last executing test programs: 8.747628357s ago: executing program 1 (id=322): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x4510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x8, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) mount$9p_tcp(&(0x7f00000002c0), 0x0, 0x0, 0x20404c2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x1e58, 0x13001, 0x0, 0x2ff}, 0x0, 0x0) eventfd2(0x10001, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r3 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 8.378426288s ago: executing program 1 (id=328): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x841e, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x2}, 0x82, 0x4, 0x4, 0x5, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x70, 0x2c, 0xd27, 0x4000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) 8.3419642s ago: executing program 1 (id=331): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) pipe(&(0x7f00000000c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETVESABLANK(r0, 0x560e, &(0x7f0000000140)) 8.249634015s ago: executing program 1 (id=334): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=") syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x18, 0x0, @wg=@data}}}}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000fbff00000000030005000000000002000000ac1414aa0000000000000000010015000000000001001400000000000100"], 0x68}, 0x1, 0x7}, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00') 8.16437669s ago: executing program 1 (id=335): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) fcntl$getown(r0, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004e00), &(0x7f0000004e40)=0xc) socket$packet(0x11, 0x3, 0x300) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004f40), 0x0, 0x4000041}, 0x4) sendmmsg(r0, &(0x7f000000b640)=[{{&(0x7f00000051c0)=@l2tp6={0xa, 0x0, 0x9, @mcast2, 0x8, 0x4}, 0x80, &(0x7f0000006700)=[{&(0x7f0000005240)="6fc473a93796f592bd3ec657dcdef0438b54a2b16a88623640a733ae6c1a84ae19fc1afac752ef9c75f675397f406c7ff8ae19d8dab5558d53c8f02782007e47734c0430fd0d3df04a3ec67d17cd46140bac4e6cca5f05da59e00f730c00e886eb67535c9db2d03cfccb4820fad5c5424ef52810c6d096985af81df28e63bb53bf099e5dc72dce53e3428b0421900e6ff2a65d57c00f3ff83d4a232d969fe16a542c421699efc32b0fc62c7cf6bb38e6cdb011543583c4cc63f0ffee112802ab96094e19bdede032d98c58bfdcbdacaec4a9ad950a04ca63dbd99d4c199c51c48f06c692f5aa3473970769008b9cacb6c6117e0cfa1d6b5049e239a78c4fec30af37e8c85509b69aa5f809f4551e3b3bf3c55518c53d51f35ad51126ee7239e57b6017d64d3b2857961cdd2131b2d771bb2a9e447e5f118eb634e7ec72c255da0da4eb25c65830ca2a4afaa674380755d8501fa73891d669ec435b84c3f03f9f81a5eb895976c62c29b2a8a61f2d22ddbe8c5dbcc47119395dadfb652ee8015712f74f94a129852a7b3f0bb6d0b1d7cb64b40ceeec7b71bb9a89fb783f7b0c20557c56f249144d7aa3ae319a81b6461a4048e7d0cf1c60c1f11182f135f09347ed40b69d3ec3cd480518824534eb9b5c5a895521c2f77754e93c48a715147515cb269d825a0922ba0e5e1fb3da05b2bad1cb68f79654766adfcea1a257da2634b36190ecf16e0269963f44b1407b10f3c2f4973a1f6f154875ba497553ec755838710e7a930ee513ebcf180fc8ac9940ac9a1a8af87bcf23fda94649dff3359eb6471d23a8631c1cd2849460ed2a77c844f660c080c0da97a9ec2cef4529a076194cf9573d2e2494a7b39a3862b433caf424565612bcad06d45d6015c0a4dc3cd9d987250fb40e8f30d2e77ba69a68fa052bd02a4af7b6d8f26b668db74ff94a1868e50afc2a6bbcfa60061246869017cda3e921514eeea75ab3223d9a693c318294a584839f585d8c39317dc7fb32e23d16507c6ed55b2840230a11a9ef3e5a65f8e61c4e914b5b9675416a38248467bc287d5d9299015f05318bb653bc6f07e613e202e7598086300c4a985d90c0f3e5c5b5c670b63b655a962e56da4326a6fc110e5528ffa2efd4ce7a2532009a3902e607197e5d72c1ec891c32ab19712846722d10342dee662a67aad2e58ba9fcb03554174113b465ff0c2b20b0d95a27002dbfb6c9375a8090b2e0820d8164943c6f64be958e217e69b9da89ab9b9aaf2b0bfaa3913b134323b27e92c797169767781d05842043c4c318bf593dfc74759ef05096827bc1e123ec12dac6bfa4d19a37101e9cd29358ff55e4ca02862611bcb82d4298177b185a0359416bbd47fbbee0516af69dd9b60b879f6066c95244da8dabf2a5f4ffd6674bd9dac380bba20f72e7d297c04ce5e592ee81e64444dae4121ac672df14a50e37cb0d6c99d7b04fcee4b11f481a7197b3fe7f88f1d8ad339b62f4893efe417ddcdb6241759f81305132d14c9f548c2c1d758f3aa816655f9f696222a01880200c3cf7375dd442f4af6ac364ab97ce34cc0902ac0bc05c5d41224686437d4aa543bd6c9cc1cd1d1b9767de26df7fcf3ad927346e83da9d064aeaf7cc7ba20d4e81c8a23644db464a4695f31e605e10ed69fb5d85fd36ccdf849bc669a13d15495778ad83b5c4b96cffb1d1575d136acd4fdc58036635be1d938f4e4cc0663a0c9a8e477f36501a35130e3ffe451e5075ba181ae547f921d44505611e052c0988f20246facfc35770aab7f5e95ccdf242cdd99129bccad30bf57ce3fc037d4746eba43507765b117dcd346c1560876e5830746677a9cb5945f453675177a5a6abc931c67abad415c38418d1cae4663f6488ed84527fd0047a166e816298fbea026d88adb3be10d28eddfdfbfb24001eb2abc290b3a765ba56d6b2521ce431c8db7e6467926cffa521130792fdc1a9d7e1d39998afc368c92f29ec8fdec9cf549eb4ff593408bcdc830d6369553f3c8f976ab373bba76d22b97756ca200dc78877973be0e92ff9e702339cdcda1d063d2274782987dedcc4e72bb57b08b1dda41daed1ead968fb722e825224dd6e3ed0f3e62439e219e57c2530b7a07a12894103f44de0b2fbde61", 0x5f0}, {0x0}, {&(0x7f0000006440)="653b9702c000b6a9017dad675a83314bb811b26fe301a000f8fda79e7f8bc0dbcff9c218ab97649f663819bef2a67923c4f1dfc34b64917a628dc06764fcea9961388e383631ae3b1200423e36c1bc5f169809d51e96bce35554672d17dda08f308ec901b57d6eb564ea28719c1cd99ec5bb2f6fe23c1c7b2364f372a94a8edab2a9a2a248cb749d90825167a8797f3ac4", 0x91}, {&(0x7f0000006500)="182582566ddb7b6dd5c35010de2668274119a43db5e9d479521d293817ec4b549646bacee772e69cc0e3d60debea5d7d9cdd16773a6096a2bdd1c683de211ab3ffd38d320a31e55c8931f4bf19a39096dc29a346688dcca99845e8c940731055555bfc74670ccf0bf7a5987532181478492b001b09760d71a3d365f840103ead7d5c4d77be7dd5b9804ccdc1fd1078acb1604c79b51f2a032d84da7ca14fd56946a7", 0xa2}, {&(0x7f00000065c0)="c6203b2c140c8a4ec0f936d47a12daa7ea8351", 0x13}, {&(0x7f0000006600)="d44450cf4878c1643e347677bc2b598558f93ab641002d8dcfdf8ab4db249cce9584f9f8d68b15239b72264ff36b355689555dea5cd54c370c402251af60f8eaca33f5f9c3be7f01062beeaf2987c1c3d8b8925864a9be1ee88619d6209cc147807401064403a02ad65ba5d5f93b82318e062a2618cf9b269ec2d1d534c9df0ca583498474f919a4dc7aedaad589ff12319cc882bec3220fab005c67f5cd10647b7d49f0624a69f88241fe3b6d0bd9cc5091935977945b93e99acee880846c5e93ee", 0xc2}], 0x6, &(0x7f00000067c0)=[{0xe0, 0x10c, 0x5, "233f29558068856da611d845b5a939b9e59fa66d77de82f8a12e9d399def28d4bac73ab5aadc68eb39fa940b783c9fd3009431d216ae187817bc24562cf779c6771dcf264fe78b21197b8ad5e853779f71f94f07035ebe8be16dcdc317f1ba5ad510c889f3260312f63685c545775400ea73f82c096ab7b623d4170bdb49856c0cdd162b05d06ff8f4d94de7e93b9744d601ac70f2101de0e3c85b59463ee2f2755ee625879a78dff537fa4a472300af75b4f38245c8410b9c49d12c1c5e0c2bc203aebe1dce8892132d2cf7db8e9f72"}, {0x78, 0x107, 0x6, "5644d6d844f63cf24bb2ed527630858045f16637abfef8beccf535ac333914f2c5d96d881f406e72637577eb9e7c1c1468dc66264c6bb6c4601c4d4d03b1ec809d66d6bde06a1b78e515c0a0df515ad2bf81f028aef9bc3713460f92fc3ab2074a"}], 0x158}}, {{0x0, 0x0, 0x0}}, {{&(0x7f000000af80)=@in6={0xa, 0x4e23, 0x0, @private1, 0x1}, 0x80, &(0x7f000000b1c0)}}], 0x3, 0x0) 7.938464832s ago: executing program 1 (id=342): getpid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000240)={0x0, &(0x7f0000000080)}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f00008f5000/0x4000)=nil, 0x4000, 0x4, 0x10, 0xffffffffffffffff, 0xffffd000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, 0x0, 0x20040040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x2, @thr={0x0, 0x0}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000054) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0, 0x8000000], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000001000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) socket$packet(0x11, 0x2, 0x300) 7.919447043s ago: executing program 32 (id=342): getpid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000240)={0x0, &(0x7f0000000080)}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f00008f5000/0x4000)=nil, 0x4000, 0x4, 0x10, 0xffffffffffffffff, 0xffffd000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, 0x0, 0x20040040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x2, @thr={0x0, 0x0}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000054) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0, 0x8000000], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000001000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) socket$packet(0x11, 0x2, 0x300) 4.724097494s ago: executing program 4 (id=382): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x8000}) r0 = socket(0x400000000010, 0x3, 0x0) ioctl(r0, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0, 0x8}, 0x880, 0x34, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[], 0x170}}, 0x851) unshare(0x22020600) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000ac0)={0x0, 0x12, "7cf34c4cba28f7d379ec5eaa19bf55609577"}, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x4b800, 0x0) pidfd_send_signal(r1, 0x1, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) read$char_usb(r3, &(0x7f0000000000)=""/111, 0x6f) socket$nl_generic(0x10, 0x3, 0x10) 3.824979705s ago: executing program 4 (id=394): r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fb, r0, 0x0, 0x0, 0x400000000000000, 0x0, 0x1, r0}]) r2 = open(0x0, 0x0, 0x0) fremovexattr(r2, 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000001440)=ANY=[], 0x24, 0x3) 3.636429185s ago: executing program 4 (id=395): r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x28, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x800, 0x6, 0x2, 0x0, 0x0, 0x0, 0x34fe}, 0x0, 0x400000040, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES64=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x4) set_mempolicy(0x3, &(0x7f0000000140)=0x4000000ff9, 0xf) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r4, 0x10e, 0x3, 0x0, &(0x7f0000000140)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0083}, 0x4044) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x5, 0x3, r3, 0x0}]) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x2000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r7, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r8 = eventfd2(0x2, 0x80000) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000180)={0x4}) fcntl$dupfd(r1, 0x0, r1) read$eventfd(r8, &(0x7f0000000040), 0x8) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) ioctl$PPPIOCGIDLE32(0xffffffffffffffff, 0x8008743f, &(0x7f0000000080)) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d800000018007b18e00212ba0d8105040a871100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000100000300014002000c59c266cd3e72d30901a8040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090080001fb791643a5ee4b11602b2a10c11ce1b14d6d130dfe1d9d322fe04fba8cae8c9010000734d7a50f4fa61ee8362969ad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6cdd40dd60105e9f16e9cb58000000000000000000000000000be", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) request_key(&(0x7f0000000a40)='user\x00', &(0x7f0000000a80)={'syz', 0x3}, &(0x7f0000000ac0)='keyring\x00', 0x0) 3.460610235s ago: executing program 4 (id=399): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000780)={[{@usrjquota}, {@stripe={'stripe', 0x3d, 0x77b2}}, {@grpquota}]}, 0x1, 0x51f, &(0x7f0000000f80)="$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") open(&(0x7f0000000080)='./bus\x00', 0x169242, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002280)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0xfff2}, {0x0, 0x3}, {0x10, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048084}, 0x240cc880) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r4, 0x1, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6d", 0x8}) rename(&(0x7f0000000440)='./bus\x00', &(0x7f00000003c0)='./file1\x00') setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10cd0e0, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 3.278593925s ago: executing program 4 (id=403): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x8000}) r0 = socket(0x400000000010, 0x3, 0x0) ioctl(r0, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0, 0x8}, 0x880, 0x34, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[], 0x170}}, 0x851) unshare(0x22020600) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000ac0)={0x0, 0x12, "7cf34c4cba28f7d379ec5eaa19bf55609577"}, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x4b800, 0x0) pidfd_send_signal(r1, 0x1, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) read$char_usb(r3, &(0x7f0000000000)=""/111, 0x6f) socket$nl_generic(0x10, 0x3, 0x10) 3.026819959s ago: executing program 5 (id=343): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xab}}, 0x6}, 0x1c) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, 0x0, &(0x7f00000000c0)) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) readv(r5, &(0x7f0000000380)=[{&(0x7f0000000140)=""/98, 0x62}, {&(0x7f00000001c0)=""/53, 0x35}, {&(0x7f0000000300)=""/63, 0x3f}, {&(0x7f0000000340)=""/35, 0x23}], 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c04040000000000fe80000000000000000000000000000cff01000093"], 0x28) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x5635}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc002}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002880), 0x1, 0x5fd, &(0x7f0000002ec0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.736530746s ago: executing program 3 (id=405): ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) lstat(0x0, 0x0) stat(0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_link_settings={0x37, 0x0, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x3]}}) getpgrp(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x2000411, &(0x7f0000000280)={[{@nouser_xattr}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7f}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@norecovery}]}, 0xfc, 0x57e, &(0x7f0000000e00)="$eJzs3V1rW2UcAPD/SdPu3XUwhnohg104mUvX1pcJgvNSdDjQ+xnarIymy2jSsdaB24W78UaGIOJA/ADeezn8An6KgU6GjKIXIkROetJla9KXLDPZ8vvB2Z7nvOw5/zznf/Y8OQkJYGgdTf/IRbwUEV8nEQdbtuUj23h0bb/VB9dm0iWJev2TP5NIsnXN/ZPs731Z5cWI+OXLiBO5je1Wl1fmi+VyaTGrT9QWLk9Ul1dOXlwozpXmSpempqdPvzk99c7bb/Us1tfO/f3dx3c+OP3VsdVvf7p36FYSZ2J/tq01jidwvbVytPhvVhqNM4/tONmDxgZJ0u8ToCsjWZ6PRnoPOBgjWdYDz78vIqIODKlE/sOQao4DmnP7Hs2Dnxn331+bADViH2uNP7/23kjsbsyN9q4mj8yM0vnueA/aT9v4+ffbt9IlNn8fYs8WdYAduX4jIk7l8xvv/0l2/+veqcabx5t7vI1h+/8H+ulOOv55vd34L7c+/ok24599bXK3G53y/8D6mty9HjTTUTr+e7ft+Hf91jU+ktUONMZ8o8mFi+XSqYh4ISKOR33LRx+nV+/WO21rHf+lS9p+cyyYnce9/K5Hj5kt1ooRMdZlyI+4fyPi5Xy7+JP1/k/a9H/6epzbZhtHSrdf6bRt6/jjj64C26b6jxGvtu3/h92abP58cqJxPUw0r4qN/rp55NdO7W8j/qcq7f+9m8c/nrQ+r63uvI0fdv9T6rSt2+t/LPm0UW4mwdVirbY4GTGWfLRx/dTDY5v15v5p/MePbX7/a3f9p5Ovz7YZ/83DNzvuOgj9P7uj/t954e6Hn3/fqf3t9f8bjdLxbE12/2svu1a2e4JP+voBAAAAAADAIMlFxP5IcoX1ci5XKKx9vuNw7M2VK9XaiQuVpUuz0fiu7HiM5ppPug+2fB5iMvs8bLM+9Vh9OiIORcQ3I3sa9cJMpTzb7+ABAAAAAAAAAAAAAAAAAABgQOzr8P3/1G8j/T474Klr/LDBrn6fBdAPW/7kfy9+6QkYSFvmP/Dckv8wvOQ/DC/5D8NL/sPwkv8wvOQ/DC/5DwAAAAAAAAAAAAAAAAAAAAAAAAAAAD117uzZdKmvPrg2k9ZnrywvzVeunJwtVecLC0szhZnK4uXCXKUyVy4VZioLW/175Url8uRULF2dqJWqtYnq8sr5hcrSpdr5iwvFudL50uj/EhUAAAAAAAAAAAAAAAAAAAA8W6rLK/PFcrm0OCiF+uCd2HsxEKfRrjDWowDXdHV4vu8vgsLmhRtZ9+7sqD7dkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgjf8CAAD//7uiL70=") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000001140)=ANY=[], 0x361, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES16, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000100000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xce, &(0x7f0000000340)=""/206}, 0x94) truncate(&(0x7f0000000240)='./file1\x00', 0x2) 2.635237461s ago: executing program 3 (id=406): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000580), 0x2, 0x8000) write$UHID_INPUT2(r0, &(0x7f0000000900)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x7) r1 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r2, &(0x7f0000003cc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1000000000000048) signalfd4(r2, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socket$kcm(0xa, 0x2, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000100)={@private, @remote, 0x0}, &(0x7f0000000700)=0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYRESHEX=0x0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r4, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r6, 0xff, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="2e1900"/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f00000004c0)=r3}, 0x20) symlink(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x120081e, &(0x7f0000000840)={[{@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@grpquota}]}, 0x21, 0x532, &(0x7f0000001ec0)="$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") r7 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r7, 0xffffffff80000900, 0x0, &(0x7f00000003c0)) syz_clone(0x80, &(0x7f00000001c0)="4cd864c85414278a34698fd7f99cb11af9b584b6b4040cace4b434759b2030e8dd6ec38807", 0x25, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000680)="284c4b8ceb104a2e397d7790ff432855297f777cc0aac24dc1d8e39e21e810803cffb980e754a8ed3110ab9d481c6405b612343d5b0cdcec0bcd64a3e913aabd831fe17cf4920f90d6b063f94e7208bca5787fce3e416410f249826115b529092edf6371c8602cad67ac778a187aad97dfea1151c0") socket$igmp(0x2, 0x3, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000000a01010000000000000000050000000900010073797a30000000009b000000030a03000000000000000000050000010900010073797a30000000000900030073797a0d0000000008000a40000000032800048008000240000000121400030064756d6d7930000000000000000000000800014000000001140000001100010000000000000000000000000a"], 0xa4}}, 0x2) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.613830373s ago: executing program 0 (id=407): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x1ff, 0x1000004, 0x0, 0x0, 0xfffffffd, 0x4528}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xd, 0x3, 0x4, 0x2, 0xfffffffffffffc8d, 0xfffffffffffffffa}}]}}}]}, 0x78}}, 0x0) 2.579923044s ago: executing program 0 (id=408): unshare(0x2040400) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="190000000400000004000000020000000000000008b7c7c890970ef2abf21ec4795efcf7bf610e98475d654e74b6a1e295bee9bb5936bba66628e1b47791f83ef5b11ee5e8eae19afa98ac5efa868838d83cb573a128d749b94ff7dd41bd18293ea4533e9b2a1ebc4b5ed08d4fb6b8d4c997bea00cf1712dd7132d4494079352dade0f767298dcd907625ec0cb2ef70bcd8e5fa45ea59e3db4e2904cea14d6badbe7c8534cd8829087288f3e94f8b63f20c2dcd6b9434f9dcdf12014", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000280), &(0x7f0000000000)=""/6, 0x2}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x40800) ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) listen(0xffffffffffffffff, 0x3) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00f6000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0xfffe, @remote}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x1}, 0x865) setsockopt$sock_attach_bpf(r7, 0x84, 0x1e, &(0x7f0000000240), 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r10, @ANYBLOB="08000200e4"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2d, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.271687692s ago: executing program 4 (id=410): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2300}, 0x50) 2.1365434s ago: executing program 2 (id=411): keyctl$KEYCTL_PKEY_ENCRYPT(0x1c, &(0x7f0000000000), 0x0, 0x0, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x27, 0x4}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9001, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x401, 0x20004, 0x572, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0xff, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(r0, 0x21, 0x4, 0x6d6) perf_event_open(0x0, 0x0, 0xa, r0, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x23000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 2.12901028s ago: executing program 33 (id=410): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2300}, 0x50) 2.086671203s ago: executing program 5 (id=413): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000040012000a00fc000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@gettfilter={0x54, 0x2e, 0x104, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x6, 0xc}, {0x6, 0x1}}, [{0x8, 0xb, 0x10000}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x200}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xfffffffc}, {0x8, 0xb, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x2404c890) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000045}, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x45a102, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket(0x10, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x140, 0x2c, 0xd26, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xe, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x114, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x4}, {0x10000006, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0xfff, 0x1800004, 0xa525}]}}, @TCA_U32_POLICE={0x7c, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x20000000, 0xebb, 0x1, 0xdd30, {0x3, 0x2, 0x3, 0x1da, 0x406}, {0xf3, 0x1, 0xfffb, 0x6f4, 0x6, 0x6}, 0x6, 0x0, 0xfaff}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0xc, 0x0, 0x7, {0xff, 0x1, 0x0, 0x6, 0xffff}, {0xb, 0x0, 0x6, 0x7fff, 0xac1, 0x5}, 0x2, 0x25, 0xe2f8}}]}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x80}, 0xc040) close_range(r4, 0xffffffffffffffff, 0x0) r11 = socket$inet6(0xa, 0x2, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x3, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0xa}, 0x100010, 0x32, 0x43a1bd76, 0x7, 0x9, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast2, @in=@broadcast, 0x4e24, 0x6, 0x4e27, 0x0, 0x2, 0xa0, 0xa0, 0x5c}, {0x81, 0x0, 0x3, 0xe91, 0x5, 0x40, 0x0, 0x5}, {0x8001, 0xffffffffffffffff, 0x10, 0x7}, 0x24c, 0x6e6bc0, 0x0, 0x1, 0x1, 0x1}, {{@in=@local, 0x4d3, 0x2b}, 0x2, @in=@local, 0x3501, 0x0, 0x3, 0x3, 0x7, 0x3, 0xffff}}, 0xe8) socketpair$unix(0x1, 0x1, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff8, 0x2) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffff7fffffffffff, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1018, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x2021, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) 1.897202653s ago: executing program 0 (id=414): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) fcntl$getown(r0, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004e00), &(0x7f0000004e40)=0xc) socket$packet(0x11, 0x3, 0x300) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004f40), 0x0, 0x4000041}, 0x4) sendmmsg(r0, &(0x7f000000b640)=[{{&(0x7f00000051c0)=@l2tp6={0xa, 0x0, 0x9, @mcast2, 0x8, 0x4}, 0x80, &(0x7f0000006700)=[{&(0x7f0000005240)="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", 0x5fd}, {0x0}, {&(0x7f0000006440)="653b9702c000b6a9017dad675a83314bb811b26fe301a000f8fda79e7f8bc0dbcff9c218ab97649f663819bef2a67923c4f1dfc34b64917a628dc06764fcea9961388e383631ae3b1200423e36c1bc5f169809d51e96bce35554672d17dda08f308ec901b57d6eb564ea28719c1cd99ec5bb2f6fe23c1c7b2364f372a94a8edab2a9a2a248cb749d90825167a8797f3ac4", 0x91}, {&(0x7f0000006500)="182582566ddb7b6dd5c35010de2668274119a43db5e9d479521d293817ec4b549646bacee772e69cc0e3d60debea5d7d9cdd16773a6096a2bdd1c683de211ab3ffd38d320a31e55c8931f4bf19a39096dc29a346688dcca99845e8c940731055555bfc74670ccf0bf7a5987532181478492b001b09760d71a3d365f840103ead7d5c4d77be7dd5b9804ccdc1fd1078acb1604c79b51f2a032d84da7ca14fd56946a7", 0xa2}, {&(0x7f00000065c0)="c6203b2c140c8a4ec0f936d47a12daa7ea8351", 0x13}, {&(0x7f0000006600)="d44450cf4878c1643e347677bc2b598558f93ab641002d8dcfdf8ab4db249cce9584f9f8d68b15239b72264ff36b355689555dea5cd54c370c402251af60f8eaca33f5f9c3be7f01062beeaf2987c1c3d8b8925864a9be1ee88619d6209cc147807401064403a02ad65ba5d5f93b82318e062a2618cf9b269ec2d1d534c9df0ca583498474f919a4dc7aedaad589ff12319cc882bec3220fab005c67f5cd10647b7d49f0624a69f88241fe3b6d0bd9cc5091935977945b93e99acee880846c5e93ee", 0xc2}], 0x6, &(0x7f00000067c0)=[{0xe0, 0x10c, 0x5, "233f29558068856da611d845b5a939b9e59fa66d77de82f8a12e9d399def28d4bac73ab5aadc68eb39fa940b783c9fd3009431d216ae187817bc24562cf779c6771dcf264fe78b21197b8ad5e853779f71f94f07035ebe8be16dcdc317f1ba5ad510c889f3260312f63685c545775400ea73f82c096ab7b623d4170bdb49856c0cdd162b05d06ff8f4d94de7e93b9744d601ac70f2101de0e3c85b59463ee2f2755ee625879a78dff537fa4a472300af75b4f38245c8410b9c49d12c1c5e0c2bc203aebe1dce8892132d2cf7db8e9f72"}, {0x78, 0x107, 0x6, "5644d6d844f63cf24bb2ed527630858045f16637abfef8beccf535ac333914f2c5d96d881f406e72637577eb9e7c1c1468dc66264c6bb6c4601c4d4d03b1ec809d66d6bde06a1b78e515c0a0df515ad2bf81f028aef9bc3713460f92fc3ab2074a"}], 0x158}}, {{0x0, 0x0, 0x0}}, {{&(0x7f000000af80)=@in6={0xa, 0x4e23, 0x0, @private1, 0x1}, 0x80, &(0x7f000000b1c0)}}], 0x3, 0x0) 1.758688361s ago: executing program 5 (id=415): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='target PCI:b:1'], 0x15) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x40000000000020a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21691e, &(0x7f0000000080)={[{@init_itable_val={'init_itable', 0x3d, 0x3}}, {@i_version}, {@inode_readahead_blks}, {@jqfmt_vfsold}, {@noinit_itable}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@sysvgroups}, {@grpjquota, 0x32}, {@data_err_ignore}]}, 0x1, 0x4ed, &(0x7f0000000180)="$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") 1.670568586s ago: executing program 3 (id=416): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)="dc", 0x1}], 0x1, 0x3) close(r0) write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0xb, {0x9, 0x6, 0x20, 0x2, 0xb, 0x3}}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) r2 = socket(0x2d, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0xfea7) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r8, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r4], 0x4}}, 0x0) sendfile(r7, r5, 0x0, 0x100000000) 1.639792488s ago: executing program 2 (id=417): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fcntl$notify(r0, 0x402, 0x37) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) (fail_nth: 17) 1.639580558s ago: executing program 3 (id=418): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0x7c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{0x1ff, 0x1000004, 0x0, 0x0, 0xfffffffd, 0x4528}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xd, 0x3, 0x4, 0x2, 0xfffffffffffffc8d, 0xfffffffffffffffa}}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x7c}}, 0x0) 1.25071592s ago: executing program 2 (id=419): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000b000900053582c137153e37000c0180fc0b1d00f80b", 0x33fe0}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x5509, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000280), &(0x7f0000000100)=@tcp, 0x1}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a, 0x8, 0xfffffd32, 0x0}}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000340)={0x7, 'pim6reg1\x00', {0x3}, 0x21a0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r7, 0x2000) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x2d, 0x9, 0x0, 0x7f11b2d5, 0x8, 0x2, 0xd2d2, 0x1, 0x6, 0x0, 0x91, 0xffffffff, 0xb83, 0x0, 0x0, 0x8000, 0x0, 0x6, 0xd398, 0x0, 0x8, 0xc}}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0xfc, 0xfffff004}, {0x6, 0x22, 0x0, 0xd}]}) r8 = syz_io_uring_setup(0xfda, &(0x7f0000000180)={0x0, 0x7151, 0x2, 0x2, 0x3b7}, &(0x7f0000000080), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f0000000200)=[0x0, 0x71], 0x2) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0xd, 0x7}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x15}, @TCA_PIE_BETA={0x8, 0x5, 0x17}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004001}, 0x4000040) 1.018827893s ago: executing program 0 (id=420): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x8000}) r0 = socket(0x400000000010, 0x3, 0x0) ioctl(r0, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0, 0x8}, 0x880, 0x34, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[], 0x170}}, 0x851) unshare(0x22020600) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000ac0)={0x0, 0x12, "7cf34c4cba28f7d379ec5eaa19bf55609577"}, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x4b800, 0x0) pidfd_send_signal(r1, 0x1, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) read$char_usb(r3, &(0x7f0000000000)=""/111, 0x6f) socket$nl_generic(0x10, 0x3, 0x10) 1.015181803s ago: executing program 3 (id=421): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3b6, 0x28}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20020811}, 0x80) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0xffe3, 0x0}}], 0x400005c, 0x2400c8a0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r3, 0x0, r6, 0x0, 0x38f9, 0x0) splice(r5, 0x0, r4, 0x0, 0x7fffffffffffffff, 0xc00e0000) write(r2, &(0x7f0000000040), 0xffffff4a) 832.446833ms ago: executing program 5 (id=422): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, 0x0, 0x0) recvfrom$inet(r0, &(0x7f00000000c0), 0x0, 0x720, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x7ff, 0x4000) tee(r2, r0, 0x8, 0xb) getsockname$inet(r0, 0x0, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/26, 0xfffffffffffffd6d) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, 0x0, 0x0) r4 = syz_io_uring_setup(0x1215, &(0x7f00000001c0)={0x0, 0x7d0d, 0x80, 0x100000, 0x1a3}, &(0x7f0000000000), &(0x7f0000000580)) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r4, 0x19, &(0x7f0000004cc0)={0x2, 0xe}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000013e0a000000000000797a300000000028000000030a01020000000000000000010000080900010073797a3000000000080003006e61740048000000060a010400000000000000000100000008000b4000000000200004801c0001800b0001007470726f787900000c00028008000140000000615b00010073797a3000000000140000001100010000000000000000000000000a"], 0xb8}}, 0x40000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r6, 0x4b45, &(0x7f0000000000)) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) r8 = dup(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000660a020000000000180100002020782500000000002020207b1ae4ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f00000012c0)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) 152.299582ms ago: executing program 2 (id=423): pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x7b, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 116.104694ms ago: executing program 0 (id=424): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000500)={&(0x7f0000000000)={0x14, r1, 0x10, 0x4070bd28, 0x25dfdbfd}, 0xe}}, 0xf8) 64.423506ms ago: executing program 3 (id=425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_clone(0x1200, &(0x7f0000001d80)="69fe87e437fe450f158afdd5f255e718df93c7942f82dd8837dc824e7d61745637fcd5f43eb3f07fcda412208bbe01d03152fa988c6d4a76ff76ab07c9c70d77958938e6dc9253393928f6dc3e3d483ad2af3011d605a07cf8ebd7ea9d90d29a4a9a0ebdf3796fa83305e1170573d65a46797a344f7195409bad198235cfa3f7c5d4d64b51cc059715bc10d8b2d54127688b6d2463f97bcdb8417c6643cacb5c0d61995f104656d2a02c708484643b1e4a48048adfd5fa738dd42f96bc3f12f53749a280ccbc27863957c039e863e74430ac04aa86acf6237ffff7ab5193ff1bfd9b491f10f37012e6ace0ab84eda1fa43b1ef5e2c80bbaaa795866500932232a18f6a27dc86d045ba9c6634e00d9ed530560bf541a3299870d014242f17e60a5682d6e81d4030380745cd6b9aec8e54a0665c7ea06a136870776179b5e699414b66ca0b5664790bbf2a82bbc99d352ce3115740e76f628efa5c0774ed4405aebcd640604f2eb103cd6e314b5eed42c3b5890453904bc7516dfb487c8639869193e6507568780168394100892b56e91a8daad2987325c0b9af365396d7fe692cb3fe9e2942ac17e960833f4a14dacf7d8a70cc59e1da1786b4bb83ec8091a68b5065acf4a94cfbadaea073e3f63fef0558858ac4311cba9e31af3695808059200eee4cd08fea8fdae80e4188b1ced4748a013a1bcb37ae2c50e401c8e5762265f5cf340dd398aaf9a129129e857446d6f6f7cd69c72b347f0a862ffe13c02fdf0a802df92203d3424a5f4443de22400f5ce88b963adcb1cb93799e18bb8ffd50e802a674fa99f63fea1d4fabd908e585f6dc2b7e410456c3cffde8c6f1252f9e2b6af58f3f2c7f7719f831f9cad45ce542836b70e22db6e9df50bdafacd3437abf8b7d430780ca94f5801bd43a8709b7e48d7edce2b2ef00dfe448ca5038ce7fa3c690ae2bc75efae1a51392d320393bdbe410742ee32910d4386edcdbe6751918982ec0d351834a8c95d3896057ebec04ca9afb653e8d965ac723a9b39937b4d92fd0dc9136b3d05a4288e86bc1a8c2ac7b12b0ca0ab7481c657585537d2be1d623604a61220a4e59c169862d21956caefa5a14e2ce0b38cdd0bfcfdd976a7d1f98789925efb16ed6cabf1761fb045f8b0f2bb4a618275241410a95d6dd3e3eaba6079b8aaaef9778732422065c8a4002d860d2f4b5439ed57082503efc3b8615600308051149105f3532c8d390fa60f53660363268c5f0482e1c6110b1dfb267196c88b01366be2eadbb589b3a28e3e01b091dad1ae93a0c57fad1bad4c9551eae99d4415cbeae2a61a012678565b290fb06771e8e565956e91a00d6d9cef5121c4560a3dfe7f77f0683cdc91da92ba21cecbe0b9ba2f146d51259c2e6e87fd3543f027366a7c6d75b504f009cb4c45fabc8440251f06307aed95fe7d5ee5cc14ba4545de2f417cb5bb0896023fbb551a27d422579a9be0addade917d3ace5d25aee0361dd7cbad841b4b60ecd9dc303aa5da9b5e08de31e0c604098bb1c134dd7dfbb9e36f3106183cabb64aa52c83fe6c1d3d338d73f7b7a3c0a9928c17f1037e5346a9faee5c7e70e07c485d2317ee2c9ca333a9153978f344589026f04e12330823a05aa0f4f8c71fb8351c03c9bf3afa66461def937cdc676e7988b11e6869004b6a45ad3585c02d3d9a05abf314a2cdad9981f8dab122891379724901c868a45a49e066f5188e2e5d533be11797d8c278e59c8c7473db52fa00d9868b61f5ff33fd530987161a94ce1cc9ecc0c523122b5626787aa2025a187cf1c588aef5af30c614bd2091a40ad7f2010ca41d2c0d23886f2c84f3a388b70d63d134e80625094a8c33553dd660d4003bfb1b06c565442ee74d682fcea6750468276f2d487eee069b1e725a6f5cc02417ec88e5f87aac5557e0f76d6081e398f8b28eba03023f5dd873000e500692b2f9570796a4bc80376d77cb687b6ec9f2f02f2caf77befb9e5a8681e57a796408e62fb140cd7d79b6258eb51592247d9c2906ce2a38f395153f8576d5befccd271d98ee9465985b9fa422f44daac41cf14267020345232ec23a87fc3dddbfc2231f71ac77dbdbcae698e4e9d6ee9f396b4e6262ae6063c3af418f7740295516ac9f17884c03d0d0e28103cf06b336421aa21bd7aa627727f731192e94a328c26ec81ac539167788262baa2bb231b17864e1623e6863263b1207d72cfd30701a81a01e0303b3e6deb37990a0b653729f428829305f06fcabbeab44c31d24beb04040ae122ba198940d1cdb896fe05dca1f09d3f1432b4e48cb96d496b266069423445ddca69e3569c9e9b910daece183cd71567cb686eaca67f31b0bd6a3dc5ba3cf2069d27a031d047c8c6757e973f515ca1afd3f4c7750d8e72b96e1c1586f12b8acf52a3766272299374d1a96689f494f1e9c5cf7ac32568df0a1752e171c6a246a452eaff866c7d77400ef72365ff9136d83df700f7c25879dddb0e6a6d4457f1821ada8d6b9d19ed4fc43a797deaf6dad7ff14c5f3b169fc6898f23f0c047c6a5207a780000a9f01bda412dc69244a7d9e33ddd70b1688d10c2a9e09f14b445f90a172adc0bc7ae7c5af8403a80e4183b8008f2f7d431ccf0b6cb5b218f693f58fe53713242c22725e6c5673d2ba205c95d17cae25eb8ca3d6d3d6ab84fcb2bbde11d405ed6b7f82bd84a3b1d03f7f47935d2db977ff5fd4ef6e74bb0f1bfc88c5d421bcb19a1a55b3aca8d18d0b3cb2e5da2416819b812fee6d6a4b9980cf252f0f5a9e8dcb8b9ee98f773a4f167d54767083c66c40fa5a9459d21391b889056b5410977d3afde59591ce3f80a0c994109bcedab96b15e59597b58d64f3618d4ae514ce9c591a43ca37fe56442fd4c3d325a914dfbf96715aabb4064cefc384c41d589a7fedf398404245340f202bec8a875ad96c24b31ec59b800efe9b1c64441bf09a8575a4d76f7b14919fa6316b8a76a7afe8b4d4715cc745d56e72ffb907783d9d3da65458c0779f19d4c3175070360caa92983eb45ba99ee39abf3bccb02738f53087a62e5ffaefed32d313d5a2644337b70de9f151908ba55aeb405f77cf9c9aa5ae996adf55a69eb0389e8f8eb643eb779c4e668786f893d592161ed59ff3ae5653683ac5ed7246ec8a1e0f3962c33f2b4739d50a0ff0e07c835b5a1edf53da620adb8b684328eb5069cdf1d0d3c2bc3efc6bada3ffcf94f9bc93cf31383c00aa0034dc5a142ff5dfc09411603eac8adb2accd3b2e64d844770baa416769b0c8608520b4304113dfbe1e0ad4993981cbfe7cdfdb09324b6fab166cf3e7586e146ea9bf42dbcbee50d90d1f5a23c1ce75cdeee82b27ee682d5f697b4856403124d02a224359641c2bf644cd7b81c3d314ea7a2bcf1b2b6ab1e502d6a5817b60db53199fb596d860708e53cda008dfe440cb859b359fd03e0387732a377151204f431f4aea1d69334b49b6ef85f07fe19dec17ea4d69408be94432d2e75c6ca6718990eadd2ddf9cb4ef5efacf0524d1999e2f63f0d9b99f7439e46fd200d68b0abaac9f659adc0c11ffccbefb84b99cad9c2dfcbfaddfe38074cf293c5f28f735758521e5a4bd15da0366f78aa564ebe9b2c2f2349c45fc876afe6c420bbdd395666c9b66329219c9bc4c43114993d084c8063e7651517a2f685e64b015a2b1557bccd628f7ed2a456c445776b0d4f404d5bcf318be34a23d96f1d1cdab70ab8417622b9b9b0d42ab2aaba6ad92f78e2d1e373fccfea9d8db183e911f411b6bc1f423fe2ff36e7c5cc493cb8f2b3f1233168505e97d97c84a2244a81f5f02784b9b08fc82e6d8fa2876ae2bd1a1ec4fbb8c9a35076e6ab01a6b45476719da53cc0321a3e1b75aedc82ac939e6481705cff574e695771c1948a8ac29fd328477ea040105639fd89cbca5674e86164451fbe949c1b87e5531bac605b42be54e63f79722cbe20a07caf70a5dc804909de070fa6bfd9a452dfa7f0b65545189e04a4110466f410bb0b4b5394be2027e4fa0880903bd3c5530a9d1ff71fe21167749f12280ccc2a8e01680cc377b71fc3176a12c26a70625f12cc61ea9477afa80df94081372a45bad929e46e807d5a8642e6e30e49d4a006351b9b6c4ed0e1753bffeb24efb601e027996e923033a58c2d76a4ec40f07623ece27633197b2d7994370dcc5c7e1b56bf89157419ecbd12d88462a833424615f064991e1e68211e3111fd5bedd9e7b7a86b66f38b0d93afcef3e362ee0bf1d220cc2db017ecb61b8e258e9952a7d7dd78c979c764c22dd16d5436faf36a543ddec143fdfaebfd74683951b2433df11b1907b61b59bb4abd6ec401f7170253285f10f29ed451471371f7a11d5392b79e1e2d9ddf62459765b79e8608437490aab34eea9991df2e9095a6b24a86958186142999eae6d72eaa324d62f2f307aa29c608b4fe573da9ae376ec365e1c5bb33bdb202d1623fcdfe66a92670a580efa5834fd9ca33a03837c0984dacc4acfdc1a3d0e05f9e626a1e7d88804f0b54cc19831e1e55dd318dd1a28432714fd06e48c843a6bcaa84897db9e192ddfee861657998f83390f3a4c8ca19fa8462ecf31a3fa20e5389f8979a0003f57057bcc385455aee4f04801f496cee362345ee42d897ed166a68099fa73ec08edff8ea8153621beec4485ab355562605c6c222d8e3e0652c25ba140ac16f2102f403b9249d1cc0bc0b92ca59f0f92ef61b3633780205e1bd863c38d3b770704eef87ab037933a8b8607f356edfe358de975f7d7219757da55e81f34373af533b4f660e7ad5a1c18af52da52c14e9acc08fb014a826d837ae917fa04687b64614823e86189bdaad6957177addd1a278ad8d65b53cfaf1d7e497eb5b85333f412889808a00085fc2c7ff42afcadebe90b18d1b36e2cd818fe1960cfdf5a53bb5479ce2b12f81142a2d3b335a2d9677fa63ca0843a33a8f5d0779b1eb7ae6aead28445902f32936db0f5d246a6dd299ec28e427599deb1eb4ec1f82aa0c4dc010da7613bb112fba0e202fe5968233df4c8deb5d134041dd778f07b1066c8bd9b9cf38090937c84879844b8ddc333cd26c7cefcdeb71cc0883b44719257a27e4dc91e527270598cf3291d472f35462ddff0aa1975e887c43ad701c23ac07db331a52d201b3ba50dbb87ba04a7f68acad00067e8d582994dd58dde3b178629ad9eaa3d891043d0737cbd682e3c6b4b77e57646815f62536c9788dcb9caee095702980f102f55fef49db71757619eb1adaf28caf1e02101531f9adaed77059fd2c2082a594c55fa9d6368d38d3b5ab2c13fe1a28629de5ed3417fc8f7a005893409d6a084bf7e9278a68283a1aea223b7ffc5aedf057c496fa163aadbf8f88ea5b1a3c3438f37220093d09ca50107bafd1f2822a478204da7260cacbb46e143c15722a8bd4bf79b9dad6ab20fb55ce37a5d33e3124fc24776a56cd0d432476343fc7ddd4ac9070b627f7d2b9c7386fe6161affd6d469ff9c86e59cfade129a92226bde028b19b2ea983171b977d6015e0238e115f4d9969ab608de35b55440d7ceaff50938b1f5465499646fae0a685bc8d006d90b0a0642e9f45113bbb67d2528cc47ec13197058de81d80c010b8ec4ed4fc1df6e740fd56def39f369ba8d9b6d1542f2be99d7b2d6bcefdb54038543a9ecaf33b93cec38e084c70dd9193d6273288159af7a39bf9a9d6e130a57d2fb0cee2bcfbd87f2dafe6eff13959f1e627da885db77f15f2359c2167c5c8a6d477a0da7576a1bc1f4b0ead315c845b5", 0x1000, &(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0)="db77031904a09bfd26e1058b36783c33cf77f90817e14f5c0b763b7ce5cd18973418265a5279b4f278b1f70f2068ab042e4a7c8e6a14165563d4852ff7f1911292e599b9aaa615829161467adfaf573b16cb5a8f62283922bfe361da17d170ea1f2ca1de") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r3, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10100, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000000000000000000380000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r4) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r6, 0x400, 0x1) r7 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r7, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 64.152507ms ago: executing program 2 (id=426): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r0, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[], 0x0) 63.758907ms ago: executing program 0 (id=427): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10003, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}, 0x1, 0x200000000000000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 12.246809ms ago: executing program 2 (id=428): r0 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r0, &(0x7f0000000000)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000fc0)=@filter={'filter\x00', 0xc, 0x4, 0x260, 0xffffffff, 0x178, 0xb8, 0x178, 0x98, 0xffffffff, 0x238, 0x238, 0x238, 0x98, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0x0, 0xffffffff, 'tunl0\x00', 'ipvlan1\x00', {}, {}, 0x1d, 0x3, 0x40}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1b}, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00', {}, {}, 0xa5}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) readahead(r1, 0x2, 0xd5ac) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @match}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x7, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x30, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xf, 0x8, "52f235ed7b1a1d079b1c58"}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x24004011}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) socket(0x10, 0x3, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c232000, 0x3, 0x2}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000000)={0x200401, 0x0, 0x30000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r6, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000300)={0xa04c, 0x7, 0xfffffffd, 0x8, 0x1b, "c8ad0f139c31ed2f00"}) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0xa0, 0x30, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x6a00}, [{0x8c, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x38, 0x2, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x22}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @private, @local}, &(0x7f0000000100)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@ipv6_newnexthop={0xd4, 0x68, 0x10, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x1, 0x0, 0x20}, [@NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x10001}]}, @NHA_OIF={0x8, 0x5, r5}, @NHA_OIF={0x8, 0x5, r7}, @NHA_GROUP_TYPE={0x6}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x76}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xb}]}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x10000}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x10}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xcc}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8001}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x13}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x101}]}, @NHA_OIF={0x8, 0x5, r8}, @NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@empty}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x40) 0s ago: executing program 5 (id=429): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) fcntl$getown(r0, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004e00), &(0x7f0000004e40)=0xc) socket$packet(0x11, 0x3, 0x300) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004f40), 0x0, 0x4000041}, 0x4) sendmmsg(r0, &(0x7f000000b640)=[{{&(0x7f00000051c0)=@l2tp6={0xa, 0x0, 0x9, @mcast2, 0x8, 0x4}, 0x80, &(0x7f0000006700)=[{&(0x7f0000005240)="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", 0x5fd}, {0x0}, {&(0x7f0000006440)="653b9702c000b6a9017dad675a83314bb811b26fe301a000f8fda79e7f8bc0dbcff9c218ab97649f663819bef2a67923c4f1dfc34b64917a628dc06764fcea9961388e383631ae3b1200423e36c1bc5f169809d51e96bce35554672d17dda08f308ec901b57d6eb564ea28719c1cd99ec5bb2f6fe23c1c7b2364f372a94a8edab2a9a2a248cb749d90825167a8797f3ac4", 0x91}, {&(0x7f0000006500)="182582566ddb7b6dd5c35010de2668274119a43db5e9d479521d293817ec4b549646bacee772e69cc0e3d60debea5d7d9cdd16773a6096a2bdd1c683de211ab3ffd38d320a31e55c8931f4bf19a39096dc29a346688dcca99845e8c940731055555bfc74670ccf0bf7a5987532181478492b001b09760d71a3d365f840103ead7d5c4d77be7dd5b9804ccdc1fd1078acb1604c79b51f2a032d84da7ca14fd56946a7", 0xa2}, {&(0x7f00000065c0)="c6203b2c140c8a4ec0f936d47a12daa7ea8351", 0x13}, {&(0x7f0000006600)="d44450cf4878c1643e347677bc2b598558f93ab641002d8dcfdf8ab4db249cce9584f9f8d68b15239b72264ff36b355689555dea5cd54c370c402251af60f8eaca33f5f9c3be7f01062beeaf2987c1c3d8b8925864a9be1ee88619d6209cc147807401064403a02ad65ba5d5f93b82318e062a2618cf9b269ec2d1d534c9df0ca583498474f919a4dc7aedaad589ff12319cc882bec3220fab005c67f5cd10647b7d49f0624a69f88241fe3b6d0bd9cc5091935977945b93e99acee880846c5e93ee", 0xc2}], 0x6}}, {{0x0, 0x0, 0x0}}, {{&(0x7f000000af80)=@in6={0xa, 0x4e23, 0x0, @private1, 0x1}, 0x80, &(0x7f000000b1c0)}}], 0x3, 0x0) kernel console output (not intermixed with test programs): tdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.416372][ T3434] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.596463][ T3527] loop4: detected capacity change from 0 to 764 [ 32.897523][ T3534] FAULT_INJECTION: forcing a failure. [ 32.897523][ T3534] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 32.910772][ T3534] CPU: 0 UID: 0 PID: 3534 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(voluntary) [ 32.910797][ T3534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 32.910811][ T3534] Call Trace: [ 32.910819][ T3534] [ 32.910826][ T3534] __dump_stack+0x1d/0x30 [ 32.910916][ T3534] dump_stack_lvl+0x95/0xd0 [ 32.910935][ T3534] dump_stack+0x15/0x1b [ 32.910953][ T3534] should_fail_ex+0x263/0x280 [ 32.910982][ T3534] should_fail+0xb/0x20 [ 32.911007][ T3534] should_fail_usercopy+0x1a/0x20 [ 32.911043][ T3534] _copy_to_user+0x20/0xa0 [ 32.911061][ T3534] simple_read_from_buffer+0xb5/0x130 [ 32.911147][ T3534] proc_fail_nth_read+0x10e/0x150 [ 32.911178][ T3534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 32.911202][ T3534] vfs_read+0x1ab/0x7f0 [ 32.911285][ T3534] ? iput+0x4b9/0x650 [ 32.911304][ T3534] ? __rcu_read_unlock+0x4e/0x70 [ 32.911331][ T3534] ? __fget_files+0x184/0x1c0 [ 32.911351][ T3534] ? mutex_lock+0x57/0x90 [ 32.911453][ T3534] ksys_read+0xdc/0x1a0 [ 32.911471][ T3534] __x64_sys_read+0x40/0x50 [ 32.911489][ T3534] x64_sys_call+0x2889/0x3000 [ 32.911513][ T3534] do_syscall_64+0xc0/0x2a0 [ 32.911541][ T3534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.911615][ T3534] RIP: 0033:0x7fd73b21b78e [ 32.911632][ T3534] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 32.911648][ T3534] RSP: 002b:00007fd739cb6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 32.911681][ T3534] RAX: ffffffffffffffda RBX: 00007fd739cb76c0 RCX: 00007fd73b21b78e [ 32.911694][ T3534] RDX: 000000000000000f RSI: 00007fd739cb70a0 RDI: 0000000000000003 [ 32.911705][ T3534] RBP: 00007fd739cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 32.911717][ T3534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.911773][ T3534] R13: 00007fd73b4d6038 R14: 00007fd73b4d5fa0 R15: 00007ffe45ceec68 [ 32.911878][ T3534] [ 33.122181][ T3538] netlink: 1260 bytes leftover after parsing attributes in process `syz.0.18'. [ 33.156432][ T3540] loop3: detected capacity change from 0 to 512 [ 33.176079][ T3540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback. [ 33.189075][ T3540] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.379249][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 33.408129][ T3557] loop4: detected capacity change from 0 to 512 [ 33.422970][ T3557] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 33.434666][ T3557] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 33.434960][ T3562] loop0: detected capacity change from 0 to 512 [ 33.444962][ T3557] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.22: Corrupt directory, running e2fsck is recommended [ 33.469867][ T3562] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 33.512040][ T3557] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 33.535369][ T3562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.549251][ T3557] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.22: corrupted in-inode xattr: e_name out of bounds [ 33.564050][ T3562] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.578868][ T3557] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.22: couldn't read orphan inode 15 (err -117) [ 33.608998][ T3557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.627622][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.637620][ T3568] netlink: 164 bytes leftover after parsing attributes in process `syz.2.28'. [ 33.648398][ T3557] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 33.660027][ T3557] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 33.670214][ T3557] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.22: Corrupt directory, running e2fsck is recommended [ 33.698150][ T3568] loop2: detected capacity change from 0 to 1024 [ 33.706152][ T3568] EXT4-fs: Ignoring removed orlov option [ 33.732950][ T3568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.747835][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.839369][ T3582] Zero length message leads to an empty skb [ 33.864691][ T3588] FAULT_INJECTION: forcing a failure. [ 33.864691][ T3588] name failslab, interval 1, probability 0, space 0, times 1 [ 33.877390][ T3588] CPU: 0 UID: 0 PID: 3588 Comm: syz.4.33 Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.877418][ T3588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 33.877434][ T3588] Call Trace: [ 33.877443][ T3588] [ 33.877451][ T3588] __dump_stack+0x1d/0x30 [ 33.877496][ T3588] dump_stack_lvl+0x95/0xd0 [ 33.877932][ T3588] dump_stack+0x15/0x1b [ 33.878038][ T3588] should_fail_ex+0x263/0x280 [ 33.878079][ T3588] should_failslab+0x8c/0xb0 [ 33.878109][ T3588] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 33.878138][ T3588] ? __d_alloc+0x37/0x340 [ 33.878167][ T3588] ? __rcu_read_unlock+0x33/0x70 [ 33.878276][ T3588] __d_alloc+0x37/0x340 [ 33.878309][ T3588] ? number+0xa78/0xb90 [ 33.878334][ T3588] d_alloc_parallel+0x54/0xce0 [ 33.878368][ T3588] ? __d_lookup+0x316/0x340 [ 33.878436][ T3588] ? lookup_noperm_common+0x1c2/0x2a0 [ 33.878485][ T3588] ? d_lookup+0xb2/0xd0 [ 33.878524][ T3588] proc_fill_cache+0x17b/0x260 [ 33.878551][ T3588] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 33.878586][ T3588] proc_map_files_readdir+0x521/0x6a0 [ 33.878650][ T3588] iterate_dir+0x114/0x330 [ 33.878692][ T3588] __se_sys_getdents+0xd2/0x220 [ 33.878770][ T3588] ? __pfx_filldir+0x10/0x10 [ 33.878791][ T3588] __x64_sys_getdents+0x43/0x50 [ 33.878831][ T3588] x64_sys_call+0xe03/0x3000 [ 33.878926][ T3588] do_syscall_64+0xc0/0x2a0 [ 33.878963][ T3588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.878992][ T3588] RIP: 0033:0x7efe14bcaeb9 [ 33.879009][ T3588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.879062][ T3588] RSP: 002b:00007efe13627028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 33.879087][ T3588] RAX: ffffffffffffffda RBX: 00007efe14e45fa0 RCX: 00007efe14bcaeb9 [ 33.879106][ T3588] RDX: 000000000000100a RSI: 0000200000000dc0 RDI: 0000000000000003 [ 33.879123][ T3588] RBP: 00007efe13627090 R08: 0000000000000000 R09: 0000000000000000 [ 33.879140][ T3588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 33.879155][ T3588] R13: 00007efe14e46038 R14: 00007efe14e45fa0 R15: 00007ffd26178508 [ 33.879247][ T3588] [ 34.145851][ T3570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30'. [ 34.155118][ T3570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.197838][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.201183][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.214539][ T3422] nci: nci_rsp_packet: unknown rsp opcode 0x37 [ 34.239950][ T3602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'. [ 34.291030][ T3607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'. [ 34.323013][ T3610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'. [ 34.346801][ T3611] loop0: detected capacity change from 0 to 1024 [ 34.354331][ T3611] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.374392][ T3611] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 35.135006][ T3630] loop2: detected capacity change from 0 to 128 [ 35.141549][ T3630] ======================================================= [ 35.141549][ T3630] WARNING: The mand mount option has been deprecated and [ 35.141549][ T3630] and is ignored by this kernel. Remove the mand [ 35.141549][ T3630] option from the mount to silence this warning. [ 35.141549][ T3630] ======================================================= [ 35.177699][ T3630] FAT-fs (loop2): bogus number of reserved sectors [ 35.184323][ T3630] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 35.193760][ T3630] FAT-fs (loop2): Can't find a valid FAT filesystem [ 35.239017][ T3632] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 35.240276][ C1] hrtimer: interrupt took 109590 ns [ 35.247978][ T3632] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 35.286706][ T3636] loop2: detected capacity change from 0 to 128 [ 35.298075][ T3295] udevd[3295]: incorrect ext4 checksum on /dev/loop2 [ 35.307977][ T3636] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 35.321269][ T3634] loop3: detected capacity change from 0 to 1024 [ 35.380334][ T3634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.464655][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.566146][ T3656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3656 comm=syz.2.50 [ 37.138155][ T3594] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 37.202982][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 37.203001][ T29] audit: type=1400 audit(1769916343.049:206): avc: denied { ioctl } for pid=3664 comm="syz.0.57" path="socket:[4676]" dev="sockfs" ino=4676 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 37.269242][ T29] audit: type=1400 audit(1769916343.119:207): avc: denied { name_bind } for pid=3671 comm="syz.3.60" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 37.290857][ T29] audit: type=1400 audit(1769916343.119:208): avc: denied { node_bind } for pid=3671 comm="syz.3.60" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 37.325922][ T3674] __nla_validate_parse: 1 callbacks suppressed [ 37.325951][ T3674] netlink: 128 bytes leftover after parsing attributes in process `syz.2.56'. [ 37.350914][ T3674] netlink: 'syz.2.56': attribute type 5 has an invalid length. [ 37.427073][ T29] audit: type=1400 audit(1769916343.279:209): avc: denied { create } for pid=3671 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.482448][ T3688] loop0: detected capacity change from 0 to 512 [ 37.516632][ T3688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.530600][ T29] audit: type=1400 audit(1769916343.379:210): avc: denied { setattr } for pid=3687 comm="syz.0.64" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.596877][ T3696] EXT4-fs (loop1): 1 orphan inode deleted [ 37.603219][ T3696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.619243][ T386] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 37.620090][ T3696] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.630022][ T386] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 1 [ 37.703381][ T3702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'. [ 38.140878][ T29] audit: type=1400 audit(1769916343.989:211): avc: denied { perfmon } for pid=3708 comm="syz.3.68" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.163459][ T3709] FAULT_INJECTION: forcing a failure. [ 38.163459][ T3709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.176974][ T3709] CPU: 1 UID: 0 PID: 3709 Comm: syz.3.68 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.177007][ T3709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 38.177020][ T3709] Call Trace: [ 38.177026][ T3709] [ 38.177034][ T3709] __dump_stack+0x1d/0x30 [ 38.177110][ T3709] dump_stack_lvl+0x95/0xd0 [ 38.177133][ T3709] dump_stack+0x15/0x1b [ 38.177228][ T3709] should_fail_ex+0x263/0x280 [ 38.177263][ T3709] should_fail+0xb/0x20 [ 38.177347][ T3709] should_fail_usercopy+0x1a/0x20 [ 38.177386][ T3709] copy_folio_from_iter_atomic+0x269/0x1170 [ 38.177410][ T3709] ? shmem_write_begin+0xfc/0x1f0 [ 38.177468][ T3709] ? shmem_write_begin+0x135/0x1f0 [ 38.177557][ T3709] generic_perform_write+0x2c1/0x490 [ 38.177589][ T3709] shmem_file_write_iter+0xc5/0xf0 [ 38.177664][ T3709] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 38.177772][ T3709] vfs_write+0x5a6/0x9f0 [ 38.177846][ T3709] ksys_write+0xdc/0x1a0 [ 38.177865][ T3709] __x64_sys_write+0x40/0x50 [ 38.177882][ T3709] x64_sys_call+0x2847/0x3000 [ 38.177918][ T3709] do_syscall_64+0xc0/0x2a0 [ 38.177965][ T3709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.177993][ T3709] RIP: 0033:0x7f9b9054b78e [ 38.178059][ T3709] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 38.178074][ T3709] RSP: 002b:00007f9b8efe6da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 38.178146][ T3709] RAX: ffffffffffffffda RBX: 00007f9b8efe76c0 RCX: 00007f9b9054b78e [ 38.178191][ T3709] RDX: 0000000000010000 RSI: 00007f9b86bc7000 RDI: 0000000000000007 [ 38.178202][ T3709] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 38.178213][ T3709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 38.178223][ T3709] R13: 00007f9b8efe6ee0 R14: 00007f9b8efe6ea0 R15: 00007f9b86bc7000 [ 38.178241][ T3709] [ 38.178667][ T3709] set_capacity_and_notify: 1 callbacks suppressed [ 38.178678][ T3709] loop3: detected capacity change from 0 to 128 [ 38.389506][ T3709] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.404301][ T3709] ext4 filesystem being mounted at /mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.424446][ T3709] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.566063][ T29] audit: type=1400 audit(1769916344.419:212): avc: denied { bpf } for pid=3720 comm="syz.3.72" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.439983][ T3729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'. [ 39.448898][ T3729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'. [ 39.478542][ T3731] Illegal XDP return value 4294967274 on prog (id 43) dev N/A, expect packet loss! [ 39.840393][ T29] audit: type=1400 audit(1769916345.689:213): avc: denied { connect } for pid=3737 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.182754][ T3674] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 40.218347][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.256740][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.309607][ T3747] loop4: detected capacity change from 0 to 1024 [ 40.330298][ T3749] loop0: detected capacity change from 0 to 256 [ 40.337056][ T3749] msdos: Bad value for 'gid' [ 40.341676][ T3749] msdos: Bad value for 'gid' [ 40.362029][ T3749] loop0: detected capacity change from 0 to 512 [ 40.380438][ T3749] EXT4-fs: Ignoring removed nobh option [ 40.409256][ T3749] ------------[ cut here ]------------ [ 40.414786][ T3749] EA inode 11 i_nlink=1026 [ 40.414811][ T3749] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.0.80/3749 [ 40.430058][ T3749] Modules linked in: [ 40.434137][ T3749] CPU: 0 UID: 0 PID: 3749 Comm: syz.0.80 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.443725][ T3749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 40.444201][ T3747] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 40.444201][ T3747] [ 40.453931][ T3749] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 40.464779][ T3747] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 40.471327][ T3749] Code: 74 e6 9a ff 4c 8d 2d cd 21 3e 05 49 8d 7e 40 e8 84 d0 b6 ff 49 8b 6e 40 4c 89 e7 e8 b8 cb b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ef e1 d0 03 66 66 66 66 66 66 2e [ 40.499627][ T3749] RSP: 0018:ffffc9000f9335a8 EFLAGS: 00010246 [ 40.505762][ T3749] RAX: ffff88811b54ed90 RBX: ffff88810074faf0 RCX: ffffffff81be1958 [ 40.513781][ T3749] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff86fc3b10 [ 40.521895][ T3749] RBP: 000000000000000b R08: 000188810074faa3 R09: 0000000000000000 [ 40.530026][ T3749] R10: ffffc9000f9334d8 R11: 0001c9000f9334d8 R12: ffff88810074faa0 [ 40.538144][ T3749] R13: ffffffff86fc3b10 R14: ffff88810074fa58 R15: 0000000000000001 [ 40.546264][ T3749] FS: 00007fd739cb76c0(0000) GS:ffff8882aeb57000(0000) knlGS:0000000000000000 [ 40.555283][ T3749] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.561949][ T3749] CR2: 00007fce9636c000 CR3: 000000011b966000 CR4: 00000000003506f0 [ 40.570132][ T3749] Call Trace: [ 40.573507][ T3749] [ 40.576495][ T3749] ext4_xattr_set_entry+0x77c/0x1010 [ 40.581870][ T3749] ext4_xattr_ibody_set+0x184/0x3c0 [ 40.587153][ T3749] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 40.593115][ T3749] __ext4_expand_extra_isize+0x246/0x280 [ 40.598811][ T3749] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 40.604434][ T3749] ext4_evict_inode+0x7c3/0xd40 [ 40.609396][ T3749] ? __pfx_ext4_evict_inode+0x10/0x10 [ 40.614900][ T3749] evict+0x2af/0x510 [ 40.618854][ T3749] ? __dquot_initialize+0x146/0x7c0 [ 40.624228][ T3749] iput+0x4b9/0x650 [ 40.628107][ T3749] ext4_process_orphan+0x1a9/0x1c0 [ 40.633295][ T3749] ext4_orphan_cleanup+0x6a8/0xa00 [ 40.638499][ T3749] ext4_fill_super+0x3476/0x3800 [ 40.643557][ T3749] ? set_blocksize+0x1a3/0x310 [ 40.648596][ T3749] ? setup_bdev_super+0x30e/0x370 [ 40.653753][ T3749] ? __pfx_ext4_fill_super+0x10/0x10 [ 40.659105][ T3749] get_tree_bdev_flags+0x291/0x300 [ 40.664302][ T3749] ? __pfx_ext4_fill_super+0x10/0x10 [ 40.669682][ T3749] get_tree_bdev+0x1f/0x30 [ 40.674218][ T3749] ext4_get_tree+0x1c/0x30 [ 40.678774][ T3749] vfs_get_tree+0x57/0x1d0 [ 40.683270][ T3749] do_new_mount+0x288/0x700 [ 40.688085][ T3749] path_mount+0x4d0/0xbc0 [ 40.692515][ T3749] ? user_path_at+0xbf/0x130 [ 40.697235][ T3749] __se_sys_mount+0x28c/0x2e0 [ 40.701959][ T3749] __x64_sys_mount+0x67/0x80 [ 40.706680][ T3749] x64_sys_call+0x2cca/0x3000 [ 40.711438][ T3749] do_syscall_64+0xc0/0x2a0 [ 40.716022][ T3749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.721964][ T3749] RIP: 0033:0x7fd73b25c14a [ 40.726657][ T3749] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.746500][ T3749] RSP: 002b:00007fd739cb6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 40.755007][ T3749] RAX: ffffffffffffffda RBX: 00007fd739cb6ee0 RCX: 00007fd73b25c14a [ 40.763027][ T3749] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007fd739cb6ea0 [ 40.771091][ T3749] RBP: 0000200000000180 R08: 00007fd739cb6ee0 R09: 0000000000800718 [ 40.779184][ T3749] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 40.787237][ T3749] R13: 00007fd739cb6ea0 R14: 00000000000004a3 R15: 0000200000000280 [ 40.795381][ T3749] [ 40.798441][ T3749] ---[ end trace 0000000000000000 ]--- [ 40.809305][ T3749] EXT4-fs (loop0): 1 orphan inode deleted [ 40.824416][ T3749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.864299][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.876460][ T29] audit: type=1400 audit(1769916346.729:214): avc: denied { create } for pid=3753 comm="syz.4.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.941802][ T3756] loop0: detected capacity change from 0 to 1024 [ 40.960398][ T3756] EXT4-fs error (device loop0): ext4_quota_enable:7177: inode #3: comm syz.0.83: iget: bad extended attribute block 5 [ 40.981538][ T3756] EXT4-fs error (device loop0): ext4_quota_enable:7180: comm syz.0.83: Bad quota inode: 3, type: 0 [ 40.993910][ T3756] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 41.019002][ T3756] EXT4-fs (loop0): mount failed [ 41.170990][ T3769] FAULT_INJECTION: forcing a failure. [ 41.170990][ T3769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.184170][ T3769] CPU: 0 UID: 0 PID: 3769 Comm: syz.4.86 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 41.184231][ T3769] Tainted: [W]=WARN [ 41.184239][ T3769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.184251][ T3769] Call Trace: [ 41.184257][ T3769] [ 41.184264][ T3769] __dump_stack+0x1d/0x30 [ 41.184291][ T3769] dump_stack_lvl+0x95/0xd0 [ 41.184357][ T3769] dump_stack+0x15/0x1b [ 41.184384][ T3769] should_fail_ex+0x263/0x280 [ 41.184426][ T3769] should_fail+0xb/0x20 [ 41.184526][ T3769] should_fail_usercopy+0x1a/0x20 [ 41.184568][ T3769] _copy_to_user+0x20/0xa0 [ 41.184596][ T3769] simple_read_from_buffer+0xb5/0x130 [ 41.184710][ T3769] proc_fail_nth_read+0x10e/0x150 [ 41.184813][ T3769] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 41.184923][ T3769] vfs_read+0x1ab/0x7f0 [ 41.184942][ T3769] ? __rcu_read_unlock+0x4e/0x70 [ 41.185021][ T3769] ? __fget_files+0x184/0x1c0 [ 41.185044][ T3769] ? mutex_lock+0x57/0x90 [ 41.185070][ T3769] ksys_read+0xdc/0x1a0 [ 41.185097][ T3769] __x64_sys_read+0x40/0x50 [ 41.185123][ T3769] x64_sys_call+0x2889/0x3000 [ 41.185214][ T3769] do_syscall_64+0xc0/0x2a0 [ 41.185255][ T3769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.185285][ T3769] RIP: 0033:0x7efe14b8b78e [ 41.185377][ T3769] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 41.185405][ T3769] RSP: 002b:00007efe13626fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 41.185430][ T3769] RAX: ffffffffffffffda RBX: 00007efe136276c0 RCX: 00007efe14b8b78e [ 41.185449][ T3769] RDX: 000000000000000f RSI: 00007efe136270a0 RDI: 0000000000000005 [ 41.185466][ T3769] RBP: 00007efe13627090 R08: 0000000000000000 R09: 0000000000000000 [ 41.185583][ T3769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.185600][ T3769] R13: 00007efe14e46038 R14: 00007efe14e45fa0 R15: 00007ffd26178508 [ 41.185624][ T3769] [ 41.210683][ T3770] netlink: 52 bytes leftover after parsing attributes in process `syz.0.83'. [ 41.287914][ T3777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.88'. [ 41.344388][ T3779] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.348666][ T3777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.88'. [ 41.360973][ T3780] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.372976][ T3779] bridge_slave_1: left allmulticast mode [ 41.442467][ T3779] bridge_slave_1: left promiscuous mode [ 41.448297][ T3779] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.463004][ T3779] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 41.493985][ T3783] loop0: detected capacity change from 0 to 512 [ 41.530448][ T3786] FAULT_INJECTION: forcing a failure. [ 41.530448][ T3786] name failslab, interval 1, probability 0, space 0, times 0 [ 41.538089][ T3783] EXT4-fs (loop0): 1 orphan inode deleted [ 41.543321][ T3786] CPU: 1 UID: 0 PID: 3786 Comm: syz.1.91 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 41.543418][ T3786] Tainted: [W]=WARN [ 41.543441][ T3786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.543556][ T3786] Call Trace: [ 41.543586][ T3786] [ 41.543609][ T3786] __dump_stack+0x1d/0x30 [ 41.543691][ T3786] dump_stack_lvl+0x95/0xd0 [ 41.543768][ T3786] dump_stack+0x15/0x1b [ 41.543812][ T3786] should_fail_ex+0x263/0x280 [ 41.543922][ T3786] should_failslab+0x8c/0xb0 [ 41.544005][ T3786] kmem_cache_alloc_noprof+0x68/0x490 [ 41.544171][ T3786] ? skb_clone+0x151/0x1f0 [ 41.544236][ T3786] skb_clone+0x151/0x1f0 [ 41.544300][ T3786] __netlink_deliver_tap+0x2c9/0x500 [ 41.544490][ T3786] netlink_unicast+0x66b/0x690 [ 41.544691][ T3786] netlink_sendmsg+0x5c8/0x6f0 [ 41.544780][ T3786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 41.544844][ T3786] ____sys_sendmsg+0x5af/0x600 [ 41.544904][ T3786] ___sys_sendmsg+0x195/0x1e0 [ 41.545010][ T3786] __x64_sys_sendmsg+0xd4/0x160 [ 41.545095][ T3786] x64_sys_call+0x17ba/0x3000 [ 41.545186][ T3786] do_syscall_64+0xc0/0x2a0 [ 41.545314][ T3786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.545452][ T3786] RIP: 0033:0x7f56c709aeb9 [ 41.545510][ T3786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.545573][ T3786] RSP: 002b:00007f56c5af7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.545638][ T3786] RAX: ffffffffffffffda RBX: 00007f56c7315fa0 RCX: 00007f56c709aeb9 [ 41.545683][ T3786] RDX: 0000000020004004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 41.545727][ T3786] RBP: 00007f56c5af7090 R08: 0000000000000000 R09: 0000000000000000 [ 41.545835][ T3786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.545877][ T3786] R13: 00007f56c7316038 R14: 00007f56c7315fa0 R15: 00007fff024c55d8 [ 41.545941][ T3786] [ 41.743020][ T3434] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 1 [ 41.755540][ T3783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.768714][ T3783] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.865770][ T3796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.90'. [ 42.124433][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.151230][ T3812] loop3: detected capacity change from 0 to 512 [ 42.191579][ T3814] loop0: detected capacity change from 0 to 4096 [ 42.213037][ T3812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.229340][ T3814] EXT4-fs: dax option not supported [ 42.234157][ T3812] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.265666][ T3807] loop2: detected capacity change from 0 to 8192 [ 42.298580][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 42.298598][ T29] audit: type=1400 audit(1769916348.149:224): avc: denied { getopt } for pid=3821 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.337843][ T29] audit: type=1400 audit(1769916348.189:225): avc: denied { setopt } for pid=3821 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.338755][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.357200][ T29] audit: type=1400 audit(1769916348.189:226): avc: denied { create } for pid=3806 comm="syz.2.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 42.417959][ T29] audit: type=1400 audit(1769916348.269:227): avc: denied { create } for pid=3806 comm="syz.2.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 42.442564][ T3829] loop3: detected capacity change from 0 to 512 [ 42.449291][ T29] audit: type=1400 audit(1769916348.279:228): avc: denied { connect } for pid=3827 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 42.468715][ T29] audit: type=1400 audit(1769916348.279:229): avc: denied { getopt } for pid=3827 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.491588][ T3829] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.498290][ T3829] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 42.506824][ T3829] EXT4-fs (loop3): 1 truncate cleaned up [ 42.513013][ T3829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.530032][ T3829] ip6gre1: entered promiscuous mode [ 42.542099][ T3829] loop3: Can't mount, would change RO state [ 42.549796][ T29] audit: type=1400 audit(1769916348.399:230): avc: denied { map } for pid=3828 comm="syz.3.103" path="/proc/87/fdinfo" dev="proc" ino=4910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 42.572064][ T29] audit: type=1400 audit(1769916348.399:231): avc: denied { mounton } for pid=3828 comm="syz.3.103" path="/30/file0" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.599733][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.653426][ T3838] netlink: 32 bytes leftover after parsing attributes in process `syz.4.109'. [ 42.653487][ T3838] netlink: 32 bytes leftover after parsing attributes in process `syz.4.109'. [ 42.663609][ T29] audit: type=1400 audit(1769916348.499:232): avc: denied { mount } for pid=3836 comm="syz.4.109" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 42.694339][ T29] audit: type=1400 audit(1769916348.499:233): avc: denied { getopt } for pid=3836 comm="syz.4.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.779649][ T3846] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 42.829896][ T3848] EXT4-fs: dax option not supported [ 42.911207][ T3852] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.954621][ T3856] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.975913][ T3856] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.991038][ T3852] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.003455][ T3856] EXT4-fs (loop1): 1 truncate cleaned up [ 43.009899][ T3856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.047788][ T3852] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.081442][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.106802][ T3852] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.188959][ T3422] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.216510][ T3422] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.223524][ T3873] set_capacity_and_notify: 3 callbacks suppressed [ 43.223578][ T3873] loop2: detected capacity change from 0 to 4096 [ 43.239576][ T3422] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.253832][ T3422] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.264259][ T3873] EXT4-fs: dax option not supported [ 43.460988][ T3888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'. [ 43.741012][ T3900] netlink: 72 bytes leftover after parsing attributes in process `syz.3.133'. [ 43.760215][ T3900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.133'. [ 43.783983][ T3900] netlink: 212 bytes leftover after parsing attributes in process `syz.3.133'. [ 43.853268][ T3905] loop3: detected capacity change from 0 to 512 [ 43.986384][ T3907] loop3: detected capacity change from 0 to 4096 [ 44.000930][ T3907] EXT4-fs: dax option not supported [ 44.282411][ T3914] FAULT_INJECTION: forcing a failure. [ 44.282411][ T3914] name failslab, interval 1, probability 0, space 0, times 0 [ 44.295165][ T3914] CPU: 0 UID: 0 PID: 3914 Comm: syz.3.138 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 44.295208][ T3914] Tainted: [W]=WARN [ 44.295218][ T3914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 44.295236][ T3914] Call Trace: [ 44.295245][ T3914] [ 44.295254][ T3914] __dump_stack+0x1d/0x30 [ 44.295344][ T3914] dump_stack_lvl+0x95/0xd0 [ 44.295457][ T3914] dump_stack+0x15/0x1b [ 44.295484][ T3914] should_fail_ex+0x263/0x280 [ 44.295517][ T3914] should_failslab+0x8c/0xb0 [ 44.295547][ T3914] __kmalloc_noprof+0xb8/0x580 [ 44.295594][ T3914] ? memcg_list_lru_alloc+0x308/0x4f0 [ 44.295628][ T3914] memcg_list_lru_alloc+0x308/0x4f0 [ 44.295671][ T3914] ? __rcu_read_unlock+0x4e/0x70 [ 44.295792][ T3914] __memcg_slab_post_alloc_hook+0x1a9/0x530 [ 44.295909][ T3914] kmem_cache_alloc_lru_noprof+0x2bb/0x490 [ 44.295944][ T3914] ? alloc_inode+0x9a/0x170 [ 44.295975][ T3914] alloc_inode+0x9a/0x170 [ 44.295997][ T3914] iget_locked+0x101/0x440 [ 44.296027][ T3914] ? strlen+0x19/0x40 [ 44.296065][ T3914] kernfs_get_inode+0x2e/0x350 [ 44.296099][ T3914] kernfs_iop_lookup+0x130/0x1c0 [ 44.296128][ T3914] ? __pfx_kernfs_iop_lookup+0x10/0x10 [ 44.296160][ T3914] path_openat+0xee1/0x23c0 [ 44.296277][ T3914] do_filp_open+0x15d/0x280 [ 44.296335][ T3914] do_sys_openat2+0xa6/0x150 [ 44.296377][ T3914] __x64_sys_openat+0xf2/0x120 [ 44.296437][ T3914] x64_sys_call+0x2b07/0x3000 [ 44.296472][ T3914] do_syscall_64+0xc0/0x2a0 [ 44.296511][ T3914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.296554][ T3914] RIP: 0033:0x7f9b9054b78e [ 44.296577][ T3914] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 44.296602][ T3914] RSP: 002b:00007f9b8efe69b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 44.296637][ T3914] RAX: ffffffffffffffda RBX: 00007f9b8efe76c0 RCX: 00007f9b9054b78e [ 44.296657][ T3914] RDX: 0000000000080001 RSI: 00007f9b905f5448 RDI: ffffffffffffff9c [ 44.296677][ T3914] RBP: 00007f9b905f5448 R08: 0000000000000000 R09: 0000000000000000 [ 44.296695][ T3914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 44.296712][ T3914] R13: 00007f9b8efe6a90 R14: 00007f9b90805fa0 R15: 00007ffd1faccab8 [ 44.296796][ T3914] [ 44.674252][ T3916] netlink: 16 bytes leftover after parsing attributes in process `syz.0.139'. [ 44.683180][ T3916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.139'. [ 44.764768][ T3916] netlink: 'syz.0.139': attribute type 13 has an invalid length. [ 44.855762][ T3916] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.863052][ T3916] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.985614][ T3916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.996674][ T3916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.077908][ T3422] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.097221][ T3422] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.133890][ T3422] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.189777][ T3422] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.332311][ T3923] FAULT_INJECTION: forcing a failure. [ 45.332311][ T3923] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 45.345647][ T3923] CPU: 0 UID: 0 PID: 3923 Comm: syz.0.141 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 45.345689][ T3923] Tainted: [W]=WARN [ 45.345698][ T3923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 45.345716][ T3923] Call Trace: [ 45.345726][ T3923] [ 45.345737][ T3923] __dump_stack+0x1d/0x30 [ 45.345770][ T3923] dump_stack_lvl+0x95/0xd0 [ 45.345799][ T3923] dump_stack+0x15/0x1b [ 45.345820][ T3923] should_fail_ex+0x263/0x280 [ 45.345852][ T3923] should_fail_alloc_page+0xf2/0x100 [ 45.345882][ T3923] __alloc_frozen_pages_noprof+0x108/0x350 [ 45.345928][ T3923] alloc_pages_mpol+0xb3/0x260 [ 45.345973][ T3923] alloc_pages_noprof+0x8f/0x130 [ 45.346016][ T3923] pte_alloc_one+0x1e/0xd0 [ 45.346054][ T3923] __pte_alloc+0x32/0x2c0 [ 45.346082][ T3923] copy_page_range+0x3681/0x3cf0 [ 45.346118][ T3923] ? mas_wr_walk_descend+0x36e/0x470 [ 45.346157][ T3923] ? __account_obj_stock+0x2cc/0x350 [ 45.346205][ T3923] dup_mmap+0x852/0xf00 [ 45.346260][ T3923] copy_mm+0x119/0x370 [ 45.346285][ T3923] copy_process+0xcbd/0x1f10 [ 45.346335][ T3923] kernel_clone+0x16b/0x5b0 [ 45.346358][ T3923] __se_sys_clone3+0x1f5/0x230 [ 45.346405][ T3923] __x64_sys_clone3+0x31/0x40 [ 45.346434][ T3923] x64_sys_call+0x2c0f/0x3000 [ 45.346469][ T3923] do_syscall_64+0xc0/0x2a0 [ 45.346512][ T3923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.346542][ T3923] RIP: 0033:0x7fd73b25aeb9 [ 45.346559][ T3923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.346584][ T3923] RSP: 002b:00007fd739cb6ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 45.346611][ T3923] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fd73b25aeb9 [ 45.346630][ T3923] RDX: 00007fd739cb6f10 RSI: 0000000000000058 RDI: 00007fd739cb6f10 [ 45.346648][ T3923] RBP: 00007fd739cb7090 R08: 0000000000000000 R09: 0000000000000058 [ 45.346666][ T3923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 45.346683][ T3923] R13: 00007fd73b4d6038 R14: 00007fd73b4d5fa0 R15: 00007ffe45ceec68 [ 45.346711][ T3923] [ 45.453379][ T3927] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 45.793342][ T3934] loop3: detected capacity change from 0 to 1024 [ 45.846463][ T3934] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 45.857431][ T3934] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 45.926673][ T3936] loop0: detected capacity change from 0 to 4096 [ 45.933464][ T3934] JBD2: no valid journal superblock found [ 45.939295][ T3934] EXT4-fs (loop3): Could not load journal inode [ 45.974560][ T3936] EXT4-fs: dax option not supported [ 46.398654][ T3943] loop2: detected capacity change from 0 to 1024 [ 46.417064][ T3943] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.447970][ T3943] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003] [ 46.465363][ T3943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.524802][ T3372] IPVS: starting estimator thread 0... [ 46.542480][ T3951] netlink: 'syz.1.151': attribute type 39 has an invalid length. [ 46.550464][ T3934] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 46.614022][ T3926] IPVS: using max 2304 ests per chain, 115200 per kthread [ 