last executing test programs: 2.112928546s ago: executing program 2 (id=482): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) accept(0xffffffffffffffff, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x80) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="911035000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000011c0), 0xffffffffffffffff) sendmmsg$sock(r3, &(0x7f0000000b00)=[{{&(0x7f0000000340)=@x25, 0x80, &(0x7f0000000500)=[{&(0x7f0000000600)="0d5b1b355fb4965df1c6cfabe6d3708d2e0e62beedbbbb0995965fb0867f9a0c198a6b93d1e0da11427ebb5877047108ea3ce1d99f7227767cb821c149f40f3ee8c58bbda17b5eb99f47ad6cadb5c83a389aeebaeeae17b44fc19dc8dccdb97ff94ed0000d5011072c32959ed599695ce049383b99770fe66bcf9d290a21629a3165de4379b008e61040cf73aca614eafbbeb0cf65995ecbea70f7ea0852de3d667410e7426d6e728fcc04df8c1687910bc94b0a516efe9a8d40fbdc6e3d47fbd4f274eadac682744a2c9d777a779581deb88e8dba174bc5fd2ca973d26ea25e8b0fa7e1cdb6de5913d210307513335a42cdf4", 0xf3}], 0x1, &(0x7f0000000700)=[@txtime={{0x18, 0x1, 0x3d, 0x95}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x200}}, @timestamping={{0x14, 0x1, 0x25, 0xb}}], 0x90}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000007c0)="e504e5c14ce6504f9264afa37aad1c90586a928f9e2161b83f9ac9761e66b4053709ec6b20e7d56dc4be0adcc58f921e4d7757941badf2cab3ae6d8b5e40080e9924cc46519bc92e1f77b4981d500e0a2bcb6ae0d32a85a5b2a577f03a7f61be6ff8f4e28956ce1fdafebd0e7c616a832f18d7a333c924a0881f2fe6a1e28e8d9476f6b717", 0x85}, {&(0x7f0000000880)="c46df3f9675c6a04112c9392367c6f149c2c72ceeb2d82658bea8a6963a10875b034b2df430ff88e8781bee13190c0bd59c1ab82245a2b11bd64257cb202936e062af02d0c829a6637132b5aa752ca7cf889aea7d8fe8991cb2a8f66fe3d21f6937953d169483ac1bd4bd75bbaacf3d80f3e62c5bdbc17124edaacf4bd399c39f985a69ed26f3af99f1abac739e22db31e43316f8172813341001280b46646300b6be03dc41ff776d4f5c3d17c91457ba88040f76b3983a07a68acb749b10be39083", 0xc2}], 0x2, &(0x7f0000000980)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x164b}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000001}}], 0x60}}, {{&(0x7f0000000a00)=@xdp={0x2c, 0x0, r1, 0x31}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a80)}, {&(0x7f0000002380)="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", 0x1000}], 0x2}}], 0x3, 0x8010) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x4000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r6, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x23, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x2, 0x3a0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r10}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r10, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) bind$packet(r8, &(0x7f0000000180)={0x11, 0x2, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r8, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r12, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x39) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x14, r4, 0xf21, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x8010) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x432000, 0x0) 2.024710602s ago: executing program 0 (id=485): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x10003, &(0x7f0000000380)={[{@nodiscard}, {@jqfmt_vfsv1}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@errors_remount}, {@mblk_io_submit, 0x0}, {@noauto_da_alloc}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@i_version}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@fsname={'fsname', 0x3d, '\\$'}}, {@context={'context', 0x3d, 'root'}}], 0x2c}, 0x2, 0x4f8, &(0x7f0000000700)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0xeb}}, {@noblock_validity}]}, 0x1, 0x511, &(0x7f0000000a80)="$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") getpid() add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="000000000000003499b8f276dc75584a8d87d907005858367d61f49e1639a48f614a54a8192c2876b7", 0x29, 0xffffffffffffffff) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0xee00, 0x0) r1 = syz_io_uring_setup(0x4dc, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 2.023477292s ago: executing program 2 (id=487): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9dadd77c2dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r0) keyctl$revoke(0x3, r1) keyctl$search(0xa, r0, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xb, 0x1, 0x0, 0xffffffffffffffff, 0x8}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x5f22}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) mq_getsetattr(r3, &(0x7f0000000200)={0x6, 0x1, 0x9a3, 0x6}, &(0x7f0000000380)) capget(&(0x7f00000000c0)={0x20071026, r4}, &(0x7f0000000100)={0x7, 0x4, 0x4, 0x6, 0x6b3, 0x9e5}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x8, 0x4, 0x5, 0xd, 0x6, 0x7, 0x3, 0x50, 0xf, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) ioprio_get$pid(0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53a, &(0x7f0000000b80)="$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") r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r8, 0x25, 0x0, @void}, 0x10) 1.821300123s ago: executing program 2 (id=491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="f96f80b5", @ANYRES16=r1, @ANYBLOB="01002bbd700100000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000005ff010000000000000000000000000001000000000d0001007564703a73797a3200000000"], 0x6c}}, 0x8000) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000680)={[{@hide}, {@dmode={'dmode', 0x3d, 0x9}}, {@session={'session', 0x3d, 0x23}}, {@utf8}, {@map_acorn}, {@check_strict}, {@mode={'mode', 0x3d, 0xc9}}, {@cruft}, {@map_off}, {@check_strict}, {@overriderock}, {@block={'block', 0x3d, 0x200}}, {@cruft}, {@nocompress}, {@cruft}, {@session={'session', 0x3d, 0x2e}}, {@gid}, {@sbsector={'sbsector', 0x3d, 0x3}}]}, 0x1, 0xa2f, &(0x7f00000018c0)="$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") r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000006800010000000000000000000a00010000000000060007000200000018000880140001000100000000000000010004000370080008000500", @ANYRES32=r3, @ANYBLOB="9a55d711b1fd4c18dec53fc58e0e5b2ae6aa4977cb7be8eedd19064960949df0ab2d216d01c3ae1e84afe5d096cb160ba9e5f92b92894b657ff111518d0a7a7fbf53b1868133853ef7917d971790d4218c32ff1f04d137af67eecefdee0191c4077a1fbe"], 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x4040040) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = inotify_init1(0x80000) inotify_add_watch(r5, &(0x7f0000000580)='./cgroup\x00', 0x60000726) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0) open_by_handle_at(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="1400000052000000bc4d0000010175000100006a633a24d18c68ce031e24b045d9a58005b88154c1"], 0x4240) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed009875f37438e486dd0000000003"], 0xfe1b) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4c) ioctl$SIOCSIFHWADDR(r7, 0x8946, &(0x7f0000000040)={'bridge0\x00', @random='\x00\x00\x00\x00\x00 '}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r8, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r8, &(0x7f0000000100)=""/162, 0xa2) 1.450037325s ago: executing program 0 (id=504): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0x47}], 0x1}, 0x48800) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa33080045000028000000000688907800000000ffffffff0e00907800000000000000000000000017000000"], 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc91d0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1, @perf_config_ext={0x4190, 0x6}, 0x4105, 0x2e, 0xa, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40000000000a9e6}, 0x0, 0x9, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$setown(r1, 0x8, 0x0) fcntl$getflags(r1, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34006a0012000140000100"/26, @ANYRES16, @ANYBLOB="0000000000000000140035006e657464657673696d30000000000000"], 0x34}}, 0x20000050) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket(0x6, 0x4, 0x7) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000101, 0xfffd, 0x0, 0xe47d, 0x0, 0x200c0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x470bd30, 0x25dfdc01, {0x60, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x4eae}}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x1, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x0) 1.131063044s ago: executing program 4 (id=508): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c, 0x800) getsockopt$inet6_int(r2, 0x29, 0x17, &(0x7f0000000140), &(0x7f00000001c0)=0x4) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) tgkill(0x0, 0x0, 0x6) 1.109056395s ago: executing program 0 (id=509): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2000008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$eJzs3cFvHFcZAPBvNl7HSZzaBQ5QqaWiRUkF2Y1r2locSpEQnCohyj0Ye2NZWXste93GVgXrvwAJIUDiBBcuSPwBSCgSF44IKRKcQSoCIUhBggN00OzO2mY9a2/SjTde/37SZN6b2Znvexu/2Zmdp9kAzq3nI+KNiPggTdOXImImX17Kp2h1pux17z94dymbkkjTt/6WRJIv6+4ryedX8s2mIuJrX4n4ZnI07tbO7p3Fer22mderzbWN6tbO7o3VtcWV2kptfX5+7tWF1xZeWbg5lHZejYjXv/Sn73/np19+/ZeffeePt/5y/VtZWtP5+sPteEgTx63sNL18capng81HDPYkytpT7lYuDbbN3mPMBwCA/rJz/I9ExKci4qWYiQvHn84CAAAAZ1D6hen4TxKRFpvssxwAAAA4Q0rtMbBJqZKPBZiOUqlS6Yzh/VhcLtUbW83P3G5sry93xsrORrl0e7Veu5mPFZ6NcpLV59rlg/rLPfX5iHg6Ir43c6ldryw16suj/vIDAAAAzokrPdf//5zpXP8DAAAAY2Z21AkAAAAAj53rfwAAABh/rv8BAABgrH31zTezKe3+/vXy2zvbdxpv31iubd2prG0vVZYamxuVlUZjpf3MvrWT9ldvNDY+F+vbd6vN2lazenVn99ZaY3u9eWs1pk6lQQAAAMART3/y3u+TiGh9/lJ7ykyOOingVEzsl5J8XtD7//BUZ/7eKSUFnIoLA7zmvYvFy50nwNk20bugT18Hxk951AkAI5ecsL7v4J3fdGalIecDAAAM37VPFN//P/l8vuWUH844nRjOr577/+nMqBIBTl37/v+gA3mcLMBYKQ80AhAYZx/2/v/J0vShEgIAAIZuuj0lpUr+9d50lEqVSsTV9s8ClJPbq/XazYh4KiJ+N1O+mNXn2lsmJ14zAAAAAAAAAAAAAAAAAAAAAAAAAAAdaZpECgAAAIy1iNKfk191nuV/bebF6d7vByaTf7d/EngyIt750Vs/uLvYbG7OZcv/vr+8+cN8+cuj+AYDAAAA6NW9Tm/P/zXqbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYN+8/eHepOw3w8kvDivvXL0bEbFH8iZhqz6eiHBGX/5HExKHtkoi4MIT4rb2I+HhR/CRLaz9kUfxhvAmtvaSVthXGj9n8XSiKf2UI8eE8u5cdf94o6v+leL49L+5/ExH/V39U/Y9/sX/8u9Cn/18dMMYz939e7Rt/L+KZieLjXzd+0if+CwPG/8bXd3f7rUt/HHGt+/nTPuIdjnBQqjbXNqpbO7s3VtcWV2ortfX5+blXF15beGXhZvX2ar2W/1sY47vP/uKD49p/ufDzL8mz6d/+Fwv2V/SZ9N/7dx98tFtpHY1//YWC+L/+Sf6Ko/FLeZxP5+Vs/bVuudUpH/bcz3773HHtXz5of/lh/v+v99tpryMd5dlB/3QAgMdga2f3zmK9Xtsc20J2lf4EpPEohcl4ItIY38K3s8L9Ye0wTdM061MFq+5FxCD7SWLILS0V53NQ6HsEGPWRCQAAGLaDk/5RZwIAAAAAAAAAAAAAAAAAAADn12k8Za035sEjkJNhPEIbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAo/hcAAP//Yw3Xfw==") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200088b, &(0x7f0000000040), 0x0, 0x56b, &(0x7f0000000680)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="0100000007000000080000000800000040000000", @ANYRES32, @ANYBLOB="00000000000058960000e35ed4d27091b6818670f3e03f9c28027d1d8784611928e4c358e18f89d51c18d5dc4267c7e305cb7566f8f549ab", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0xce, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f00000006c0), 0x0}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) mount$cgroup(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000001100), 0x40, &(0x7f0000001280)={[{@cpuset_v2_mode}, {@favordynmods}]}) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019300)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x200000000000000) 997.506191ms ago: executing program 4 (id=510): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700f00008000e008000000008"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 991.599582ms ago: executing program 2 (id=512): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000c80)={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000cc0)="a10e04e694", 0x5}], 0x1}, 0x800) sendmmsg$inet6(r0, &(0x7f00000005c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x57f, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000140)="06", 