9 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 277.664984][ T4223] bond9 (unregistering): (slave ip6gretap1): Releasing backup interface [ 277.673507][ T3390] SELinux: failure in sel_netif_sid_slow(), invalid network interface (111) [ 277.682382][ T35] SELinux: failure in sel_netif_sid_slow(), invalid network interface (90) [ 277.691394][ T3390] SELinux: failure in sel_netif_sid_slow(), invalid network interface (78) [ 277.700621][ T3390] SELinux: failure in sel_netif_sid_slow(), invalid network interface (77) [ 277.700846][ T4223] bond1 (unregistering): (slave gretap1): Releasing active interface [ 277.709334][ T3390] SELinux: failure in sel_netif_sid_slow(), invalid network interface (74) [ 277.709386][ T3390] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 277.740853][ T4223] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 277.814291][ T4223] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 277.909833][ T4223] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 277.967192][ T4223] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 278.052770][ T4223] bond6 (unregistering): (slave bridge7): Releasing backup interface [ 278.147678][ T4223] bond8 (unregistering): (slave bridge9): Releasing backup interface [ 278.155952][ T4223] bridge9 (unregistering): left allmulticast mode [ 278.214619][ T4223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.224228][ T4223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.233539][ T4223] bond0 (unregistering): (slave macvlan3): Releasing backup interface [ 278.242086][ T4223] team0: left promiscuous mode [ 278.246970][ T4223] team_slave_0: left promiscuous mode [ 278.252424][ T4223] team_slave_1: left promiscuous mode [ 278.258397][ T4223] bond0 (unregistering): Released all slaves [ 278.265724][ T4223] bond1 (unregistering): Released all slaves [ 278.273793][ T4223] bond2 (unregistering): Released all slaves [ 278.282080][ T4223] bond3 (unregistering): Released all slaves [ 278.290233][ T4223] bond4 (unregistering): Released all slaves [ 278.298441][ T4223] bond5 (unregistering): Released all slaves [ 278.306633][ T4223] bond6 (unregistering): Released all slaves [ 278.315086][ T4223] bond7 (unregistering): Released all slaves [ 278.322964][ T4223] bond8 (unregistering): Released all slaves [ 278.330886][ T4223] bond9 (unregistering): Released all slaves [ 278.356442][ T4223] tipc: Disabling bearer [ 278.361788][ T4223] tipc: Disabling bearer [ 278.368211][ T4223] tipc: Left network mode [ 278.376243][ T4223] hsr_slave_0: left promiscuous mode [ 278.381915][ T4223] hsr_slave_1: left promiscuous mode [ 278.410371][ T4223] team0 (unregistering): Port device team_slave_1 removed [ 278.422078][ T4223] team0 (unregistering): Port device team_slave_0 removed [ 278.626625][ T4223] IPVS: stop unused estimator thread 0... [ 278.674371][ T4223] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.721116][ T4223] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.769476][ T4223] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.806642][ T4223] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.869905][ T4223] bridge_slave_1: left allmulticast mode [ 278.875663][ T4223] bridge_slave_1: left promiscuous mode [ 278.881887][ T4223] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.890055][ T4223] bridge_slave_0: left allmulticast mode [ 278.895689][ T4223] bridge_slave_0: left promiscuous mode [ 278.901418][ T4223] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.005472][ T4223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.015103][ T4223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.024988][ T4223] bond0 (unregistering): Released all slaves [ 279.068458][ T4223] hsr_slave_0: left promiscuous mode [ 279.074459][ T4223] hsr_slave_1: left promiscuous mode [ 279.080320][ T4223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.087931][ T4223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.095573][ T4223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.103245][ T4223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.114149][ T4223] veth1_macvtap: left promiscuous mode [ 279.119994][ T4223] veth0_macvtap: left promiscuous mode [ 279.125509][ T4223] veth1_vlan: left promiscuous mode [ 279.131051][ T4223] veth0_vlan: left promiscuous mode [ 279.191849][ T4223] team0 (unregistering): Port device team_slave_1 removed [ 279.202660][ T4223] team0 (unregistering): Port device team_slave_0 removed