46.632898][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.660331][ T3959] loop3: detected capacity change from 0 to 1024 [ 46.667314][ T3959] EXT4-fs: Ignoring removed bh option [ 46.702406][ T3959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.756316][ T3968] loop1: detected capacity change from 0 to 4096 [ 46.763192][ T3968] EXT4-fs: dax option not supported [ 46.788404][ T3970] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20004 [ 46.817603][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.867428][ T3974] loop3: detected capacity change from 0 to 8192 [ 46.877659][ T3974] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.890664][ T3974] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 46.899344][ T3974] FAT-fs (loop3): Filesystem has been set read-only [ 46.999644][ T3984] loop0: detected capacity change from 0 to 512 [ 47.020837][ T3984] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 47.036320][ T3984] mmap: syz.0.164 (3984) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.198708][ T3999] EXT4-fs: dax option not supported [ 47.350098][ T4016] isofs_fill_super: root inode is not a directory. Corrupted media? [ 47.359317][ T4012] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.409254][ T4012] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000700) [ 47.421483][ T4012] FAT-fs (loop0): Filesystem has been set read-only [ 47.450583][ T4012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'. [ 47.473427][ T4012] team0: Port device team_slave_0 removed [ 47.517210][ T4012] syz.0.173 (4012) used greatest stack depth: 10440 bytes left [ 47.532018][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 47.532036][ T29] audit: type=1400 audit(1769916609.383:318): avc: denied { append } for pid=4026 comm="syz.4.179" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 47.561890][ T29] audit: type=1400 audit(1769916609.383:319): avc: denied { map } for pid=4026 comm="syz.4.179" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 47.585605][ T29] audit: type=1400 audit(1769916609.383:320): avc: denied { execute } for pid=4026 comm="syz.4.179" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 47.610361][ T29] audit: type=1400 audit(1769916609.423:321): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 47.666654][ T4032] EXT4-fs: Ignoring removed bh option [ 47.672194][ T4032] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.688994][ T4036] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 47.707193][ T4034] EXT4-fs: dax option not supported [ 47.729102][ T4032] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.784220][ T4032] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.180: corrupted inode contents [ 47.804326][ T4032] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.180: mark_inode_dirty error [ 47.816384][ T4046] netlink: 'syz.3.185': attribute type 10 has an invalid length. [ 47.824993][ T4046] FAULT_INJECTION: forcing a failure. [ 47.824993][ T4046] name failslab, interval 1, probability 0, space 0, times 0 [ 47.837670][ T4046] CPU: 1 UID: 0 PID: 4046 Comm: syz.3.185 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 47.837702][ T4046] Tainted: [W]=WARN [ 47.837709][ T4046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 47.837725][ T4046] Call Trace: [ 47.837734][ T4046] [ 47.837772][ T4046] __dump_stack+0x1d/0x30 [ 47.837837][ T4046] dump_stack_lvl+0x95/0xd0 [ 47.837865][ T4046] dump_stack+0x15/0x1b [ 47.837895][ T4046] should_fail_ex+0x263/0x280 [ 47.838009][ T4046] should_failslab+0x8c/0xb0 [ 47.838089][ T4046] __kmalloc_cache_noprof+0x64/0x4a0 [ 47.838116][ T4046] ? nf_nat_masq_schedule+0x216/0x440 [ 47.838148][ T4046] nf_nat_masq_schedule+0x216/0x440 [ 47.838181][ T4046] ? __pfx_device_cmp+0x10/0x10 [ 47.838299][ T4046] ? __pfx_masq_device_event+0x10/0x10 [ 47.838328][ T4046] masq_device_event+0x72/0x90 [ 47.838359][ T4046] raw_notifier_call_chain+0x6f/0x1b0 [ 47.838466][ T4046] ? __dev_notify_flags+0x14e/0x390 [ 47.838500][ T4046] __dev_notify_flags+0x1f0/0x390 [ 47.838556][ T4046] netif_change_flags+0xac/0xd0 [ 47.838622][ T4046] do_setlink+0x905/0x2940 [ 47.838657][ T4046] ? _raw_spin_unlock+0x9/0x30 [ 47.838759][ T4046] ? finish_task_switch+0x79/0x280 [ 47.838797][ T4046] ? __schedule+0x82d/0xc90 [ 47.838928][ T4046] rtnl_newlink+0xea4/0x1370 [ 47.838968][ T4046] ? __rcu_read_unlock+0x4e/0x70 [ 47.839006][ T4046] ? __memcg_slab_free_hook+0x135/0x230 [ 47.839044][ T4046] ? __rcu_read_unlock+0x4e/0x70 [ 47.839076][ T4046] ? avc_has_perm_noaudit+0xab/0x130 [ 47.839185][ T4046] ? cred_has_capability+0x224/0x290 [ 47.839254][ T4046] ? selinux_capable+0x31/0x40 [ 47.839274][ T4046] ? security_capable+0x7b/0x90 [ 47.839307][ T4046] ? ns_capable+0x7c/0xb0 [ 47.839335][ T4046] ? __pfx_rtnl_newlink+0x10/0x10 [ 47.839365][ T4046] rtnetlink_rcv_msg+0x64b/0x720 [ 47.839394][ T4046] netlink_rcv_skb+0x123/0x220 [ 47.839429][ T4046] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 47.839487][ T4046] rtnetlink_rcv+0x1c/0x30 [ 47.839558][ T4046] netlink_unicast+0x5c0/0x690 [ 47.839593][ T4046] netlink_sendmsg+0x5c8/0x6f0 [ 47.839615][ T4046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.839635][ T4046] ____sys_sendmsg+0x5af/0x600 [ 47.839714][ T4046] ___sys_sendmsg+0x195/0x1e0 [ 47.839747][ T4046] __x64_sys_sendmsg+0xd4/0x160 [ 47.839785][ T4046] x64_sys_call+0x17ba/0x3000 [ 47.839954][ T4046] do_syscall_64+0xc0/0x2a0 [ 47.839987][ T4046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.840011][ T4046] RIP: 0033:0x7f9b9058aeb9 [ 47.840027][ T4046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.840047][ T4046] RSP: 002b:00007f9b8efe7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.840116][ T4046] RAX: ffffffffffffffda RBX: 00007f9b90805fa0 RCX: 00007f9b9058aeb9 [ 47.840131][ T4046] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 47.840144][ T4046] RBP: 00007f9b8efe7090 R08: 0000000000000000 R09: 0000000000000000 [ 47.840158][ T4046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.840171][ T4046] R13: 00007f9b90806038 R14: 00007f9b90805fa0 R15: 00007ffd1faccab8 [ 47.840229][ T4046] [ 47.840604][ T4032] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.180: corrupted inode contents [ 47.848483][ T4047] netlink: 'syz.0.180': attribute type 16 has an invalid length. [ 47.947687][ T4032] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.180: mark_inode_dirty error [ 47.951459][ T4047] netlink: 48 bytes leftover after parsing attributes in process `syz.0.180'. [ 47.971366][ T4046] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.976539][ T29] audit: type=1400 audit(1769916609.813:322): avc: denied { getopt } for pid=4031 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 48.004421][ T4046] bond0: (slave team0): Enslaving as an active interface with an up link [ 48.014017][ T4032] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.180: corrupted inode contents [ 48.016960][ T4047] veth0_macvtap: entered allmulticast mode [ 48.153904][ T4046] syz.3.185 (4046) used greatest stack depth: 10344 bytes left [ 48.266590][ T4032] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.180: mark_inode_dirty error [ 48.279670][ T4032] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.180: corrupted inode contents [ 48.291975][ T4032] EXT4-fs error (device loop0): ext4_truncate:4635: inode #15: comm syz.0.180: mark_inode_dirty error [ 48.303668][ T4032] EXT4-fs error (device loop0): ext4_evict_inode:264: comm syz.0.180: couldn't truncate inode 15 (err -117) [ 48.348596][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.393190][ T29] audit: type=1400 audit(1769916610.255:323): avc: denied { accept } for pid=4065 comm="syz.4.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.415202][ T4064] set_capacity_and_notify: 5 callbacks suppressed [ 48.415221][ T4064] loop3: detected capacity change from 0 to 4096 [ 48.431725][ T4069] netlink: 20 bytes leftover after parsing attributes in process `syz.4.192'. [ 48.435658][ T4064] EXT4-fs: Ignoring removed bh option [ 48.446140][ T4064] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.463999][ T4068] loop0: detected capacity change from 0 to 4096 [ 48.472921][ T4064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.489502][ T4064] FAULT_INJECTION: forcing a failure. [ 48.489502][ T4064] name failslab, interval 1, probability 0, space 0, times 0 [ 48.492022][ T4068] EXT4-fs: Ignoring removed bh option [ 48.502321][ T4064] CPU: 1 UID: 0 PID: 4064 Comm: syz.3.190 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 48.502470][ T4064] Tainted: [W]=WARN [ 48.502493][ T4064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.502610][ T4064] Call Trace: [ 48.502632][ T4064] [ 48.502663][ T4064] __dump_stack+0x1d/0x30 [ 48.502742][ T4064] dump_stack_lvl+0x95/0xd0 [ 48.502871][ T4064] dump_stack+0x15/0x1b [ 48.502939][ T4064] should_fail_ex+0x263/0x280 [ 48.503124][ T4064] should_failslab+0x8c/0xb0 [ 48.503202][ T4064] kmem_cache_alloc_noprof+0x68/0x490 [ 48.503275][ T4064] ? ext4_mb_new_blocks+0x7a8/0x2080 [ 48.503425][ T4064] ext4_mb_new_blocks+0x7a8/0x2080 [ 48.503512][ T4064] ? ext4_ext_check_overlap+0x1f6/0x2f0 [ 48.503539][ T4064] ext4_ext_map_blocks+0x106d/0x38a0 [ 48.503566][ T4064] ? blk_queue_exit+0x4c/0xc0 [ 48.503668][ T4064] ? blk_mq_submit_bio+0x3ee/0x1110 [ 48.503825][ T4064] ext4_map_blocks+0x65e/0xd70 [ 48.503938][ T4064] ext4_iomap_begin+0xa20/0x1000 [ 48.504057][ T4064] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 48.504166][ T4064] iomap_iter+0x3f7/0x800 [ 48.504304][ T4064] __iomap_dio_rw+0xf80/0x14c0 [ 48.504414][ T4064] iomap_dio_rw+0x40/0x90 [ 48.504489][ T4064] ext4_file_write_iter+0xae5/0xf70 [ 48.504762][ T4064] do_iter_readv_writev+0x4fd/0x5a0 [ 48.504858][ T4064] vfs_writev+0x2e1/0x900 [ 48.504968][ T4064] do_writev+0xe9/0x210 [ 48.505066][ T4064] __x64_sys_writev+0x45/0x50 [ 48.505151][ T4064] x64_sys_call+0x1ba5/0x3000 [ 48.505257][ T4064] do_syscall_64+0xc0/0x2a0 [ 48.505419][ T4064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.505493][ T4064] RIP: 0033:0x7f9b9058aeb9 [ 48.505539][ T4064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.505655][ T4064] RSP: 002b:00007f9b8efe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 48.505721][ T4064] RAX: ffffffffffffffda RBX: 00007f9b90805fa0 RCX: 00007f9b9058aeb9 [ 48.505767][ T4064] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000006 [ 48.505809][ T4064] RBP: 00007f9b8efe7090 R08: 0000000000000000 R09: 0000000000000000 [ 48.505863][ T4064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 48.505898][ T4064] R13: 00007f9b90806038 R14: 00007f9b90805fa0 R15: 00007ffd1faccab8 [ 48.505964][ T4064] [ 48.533258][ T29] audit: type=1400 audit(1769916610.346:324): avc: denied { append } for pid=4063 comm="syz.3.190" path="/49/file3/memory.events" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.536188][ T4068] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.784501][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.795158][ T4076] loop2: detected capacity change from 0 to 4096 [ 48.803660][ T4076] EXT4-fs: dax option not supported [ 48.840291][ T29] audit: type=1400 audit(1769916610.709:325): avc: denied { watch } for pid=4080 comm="syz.3.194" path="/50" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 48.851267][ T4068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.869998][ T4081] loop3: detected capacity change from 0 to 512 [ 48.879112][ T4079] loop1: detected capacity change from 0 to 4096 [ 48.896171][ T4081] EXT4-fs (loop3): bad geometry: block count 143 exceeds size of device (128 blocks) [ 48.919213][ T4083] netlink: 36 bytes leftover after parsing attributes in process `syz.2.197'. [ 48.929617][ T4081] netlink: 16 bytes leftover after parsing attributes in process `syz.3.194'. [ 48.940784][ T4081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 48.968432][ T4079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.985552][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.024647][ T4086] loop2: detected capacity change from 0 to 256 [ 49.054846][ T4089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.199'. [ 49.098288][ T4079] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.196: corrupted inode contents [ 49.126839][ T29] audit: type=1400 audit(1769916610.981:326): avc: denied { setopt } for pid=4093 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.163038][ T4079] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.196: mark_inode_dirty error [ 49.171771][ T29] audit: type=1400 audit(1769916611.021:327): avc: denied { rename } for pid=4077 comm="syz.1.196" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.215843][ T4079] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.196: corrupted inode contents [ 49.227988][ T4079] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.196: mark_inode_dirty error [ 49.236402][ T4103] netlink: 80 bytes leftover after parsing attributes in process `syz.1.196'. [ 49.251854][ T4079] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.196: corrupted inode contents [ 49.284262][ T4079] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.196: mark_inode_dirty error [ 49.295854][ T4096] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.308972][ T4079] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.196: corrupted inode contents [ 49.312562][ T4089] team0: Port device team_slave_0 removed [ 49.321058][ T4079] EXT4-fs error (device loop1): ext4_truncate:4635: inode #15: comm syz.1.196: mark_inode_dirty error [ 49.321231][ T4079] EXT4-fs error (device loop1) in ext4_setattr:6035: Corrupt filesystem [ 49.321844][ T4099] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.196: corrupted inode contents [ 49.398029][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.454292][ T4108] loop3: detected capacity change from 0 to 8192 [ 49.488016][ T4108] pim6reg1: entered promiscuous mode [ 49.493354][ T4108] pim6reg1: entered allmulticast mode [ 49.509542][ T4114] netlink: 'syz.4.207': attribute type 21 has an invalid length. [ 49.517452][ T4114] netlink: 100 bytes leftover after parsing attributes in process `syz.4.207'. [ 49.651199][ T4126] syz.3.209 uses obsolete (PF_INET,SOCK_PACKET) [ 49.658394][ T4126] netem: change failed [ 49.701233][ T4127] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.708464][ T4127] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.750387][ T4127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.760954][ T4127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.801494][ T3422] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.810569][ T3422] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.823685][ T3422] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.832798][ T3422] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.879924][ T4130] netlink: 72 bytes leftover after parsing attributes in process `syz.3.211'. [ 49.888904][ T4130] netlink: 72 bytes leftover after parsing attributes in process `syz.3.211'. [ 49.951718][ T4136] FAULT_INJECTION: forcing a failure. [ 49.951718][ T4136] name failslab, interval 1, probability 0, space 0, times 0 [ 49.964411][ T4136] CPU: 0 UID: 0 PID: 4136 Comm: syz.0.214 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 49.964501][ T4136] Tainted: [W]=WARN [ 49.964509][ T4136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.964522][ T4136] Call Trace: [ 49.964529][ T4136] [ 49.964537][ T4136] __dump_stack+0x1d/0x30 [ 49.964568][ T4136] dump_stack_lvl+0x95/0xd0 [ 49.964705][ T4136] dump_stack+0x15/0x1b [ 49.964732][ T4136] should_fail_ex+0x263/0x280 [ 49.964774][ T4136] should_failslab+0x8c/0xb0 [ 49.964798][ T4136] __kmalloc_cache_noprof+0x64/0x4a0 [ 49.964907][ T4136] ? slip_open+0x531/0x930 [ 49.964934][ T4136] slip_open+0x531/0x930 [ 49.964987][ T4136] ? vfree+0x295/0x3a0 [ 49.965017][ T4136] tty_ldisc_open+0x5d/0xb0 [ 49.965044][ T4136] tty_set_ldisc+0x1db/0x380 [ 49.965094][ T4136] tiocsetd+0x51/0x60 [ 49.965122][ T4136] tty_ioctl+0xa78/0xb80 [ 49.965150][ T4136] ? __pfx_tty_ioctl+0x10/0x10 [ 49.965213][ T4136] __se_sys_ioctl+0xce/0x140 [ 49.965249][ T4136] __x64_sys_ioctl+0x43/0x50 [ 49.965282][ T4136] x64_sys_call+0x14b0/0x3000 [ 49.965310][ T4136] do_syscall_64+0xc0/0x2a0 [ 49.965352][ T4136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.965376][ T4136] RIP: 0033:0x7fd73b25aeb9 [ 49.965425][ T4136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.965445][ T4136] RSP: 002b:00007fd739cb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.965466][ T4136] RAX: ffffffffffffffda RBX: 00007fd73b4d5fa0 RCX: 00007fd73b25aeb9 [ 49.965481][ T4136] RDX: 0000200000000040 RSI: 0000000000005423 RDI: 0000000000000003 [ 49.965495][ T4136] RBP: 00007fd739cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 49.965509][ T4136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 49.965522][ T4136] R13: 00007fd73b4d6038 R14: 00007fd73b4d5fa0 R15: 00007ffe45ceec68 [ 49.965614][ T4136] [ 49.968134][ T4134] loop3: detected capacity change from 0 to 1024 [ 50.174821][ T4142] loop0: detected capacity change from 0 to 764 [ 50.182032][ T4134] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (31822!