0x1}], 0x1}}], 0x1, 0x44) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100)=0x975, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 904.791697ms ago: executing program 4 (id=513): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x40, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x100, 0x35510}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_virt_wifi\x00'}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xc}]}]}, 0x40}}, 0x0) 901.371027ms ago: executing program 4 (id=514): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000004c0)="ff", 0x1}, {0x0}], 0x2, 0x0, 0xfe00}}], 0x1, 0x881) 715.847748ms ago: executing program 4 (id=517): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000001180)=[{0x6, 0x5, 0x5, 0x7ffc0001}]}) close_range(r0, 0xffffffffffffffff, 0x2) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)) 620.587083ms ago: executing program 3 (id=518): syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000000)={[{@jqfmt_vfsv1}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nodioread_nolock}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x9, 0x606, &(0x7f0000000600)="$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") creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 620.224653ms ago: executing program 1 (id=519): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x709d26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x51a23}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xffffffffffffffd1, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xff}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x60}, 0x1, 0x0, 0x0, 0x6040000}, 0x20040040) 620.020943ms ago: executing program 1 (id=520): perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x400000000000dd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) read$eventfd(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x45], &(0x7f0000000240), 0x0, 0x2}}, 0x40) (fail_nth: 13) 324.384141ms ago: executing program 3 (id=521): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) (async) ioctl$TCFLSH(r0, 0x400455c8, 0x3f) (async) r1 = syz_open_dev$mouse(&(0x7f00000001c0), 0x37, 0x8880) (async) chown(&(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x1, 0x100000001, 0x4b56}) (async) r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) syz_emit_ethernet(0x1f, &(0x7f0000001880)={@broadcast, @broadcast, @void, {@llc_tr={0x11, {@llc={0x42, 0xff, "0f", "417148049d706f4cb7e1e1332110"}}}}}, 0x0) r4 = openat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000140)='blkio.bfq.empty_time\x00', 0x0, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f0b"], 0x7) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000040)=0xffffffffffffffff) syz_read_part_table(0x5c0, &(0x7f0000000000)="$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") (async) fcntl$getownex(r5, 0x10, &(0x7f0000000280)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x270, 0xd0, 0x340, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) (async) mlock(&(0x7f00001d9000/0x3000)=nil, 0x3000) (async) syz_io_uring_setup(0x3d08, &(0x7f00000005c0)={0x0, 0xb638, 0x1000, 0x3, 0x29b, 0x0, r1}, &(0x7f0000000640)=0x0, &(0x7f0000000680)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x11c, &(0x7f00000006c0)=0x2, 0x0, 0x4) (async) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r8, &(0x7f0000000140)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x2, 0x5, 0x0, 0x82, 0xbe40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0xa}, 0x0, 0x10000000005, 0x3, 0x9, 0x0, 0x1fffffff, 0xfe7, 0x0, 0x100040}, r8, 0x0, 0xffffffffffffffff, 0xa) 284.084343ms ago: executing program 3 (id=522): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) socket$inet_tcp(0x2, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000145c000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 220.914667ms ago: executing program 1 (id=523): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0xe9, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x45], &(0x7f0000000240), 0x0, 0x2}}, 0x40) 218.769337ms ago: executing program 1 (id=524): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x40, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x100, 0x35510}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_virt_wifi\x00'}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xc}]}]}, 0x40}}, 0x0) 215.294517ms ago: executing program 0 (id=525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="f96f80b5", @ANYRES16=r1, @ANYBLOB="01002bbd700100000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000005ff010000000000000000000000000001000000000d0001007564703a73797a3200000000"], 0x6c}}, 0x8000) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000680)={[{@hide}, {@dmode={'dmode', 0x3d, 0x9}}, {@session={'session', 0x3d, 0x23}}, {@utf8}, {@map_acorn}, {@check_strict}, {@mode={'mode', 0x3d, 0xc9}}, {@cruft}, {@map_off}, {@check_strict}, {@overriderock}, {@block={'block', 0x3d, 0x200}}, {@cruft}, {@nocompress}, {@cruft}, {@session={'session', 0x3d, 0x2e}}, {@gid}, {@sbsector={'sbsector', 0x3d, 0x3}}]}, 0x1, 0xa2f, &(0x7f00000018c0)="$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") r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000006800010000000000000000000a00010000000000060007000200000018000880140001000100000000000000010004000370080008000500", @ANYRES32=r3, @ANYBLOB="9a55d711b1fd4c18dec53fc58e0e5b2ae6aa4977cb7be8eedd19064960949df0ab2d216d01c3ae1e84afe5d096cb160ba9e5f92b92894b657ff111518d0a7a7fbf53b1868133853ef7917d971790d4218c32ff1f04d137af67eecefdee0191c4077a1fbe"], 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x4040040) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = inotify_init1(0x80000) inotify_add_watch(r4, &(0x7f0000000580)='./cgroup\x00', 0x60000726) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0) open_by_handle_at(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="1400000052000000bc4d0000010175000100006a633a24d18c68ce031e24b045d9a58005b88154c1"], 0x4240) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed009875f37438e486dd0000000003"], 0xfe1b) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4c) ioctl$SIOCSIFHWADDR(r6, 0x8946, &(0x7f0000000040)={'bridge0\x00', @random='\x00\x00\x00\x00\x00 '}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) open(&(0x7f0000000180)='./file1\x00', 0x185142, 0x2b) 196.384658ms ago: executing program 3 (id=526): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe80000000000a0000000000000000aa0000000000000000080012000000000003000000000000002600000000000000000000000000000002000002000000000000000000000000fc01000000000000000000000000000005000600"], 0xa0}}, 0x0) 130.163422ms ago: executing program 4 (id=527): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xa419, 0x10000, 0xfffffffe, 0x2d0}, &(0x7f0000001040), &(0x7f0000001080)) io_uring_enter(r0, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000002200)='9', 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000080)=""/183, 0xb7, 0x0, &(0x7f0000000200)=""/183, 0xb7}}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x21000000000000ff) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket(0x1e, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, 0x0, 0x0) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@remote]}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x2, 0x300) 129.948592ms ago: executing program 3 (id=528): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}, 0x1, 0xfffffff5}, 0x0) 129.728492ms ago: executing program 1 (id=529): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_bp={0x0, 0x6}, 0x4, 0x9, 0xfff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@nodioread_nolock}, {@noload}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@errors_remount}, {@delalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@jqfmt_vfsold}]}, 0x0, 0x48b, &(0x7f00000002c0)="$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") 113.811974ms ago: executing program 3 (id=530): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a42, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a42, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) readv(r0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/135, 0x87}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x0, r2}) (async) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x0, r2}) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) getegid() (async) r5 = getegid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={r3, r4, r5}, 0xc) syz_pidfd_open(r2, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 77.465685ms ago: executing program 0 (id=531): write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000340)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) ftruncate(r3, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x35, 0x4, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 24.819658ms ago: executing program 2 (id=532): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001d00), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x174, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x160, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0xfffffffffffffdf3, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xc8, 0x6, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x174}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$TCFLSH(r1, 0x5453, 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x92, '\x00', 0x0, r2, 0x1, 0x1}, 0x50) 24.416768ms ago: executing program 1 (id=533): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setresuid(0x0, 0xee00, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) 11.250759ms ago: executing program 2 (id=534): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x28, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x4010) sendmsg$nl_route(r0, 0x0, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x840}, 0x40) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc0000000000000000000000000080ffac1e000100"], 0xb8}}, 0x0) 0s ago: executing program 0 (id=535): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001300)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r1, @ANYBLOB="01000100000000000000010000001400048005000300050000000500030002000000080002000100000008000100000000000400088064000c800c000b8008000a0042b7000014000b80080009"], 0xa0}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.162' (ED25519) to the list of known hosts. [ 33.588006][ T29] audit: type=1400 audit(1770510029.633:62): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.611077][ T29] audit: type=1400 audit(1770510029.653:63): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.613497][ T3298] cgroup: Unknown subsys name 'net' [ 33.638937][ T29] audit: type=1400 audit(1770510029.683:64): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.836204][ T3298] cgroup: Unknown subsys name 'cpuset' [ 33.842501][ T3298] cgroup: Unknown subsys name 'rlimit' [ 34.014095][ T29] audit: type=1400 audit(1770510030.053:65): avc: denied { setattr } for pid=3298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.043168][ T29] audit: type=1400 audit(1770510030.063:66): avc: denied { create } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.063860][ T29] audit: type=1400 audit(1770510030.063:67): avc: denied { write } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.084445][ T29] audit: type=1400 audit(1770510030.063:68): avc: denied { read } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.104911][ T29] audit: type=1400 audit(1770510030.083:69): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.112083][ T3301] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.126052][ T29] audit: type=1400 audit(1770510030.083:70): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.159510][ T29] audit: type=1400 audit(1770510030.083:71): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.214858][ T3298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.413053][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 35.427453][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 35.494273][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 35.535913][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.543152][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.550583][ T3314] bridge_slave_0: entered allmulticast mode [ 35.557066][ T3314] bridge_slave_0: entered promiscuous mode [ 35.568318][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.575421][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.582619][ T3312] bridge_slave_0: entered allmulticast mode [ 35.589478][ T3312] bridge_slave_0: entered promiscuous mode [ 35.600676][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.607819][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.614943][ T3314] bridge_slave_1: entered allmulticast mode [ 35.621620][ T3314] bridge_slave_1: entered promiscuous mode [ 35.641143][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.650322][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.657430][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.664770][ T3312] bridge_slave_1: entered allmulticast mode [ 35.671261][ T3312] bridge_slave_1: entered promiscuous mode [ 35.690503][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 35.700421][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.742606][ T3314] team0: Port device team_slave_0 added [ 35.748295][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.755442][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.762993][ T3309] bridge_slave_0: entered allmulticast mode [ 35.769566][ T3309] bridge_slave_0: entered promiscuous mode [ 35.776533][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.783596][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.790897][ T3309] bridge_slave_1: entered allmulticast mode [ 35.797665][ T3309] bridge_slave_1: entered promiscuous mode [ 35.807850][ T3314] team0: Port device team_slave_1 added [ 35.819116][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.844731][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.862490][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.888096][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.897601][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.904546][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.930605][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.951534][ T3312] team0: Port device team_slave_0 added [ 35.961491][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.968504][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.994629][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.019715][ T3312] team0: Port device team_slave_1 added [ 36.025737][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.032953][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.040328][ T3310] bridge_slave_0: entered allmulticast mode [ 36.046850][ T3310] bridge_slave_0: entered promiscuous mode [ 36.074094][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 36.083083][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.090225][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.097483][ T3310] bridge_slave_1: entered allmulticast mode [ 36.104086][ T3310] bridge_slave_1: entered promiscuous mode [ 36.111470][ T3309] team0: Port device team_slave_0 added [ 36.133022][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.150331][ T3309] team0: Port device team_slave_1 added [ 36.156408][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.163381][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.189320][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.201200][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.212878][ T3314] hsr_slave_0: entered promiscuous mode [ 36.219034][ T3314] hsr_slave_1: entered promiscuous mode [ 36.234240][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.241378][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.267458][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.293112][ T3310] team0: Port device team_slave_0 added [ 36.321804][ T3310] team0: Port device team_slave_1 added [ 36.327763][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.334818][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.360932][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.390898][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.397896][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.423955][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.447033][ T3312] hsr_slave_0: entered promiscuous mode [ 36.453143][ T3312] hsr_slave_1: entered promiscuous mode [ 36.459054][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 36.464802][ T3312] Cannot create hsr debugfs directory [ 36.487577][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.494673][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.501937][ T3316] bridge_slave_0: entered allmulticast mode [ 36.508398][ T3316] bridge_slave_0: entered promiscuous mode [ 36.518068][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.525059][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.551042][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.579797][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.586904][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.594400][ T3316] bridge_slave_1: entered allmulticast mode [ 36.601055][ T3316] bridge_slave_1: entered promiscuous mode [ 36.621408][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.630960][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.637985][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.663988][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.677409][ T3309] hsr_slave_0: entered promiscuous mode [ 36.683463][ T3309] hsr_slave_1: entered promiscuous mode [ 36.689484][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 36.695217][ T3309] Cannot create hsr debugfs directory [ 36.709563][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.749359][ T3316] team0: Port device team_slave_0 added [ 36.769245][ T3316] team0: Port device team_slave_1 added [ 36.823641][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.830840][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.856818][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.872460][ T3310] hsr_slave_0: entered promiscuous mode [ 36.878606][ T3310] hsr_slave_1: entered promiscuous mode [ 36.884485][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 36.890352][ T3310] Cannot create hsr debugfs directory [ 36.901666][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.908786][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.935099][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.014675][ T3316] hsr_slave_0: entered promiscuous mode [ 37.020766][ T3316] hsr_slave_1: entered promiscuous mode [ 37.026897][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 37.032658][ T3316] Cannot create hsr debugfs directory [ 37.073223][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.089817][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.112012][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.123733][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.174065][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.185207][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.194817][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.203944][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.237514][ T3309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.246905][ T3309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.256067][ T3309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.279276][ T3309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.311611][ T3316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.327064][ T3316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.337371][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.351296][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.360035][ T3316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.373664][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.382806][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.391855][ T3316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.409072][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.419719][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.438149][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.445316][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.476181][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.486118][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.493208][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.526209][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.550904][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.558066][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.583683][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.590799][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.613503][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.629593][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.663133][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.673571][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.694274][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.703587][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.719525][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.726638][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.747350][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.754462][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.766140][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.792248][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.810377][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.817555][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.828340][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.835524][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.870096][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.885003][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.892253][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.907470][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.917882][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.925070][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.058362][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.074390][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.127308][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.154409][ T3312] veth0_vlan: entered promiscuous mode [ 38.167010][ T3314] veth0_vlan: entered promiscuous mode [ 38.176592][ T3314] veth1_vlan: entered promiscuous mode [ 38.205859][ T3312] veth1_vlan: entered promiscuous mode [ 38.232986][ T3314] veth0_macvtap: entered promiscuous mode [ 38.255829][ T3314] veth1_macvtap: entered promiscuous mode [ 38.297133][ T3312] veth0_macvtap: entered promiscuous mode [ 38.309529][ T3309] veth0_vlan: entered promiscuous mode [ 38.319116][ T3312] veth1_macvtap: entered promiscuous mode [ 38.327974][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.342441][ T3309] veth1_vlan: entered promiscuous mode [ 38.351369][ T3316] veth0_vlan: entered promiscuous mode [ 38.359110][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.380022][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.391489][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.399830][ T3316] veth1_vlan: entered promiscuous mode [ 38.413577][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.430768][ T3310] veth0_vlan: entered promiscuous mode [ 38.441710][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.460555][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.471671][ T3310] veth1_vlan: entered promiscuous mode [ 38.486083][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.498810][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.509413][ T3309] veth0_macvtap: entered promiscuous mode [ 38.518142][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.530385][ T3316] veth0_macvtap: entered promiscuous mode [ 38.544634][ T3309] veth1_macvtap: entered promiscuous mode [ 38.555439][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.578150][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.593934][ T3316] veth1_macvtap: entered promiscuous mode [ 38.603561][ T3310] veth0_macvtap: entered promiscuous mode [ 38.614865][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.628310][ T3310] veth1_macvtap: entered promiscuous mode [ 38.638981][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.652124][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.666199][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 38.666252][ T29] audit: type=1400 audit(1770510034.713:98): avc: denied { create } for pid=3482 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.694971][ T29] audit: type=1400 audit(1770510034.713:99): avc: denied { write } for pid=3482 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.715224][ T29] audit: type=1400 audit(1770510034.733:100): avc: denied { open } for pid=3482 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.729580][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.734282][ T29] audit: type=1400 audit(1770510034.733:101): avc: denied { perfmon } for pid=3482 comm="syz.2.3" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.745771][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.762035][ T29] audit: type=1400 audit(1770510034.733:102): avc: denied { kernel } for pid=3482 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.788292][ T29] audit: type=1400 audit(1770510034.733:103): avc: denied { tracepoint } for pid=3482 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.809676][ T29] audit: type=1400 audit(1770510034.833:104): avc: denied { ioctl } for pid=3482 comm="syz.2.3" path="socket:[4703]" dev="sockfs" ino=4703 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.811605][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.849810][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.875382][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.884306][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.893094][ T3483] tipc: Started in network mode [ 38.898253][ T3483] tipc: Node identity ac14140f, cluster identity 4711 [ 38.913037][ T3483] tipc: New replicast peer: 255.255.255.255 [ 38.919448][ T3483] tipc: Enabled bearer , priority 10 [ 38.926280][ T29] audit: type=1400 audit(1770510034.963:105): avc: denied { bpf } for pid=3486 comm="syz.0.6" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.946571][ T29] audit: type=1400 audit(1770510034.963:106): avc: denied { map_create } for pid=3486 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.978406][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.987402][ T3484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 38.996234][ T3484] tipc: Disabling bearer [ 39.009720][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.018659][ T29] audit: type=1400 audit(1770510035.053:107): avc: denied { prog_load } for pid=3486 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.049815][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.061855][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.105838][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.133688][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.169889][ T3493] random: crng reseeded on system resumption [ 39.178490][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.198930][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.224134][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.237479][ T3501] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.262596][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.322813][ T3498] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8'. [ 39.375299][ C1] hrtimer: interrupt took 67262 ns [ 39.390066][ T3503] netlink: 'syz.4.5': attribute type 13 has an invalid length. [ 39.483237][ T3519] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 39.511361][ T3521] loop3: detected capacity change from 0 to 512 [ 39.527767][ T3510] loop0: detected capacity change from 0 to 512 [ 39.546309][ T3510] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 39.568437][ T3510] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 39.577683][ T3521] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.13: bg 0: block 248: padding at end of block bitmap is not set [ 39.579180][ T3510] System zones: 1-12 [ 39.603843][ T3521] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.13: Failed to acquire dquot type 1 [ 39.614051][ T3510] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.10: corrupted in-inode xattr: e_value size too large [ 39.615990][ T3521] EXT4-fs (loop3): 1 truncate cleaned up [ 39.616464][ T3521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.616990][ T3521] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.641240][ T3521] ======================================================= [ 39.641240][ T3521] WARNING: The mand mount option has been deprecated and [ 39.641240][ T3521] and is ignored by this kernel. Remove the mand [ 39.641240][ T3521] option from the mount to silence this warning. [ 39.641240][ T3521] ======================================================= [ 39.671580][ T3510] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.10: couldn't read orphan inode 15 (err -117) [ 39.734595][ T3510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.820554][ T3510] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.838115][ T3529] Zero length message leads to an empty skb [ 40.033927][ T3533] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 40.352633][ T3538] loop2: detected capacity change from 0 to 512 [ 40.372142][ T3538] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 40.398570][ T3538] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 40.416015][ T3538] System zones: 1-12 [ 40.449030][ T3538] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.17: corrupted in-inode xattr: e_value size too large [ 40.497996][ T3538] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.17: couldn't read orphan inode 15 (err -117) [ 40.537167][ T3538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.602442][ T3549] random: crng reseeded on system resumption [ 40.616933][ T3538] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.807571][ T3569] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 40.874256][ T3575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.31'. [ 41.012687][ T3585] team0 (unregistering): Port device team_slave_0 removed [ 41.041503][ T3585] team0 (unregistering): Port device team_slave_1 removed [ 41.067543][ T3586] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 41.079061][ T3521] syz.3.13 (3521) used greatest stack depth: 8608 bytes left [ 41.106992][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.117203][ T3586] bond1 (unregistering): Released all slaves [ 41.130081][ T3588] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 41.171448][ T3584] loop4: detected capacity change from 0 to 512 [ 41.236005][ T3598] loop1: detected capacity change from 0 to 128 [ 41.238202][ T3584] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 41.276564][ T3584] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 41.287871][ T3584] System zones: 1-12 [ 41.302653][ T3584] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.33: corrupted in-inode xattr: e_value size too large [ 41.324414][ T3584] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.33: couldn't read orphan inode 15 (err -117) [ 41.353415][ T3598] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.370740][ T3584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.381042][ T3607] loop3: detected capacity change from 0 to 1024 [ 41.396034][ T3607] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 41.413660][ T3607] netlink: 88 bytes leftover after parsing attributes in process `syz.3.42'. [ 41.447597][ T3598] ext4 filesystem being mounted at /file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.457366][ T3604] FAULT_INJECTION: forcing a failure. [ 41.457366][ T3604] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 41.492825][ T3604] CPU: 1 UID: 0 PID: 3604 Comm: syz.2.41 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.492861][ T3604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 41.492882][ T3604] Call Trace: [ 41.492894][ T3604] [ 41.492904][ T3604] __dump_stack+0x1d/0x30 [ 41.492973][ T3604] dump_stack_lvl+0x95/0xd0 [ 41.493002][ T3604] dump_stack+0x15/0x1b [ 41.493026][ T3604] should_fail_ex+0x263/0x280 [ 41.493099][ T3604] should_fail+0xb/0x20 [ 41.493136][ T3604] should_fail_usercopy+0x1a/0x20 [ 41.493208][ T3604] _copy_from_user+0x1c/0xb0 [ 41.493236][ T3604] restore_altstack+0x4b/0x300 [ 41.493352][ T3604] ? _raw_spin_unlock_irq+0x9/0x30 [ 41.493397][ T3604] ? __set_current_blocked+0x284/0x2e0 [ 41.493490][ T3604] __ia32_sys_rt_sigreturn+0xdb/0x350 [ 41.493526][ T3604] ? arch_do_signal_or_restart+0x2c2/0x450 [ 41.493562][ T3604] ? exit_to_user_mode_loop+0xef/0x6f0 [ 41.493606][ T3604] ? __rcu_read_unlock+0x4e/0x70 [ 41.493647][ T3604] x64_sys_call+0x274a/0x3000 [ 41.493679][ T3604] do_syscall_64+0xc0/0x2a0 [ 41.493731][ T3604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.493757][ T3604] RIP: 0033:0x7f159e9bc2d9 [ 41.493853][ T3604] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 41.493876][ T3604] RSP: 002b:00007f159d46ea80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 41.493903][ T3604] RAX: ffffffffffffffda RBX: 00007f159ec95fa0 RCX: 00007f159e9bc2d9 [ 41.493938][ T3604] RDX: 00007f159d46ea80 RSI: 00007f159d46ebb0 RDI: 0000000000000021 [ 41.493957][ T3604] RBP: 00007f159d46f090 R08: 0000000000000000 R09: 0000000000000000 [ 41.493980][ T3604] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 41.493997][ T3604] R13: 00007f159ec96038 R14: 00007f159ec95fa0 R15: 00007ffc034b5b88 [ 41.494021][ T3604] [ 41.507287][ T3598] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.861873][ T3584] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.887618][ T3621] random: crng reseeded on system resumption [ 41.990963][ T3626] loop4: detected capacity change from 0 to 1764 [ 42.009961][ T3627] FAULT_INJECTION: forcing a failure. [ 42.009961][ T3627] name failslab, interval 1, probability 0, space 0, times 1 [ 42.022879][ T3627] CPU: 1 UID: 0 PID: 3627 Comm: syz.1.49 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.022908][ T3627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 42.022924][ T3627] Call Trace: [ 42.022931][ T3627] [ 42.022941][ T3627] __dump_stack+0x1d/0x30 [ 42.022970][ T3627] dump_stack_lvl+0x95/0xd0 [ 42.022995][ T3627] dump_stack+0x15/0x1b [ 42.023017][ T3627] should_fail_ex+0x263/0x280 [ 42.023059][ T3627] should_failslab+0x8c/0xb0 [ 42.023082][ T3627] kmem_cache_alloc_noprof+0x68/0x490 [ 42.023108][ T3627] ? __anon_vma_prepare+0xcd/0x2f0 [ 42.023140][ T3627] __anon_vma_prepare+0xcd/0x2f0 [ 42.023177][ T3627] handle_mm_fault+0x22a4/0x3030 [ 42.023217][ T3627] ? __rcu_read_unlock+0x4e/0x70 [ 42.023258][ T3627] ? check_vma_flags+0x26d/0x330 [ 42.023281][ T3627] __get_user_pages+0x1023/0x1ea0 [ 42.023326][ T3627] get_user_pages_remote+0x1d5/0x6b0 [ 42.023354][ T3627] uprobe_write+0x107/0x1230 [ 42.023392][ T3627] ? insn_get_modrm+0x367/0x390 [ 42.023426][ T3627] ? insn_get_displacement+0x16d/0x460 [ 42.023461][ T3627] ? __pfx_verify_opcode+0x10/0x10 [ 42.023505][ T3627] uprobe_write_opcode+0x67/0xa0 [ 42.023556][ T3627] set_swbp+0x7f/0x160 [ 42.023585][ T3627] install_breakpoint+0x42d/0x550 [ 42.023629][ T3627] register_for_each_vma+0x71f/0x890 [ 42.023675][ T3627] uprobe_register+0x612/0x7f0 [ 42.023714][ T3627] ? bpf_uprobe_multi_link_attach+0x34b/0x910 [ 42.023750][ T3627] bpf_uprobe_multi_link_attach+0x7d4/0x910 [ 42.023791][ T3627] link_create+0x639/0x690 [ 42.023827][ T3627] __sys_bpf+0x628/0x7b0 [ 42.023868][ T3627] __x64_sys_bpf+0x41/0x50 [ 42.023891][ T3627] x64_sys_call+0x28e1/0x3000 [ 42.023922][ T3627] do_syscall_64+0xc0/0x2a0 [ 42.023960][ T3627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.023987][ T3627] RIP: 0033:0x7f241f38aeb9 [ 42.024006][ T3627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.024027][ T3627] RSP: 002b:00007f241dddf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 42.024048][ T3627] RAX: ffffffffffffffda RBX: 00007f241f605fa0 RCX: 00007f241f38aeb9 [ 42.024063][ T3627] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 42.024078][ T3627] RBP: 00007f241dddf090 R08: 0000000000000000 R09: 0000000000000000 [ 42.024094][ T3627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 42.024109][ T3627] R13: 00007f241f606038 R14: 00007f241f605fa0 R15: 00007ffd709f30b8 [ 42.024130][ T3627] [ 42.319876][ T3636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.52'. [ 42.329431][ T3626] netlink: 'syz.4.48': attribute type 1 has an invalid length. [ 42.346212][ T3626] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 42.370057][ T3640] netlink: 96 bytes leftover after parsing attributes in process `syz.1.53'. [ 42.393901][ T3640] vlan2: entered allmulticast mode [ 42.399182][ T3640] gretap0: entered allmulticast mode [ 42.406730][ T3641] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 42.506372][ T3647] bond2 (unregistering): Released all slaves [ 42.548891][ T3616] syz.3.44 (3616) used greatest stack depth: 7464 bytes left [ 42.575455][ T3653] netlink: 36 bytes leftover after parsing attributes in process `syz.1.57'. [ 42.662399][ T3661] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.690677][ T3661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.60'. [ 42.702044][ T3661] netlink: 80 bytes leftover after parsing attributes in process `syz.0.60'. [ 42.795207][ T3657] loop3: detected capacity change from 0 to 512 [ 42.841300][ T3657] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 42.900427][ T3657] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 42.909900][ T3657] System zones: 1-12 [ 42.918462][ T3657] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.58: corrupted in-inode xattr: e_value size too large [ 42.942064][ T3678] loop4: detected capacity change from 0 to 512 [ 42.952595][ T3678] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 42.964606][ T3678] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 42.976947][ T3657] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.58: couldn't read orphan inode 15 (err -117) [ 43.003588][ T3657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.029224][ T3678] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.67: Invalid inode table block 1 in block_group 0 [ 43.078959][ T3678] EXT4-fs (loop4): Remounting filesystem read-only [ 43.095402][ T3678] EXT4-fs (loop4): get root inode failed [ 43.101101][ T3678] EXT4-fs (loop4): mount failed [ 43.140841][ T3688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.70'. [ 43.187641][ T3657] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.274892][ T3704] loop3: detected capacity change from 0 to 1024 [ 43.303869][ T3704] EXT4-fs: Ignoring removed orlov option [ 43.327659][ T3712] netlink: 'syz.0.77': attribute type 30 has an invalid length. [ 43.369008][ T3712] bond2: option arp_missed_max: invalid value (0) [ 43.375550][ T3712] bond2: option arp_missed_max: allowed values 1 - 255 [ 43.414214][ T3704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.456485][ T3712] bond2 (unregistering): Released all slaves [ 43.478993][ T3730] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 43.561853][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.681088][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 43.681104][ T29] audit: type=1326 audit(1770510039.723:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7d7b06aeb9 code=0x7ffc0000 [ 43.741118][ T29] audit: type=1326 audit(1770510039.723:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7b06aeb9 code=0x7ffc0000 [ 43.764809][ T29] audit: type=1326 audit(1770510039.723:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7b06aeb9 code=0x7ffc0000 [ 43.788131][ T29] audit: type=1326 audit(1770510039.763:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7b06aeb9 code=0x7ffc0000 [ 43.811773][ T29] audit: type=1326 audit(1770510039.763:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7b06aeb9 code=0x7ffc0000 [ 43.835324][ T29] audit: type=1326 audit(1770510039.763:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7d7b06aeb9 code=0x7ffc0000 [ 43.858457][ T29] audit: type=1400 audit(1770510039.763:227): avc: denied { name_connect } for pid=3738 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 43.878426][ T29] audit: type=1326 audit(1770510039.763:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7b06aeb9 code=0x7ffc0000 [ 43.901880][ T29] audit: type=1326 audit(1770510039.763:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7b06aeb9 code=0x7ffc0000 [ 43.925597][ T29] audit: type=1326 audit(1770510039.763:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7b06aeb9 code=0x7ffc0000 [ 44.023164][ T3758] tipc: Started in network mode [ 44.028241][ T3758] tipc: Node identity 02a8e1279123, cluster identity 4711 [ 44.035537][ T3758] tipc: Enabled bearer , priority 0 [ 44.071252][ T3758] syzkaller0: entered promiscuous mode [ 44.076821][ T3758] syzkaller0: entered allmulticast mode [ 44.111272][ T3758] tipc: Resetting bearer [ 44.150332][ T3758] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.93: bad orphan inode 11862016 [ 44.171773][ T3758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 44.250107][ T3758] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.296321][ T3757] tipc: Resetting bearer [ 44.303719][ T3757] tipc: Disabling bearer [ 44.368001][ T3782] netlink: 'syz.1.97': attribute type 1 has an invalid length. [ 44.378442][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 44.403166][ T3782] __nla_validate_parse: 2 callbacks suppressed [ 44.403184][ T3782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.97'. [ 44.499583][ T3788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 44.538658][ T3788] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.585995][ T3797] syz.4.104 uses obsolete (PF_INET,SOCK_PACKET) [ 44.618981][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 44.664499][ T3804] sit0: entered promiscuous mode [ 44.687542][ T3804] netlink: 'syz.0.107': attribute type 1 has an invalid length. [ 44.695292][ T3804] netlink: 1 bytes leftover after parsing attributes in process `syz.0.107'. [ 44.838803][ T3828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.117'. [ 44.849623][ T3827] netlink: 16 bytes leftover after parsing attributes in process `syz.4.118'. [ 44.868358][ T3828] vlan2: entered promiscuous mode [ 44.873459][ T3828] bond0: entered promiscuous mode [ 44.878631][ T3828] bond_slave_0: entered promiscuous mode [ 44.884549][ T3828] bond_slave_1: entered promiscuous mode [ 45.000377][ T3839] capability: warning: `syz.2.123' uses 32-bit capabilities (legacy support in use) [ 45.036759][ T3839] program syz.2.123 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.059536][ T3845] tap0: tun_chr_ioctl cmd 1074025677 [ 45.065074][ T3845] tap0: linktype set to 778 [ 45.077404][ T3848] netlink: 'syz.2.127': attribute type 32 has an invalid length. [ 45.085461][ T3848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 45.100262][ T3848] bond1: option coupled_control: invalid value (77) [ 45.108778][ T3848] bond1 (unregistering): Released all slaves [ 45.246282][ T3859] netlink: 80 bytes leftover after parsing attributes in process `syz.2.131'. [ 45.296546][ T3865] set_capacity_and_notify: 3 callbacks suppressed [ 45.296562][ T3865] loop2: detected capacity change from 0 to 256 [ 45.547405][ T3875] netlink: 48 bytes leftover after parsing attributes in process `syz.4.138'. [ 45.578765][ T3877] loop4: detected capacity change from 0 to 512 [ 45.590180][ T3877] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 45.613942][ T3877] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 45.639135][ T3877] block device autoloading is deprecated and will be removed. [ 45.652843][ T3877] EXT4-fs (loop4): couldn't read superblock of external journal [ 45.740278][ T3887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.143'. [ 45.754741][ T3889] loop3: detected capacity change from 0 to 512 [ 45.762467][ T3889] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 45.796483][ T3889] EXT4-fs (loop3): 1 truncate cleaned up [ 45.811117][ T3889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.824431][ T3889] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.842190][ T3896] FAULT_INJECTION: forcing a failure. [ 45.842190][ T3896] name failslab, interval 1, probability 0, space 0, times 0 [ 45.855003][ T3896] CPU: 0 UID: 0 PID: 3896 Comm: syz.1.146 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.855031][ T3896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 45.855061][ T3896] Call Trace: [ 45.855070][ T3896] [ 45.855090][ T3896] __dump_stack+0x1d/0x30 [ 45.855137][ T3896] dump_stack_lvl+0x95/0xd0 [ 45.855166][ T3896] dump_stack+0x15/0x1b [ 45.855226][ T3896] should_fail_ex+0x263/0x280 [ 45.855268][ T3896] should_failslab+0x8c/0xb0 [ 45.855299][ T3896] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 45.855407][ T3896] ? __alloc_skb+0x2f0/0x4b0 [ 45.855455][ T3896] __alloc_skb+0x2f0/0x4b0 [ 45.855492][ T3896] ? __alloc_skb+0x219/0x4b0 [ 45.855532][ T3896] alloc_skb_with_frags+0x7d/0x470 [ 45.855572][ T3896] ? avc_lookup+0xf6/0x1a0 [ 45.855613][ T3896] sock_alloc_send_pskb+0x44d/0x500 [ 45.855682][ T3896] ? avc_has_perm+0x101/0x190 [ 45.855800][ T3896] j1939_sk_sendmsg+0x517/0xc00 [ 45.855837][ T3896] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 45.855959][ T3896] ____sys_sendmsg+0x5af/0x600 [ 45.855988][ T3896] ___sys_sendmsg+0x195/0x1e0 [ 45.856030][ T3896] __sys_sendmmsg+0x185/0x320 [ 45.856069][ T3896] __x64_sys_sendmmsg+0x57/0x70 [ 45.856131][ T3896] x64_sys_call+0x1e28/0x3000 [ 45.856225][ T3896] do_syscall_64+0xc0/0x2a0 [ 45.856266][ T3896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.856295][ T3896] RIP: 0033:0x7f241f38aeb9 [ 45.856316][ T3896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.856371][ T3896] RSP: 002b:00007f241dddf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 45.856398][ T3896] RAX: ffffffffffffffda RBX: 00007f241f605fa0 RCX: 00007f241f38aeb9 [ 45.856440][ T3896] RDX: 0000000000000001 RSI: 00002000000038c0 RDI: 0000000000000003 [ 45.856457][ T3896] RBP: 00007f241dddf090 R08: 0000000000000000 R09: 0000000000000000 [ 45.856473][ T3896] R10: 0000000000000881 R11: 0000000000000246 R12: 0000000000000001 [ 45.856489][ T3896] R13: 