=35945) [ 50.191700][ T4134] EXT4-fs (loop3): group descriptors corrupted! [ 50.219954][ T4134] loop3: detected capacity change from 0 to 512 [ 50.237085][ T4134] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.246258][ T4134] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 50.287127][ T4134] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 50.301327][ T4134] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 50.310918][ T4134] System zones: 0-2, 18-18, 34-35 [ 50.313183][ T4147] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xaa [ 50.336130][ T4134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.404914][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.433253][ T4154] bridge_slave_0: left allmulticast mode [ 50.439014][ T4154] bridge_slave_0: left promiscuous mode [ 50.444819][ T4154] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.529724][ T4154] bond0: (slave bridge_slave_1): Releasing backup interface [ 50.559718][ T4162] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 50.631411][ T4162] System zones: 1-12 [ 50.649044][ T4162] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.225: corrupted in-inode xattr: e_value size too large [ 50.663803][ T4162] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.225: couldn't read orphan inode 15 (err -117) [ 50.675420][ T4169] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 50.687244][ T4154] bond0: (slave bond_slave_0): Releasing backup interface [ 50.704837][ T4162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.726942][ T4154] bond0: (slave bond_slave_1): Releasing backup interface [ 50.765680][ T4154] team0: Port device team_slave_1 removed [ 50.795810][ T4154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.803257][ T4154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.847041][ T4154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.854598][ T4154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.885486][ T4154] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 50.962464][ T4172] netlink: 'syz.3.228': attribute type 2 has an invalid length. [ 51.129927][ T4185] capability: warning: `syz.4.233' uses 32-bit capabilities (legacy support in use) [ 51.143134][ T4185] program syz.4.233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.249920][ T4178] ip6erspan0: entered promiscuous mode [ 51.341592][ T4178] syz.3.231 (4178) used greatest stack depth: 9800 bytes left [ 51.561331][ T4213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.868436][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.902105][ T4236] ieee802154 phy0 wpan0: encryption failed: -22 [ 52.012514][ T4244] ext4: Bad value for 'mb_optimize_scan' [ 52.333615][ T4253] netlink: 'syz.1.246': attribute type 5 has an invalid length. [ 52.365531][ T4256] EXT4-fs: inline encryption not supported [ 52.395808][ T4256] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.491577][ T4263] netlink: 'syz.1.249': attribute type 21 has an invalid length. [ 52.523532][ T4256] EXT4-fs (loop0): 1 truncate cleaned up [ 52.553334][ T4256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.569354][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 52.569373][ T29] audit: type=1326 audit(1769916614.457:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4255 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd73b1fc2d9 code=0x7ffc0000 [ 52.587022][ T4256] EXT4-fs (loop0): shut down requested (0) [ 52.608483][ T29] audit: type=1326 audit(1769916614.457:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4255 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd73b21b78e code=0x7ffc0000 [ 52.631907][ T29] audit: type=1326 audit(1769916614.467:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4255 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fd73b259367 code=0x7ffc0000 [ 52.655128][ T29] audit: type=1326 audit(1769916614.467:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4255 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd73b21b78e code=0x7ffc0000 [ 52.678432][ T29] audit: type=1326 audit(1769916614.467:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4255 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73b25aeb9 code=0x7ffc0000 [ 52.701870][ T29] audit: type=1326 audit(1769916614.477:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4255 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73b25aeb9 code=0x7ffc0000 [ 52.725432][ T29] audit: type=1326 audit(1769916614.477:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4255 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd73b25aeb9 code=0x7ffc0000 [ 52.748776][ T29] audit: type=1326 audit(1769916614.477:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4255 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73b25aeb9 code=0x7ffc0000 [ 52.772071][ T29] audit: type=1326 audit(1769916614.477:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4255 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd73b25aeb9 code=0x7ffc0000 [ 52.795263][ T29] audit: type=1400 audit(1769916614.497:456): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 52.838021][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.982413][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.048095][ T4281] __nla_validate_parse: 6 callbacks suppressed [ 53.048111][ T4281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.253'. [ 53.100426][ T4283] EXT4-fs: Ignoring removed orlov option [ 53.106615][ T4283] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.114425][ T4283] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 53.123231][ T4283] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.256: attempt to clear invalid blocks 2 len 1 [ 53.140137][ T4283] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 53.154981][ T4283] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.256: invalid indirect mapped block 1819239214 (level 0) [ 53.174839][ T4283] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.256: invalid indirect mapped block 1819239214 (level 1) [ 53.189492][ T4283] EXT4-fs (loop3): 1 truncate cleaned up [ 53.195817][ T4283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.210015][ T4283] IPVS: set_ctl: invalid protocol: 4 100.1.1.2:20001 [ 53.218757][ T4289] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20003 [ 53.232093][ T4289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4289 comm=syz.2.258 [ 53.245176][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.343933][ T4295] EXT4-fs: Ignoring removed orlov option [ 53.372466][ T4304] netlink: 128 bytes leftover after parsing attributes in process `syz.4.264'. [ 53.383660][ T4305] netlink: 'syz.2.262': attribute type 4 has an invalid length. [ 53.398844][ T4305] netlink: 'syz.2.262': attribute type 4 has an invalid length. [ 53.400542][ T4307] FAULT_INJECTION: forcing a failure. [ 53.400542][ T4307] name failslab, interval 1, probability 0, space 0, times 0 [ 53.419260][ T4307] CPU: 0 UID: 0 PID: 4307 Comm: syz.1.265 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 53.419363][ T4307] Tainted: [W]=WARN [ 53.419372][ T4307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.419389][ T4307] Call Trace: [ 53.419398][ T4307] [ 53.419408][ T4307] __dump_stack+0x1d/0x30 [ 53.419486][ T4307] dump_stack_lvl+0x95/0xd0 [ 53.419516][ T4307] dump_stack+0x15/0x1b [ 53.419635][ T4307] should_fail_ex+0x263/0x280 [ 53.419679][ T4307] should_failslab+0x8c/0xb0 [ 53.419803][ T4307] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 53.419838][ T4307] ? __alloc_skb+0x2f0/0x4b0 [ 53.419880][ T4307] __alloc_skb+0x2f0/0x4b0 [ 53.419969][ T4307] ? __alloc_skb+0x219/0x4b0 [ 53.420023][ T4307] netlink_ack+0xfd/0x500 [ 53.420069][ T4307] netlink_rcv_skb+0x192/0x220 [ 53.420111][ T4307] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 53.420185][ T4307] rtnetlink_rcv+0x1c/0x30 [ 53.420232][ T4307] netlink_unicast+0x5c0/0x690 [ 53.420277][ T4307] netlink_sendmsg+0x5c8/0x6f0 [ 53.420308][ T4307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.420413][ T4307] ____sys_sendmsg+0x5af/0x600 [ 53.420446][ T4307] ___sys_sendmsg+0x195/0x1e0 [ 53.420490][ T4307] __sys_sendmmsg+0x185/0x320 [ 53.420537][ T4307] __x64_sys_sendmmsg+0x57/0x70 [ 53.420596][ T4307] x64_sys_call+0x1e28/0x3000 [ 53.420631][ T4307] do_syscall_64+0xc0/0x2a0 [ 53.420727][ T4307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.420757][ T4307] RIP: 0033:0x7f56c709aeb9 [ 53.420775][ T4307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.420793][ T4307] RSP: 002b:00007f56c5af7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 53.420818][ T4307] RAX: ffffffffffffffda RBX: 00007f56c7315fa0 RCX: 00007f56c709aeb9 [ 53.420872][ T4307] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 53.420912][ T4307] RBP: 00007f56c5af7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.420963][ T4307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.420980][ T4307] R13: 00007f56c7316038 R14: 00007f56c7315fa0 R15: 00007fff024c55d8 [ 53.421007][ T4307] [ 53.651502][ T4311] set_capacity_and_notify: 7 callbacks suppressed [ 53.651581][ T4311] loop4: detected capacity change from 0 to 128 [ 53.670842][ T4302] loop3: detected capacity change from 0 to 2048 [ 53.678548][ T4295] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.694739][ T4314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.267'. [ 53.719572][ T4311] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 53.743707][ T4311] EXT4-fs: error: could not find journal device path [ 53.791638][ T4315] netlink: 'syz.0.261': attribute type 21 has an invalid length. [ 53.856966][ T4302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.928278][ T4327] loop1: detected capacity change from 0 to 2048 [ 53.937853][ T4302] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 53.975801][ T4330] netlink: 'syz.4.271': attribute type 1 has an invalid length. [ 53.985311][ T4330] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 53.993155][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.043347][ T4338] netlink: 'syz.2.274': attribute type 21 has an invalid length. [ 54.051556][ T4338] netlink: 100 bytes leftover after parsing attributes in process `syz.2.274'. [ 54.064288][ T3301] loop1: p1 < > p2 p3 < > p4 < p5 > [ 54.069674][ T3301] loop1: partition table partially beyond EOD, truncated [ 54.083607][ T3301] loop1: p1 start 4294967288 is beyond EOD, truncated [ 54.092183][ T3301] loop1: p3 start 4284289 is beyond EOD, truncated [ 54.111634][ T4327] loop1: p1 < > p2 p3 < > p4 < p5 > [ 54.116981][ T4327] loop1: partition table partially beyond EOD, truncated [ 54.147525][ T4327] loop1: p1 start 4294967288 is beyond EOD, truncated [ 54.171796][ T4327] loop1: p3 start 4284289 is beyond EOD, truncated [ 54.181346][ T4349] netlink: 28 bytes leftover after parsing attributes in process `syz.4.278'. [ 54.194492][ T2999] loop1: p1 < > p2 p3 < > p4 < p5 > [ 54.199842][ T2999] loop1: partition table partially beyond EOD, truncated [ 54.213720][ T2999] loop1: p1 start 4294967288 is beyond EOD, truncated [ 54.221411][ T2999] loop1: p3 start 4284289 is beyond EOD, truncated [ 54.238484][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.318037][ T4344] udevd[4344]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 54.320189][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 54.338979][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 54.351276][ T4367] FAULT_INJECTION: forcing a failure. [ 54.351276][ T4367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.364399][ T4367] CPU: 0 UID: 0 PID: 4367 Comm: syz.4.282 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 54.364440][ T4367] Tainted: [W]=WARN [ 54.364450][ T4367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 54.364466][ T4367] Call Trace: [ 54.364475][ T4367] [ 54.364486][ T4367] __dump_stack+0x1d/0x30 [ 54.364587][ T4367] dump_stack_lvl+0x95/0xd0 [ 54.364662][ T4367] dump_stack+0x15/0x1b [ 54.364689][ T4367] should_fail_ex+0x263/0x280 [ 54.364802][ T4367] should_fail+0xb/0x20 [ 54.364835][ T4367] should_fail_usercopy+0x1a/0x20 [ 54.364945][ T4367] _copy_to_user+0x20/0xa0 [ 54.364974][ T4367] simple_read_from_buffer+0xb5/0x130 [ 54.365013][ T4367] proc_fail_nth_read+0x10e/0x150 [ 54.365084][ T4367] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 54.365192][ T4367] vfs_read+0x1ab/0x7f0 [ 54.365212][ T4367] ? __rcu_read_unlock+0x4e/0x70 [ 54.365245][ T4367] ? __fget_files+0x184/0x1c0 [ 54.365275][ T4367] ? mutex_lock+0x57/0x90 [ 54.365307][ T4367] ksys_read+0xdc/0x1a0 [ 54.365411][ T4367] __x64_sys_read+0x40/0x50 [ 54.365438][ T4367] x64_sys_call+0x2889/0x3000 [ 54.365472][ T4367] do_syscall_64+0xc0/0x2a0 [ 54.365565][ T4367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.365595][ T4367] RIP: 0033:0x7efe14b8b78e [ 54.365616][ T4367] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 54.365638][ T4367] RSP: 002b:00007efe13605fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 54.365717][ T4367] RAX: ffffffffffffffda RBX: 00007efe136066c0 RCX: 00007efe14b8b78e [ 54.365737][ T4367] RDX: 000000000000000f RSI: 00007efe136060a0 RDI: 0000000000000008 [ 54.365754][ T4367] RBP: 00007efe13606090 R08: 0000000000000000 R09: 0000000000000000 [ 54.365772][ T4367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.365788][ T4367] R13: 00007efe14e46128 R14: 00007efe14e46090 R15: 00007ffd26178508 [ 54.365813][ T4367] [ 54.583970][ T4362] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 54.640161][ T4344] udevd[4344]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 54.640350][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 54.653025][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 54.660782][ T4377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4377 comm=syz.1.285 [ 54.683937][ T4370] loop3: detected capacity change from 0 to 1764 [ 54.703879][ T4370] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 54.718599][ T4370] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 54.729939][ T4382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.288'. [ 54.738896][ T4382] netlink: 20 bytes leftover after parsing attributes in process `syz.4.288'. [ 54.808633][ T4388] loop3: detected capacity change from 0 to 256 [ 54.815453][ T4388] msdos: Bad value for 'gid' [ 54.820188][ T4388] msdos: Bad value for 'gid' [ 55.007908][ T4398] netlink: 28 bytes leftover after parsing attributes in process `syz.3.293'. [ 55.098666][ T4400] netlink: 168 bytes leftover after parsing attributes in process `syz.3.294'. [ 55.128073][ T4401] netlink: 64 bytes leftover after parsing attributes in process `syz.3.294'. [ 55.467707][ T4416] loop0: detected capacity change from 0 to 136 [ 55.486291][ T4416] Attempt to read inode for relocated directory [ 55.530603][ T4422] netlink: 'syz.4.301': attribute type 27 has an invalid length. [ 55.669119][ T4433] program syz.2.306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.750454][ T4448] FAULT_INJECTION: forcing a failure. [ 55.750454][ T4448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.763625][ T4448] CPU: 1 UID: 0 PID: 4448 Comm: syz.3.310 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 55.763659][ T4448] Tainted: [W]=WARN [ 55.763667][ T4448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 55.763683][ T4448] Call Trace: [ 55.763771][ T4448] [ 55.763780][ T4448] __dump_stack+0x1d/0x30 [ 55.763811][ T4448] dump_stack_lvl+0x95/0xd0 [ 55.763840][ T4448] dump_stack+0x15/0x1b [ 55.763879][ T4448] should_fail_ex+0x263/0x280 [ 55.764004][ T4448] should_fail+0xb/0x20 [ 55.764064][ T4448] should_fail_usercopy+0x1a/0x20 [ 55.764178][ T4448] _copy_from_iter+0xcf/0xea0 [ 55.764203][ T4448] ? avc_has_perm_noaudit+0xab/0x130 [ 55.764250][ T4448] ? blake2s_update+0x134/0x160 [ 55.764279][ T4448] write_pool_user+0x7c/0x1e0 [ 55.764368][ T4448] ? import_ubuf+0xe8/0x120 [ 55.764415][ T4448] ? __pfx_random_ioctl+0x10/0x10 [ 55.764460][ T4448] random_ioctl+0x2cc/0x3f0 [ 55.764508][ T4448] __se_sys_ioctl+0xce/0x140 [ 55.764571][ T4448] __x64_sys_ioctl+0x43/0x50 [ 55.764615][ T4448] x64_sys_call+0x14b0/0x3000 [ 55.764643][ T4448] do_syscall_64+0xc0/0x2a0 [ 55.764729][ T4448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.764760][ T4448] RIP: 0033:0x7f9b9058aeb9 [ 55.764781][ T4448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.764805][ T4448] RSP: 002b:00007f9b8efe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.764829][ T4448] RAX: ffffffffffffffda RBX: 00007f9b90805fa0 RCX: 00007f9b9058aeb9 [ 55.764878][ T4448] RDX: 000020000000fec0 RSI: 0000000040085203 RDI: 0000000000000003 [ 55.764924][ T4448] RBP: 00007f9b8efe7090 R08: 0000000000000000 R09: 0000000000000000 [ 55.764967][ T4448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 55.764980][ T4448] R13: 00007f9b90806038 R14: 00007f9b90805fa0 R15: 00007ffd1faccab8 [ 55.765008][ T4448] [ 55.984748][ T4451] IPVS: stopping backup sync thread 4452 ... [ 55.993899][ T4453] FAULT_INJECTION: forcing a failure. [ 55.993899][ T4453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.007088][ T4453] CPU: 0 UID: 0 PID: 4453 Comm: syz.4.314 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 56.007176][ T4453] Tainted: [W]=WARN [ 56.007185][ T4453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.007202][ T4453] Call Trace: [ 56.007211][ T4453] [ 56.007222][ T4453] __dump_stack+0x1d/0x30 [ 56.007285][ T4453] dump_stack_lvl+0x95/0xd0 [ 56.007310][ T4453] dump_stack+0x15/0x1b [ 56.007330][ T4453] should_fail_ex+0x263/0x280 [ 56.007370][ T4453] should_fail+0xb/0x20 [ 56.007438][ T4453] should_fail_usercopy+0x1a/0x20 [ 56.007526][ T4453] _copy_to_iter+0xd2/0xea0 [ 56.007575][ T4453] ? chacha_block_generic+0x218/0x240 [ 56.007606][ T4453] get_random_bytes_user+0x138/0x2b0 [ 56.007651][ T4453] ? vfs_write+0x86e/0x9f0 [ 56.007682][ T4453] ? import_ubuf+0xe8/0x120 [ 56.007715][ T4453] __x64_sys_getrandom+0xcf/0x1a0 [ 56.007762][ T4453] x64_sys_call+0x1beb/0x3000 [ 56.007806][ T4453] do_syscall_64+0xc0/0x2a0 [ 56.007845][ T4453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.007875][ T4453] RIP: 0033:0x7efe14bcaeb9 [ 56.007927][ T4453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.007950][ T4453] RSP: 002b:00007efe13627028 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 56.007970][ T4453] RAX: ffffffffffffffda RBX: 00007efe14e45fa0 RCX: 00007efe14bcaeb9 [ 56.007984][ T4453] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 56.007997][ T4453] RBP: 00007efe13627090 R08: 0000000000000000 R09: 0000000000000000 [ 56.008014][ T4453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 56.008075][ T4453] R13: 00007efe14e46038 R14: 00007efe14e45fa0 R15: 00007ffd26178508 [ 56.008096][ T4453] [ 56.328779][ T4461] loop4: detected capacity change from 0 to 512 [ 56.346751][ T4461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.372418][ T4461] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.425648][ T4457] program syz.4.316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.446446][ T4457] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.316: corrupted inode contents [ 56.466081][ T4457] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #18: comm syz.4.316: mark_inode_dirty error [ 56.498492][ T4457] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.316: corrupted inode contents [ 56.512345][ T4457] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #18: comm syz.4.316: mark_inode_dirty error [ 56.524891][ T4457] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #18: comm syz.4.316: mark inode dirty (error -117) [ 56.537966][ T4457] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 56.559773][ T4481] smc: net device bond0 applied user defined pnetid SYZ2 [ 56.569273][ T4485] netlink: 'syz.2.324': attribute type 21 has an invalid length. [ 56.579396][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.606784][ T4481] smc: removing net device bond0 with user defined pnetid SYZ2 [ 56.616199][ T4481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.627685][ T4481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.640347][ T4481] bond0 (unregistering): Released all slaves [ 56.670327][ T4489] 9p: Bad value for 'rfdno' [ 56.679671][ T4488] loop4: detected capacity change from 0 to 1024 [ 56.720056][ T4493] loop0: detected capacity change from 0 to 512 [ 56.735117][ T4493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.756823][ T4493] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.772165][ T4493] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.326: corrupted xattr block 33: overlapping e_value [ 56.799826][ T4493] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 56.809082][ T4493] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.326: corrupted xattr block 33: overlapping e_value [ 56.823274][ T4493] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 56.832894][ T4502] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.326: corrupted xattr block 33: overlapping e_value [ 56.846960][ T4502] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 56.888094][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.914962][ T4504] loop4: detected capacity change from 0 to 512 [ 56.922056][ T4504] EXT4-fs: inline encryption not supported [ 56.928084][ T4504] EXT4-fs: Ignoring removed i_version option [ 56.938626][ T4504] EXT4-fs (loop4): 1 orphan inode deleted [ 56.962218][ T4504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.038305][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.082007][ T4517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4517 comm=syz.0.337 [ 57.108440][ T4519] EXT4-fs: Ignoring removed nobh option [ 57.116229][ T4517] netlink: 'syz.0.337': attribute type 10 has an invalid length. [ 57.126213][ T4519] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.338: invalid indirect mapped block 11 (level 0) [ 57.140285][ T4519] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.338: attempt to clear invalid blocks 1024 len 1 [ 57.154121][ T4519] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 57.169568][ T4519] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.338: invalid indirect mapped block 1819239214 (level 0) [ 57.183920][ T4519] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.338: invalid indirect mapped block 33554432 (level 2) [ 57.198386][ T4519] EXT4-fs (loop4): 1 truncate cleaned up [ 57.204888][ T4519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.246919][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.410941][ T4532] SELinux: failed to load policy [ 57.467610][ T4527] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4527 comm=syz.0.341 [ 57.480098][ T4527] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4527 comm=syz.0.341 [ 57.579485][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 57.579500][ T29] audit: type=1400 audit(1769916619.502:533): avc: denied { read } for pid=4552 comm="syz.4.348" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 57.608732][ T29] audit: type=1400 audit(1769916619.502:534): avc: denied { open } for pid=4552 comm="syz.4.348" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 57.633319][ T29] audit: type=1400 audit(1769916619.553:535): avc: denied { ioctl } for pid=4552 comm="syz.4.348" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 57.679105][ T4553] netlink: 'syz.4.348': attribute type 2 has an invalid length. [ 57.716705][ T4554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 57.734157][ T4554] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.752478][ T4554] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 8: comm syz.2.350: lblock 8 mapped to illegal pblock 8 (length 1) [ 57.785149][ T4534] chnl_net:caif_netlink_parms(): no params data found [ 57.808386][ T4554] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.350: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 57.837436][ T4570] FAULT_INJECTION: forcing a failure. [ 57.837436][ T4570] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 57.850725][ T4570] CPU: 0 UID: 0 PID: 4570 Comm: syz.4.353 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 57.850798][ T4570] Tainted: [W]=WARN [ 57.850806][ T4570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 57.850819][ T4570] Call Trace: [ 57.850828][ T4570] [ 57.850838][ T4570] __dump_stack+0x1d/0x30 [ 57.850883][ T4570] dump_stack_lvl+0x95/0xd0 [ 57.850919][ T4570] dump_stack+0x15/0x1b [ 57.850941][ T4570] should_fail_ex+0x263/0x280 [ 57.851081][ T4570] should_fail_alloc_page+0xf2/0x100 [ 57.851114][ T4570] __alloc_frozen_pages_noprof+0x108/0x350 [ 57.851157][ T4570] alloc_pages_mpol+0xb3/0x260 [ 57.851196][ T4570] ? css_rstat_updated+0xbb/0x280 [ 57.851239][ T4570] vma_alloc_folio_noprof+0x1a9/0x300 [ 57.851282][ T4570] handle_mm_fault+0x111f/0x3030 [ 57.851330][ T4570] ? mt_find+0x291/0x3b0 [ 57.851380][ T4570] do_user_addr_fault+0x3fd/0x1050 [ 57.851469][ T4570] exc_page_fault+0x62/0xa0 [ 57.851500][ T4570] asm_exc_page_fault+0x26/0x30 [ 57.851526][ T4570] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 57.851553][ T4570] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 57.851703][ T4570] RSP: 0018:ffffc90010947ca8 EFLAGS: 00050246 [ 57.851725][ T4570] RAX: ffff88811b552b90 RBX: 0000000000000040 RCX: 0000000000000040 [ 57.851743][ T4570] RDX: 0000000000000000 RSI: ffffc90010947d00 RDI: 0000200000034000 [ 57.851760][ T4570] RBP: ffffc90010947d80 R08: 0000000000000895 R09: 0000000000000000 [ 57.851777][ T4570] R10: 0001c90010947d00 R11: 0001c90010947d3f R12: 0000200000034040 [ 57.851872][ T4570] R13: 00007ffffffff000 R14: 0000200000034000 R15: ffffc90010947d00 [ 57.851899][ T4570] _copy_to_user+0x7c/0xa0 [ 57.851934][ T4570] rng_dev_read+0x3ef/0x740 [ 57.851976][ T4570] ? __pfx_rng_dev_read+0x10/0x10 [ 57.852023][ T4570] vfs_readv+0x432/0x6e0 [ 57.852069][ T4570] __x64_sys_preadv+0xfd/0x1c0 [ 57.852124][ T4570] x64_sys_call+0x2805/0x3000 [ 57.852180][ T4570] do_syscall_64+0xc0/0x2a0 [ 57.852272][ T4570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.852300][ T4570] RIP: 0033:0x7efe14bcaeb9 [ 57.852320][ T4570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.852343][ T4570] RSP: 002b:00007efe13627028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 57.852408][ T4570] RAX: ffffffffffffffda RBX: 00007efe14e45fa0 RCX: 00007efe14bcaeb9 [ 57.852426][ T4570] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 57.852442][ T4570] RBP: 00007efe13627090 R08: 0000000000000000 R09: 0000000000000000 [ 57.852459][ T4570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 57.852474][ T4570] R13: 00007efe14e46038 R14: 00007efe14e45fa0 R15: 00007ffd26178508 [ 57.852501][ T4570] [ 58.173653][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 58.185930][ T4556] rtc_cmos 00:00: Alarms can be up to one day in the future [ 58.193861][ T29] audit: type=1400 audit(1769916620.116:536): avc: denied { write } for pid=4555 comm="syz.3.351" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.221184][ T3301] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 58.226503][ T3301] loop3: p1 start 460800 is beyond EOD, truncated [ 58.232987][ T3301] loop3: p2 size 83886080 extends beyond EOD, truncated [ 58.263740][ T3301] loop3: p5 start 460800 is beyond EOD, truncated [ 58.270320][ T3301] loop3: p6 size 83886080 extends beyond EOD, truncated [ 58.293177][ T4562] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 58.298469][ T4562] loop3: p1 start 460800 is beyond EOD, truncated [ 58.305002][ T4562] loop3: p2 size 83886080 extends beyond EOD, truncated [ 58.323962][ T29] audit: type=1400 audit(1769916620.207:537): avc: denied { mounton } for pid=4573 comm="syz.2.355" path="/55/file0" dev="tmpfs" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 58.354965][ T4574] EXT4-fs: Ignoring removed bh option [ 58.360435][ T4574] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.374459][ T4562] loop3: p5 start 460800 is beyond EOD, truncated [ 58.381070][ T4562] loop3: p6 size 83886080 extends beyond EOD, truncated [ 58.389140][ T4576] EXT4-fs error (device loop4): ext4_quota_enable:7177: inode #3: comm syz.4.356: iget: bad extended attribute block 5 [ 58.390882][ T4574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.414343][ T4576] EXT4-fs error (device loop4): ext4_quota_enable:7180: comm syz.4.356: Bad quota inode: 3, type: 0 [ 58.428168][ T3320] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.439206][ T4576] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 58.461628][ T4576] EXT4-fs (loop4): mount failed [ 58.488891][ T4534] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.496074][ T4534] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.523800][ T4534] bridge_slave_0: entered allmulticast mode [ 58.530739][ T4534] bridge_slave_0: entered promiscuous mode [ 58.547096][ T4576] __nla_validate_parse: 14 callbacks suppressed [ 58.547111][ T4576] netlink: 792 bytes leftover after parsing attributes in process `syz.4.356'. [ 58.562637][ T4576] netlink: 792 bytes leftover after parsing attributes in process `syz.4.356'. [ 58.571661][ T4576] netlink: 20 bytes leftover after parsing attributes in process `syz.4.356'. [ 58.582676][ T4583] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 58.590339][ T4583] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 58.607040][ T4534] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.614294][ T4534] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.655961][ T4534] bridge_slave_1: entered allmulticast mode [ 58.668581][ T4574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=4574 comm=syz.2.355 [ 58.675098][ T4534] bridge_slave_1: entered promiscuous mode [ 58.716895][ T3320] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.769046][ T4534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.796017][ T3320] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.796534][ T4344] udevd[4344]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 58.813143][ T4591] netlink: 28 bytes leftover after parsing attributes in process `syz.3.359'. [ 58.821959][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 58.829869][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 58.847203][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 58.889765][ T4534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.908301][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.913734][ T29] audit: type=1400 audit(1769916620.841:538): avc: denied { bind } for pid=4592 comm="syz.3.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.948269][ T4534] team0: Port device team_slave_0 added [ 58.989683][ T4534] team0: Port device team_slave_1 added [ 58.997920][ T3320] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.016139][ T4603] netlink: 96 bytes leftover after parsing attributes in process `syz.4.365'. [ 59.031455][ T4601] set_capacity_and_notify: 7 callbacks suppressed [ 59.031475][ T4601] loop2: detected capacity change from 0 to 2048 [ 59.085237][ T3301] loop2: p1 < > p2 p3 < > p4 < p5 > [ 59.090599][ T3301] loop2: partition table partially beyond EOD, truncated [ 59.107577][ T4534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.114689][ T4534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.140730][ T4534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.153053][ T3301] loop2: p1 start 4294967288 is beyond EOD, truncated [ 59.164286][ T4534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.171265][ T4534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.197253][ T4534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.209098][ T3301] loop2: p3 start 4284289 is beyond EOD, truncated [ 59.219124][ T3320] bridge_slave_1: left allmulticast mode [ 59.224855][ T3320] bridge_slave_1: left promiscuous mode [ 59.230603][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.243236][ T4601] loop2: p1 < > p2 p3 < > p4 < p5 > [ 59.248710][ T4601] loop2: partition table partially beyond EOD, truncated [ 59.256716][ T3320] bridge_slave_0: left allmulticast mode [ 59.262410][ T3320] bridge_slave_0: left promiscuous mode [ 59.268281][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.276103][ T4601] loop2: p1 start 4294967288 is beyond EOD, truncated [ 59.311045][ T4612] FAULT_INJECTION: forcing a failure. [ 59.311045][ T4612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.324219][ T4612] CPU: 1 UID: 0 PID: 4612 Comm: syz.2.362 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 59.324259][ T4612] Tainted: [W]=WARN [ 59.324268][ T4612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 59.324342][ T4612] Call Trace: [ 59.324351][ T4612] [ 59.324361][ T4612] __dump_stack+0x1d/0x30 [ 59.324388][ T4612] dump_stack_lvl+0x95/0xd0 [ 59.324410][ T4612] dump_stack+0x15/0x1b [ 59.324433][ T4612] should_fail_ex+0x263/0x280 [ 59.324486][ T4612] should_fail+0xb/0x20 [ 59.324514][ T4612] should_fail_usercopy+0x1a/0x20 [ 59.324551][ T4612] copy_folio_from_iter_atomic+0x269/0x1170 [ 59.324656][ T4612] ? shmem_write_begin+0xfc/0x1f0 [ 59.324752][ T4612] ? shmem_write_begin+0x135/0x1f0 [ 59.324866][ T4612] generic_perform_write+0x2c1/0x490 [ 59.324909][ T4612] shmem_file_write_iter+0xc5/0xf0 [ 59.324951][ T4612] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 59.325070][ T4612] vfs_write+0x5a6/0x9f0 [ 59.325095][ T4612] ksys_write+0xdc/0x1a0 [ 59.325119][ T4612] __x64_sys_write+0x40/0x50 [ 59.325202][ T4612] x64_sys_call+0x2847/0x3000 [ 59.325312][ T4612] do_syscall_64+0xc0/0x2a0 [ 59.325353][ T4612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.325382][ T4612] RIP: 0033:0x7fd66d8bb78e [ 59.325403][ T4612] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 59.325494][ T4612] RSP: 002b:00007fd66c335da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 59.325541][ T4612] RAX: ffffffffffffffda RBX: 00007fd66c3366c0 RCX: 00007fd66d8bb78e [ 59.325555][ T4612] RDX: 0000000000080000 RSI: 00007fd663f16000 RDI: 0000000000000005 [ 59.325567][ T4612] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 59.325582][ T4612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 59.325604][ T4612] R13: 00007fd66c335ee0 R14: 00007fd66c335ea0 R15: 00007fd663f16000 [ 59.325631][ T4612] [ 59.528736][ T4601] loop2: p3 start 4284289 is beyond EOD, truncated [ 59.535813][ T4603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.365'. [ 59.545150][ T29] audit: type=1400 audit(1769916877.472:539): avc: denied { nlmsg_read } for pid=4602 comm="syz.4.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.606057][ T4614] binfmt_misc: register: failed to install interpreter file ./file0 [ 59.626019][ T4344] udevd[4344]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 59.626053][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 59.647409][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 59.688374][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 59.690988][ T4344] udevd[4344]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 59.700979][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 59.743346][ T4618] tipc: Started in network mode [ 59.748345][ T4618] tipc: Node identity 02765f25ce4d, cluster identity 4711 [ 59.755607][ T4618] tipc: Enabled bearer , priority 0 [ 59.770058][ T3320] hsr_slave_0: left promiscuous mode [ 59.781120][ T3320] hsr_slave_1: left promiscuous mode [ 59.797552][ T3320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.805089][ T3320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.820864][ T3320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.828708][ T3320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.840468][ T3320] veth1_macvtap: left promiscuous mode [ 59.851623][ T3320] veth0_macvtap: left promiscuous mode [ 59.858864][ T3320] veth1_vlan: left promiscuous mode [ 59.870954][ T3320] veth0_vlan: left promiscuous mode [ 59.876714][ T4620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.370'. [ 59.951875][ T4627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.371'. [ 59.960992][ T4627] netlink: 'syz.3.371': attribute type 11 has an invalid length. [ 59.969108][ T4627] netlink: 'syz.3.371': attribute type 14 has an invalid length. [ 59.977365][ T3320] team0 (unregistering): Port device team_slave_1 removed [ 59.989091][ T3320] team0 (unregistering): Port device team_slave_0 removed [ 60.029418][ T4614] syzkaller0: entered promiscuous mode [ 60.035229][ T4614] syzkaller0: entered allmulticast mode [ 60.055139][ T4627] vxlan0: entered promiscuous mode [ 60.062968][ T4628] tipc: Resetting bearer [ 60.083015][ T4534] hsr_slave_0: entered promiscuous mode [ 60.092838][ T4634] netlink: 'syz.2.374': attribute type 1 has an invalid length. [ 60.104417][ T4534] hsr_slave_1: entered promiscuous mode [ 60.111402][ T4534] debugfs: 'hsr0' already exists in 'hsr' [ 60.117228][ T4534] Cannot create hsr debugfs directory [ 60.185318][ T3422] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.199210][ T4613] tipc: Resetting bearer [ 60.211176][ T4613] tipc: Disabling bearer [ 60.226049][ T31] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.248111][ T4646] loop2: detected capacity change from 0 to 128 [ 60.255031][ T31] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.273028][ T4646] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 60.283365][ T3422] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.325157][ T4653] program syz.0.377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.329929][ T3295] udevd[3295]: incorrect ext4 checksum on /dev/loop2 [ 60.425750][ T29] audit: type=1326 audit(1769916878.362:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4660 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66d8faeb9 code=0x7ffc0000 [ 60.452709][ T4661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.380'. [ 60.489455][ T29] audit: type=1326 audit(1769916878.382:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4660 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fd66d8faeb9 code=0x7ffc0000 [ 60.507405][ T4534] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 60.513079][ T29] audit: type=1326 audit(1769916878.382:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4660 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66d8faeb9 code=0x7ffc0000 [ 60.548056][ T4534] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 60.563372][ T4534] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 60.573914][ T4534] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 60.598315][ T4676] netlink: 28 bytes leftover after parsing attributes in process `syz.0.383'. [ 60.659453][ T4534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.694296][ T4534] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.714067][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.721237][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.732910][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.740039][ T3320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.795370][ T4534] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.915541][ T4707] loop2: detected capacity change from 0 to 512 [ 60.917119][ T4534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.930078][ T4715] program syz.3.391 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.976940][ T4707] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.388: inode has both inline data and extents flags [ 61.010832][ T4721] loop3: detected capacity change from 0 to 512 [ 61.023775][ T4707] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.388: couldn't read orphan inode 15 (err -117) [ 61.039391][ T4721] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 61.041191][ T4707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.089360][ T4721] EXT4-fs (loop3): orphan cleanup on readonly fs [ 61.102544][ T4721] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.391: Block bitmap for bg 0 marked uninitialized [ 61.133678][ T4721] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 61.143726][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.162736][ T4721] EXT4-fs (loop3): 1 orphan inode deleted [ 61.172535][ T4721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 61.243888][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.371525][ T4745] syzkaller0: entered promiscuous mode [ 61.377122][ T4745] syzkaller0: entered allmulticast mode [ 61.384199][ T4742] tipc: Started in network mode [ 61.389102][ T4742] tipc: Node identity 4e36240cfeae, cluster identity 4711 [ 61.396434][ T4742] tipc: Enabled bearer , priority 0 [ 61.457428][ T4742] tipc: Resetting bearer [ 61.474609][ T4742] tipc: Disabling bearer [ 61.541741][ T4759] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.549035][ T4759] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.556799][ T4759] bridge0: entered allmulticast mode [ 61.600193][ T4534] veth0_vlan: entered promiscuous mode [ 61.619031][ T4761] SELinux: policydb magic number 0x6f72702f does not match expected magic number 0xf97cff8c [ 61.641605][ T4761] SELinux: failed to load policy [ 61.675388][ T4534] veth1_vlan: entered promiscuous mode [ 61.714503][ T4534] veth0_macvtap: entered promiscuous mode [ 61.733198][ T4534] veth1_macvtap: entered promiscuous mode [ 61.754064][ T4781] loop4: detected capacity change from 0 to 512 [ 61.762901][ T4781] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.767622][ T4534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.805148][ T4534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.815475][ T4781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.833707][ T4781] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.866130][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.916711][ T4799] FAULT_INJECTION: forcing a failure. [ 61.916711][ T4799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.929876][ T4799] CPU: 1 UID: 0 PID: 4799 Comm: syz.3.402 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 61.929913][ T4799] Tainted: [W]=WARN [ 61.929920][ T4799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 61.929933][ T4799] Call Trace: [ 61.929940][ T4799] [ 61.929953][ T4799] __dump_stack+0x1d/0x30 [ 61.930112][ T4799] dump_stack_lvl+0x95/0xd0 [ 61.930137][ T4799] dump_stack+0x15/0x1b [ 61.930164][ T4799] should_fail_ex+0x263/0x280 [ 61.930206][ T4799] should_fail+0xb/0x20 [ 61.930264][ T4799] should_fail_usercopy+0x1a/0x20 [ 61.930300][ T4799] copy_folio_from_iter_atomic+0x269/0x1170 [ 61.930336][ T4799] ? shmem_write_begin+0xfc/0x1f0 [ 61.930437][ T4799] ? shmem_write_begin+0x135/0x1f0 [ 61.930477][ T4799] generic_perform_write+0x2c1/0x490 [ 61.930573][ T4799] shmem_file_write_iter+0xc5/0xf0 [ 61.930667][ T4799] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 61.930709][ T4799] vfs_write+0x5a6/0x9f0 [ 61.930739][ T4799] ksys_write+0xdc/0x1a0 [ 61.930772][ T4799] __x64_sys_write+0x40/0x50 [ 61.930796][ T4799] x64_sys_call+0x2847/0x3000 [ 61.930875][ T4799] do_syscall_64+0xc0/0x2a0 [ 61.930914][ T4799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.930938][ T4799] RIP: 0033:0x7f9b9054b78e [ 61.931025][ T4799] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 61.931059][ T4799] RSP: 002b:00007f9b8efe6da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.931084][ T4799] RAX: ffffffffffffffda RBX: 00007f9b8efe76c0 RCX: 00007f9b9054b78e [ 61.931102][ T4799] RDX: 0000000000010000 RSI: 00007f9b86bc7000 RDI: 0000000000000007 [ 61.931119][ T4799] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 61.931136][ T4799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 61.931151][ T4799] R13: 00007f9b8efe6ee0 R14: 00007f9b8efe6ea0 R15: 00007f9b86bc7000 [ 61.931194][ T4799] [ 61.932551][ T4799] loop3: detected capacity change from 0 to 128 [ 61.939432][ T3309] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 61.990559][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.015050][ T3309] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 62.026030][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.032193][ T4799] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.042402][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.114152][ T4799] ext4 filesystem being mounted at /mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.236092][ T4806] xt_hashlimit: size too large, truncated to 1048576 [ 62.294329][ T4799] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.336121][ T4809] loop5: detected capacity change from 0 to 1024 [ 62.357773][ T4809] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.343: bad orphan inode 134217728 [ 62.369077][ T4807] xt_hashlimit: size too large, truncated to 1048576 [ 62.419463][ T4809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.451796][ T4814] loop3: detected capacity change from 0 to 1024 [ 62.460754][ T4814] ext4: Unknown parameter 'nouser_xattr' [ 62.562105][ T4809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.607655][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.639931][ T4822] bridge0: entered allmulticast mode [ 62.652076][ T4822] bridge_slave_1: left allmulticast mode [ 62.657906][ T4822] bridge_slave_1: left promiscuous mode [ 62.663725][ T4822] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.681636][ T4797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.691462][ T4822] bridge_slave_0: left allmulticast mode [ 62.697329][ T4822] bridge_slave_0: left promiscuous mode [ 62.700191][ T1035] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 62.703257][ T4822] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.769987][ T4825] netlink: 'syz.0.408': attribute type 7 has an invalid length. [ 62.967558][ T4830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.992934][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 62.992953][ T29] audit: type=1400 audit(1769916880.922:567): avc: denied { getopt } for pid=4816 comm="syz.3.406" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.112980][ T3320] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.135483][ T4837] netlink: 'syz.5.413': attribute type 7 has an invalid length. [ 63.175616][ T29] audit: type=1400 audit(1769916881.112:568): avc: denied { bind } for pid=4836 comm="syz.5.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.215489][ T3320] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.232772][ T4842] netlink: 'syz.2.411': attribute type 13 has an invalid length. [ 63.290402][ T3320] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.350388][ T3320] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.480295][ T4840] chnl_net:caif_netlink_parms(): no params data found [ 63.490297][ T29] audit: type=1400 audit(1769916881.422:569): avc: denied { read write } for pid=4855 comm="syz.5.415" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 63.514969][ T29] audit: type=1400 audit(1769916881.422:570): avc: denied { open } for pid=4855 comm="syz.5.415" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 63.580786][ T29] audit: type=1400 audit(1769916881.482:571): avc: denied { create } for pid=4859 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 63.594514][ T4866] FAULT_INJECTION: forcing a failure. [ 63.594514][ T4866] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 63.600448][ T29] audit: type=1400 audit(1769916881.482:572): avc: denied { setopt } for pid=4859 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 63.613616][ T4866] CPU: 1 UID: 0 PID: 4866 Comm: syz.2.417 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 63.613773][ T4866] Tainted: [W]=WARN [ 63.613796][ T4866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.613838][ T4866] Call Trace: [ 63.613860][ T4866] [ 63.613885][ T4866] __dump_stack+0x1d/0x30 [ 63.613963][ T4866] dump_stack_lvl+0x95/0xd0 [ 63.614110][ T4866] dump_stack+0x15/0x1b [ 63.614177][ T4866] should_fail_ex+0x263/0x280 [ 63.614286][ T4866] should_fail_alloc_page+0xf2/0x100 [ 63.614399][ T4866] __alloc_frozen_pages_noprof+0x108/0x350 [ 63.614449][ T4866] alloc_pages_mpol+0xb3/0x260 [ 63.614481][ T4866] vma_alloc_folio_noprof+0x1a9/0x300 [ 63.614600][ T4866] handle_mm_fault+0x111f/0x3030 [ 63.614717][ T4866] ? mt_find+0x291/0x3b0 [ 63.614935][ T4866] do_user_addr_fault+0x3fd/0x1050 [ 63.615075][ T4866] exc_page_fault+0x62/0xa0 [ 63.615197][ T4866] asm_exc_page_fault+0x26/0x30 [ 63.615270][ T4866] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 63.615337][ T4866] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 63.615401][ T4866] RSP: 0018:ffffc900126a3d38 EFLAGS: 00050206 [ 63.615511][ T4866] RAX: ffff888103809b10 RBX: 0000000000001000 RCX: 0000000000000248 [ 63.615557][ T4866] RDX: 0000000000000000 RSI: ffff88811b904db8 RDI: 0000200000008000 [ 63.615609][ T4866] RBP: ffff88811b904000 R08: 00000000000000cd R09: 0000000000000000 [ 63.615652][ T4866] R10: 000188811b904000 R11: 000188811b904fff R12: 0000200000008248 [ 63.615757][ T4866] R13: 00007ffffffff000 R14: 0000200000007248 R15: ffff88811b904000 [ 63.615826][ T4866] _copy_to_user+0x7c/0xa0 [ 63.615901][ T4866] pagemap_read+0x3ac/0x610 [ 63.616006][ T4866] ? __pfx_pagemap_read+0x10/0x10 [ 63.616133][ T4866] vfs_read+0x1ab/0x7f0 [ 63.616188][ T4866] ? __rcu_read_unlock+0x4e/0x70 [ 63.616303][ T4866] ? __fget_files+0x184/0x1c0 [ 63.616402][ T4866] ? mutex_unlock+0x4e/0x90 [ 63.616509][ T4866] __x64_sys_pread64+0xfd/0x150 [ 63.616616][ T4866] x64_sys_call+0x281b/0x3000 [ 63.616703][ T4866] do_syscall_64+0xc0/0x2a0 [ 63.616801][ T4866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.616874][ T4866] RIP: 0033:0x7fd66d8faeb9 [ 63.616953][ T4866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.617009][ T4866] RSP: 002b:00007fd66c357028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 63.617102][ T4866] RAX: ffffffffffffffda RBX: 00007fd66db75fa0 RCX: 00007fd66d8faeb9 [ 63.617145][ T4866] RDX: 0000000000019000 RSI: 0000200000001240 RDI: 0000000000000004 [ 63.617197][ T4866] RBP: 00007fd66c357090 R08: 0000000000000000 R09: 0000000000000000 [ 63.617240][ T4866] R10: 0000000ffffffff8 R11: 0000000000000246 R12: 0000000000000002 [ 63.617285][ T4866] R13: 00007fd66db76038 R14: 00007fd66db75fa0 R15: 00007ffe85a5a078 [ 63.617401][ T4866] [ 63.677148][ T4840] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.728950][ T4868] loop5: detected capacity change from 0 to 512 [ 63.735058][ T4840] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.866250][ T4871] __nla_validate_parse: 7 callbacks suppressed [ 63.866303][ T4871] netlink: 28 bytes leftover after parsing attributes in process `syz.3.418'. [ 63.895826][ T4840] bridge_slave_0: entered allmulticast mode [ 63.948393][ T29] audit: type=1400 audit(1769916881.522:573): avc: denied { watch watch_reads } for pid=4864 comm="syz.2.417" path="/proc/196/task" dev="proc" ino=10299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 64.007282][ T4873] netlink: 'syz.2.419': attribute type 1 has an invalid length. [ 64.015230][ T4873] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.419'. [ 64.028871][ T29] audit: type=1400 audit(1769916881.962:574): avc: denied { read } for pid=4872 comm="syz.2.419" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 64.052518][ T29] audit: type=1400 audit(1769916881.962:575): avc: denied { open } for pid=4872 comm="syz.2.419" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 64.077647][ T4840] bridge_slave_0: entered promiscuous mode [ 64.170928][ T4840] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.178707][ T4840] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.207691][ T4840] bridge_slave_1: entered allmulticast mode [ 64.218958][ T4840] bridge_slave_1: entered promiscuous mode [ 64.356210][ T3320] bond0 (unregistering): Released all slaves [ 64.378818][ T29] audit: type=1400 audit(1769916882.312:576): avc: denied { map } for pid=4872 comm="syz.2.419" path="socket:[10324]" dev="sockfs" ino=10324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.401316][ T4840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.425197][ T4885] netlink: 12 bytes leftover after parsing attributes in process `syz.5.422'. [ 64.434315][ T4885] netlink: 12 bytes leftover after parsing attributes in process `syz.5.422'. [ 64.452497][ T3320] tipc: Left network mode [ 64.459056][ T4885] netlink: 'syz.5.422': attribute type 5 has an invalid length. [ 64.470057][ T3320] hsr_slave_0: left promiscuous mode [ 64.475895][ T3320] hsr_slave_1: left promiscuous mode [ 64.489918][ T3320] veth1_macvtap: left promiscuous mode [ 64.495776][ T3320] veth0_macvtap: left promiscuous mode [ 64.503553][ T3320] veth1_vlan: left promiscuous mode [ 64.510427][ T3320] veth0_vlan: left promiscuous mode [ 64.692063][ T4840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.716669][ T4840] team0: Port device team_slave_0 added [ 64.725641][ T4840] team0: Port device team_slave_1 added [ 64.743923][ T4840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.750944][ T4840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.776895][ T4840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.788643][ T4840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.795695][ T4840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.821844][ T4840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.852654][ T4840] hsr_slave_0: entered promiscuous mode [ 64.858933][ T4840] hsr_slave_1: entered promiscuous mode [ 64.865219][ T4840] debugfs: 'hsr0' already exists in 'hsr' [ 64.871009][ T4840] Cannot create hsr debugfs directory [ 64.997038][ T4840] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 65.007057][ T4840] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 65.016188][ T4840] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 65.026008][ T4840] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 65.075489][ T4920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=4920 comm=syz.2.423 [ 65.197728][ T4840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.223957][ T4937] netlink: 20 bytes leftover after parsing attributes in process `syz.2.428'. [ 65.232864][ T4937] netlink: 20 bytes leftover after parsing attributes in process `syz.2.428'. [ 65.242804][ T4840] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.250310][ T4938] process 'syz.3.425' launched '/dev/fd/8' with NULL argv: empty string added [ 65.362829][ T386] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.369991][ T386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.381331][ T37] ================================================================== [ 65.389467][ T37] BUG: KCSAN: data-race in n_tty_lookahead_flow_ctrl / tty_set_termios [ 65.397761][ T37] [ 65.400117][ T37] write to 0xffff88811a7e6508 of 44 bytes by task 4948 on cpu 1: [ 65.407867][ T37] tty_set_termios+0xc0/0x910 [ 65.412588][ T37] set_termios+0x373/0x4f0 [ 65.417060][ T37] tty_mode_ioctl+0x37f/0x5b0 [ 65.421870][ T37] n_tty_ioctl_helper+0x87/0x370 [ 65.426942][ T37] n_tty_ioctl+0x101/0x230 [ 65.431507][ T37] tty_ioctl+0x83e/0xb80 [ 65.435804][ T37] __se_sys_ioctl+0xce/0x140 [ 65.440449][ T37] __x64_sys_ioctl+0x43/0x50 [ 65.445100][ T37] x64_sys_call+0x14b0/0x3000 [ 65.449819][ T37] do_syscall_64+0xc0/0x2a0 [ 65.454376][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.460400][ T37] [ 65.462753][ T37] read to 0xffff88811a7e6521 of 1 bytes by task 37 on cpu 0: [ 65.470158][ T37] n_tty_lookahead_flow_ctrl+0x126/0x300 [ 65.475837][ T37] tty_port_default_lookahead_buf+0x91/0xc0 [ 65.481827][ T37] flush_to_ldisc+0x288/0x340 [ 65.486568][ T37] process_scheduled_works+0x4cd/0x9d0 [ 65.492070][ T37] worker_thread+0x6bc/0x8b0 [ 65.496027][ T386] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.496705][ T37] kthread+0x488/0x510 [ 65.503920][ T386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.507817][ T37] ret_from_fork+0x148/0x280 [ 65.519629][ T37] ret_from_fork_asm+0x1a/0x30 [ 65.524429][ T37] [ 65.526773][ T37] value changed: 0x58 -> 0x00 [ 65.531468][ T37] [ 65.533804][ T37] Reported by Kernel Concurrency Sanitizer on: [ 65.539980][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:2 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 65.551319][ T37] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 65.555231][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.565313][ T37] Workqueue: events_unbound flush_to_ldisc [ 65.571161][ T37] ================================================================== [ 65.643850][ T4840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.654327][ T4840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.196060][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.205690][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.214987][ T31] bond0 (unregistering): Released all slaves [ 66.274112][ T31] hsr_slave_0: left promiscuous mode [ 66.279989][ T31] hsr_slave_1: left promiscuous mode [ 66.285958][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.322985][ T31] team0 (unregistering): Port device team_slave_1 removed [ 67.225902][ T31] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.266987][ T31] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.317061][ T31] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.374591][ T31] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.656564][ T31] bridge_slave_1: left allmulticast mode [ 67.662262][ T31] bridge_slave_1: left promiscuous mode [ 67.668039][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.677018][ T31] bridge_slave_0: left allmulticast mode [ 67.682707][ T31] bridge_slave_0: left promiscuous mode [ 67.688504][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.700375][ T31] bridge_slave_1: left allmulticast mode [ 67.706156][ T31] bridge_slave_1: left promiscuous mode [ 67.711964][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.720258][ T31] bridge_slave_0: left allmulticast mode [ 67.726016][ T31] bridge_slave_0: left promiscuous mode [ 67.731988][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.740890][ T31] bridge_slave_1: left allmulticast mode [ 67.746700][ T31] bridge_slave_1: left promiscuous mode [ 67.752475][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.760738][ T31] bridge_slave_0: left allmulticast mode [ 67.766539][ T31] bridge_slave_0: left promiscuous mode [ 67.772369][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.856338][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.866028][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.875622][ T31] bond0 (unregistering): Released all slaves [ 67.926786][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.936741][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.946541][ T31] bond0 (unregistering): Released all slaves [ 68.006489][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.015881][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.025056][ T31] bond0 (unregistering): Released all slaves [ 68.084996][ T31] hsr_slave_0: left promiscuous mode [ 68.090896][ T31] hsr_slave_1: left promiscuous mode [ 68.096847][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.104518][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.113688][ T31] hsr_slave_0: left promiscuous mode [ 68.119259][ T31] hsr_slave_1: left promiscuous mode [ 68.125599][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.133020][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.140701][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.148154][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.157667][ T31] hsr_slave_0: left promiscuous mode [ 68.165199][ T31] hsr_slave_1: left promiscuous mode [ 68.170787][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.178524][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.189549][ T31] veth1_macvtap: left promiscuous mode [ 68.195140][ T31] veth0_macvtap: left promiscuous mode [ 68.200681][ T31] veth1_vlan: left promiscuous mode [ 68.206101][ T31] veth0_vlan: left promiscuous mode [ 68.289869][ T31] team0 (unregistering): Port device team_slave_1 removed [ 68.299527][ T31] team0 (unregistering): Port device team_slave_0 removed [ 68.359557][ T31] team0 (unregistering): Port device team_slave_1 removed [ 68.370142][ T31] team0 (unregistering): Port device team_slave_0 removed [ 68.430996][ T31] team0 (unregistering): Port device team_slave_1 removed [ 68.441351][ T31] team0 (unregistering): Port device team_slave_0 removed [ 69.117865][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.128360][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.171763][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.182327][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.226861][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.237232][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.296950][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.307388][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.398108][ T31] bridge_slave_1: left allmulticast mode [ 69.403823][ T31] bridge_slave_1: left promiscuous mode [ 69.409602][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.417814][ T31] bridge_slave_0: left allmulticast mode [ 69.423676][ T31] bridge_slave_0: left promiscuous mode [ 69.429356][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.545843][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.556135][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.566274][ T31] bond0 (unregistering): (slave team0): Releasing backup interface [ 69.575547][ T31] bond0 (unregistering): Released all slaves [ 69.625388][ T31] tipc: Left network mode [ 69.633132][ T31] hsr_slave_0: left promiscuous mode [ 69.639177][ T31] hsr_slave_1: left promiscuous mode [ 69.644978][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.652448][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.664199][ T31] veth1_macvtap: left promiscuous mode [ 69.669810][ T31] veth0_macvtap: left promiscuous mode [ 69.675980][ T31] veth1_vlan: left promiscuous mode [ 69.681367][ T31] veth0_vlan: left promiscuous mode [ 69.751191][ T31] team0 (unregistering): Port device team_slave_1 removed [ 69.761153][ T31] team0 (unregistering): Port device team_slave_0 removed [ 70.097127][ T31] IPVS: stop unused estimator thread 0...