00007f241f606038 R14: 00007f241f605fa0 R15: 00007ffd709f30b8 [ 45.856534][ T3896] [ 46.126842][ T3900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.148'. [ 46.182390][ T3905] FAULT_INJECTION: forcing a failure. [ 46.182390][ T3905] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 46.196228][ T3905] CPU: 0 UID: 0 PID: 3905 Comm: syz.3.149 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.196258][ T3905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 46.196274][ T3905] Call Trace: [ 46.196283][ T3905] [ 46.196293][ T3905] __dump_stack+0x1d/0x30 [ 46.196337][ T3905] dump_stack_lvl+0x95/0xd0 [ 46.196366][ T3905] dump_stack+0x15/0x1b [ 46.196389][ T3905] should_fail_ex+0x263/0x280 [ 46.196424][ T3905] should_fail_alloc_page+0xf2/0x100 [ 46.196459][ T3905] __alloc_frozen_pages_noprof+0x108/0x350 [ 46.196580][ T3905] alloc_pages_mpol+0xb3/0x260 [ 46.196673][ T3905] ? css_rstat_updated+0xbb/0x280 [ 46.196705][ T3905] vma_alloc_folio_noprof+0x1a9/0x300 [ 46.196786][ T3905] handle_mm_fault+0x111f/0x3030 [ 46.196861][ T3905] ? mt_find+0x291/0x3b0 [ 46.196993][ T3905] do_user_addr_fault+0x3fd/0x1050 [ 46.197030][ T3905] exc_page_fault+0x62/0xa0 [ 46.197063][ T3905] asm_exc_page_fault+0x26/0x30 [ 46.197084][ T3905] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 46.197150][ T3905] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 bf 15 02 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 46.197175][ T3905] RSP: 0018:ffffc9000140fd38 EFLAGS: 00050206 [ 46.197198][ T3905] RAX: ffff888109cc1b10 RBX: 0000000000001000 RCX: 0000000000000200 [ 46.197231][ T3905] RDX: 0000000000000000 RSI: ffff88811abd6e00 RDI: 000020000000b000 [ 46.197325][ T3905] RBP: ffff88811abd6000 R08: 00000000000002ba R09: 0000000000000000 [ 46.197441][ T3905] R10: 000188811abd6000 R11: 000188811abd6fff R12: 000020000000b200 [ 46.197458][ T3905] R13: 00007ffffffff000 R14: 000020000000a200 R15: ffff88811abd6000 [ 46.197486][ T3905] _copy_to_user+0x7c/0xa0 [ 46.197514][ T3905] pagemap_read+0x3ac/0x610 [ 46.197543][ T3905] ? __pfx_pagemap_read+0x10/0x10 [ 46.197589][ T3905] vfs_read+0x1ab/0x7f0 [ 46.197615][ T3905] ? __rcu_read_unlock+0x4e/0x70 [ 46.197653][ T3905] ? __fget_files+0x184/0x1c0 [ 46.197683][ T3905] ? mutex_unlock+0x4e/0x90 [ 46.197715][ T3905] __x64_sys_pread64+0xfd/0x150 [ 46.197762][ T3905] x64_sys_call+0x281b/0x3000 [ 46.197793][ T3905] do_syscall_64+0xc0/0x2a0 [ 46.197834][ T3905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.197928][ T3905] RIP: 0033:0x7fd1ca59aeb9 [ 46.197949][ T3905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.197973][ T3905] RSP: 002b:00007fd1c8ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 46.198076][ T3905] RAX: ffffffffffffffda RBX: 00007fd1ca815fa0 RCX: 00007fd1ca59aeb9 [ 46.198093][ T3905] RDX: 0000000000019000 RSI: 0000200000000200 RDI: 0000000000000003 [ 46.198109][ T3905] RBP: 00007fd1c8ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 46.198125][ T3905] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000002 [ 46.198148][ T3905] R13: 00007fd1ca816038 R14: 00007fd1ca815fa0 R15: 00007ffc6e3ceb38 [ 46.198172][ T3905] [ 46.629314][ T3926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.158'. [ 46.658209][ T3928] capability: warning: `syz.1.154' uses deprecated v2 capabilities in a way that may be insecure [ 46.781881][ T3941] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 46.808758][ T3946] netlink: 'syz.2.164': attribute type 1 has an invalid length. [ 46.854541][ T3946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.904171][ T3952] loop3: detected capacity change from 0 to 764 [ 46.917190][ T3946] vlan2: entered promiscuous mode [ 46.922400][ T3946] bond1: entered promiscuous mode [ 46.927695][ T3946] vlan2: entered allmulticast mode [ 46.932885][ T3946] bond1: entered allmulticast mode [ 46.968140][ T3953] bond1: (slave bridge2): making interface the new active one [ 46.975713][ T3953] bridge2: entered promiscuous mode [ 46.981400][ T3953] bridge2: entered allmulticast mode [ 46.985031][ T3957] loop1: detected capacity change from 0 to 512 [ 46.990037][ T3953] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 47.023806][ T3952] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 47.035791][ T3957] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 47.049106][ T3957] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 47.073320][ T3952] wireguard0: entered promiscuous mode [ 47.078958][ T3952] wireguard0: entered allmulticast mode [ 47.084886][ T3957] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.169: bg 0: block 104: invalid block bitmap [ 47.104182][ T3957] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 47.114112][ T3957] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.169: invalid indirect mapped block 1 (level 1) [ 47.142325][ T3957] EXT4-fs (loop1): 1 truncate cleaned up [ 47.164446][ T3957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.232704][ T3975] loop2: detected capacity change from 0 to 512 [ 47.248782][ T3975] EXT4-fs: old and new quota format mixing [ 47.340349][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.364773][ T3984] IPVS: Error connecting to the multicast addr [ 47.435174][ T3989] xt_CT: You must specify a L4 protocol and not use inversions on it [ 47.495100][ T3990] loop1: detected capacity change from 0 to 764 [ 47.506357][ T3990] rock: directory entry would overflow storage [ 47.512634][ T3990] rock: sig=0x4f50, size=4, remaining=3 [ 47.518388][ T3990] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 47.660026][ T4003] program syz.2.186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.687174][ T4005] loop1: detected capacity change from 0 to 1024 [ 47.727067][ T4005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 47.751885][ T4005] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.770916][ T4001] loop0: detected capacity change from 0 to 8192 [ 47.791633][ T4001] macvlan2: entered promiscuous mode [ 47.798310][ T4001] batman_adv: batadv0: Adding interface: macvlan2 [ 47.804854][ T4001] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.830766][ T4001] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 47.853505][ T4015] FAULT_INJECTION: forcing a failure. [ 47.853505][ T4015] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 47.866839][ T4015] CPU: 1 UID: 0 PID: 4015 Comm: syz.4.191 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.866869][ T4015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 47.866885][ T4015] Call Trace: [ 47.866895][ T4015] [ 47.866905][ T4015] __dump_stack+0x1d/0x30 [ 47.866931][ T4015] dump_stack_lvl+0x95/0xd0 [ 47.866953][ T4015] dump_stack+0x15/0x1b [ 47.866974][ T4015] should_fail_ex+0x263/0x280 [ 47.867015][ T4015] should_fail_alloc_page+0xf2/0x100 [ 47.867048][ T4015] __alloc_frozen_pages_noprof+0x108/0x350 [ 47.867093][ T4015] alloc_pages_mpol+0xb3/0x260 [ 47.867135][ T4015] vma_alloc_folio_noprof+0x1a9/0x300 [ 47.867169][ T4015] handle_mm_fault+0xdfc/0x3030 [ 47.867204][ T4015] ? __rcu_read_unlock+0x4e/0x70 [ 47.867249][ T4015] ? check_vma_flags+0x26d/0x330 [ 47.867282][ T4015] __get_user_pages+0x1023/0x1ea0 [ 47.867336][ T4015] get_user_pages_remote+0x1d5/0x6b0 [ 47.867367][ T4015] uprobe_write+0x107/0x1230 [ 47.867407][ T4015] ? insn_get_modrm+0x367/0x390 [ 47.867438][ T4015] ? insn_get_displacement+0x16d/0x460 [ 47.867468][ T4015] ? __pfx_verify_opcode+0x10/0x10 [ 47.867505][ T4015] uprobe_write_opcode+0x67/0xa0 [ 47.867542][ T4015] set_swbp+0x7f/0x160 [ 47.867572][ T4015] install_breakpoint+0x42d/0x550 [ 47.867619][ T4015] register_for_each_vma+0x71f/0x890 [ 47.867668][ T4015] uprobe_register+0x612/0x7f0 [ 47.867708][ T4015] ? bpf_uprobe_multi_link_attach+0x34b/0x910 [ 47.867742][ T4015] bpf_uprobe_multi_link_attach+0x7d4/0x910 [ 47.867777][ T4015] link_create+0x639/0x690 [ 47.867817][ T4015] __sys_bpf+0x628/0x7b0 [ 47.867851][ T4015] __x64_sys_bpf+0x41/0x50 [ 47.867875][ T4015] x64_sys_call+0x28e1/0x3000 [ 47.867908][ T4015] do_syscall_64+0xc0/0x2a0 [ 47.867948][ T4015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.867977][ T4015] RIP: 0033:0x7f7d7b06aeb9 [ 47.867997][ T4015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.868020][ T4015] RSP: 002b:00007f7d79abf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.868045][ T4015] RAX: ffffffffffffffda RBX: 00007f7d7b2e5fa0 RCX: 00007f7d7b06aeb9 [ 47.868060][ T4015] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 47.868072][ T4015] RBP: 00007f7d79abf090 R08: 0000000000000000 R09: 0000000000000000 [ 47.868085][ T4015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 47.868096][ T4015] R13: 00007f7d7b2e6038 R14: 00007f7d7b2e5fa0 R15: 00007ffceed95ca8 [ 47.868122][ T4015] [ 48.151660][ T4022] loop2: detected capacity change from 0 to 128 [ 48.158814][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 48.253791][ T4018] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 48.308414][ T4033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.334793][ T4033] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.377029][ T4018] bond1 (unregistering): Released all slaves [ 48.438265][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.531822][ T4054] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.547733][ T4054] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 48.573821][ T4046] netlink: 'syz.2.202': attribute type 3 has an invalid length. [ 48.588477][ T4054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.613651][ T4054] EXT4-fs error (device loop1): __ext4_iget:5426: inode #12: block 13: comm syz.1.201: invalid block [ 48.631421][ T4054] EXT4-fs (loop1): Remounting filesystem read-only [ 48.662484][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.675034][ T4066] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 48.686454][ T4066] EXT4-fs (loop4): 1 truncate cleaned up [ 48.693007][ T4066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.722686][ T4050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.736831][ T4050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.761239][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 48.761255][ T29] audit: type=1400 audit(1770510044.803:305): avc: denied { create } for pid=4068 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 48.802884][ T29] audit: type=1400 audit(1770510044.843:306): avc: denied { remount } for pid=4065 comm="syz.4.208" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 48.803127][ T4066] EXT4-fs: Ignoring removed orlov option [ 48.828180][ T4066] EXT4-fs: Ignoring removed orlov option [ 48.846838][ T4071] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.854124][ T4071] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.862108][ T29] audit: type=1400 audit(1770510044.903:307): avc: denied { getopt } for pid=4068 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.875923][ T4066] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 48.905061][ T4066] ip6gre0: entered promiscuous mode [ 48.916282][ T29] audit: type=1400 audit(1770510044.963:308): avc: denied { mount } for pid=4065 comm="syz.4.208" name="/" dev="hugetlbfs" ino=6011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 49.333539][ T4083] EXT4-fs: test_dummy_encryption option not supported [ 49.416921][ T29] audit: type=1400 audit(1770510045.463:309): avc: denied { create } for pid=4084 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 49.436595][ T29] audit: type=1400 audit(1770510045.463:310): avc: denied { getopt } for pid=4084 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 49.494483][ T29] audit: type=1326 audit(1770510045.533:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ca59aeb9 code=0x7ffc0000 [ 49.518141][ T29] audit: type=1326 audit(1770510045.533:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ca59aeb9 code=0x7ffc0000 [ 49.541683][ T29] audit: type=1326 audit(1770510045.543:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ca59aeb9 code=0x7ffc0000 [ 49.565020][ T29] audit: type=1326 audit(1770510045.543:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ca59aeb9 code=0x7ffc0000 [ 49.664713][ T4091] __nla_validate_parse: 13 callbacks suppressed [ 49.664735][ T4091] netlink: 24 bytes leftover after parsing attributes in process `syz.3.214'. [ 50.234055][ T4094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4094 comm=syz.0.215 [ 50.247669][ T4094] netlink: 'syz.0.215': attribute type 1 has an invalid length. [ 50.267281][ T4094] bond2: (slave bridge3): making interface the new active one [ 50.275158][ T4094] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 50.335576][ T4099] set_capacity_and_notify: 4 callbacks suppressed [ 50.335591][ T4099] loop0: detected capacity change from 0 to 4096 [ 50.351415][ T4099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.383063][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.407623][ T4102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.218'. [ 50.438658][ T4104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 50.447701][ T4104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.219'. [ 50.502913][ T4106] netlink: 16 bytes leftover after parsing attributes in process `syz.0.220'. [ 50.538112][ T4108] loop3: detected capacity change from 0 to 4096 [ 50.550509][ T4108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.573908][ T4108] forcing mempool usage for bio_alloc_bioset+0x448/0xa50 [ 50.604409][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.722894][ T4131] loop0: detected capacity change from 0 to 256 [ 50.730378][ T4131] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.765415][ T3892] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 51.265789][ T4140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4140 comm=syz.0.226 [ 51.441995][ T4149] netlink: 16 bytes leftover after parsing attributes in process `syz.0.229'. [ 51.485781][ T4046] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 51.526652][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.572162][ T4159] netlink: 'syz.1.235': attribute type 10 has an invalid length. [ 51.583223][ T4158] loop3: detected capacity change from 0 to 512 [ 51.624188][ T4155] FAULT_INJECTION: forcing a failure. [ 51.624188][ T4155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.637485][ T4155] CPU: 1 UID: 0 PID: 4155 Comm: syz.0.232 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.637520][ T4155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 51.637576][ T4155] Call Trace: [ 51.637637][ T4155] [ 51.637648][ T4155] __dump_stack+0x1d/0x30 [ 51.637679][ T4155] dump_stack_lvl+0x95/0xd0 [ 51.637708][ T4155] dump_stack+0x15/0x1b [ 51.637733][ T4155] should_fail_ex+0x263/0x280 [ 51.637824][ T4155] should_fail+0xb/0x20 [ 51.637855][ T4155] should_fail_usercopy+0x1a/0x20 [ 51.637954][ T4155] _copy_from_user+0x1c/0xb0 [ 51.637975][ T4155] __ia32_sys_rt_sigreturn+0x127/0x350 [ 51.638026][ T4155] x64_sys_call+0x274a/0x3000 [ 51.638052][ T4155] do_syscall_64+0xc0/0x2a0 [ 51.638093][ T4155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.638121][ T4155] RIP: 0033:0x7f0e23fec2d9 [ 51.638216][ T4155] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 51.638239][ T4155] RSP: 002b:00007f0e22a9ea80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 51.638265][ T4155] RAX: ffffffffffffffda RBX: 00007f0e242c5fa0 RCX: 00007f0e23fec2d9 [ 51.638283][ T4155] RDX: 00007f0e22a9ea80 RSI: 00007f0e22a9ebb0 RDI: 0000000000000021 [ 51.638309][ T4155] RBP: 00007f0e22a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 51.638326][ T4155] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 51.638343][ T4155] R13: 00007f0e242c6038 R14: 00007f0e242c5fa0 R15: 00007ffe77c73938 [ 51.638370][ T4155] [ 51.688277][ T4168] loop2: detected capacity change from 0 to 512 [ 51.736983][ T4159] team0: Port device netdevsim1 added [ 51.827720][ T4158] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.234: bg 0: block 248: padding at end of block bitmap is not set [ 51.858723][ T4158] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.234: Failed to acquire dquot type 1 [ 51.872390][ T4158] EXT4-fs (loop3): 1 truncate cleaned up [ 51.879150][ T4168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.892941][ T4158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.905631][ T4158] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.924811][ T4168] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.984388][ T4180] netlink: 16 bytes leftover after parsing attributes in process `syz.0.241'. [ 52.057081][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.071613][ T4182] vlan3: entered allmulticast mode [ 52.076883][ T4182] vlan0: entered allmulticast mode [ 52.082048][ T4182] veth0_vlan: entered allmulticast mode [ 52.116892][ T4188] netlink: 228 bytes leftover after parsing attributes in process `syz.2.243'. [ 52.141218][ T4189] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 52.267282][ T4199] loop1: detected capacity change from 0 to 256 [ 52.326524][ T4201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.247'. [ 52.338603][ T4201] loop2: detected capacity change from 0 to 164 [ 52.358901][ T4201] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 52.408358][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.442455][ T4207] loop3: detected capacity change from 0 to 512 [ 52.457642][ T4207] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 52.472342][ T4207] EXT4-fs (loop3): mount failed [ 52.481820][ T4207] netlink: 'syz.3.249': attribute type 10 has an invalid length. [ 52.487910][ T4213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.251'. [ 52.498600][ T4207] team0: Failed to send options change via netlink (err -105) [ 52.498623][ T4207] team0: Port device dummy0 added [ 52.512988][ T4207] netlink: 'syz.3.249': attribute type 10 has an invalid length. [ 52.521399][ T4207] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 52.532643][ T4207] team0: Failed to send options change via netlink (err -105) [ 52.540261][ T4207] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 52.549340][ T4207] team0: Port device dummy0 removed [ 52.557275][ T4207] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 52.570889][ T4213] netlink: 'syz.2.251': attribute type 10 has an invalid length. [ 52.579595][ T4213] dummy0: entered promiscuous mode [ 52.584771][ T4213] dummy0: entered allmulticast mode [ 52.601254][ T4213] bridge0: port 3(dummy0) entered blocking state [ 52.607837][ T4213] bridge0: port 3(dummy0) entered disabled state [ 52.679669][ T4222] program syz.3.253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.734484][ T4224] loop2: detected capacity change from 0 to 8192 [ 52.784261][ T4232] loop4: detected capacity change from 0 to 128 [ 52.806142][ T4232] team0: Device vlan2 is already an upper device of the team interface [ 52.871222][ T4237] xt_hashlimit: max too large, truncated to 1048576 [ 52.882560][ T4237] xt_hashlimit: size too large, truncated to 1048576 [ 52.889446][ T4237] xt_hashlimit: overflow, try lower: 3/0 [ 52.998658][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.008044][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.025936][ T4248] netlink: 'syz.4.264': attribute type 3 has an invalid length. [ 53.039477][ T4254] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 53.103512][ T4262] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 53.126945][ T3302] udevd[3302]: incorrect ext4dev checksum on /dev/loop1 [ 53.221075][ T4271] tipc: Enabling of bearer rejected, failed to enable media [ 53.270715][ T4273] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 53.334652][ T4278] sit0: entered promiscuous mode [ 53.341138][ T4280] netlink: 'syz.1.276': attribute type 1 has an invalid length. [ 53.348723][ T4278] netlink: 'syz.3.275': attribute type 1 has an invalid length. [ 53.367564][ T4280] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 53.497288][ T4294] xt_policy: output policy not valid in PREROUTING and INPUT [ 53.530436][ T4298] program syz.1.283 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.652698][ T4311] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.689704][ T4311] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.289: bg 0: block 4: invalid block bitmap [ 53.715985][ T4311] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 53.746290][ T4311] EXT4-fs (loop3): 1 truncate cleaned up [ 53.754612][ T4311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.805837][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.835163][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 53.835179][ T29] audit: type=1400 audit(1770510049.873:428): avc: denied { create } for pid=4317 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.893058][ T29] audit: type=1400 audit(1770510049.933:429): avc: denied { write } for pid=4323 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.963986][ T29] audit: type=1400 audit(1770510049.963:430): avc: denied { ioctl } for pid=4325 comm="syz.1.295" path="socket:[7165]" dev="sockfs" ino=7165 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 53.988483][ T29] audit: type=1400 audit(1770510049.963:431): avc: denied { getopt } for pid=4325 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 54.034853][ T29] audit: type=1400 audit(1770510050.003:432): avc: denied { view } for pid=4332 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 54.053814][ T4338] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 54.091866][ T4338] EXT4-fs (loop3): 1 truncate cleaned up [ 54.105810][ T4338] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.122819][ T4347] netlink: 'syz.0.302': attribute type 1 has an invalid length. [ 54.138691][ T4338] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.186045][ T4347] 8021q: adding VLAN 0 to HW filter on device bond3 [ 54.221047][ T4355] bridge0: entered promiscuous mode [ 54.264521][ T4347] bond3: (slave gretap1): making interface the new active one [ 54.277166][ T4347] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 54.312916][ T4372] netlink: 'syz.4.312': attribute type 1 has an invalid length. [ 54.323341][ T4366] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4366 comm=syz.0.302 [ 54.348910][ T29] audit: type=1400 audit(1770510050.393:433): avc: denied { mount } for pid=4367 comm="syz.3.311" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 54.377345][ T4372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.396298][ T4347] netlink: zone id is out of range [ 54.401485][ T4347] netlink: zone id is out of range [ 54.424305][ T4347] netlink: zone id is out of range [ 54.430240][ T4347] netlink: zone id is out of range [ 54.435424][ T4347] netlink: zone id is out of range [ 54.440649][ T4347] netlink: zone id is out of range [ 54.446558][ T4347] netlink: zone id is out of range [ 54.451823][ T4347] netlink: zone id is out of range [ 54.457395][ T4374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.474379][ T4372] vlan2: entered promiscuous mode [ 54.479549][ T4372] bond1: entered promiscuous mode [ 54.484761][ T4372] vlan2: entered allmulticast mode [ 54.490028][ T4372] bond1: entered allmulticast mode [ 54.508383][ T29] audit: type=1400 audit(1770510050.543:434): avc: denied { add_name } for pid=4373 comm="syz.2.313" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.526449][ T4372] bond1: (slave bridge3): making interface the new active one [ 54.536755][ T4372] bridge3: entered promiscuous mode [ 54.542152][ T4372] bridge3: entered allmulticast mode [ 54.548674][ T4372] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 54.567554][ T29] audit: type=1400 audit(1770510050.613:435): avc: denied { read } for pid=4384 comm="syz.3.316" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 54.590267][ T29] audit: type=1400 audit(1770510050.613:436): avc: denied { open } for pid=4384 comm="syz.3.316" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 54.616932][ T29] audit: type=1400 audit(1770510050.663:437): avc: denied { ioctl } for pid=4384 comm="syz.3.316" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 54.638822][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.696437][ T4392] __nla_validate_parse: 21 callbacks suppressed [ 54.696457][ T4392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.320'. [ 54.712483][ T4397] netlink: 36 bytes leftover after parsing attributes in process `syz.3.316'. [ 54.751490][ T4397] EXT4-fs: Ignoring removed orlov option [ 54.765220][ T4397] ext4: Bad value for 'min_batch_time' [ 54.810664][ T4409] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 54.974060][ T4429] program syz.2.331 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.012591][ T4431] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.029639][ T4431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.048234][ T4431] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.160464][ T4435] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 55.169203][ T4435] EXT4-fs (loop4): orphan cleanup on readonly fs [ 55.176366][ T4435] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 55.176816][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.191596][ T4435] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 55.211020][ T4435] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.333: corrupted inode contents [ 55.237274][ T4435] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #16: comm syz.4.333: mark_inode_dirty error [ 55.249183][ T4435] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.333: corrupted inode contents [ 55.261262][ T4435] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.333: mark_inode_dirty error [ 55.273909][ T4435] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.333: corrupted inode contents [ 55.289098][ T4435] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 55.298020][ T4435] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.333: corrupted inode contents [ 55.306135][ T4441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.335'. [ 55.311634][ T4435] EXT4-fs error (device loop4): ext4_truncate:4635: inode #16: comm syz.4.333: mark_inode_dirty error [ 55.330415][ T4435] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 55.340403][ T4435] EXT4-fs (loop4): 1 truncate cleaned up [ 55.346772][ T4435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.396641][ T4448] set_capacity_and_notify: 8 callbacks suppressed [ 55.396726][ T4448] loop2: detected capacity change from 0 to 128 [ 55.419786][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.446705][ T4450] loop3: detected capacity change from 0 to 512 [ 55.456489][ T4448] loop2: detected capacity change from 0 to 128 [ 55.472452][ T4452] loop1: detected capacity change from 0 to 512 [ 55.495139][ T4452] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.340: bad orphan inode 13 [ 55.506516][ T4452] ext4_test_bit(bit=12, block=4) = 1 [ 55.511928][ T4452] is_bad_inode(inode)=0 [ 55.516189][ T4452] NEXT_ORPHAN(inode)=0 [ 55.520318][ T4452] max_ino=32 [ 55.523542][ T4452] i_nlink=1 [ 55.534703][ T4452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.588128][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.631734][ T4460] tipc: Started in network mode [ 55.636741][ T4460] tipc: Node identity f6916ae3ff2b, cluster identity 4711 [ 55.644129][ T4460] tipc: Enabled bearer , priority 0 [ 55.653843][ T4460] syzkaller0: entered promiscuous mode [ 55.659387][ T4460] syzkaller0: entered allmulticast mode [ 55.671026][ T4460] tipc: Resetting bearer [ 55.696415][ T4467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'. [ 55.705334][ T4467] netlink: 24 bytes leftover after parsing attributes in process `syz.3.346'. [ 55.723990][ T4467] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 55.737612][ T4467] bond1 (unregistering): Released all slaves [ 55.748313][ T4460] tipc: Resetting bearer [ 55.755585][ T4460] tipc: Disabling bearer [ 55.773389][ T4465] loop0: detected capacity change from 0 to 164 [ 55.781530][ T4465] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 55.832492][ T4472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4472 comm=syz.1.347 [ 55.910892][ T4485] Cannot find set identified by id 0 to match [ 56.010713][ T4499] loop0: detected capacity change from 0 to 512 [ 56.046706][ T4499] EXT4-fs (loop0): failed to initialize system zone (-117) [ 56.058992][ T4499] EXT4-fs (loop0): mount failed [ 56.103507][ T4505] loop1: detected capacity change from 0 to 4096 [ 56.131400][ T4505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.155132][ T4505] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.357: corrupted inode contents [ 56.167406][ T4505] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.357: mark_inode_dirty error [ 56.179276][ T4505] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.357: corrupted inode contents [ 56.194624][ T4505] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.357: mark_inode_dirty error [ 56.206966][ T4505] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.357: corrupted inode contents [ 56.208341][ T4520] netlink: 'syz.1.357': attribute type 4 has an invalid length. [ 56.219241][ T4505] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.357: mark_inode_dirty error [ 56.237995][ T4505] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.357: corrupted inode contents [ 56.254182][ T4519] loop4: detected capacity change from 0 to 1024 [ 56.265599][ T4505] EXT4-fs error (device loop1): ext4_truncate:4635: inode #15: comm syz.1.357: mark_inode_dirty error [ 56.272626][ T4519] EXT4-fs: test_dummy_encryption option not supported [ 56.316987][ T4523] loop0: detected capacity change from 0 to 1764 [ 56.332198][ T4527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.364'. [ 56.335469][ T4519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.361'. [ 56.348426][ T4520] netlink: 'syz.1.357': attribute type 4 has an invalid length. [ 56.360648][ T4523] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 56.370760][ T4505] EXT4-fs error (device loop1) in ext4_setattr:6035: Corrupt filesystem [ 56.425785][ T4528] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 56.507978][ T4534] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 56.540902][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.566271][ T4532] usb usb8: usbfs: process 4532 (syz.2.366) did not claim interface 0 before use [ 56.697676][ T4543] loop4: detected capacity change from 0 to 8192 [ 57.264401][ T4564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.377'. [ 57.529499][ T4573] FAULT_INJECTION: forcing a failure. [ 57.529499][ T4573] name failslab, interval 1, probability 0, space 0, times 0 [ 57.542232][ T4573] CPU: 0 UID: 0 PID: 4573 Comm: syz.1.381 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.542303][ T4573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 57.542316][ T4573] Call Trace: [ 57.542392][ T4573] [ 57.542403][ T4573] __dump_stack+0x1d/0x30 [ 57.542433][ T4573] dump_stack_lvl+0x95/0xd0 [ 57.542498][ T4573] dump_stack+0x15/0x1b [ 57.542518][ T4573] should_fail_ex+0x263/0x280 [ 57.542555][ T4573] should_failslab+0x8c/0xb0 [ 57.542660][ T4573] __kmalloc_cache_noprof+0x64/0x4a0 [ 57.542687][ T4573] ? ip_mc_add_src+0x2e4/0x5f0 [ 57.542715][ T4573] ip_mc_add_src+0x2e4/0x5f0 [ 57.542820][ T4573] ip_mc_msfilter+0x3e6/0x5a0 [ 57.542846][ T4573] ? _copy_from_user+0x89/0xb0 [ 57.542867][ T4573] ? copy_from_sockptr+0x5e/0x90 [ 57.542926][ T4573] do_ip_setsockopt+0x219b/0x2290 [ 57.543017][ T4573] ip_setsockopt+0x58/0x110 [ 57.543051][ T4573] tcp_setsockopt+0x98/0xb0 [ 57.543111][ T4573] sock_common_setsockopt+0x69/0x80 [ 57.543146][ T4573] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 57.543238][ T4573] __sys_setsockopt+0x184/0x200 [ 57.543273][ T4573] __x64_sys_setsockopt+0x64/0x80 [ 57.543408][ T4573] x64_sys_call+0x21d5/0x3000 [ 57.543456][ T4573] do_syscall_64+0xc0/0x2a0 [ 57.543496][ T4573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.543524][ T4573] RIP: 0033:0x7f241f38aeb9 [ 57.543540][ T4573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.543562][ T4573] RSP: 002b:00007f241dddf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 57.543623][ T4573] RAX: ffffffffffffffda RBX: 00007f241f605fa0 RCX: 00007f241f38aeb9 [ 57.543642][ T4573] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000003 [ 57.543737][ T4573] RBP: 00007f241dddf090 R08: 0000000000000018 R09: 0000000000000000 [ 57.543754][ T4573] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 57.543771][ T4573] R13: 00007f241f606038 R14: 00007f241f605fa0 R15: 00007ffd709f30b8 [ 57.543836][ T4573] [ 57.695654][ T4578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.383'. [ 57.771115][ T4579] EXT4-fs warning (device loop2): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop2. [ 57.823096][ T4587] ------------[ cut here ]------------ [ 57.828773][ T4587] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0x0, 0x0] s64=[0x0, 0x0] u32=[0x80632f4, 0x0] s32=[0x0, 0x0] var_off=(0x0, 0x0) [ 57.845155][ T4587] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.1.385/4587 [ 57.856265][ T4587] Modules linked in: [ 57.860280][ T4587] CPU: 1 UID: 0 PID: 4587 Comm: syz.1.385 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.870163][ T4587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 57.880414][ T4587] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 57.887201][ T4587] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 57.907038][ T4587] RSP: 0018:ffffc90002a03388 EFLAGS: 00010246 [ 57.913189][ T4587] RAX: ffff88812db2dd10 RBX: 0000000000000000 RCX: 0000000000000000 [ 57.921477][ T4587] RDX: ffffffff867f0c86 RSI: ffffffff866bb997 RDI: ffffffff86fb99b0 [ 57.929639][ T4587] RBP: ffff88810c927ae0 R08: 0000000000000000 R09: 0000000000000000 [ 57.937840][ T4587] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88810c927aa0 [ 57.946047][ T4587] R13: 0000000000000000 R14: ffff88810c927aec R15: ffff88810c927ad8 [ 57.954232][ T4587] FS: 00007f241ddbe6c0(0000) GS:ffff8882aec57000(0000) knlGS:0000000000000000 [ 57.963375][ T4587] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.970114][ T4587] CR2: 00002000000054c0 CR3: 000000011adb4000 CR4: 00000000003506f0 [ 57.978353][ T4587] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.986488][ T4587] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 57.994542][ T4587] Call Trace: [ 57.998214][ T4587] [ 58.001236][ T4587] reg_set_min_max+0x1c8/0x260 [ 58.006090][ T4587] check_cond_jmp_op+0x13bd/0x1a80 [ 58.011392][ T4587] do_check+0x440c/0x9060 [ 58.015879][ T4587] do_check_common+0xd0f/0x1630 [ 58.020955][ T4587] bpf_check+0x2f6d/0xc7e0 [ 58.025467][ T4587] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 58.031589][ T4587] ? alloc_pages_bulk_noprof+0x4a1/0x520 [ 58.037392][ T4587] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 58.043428][ T4587] ? try_charge_memcg+0x215/0xa10 [ 58.048640][ T4587] ? pcpu_block_update+0x232/0x3b0 [ 58.053831][ T4587] ? pcpu_block_refresh_hint+0x10b/0x170 [ 58.059724][ T4587] ? _find_next_zero_bit+0x64/0xa0 [ 58.064951][ T4587] ? pcpu_block_refresh_hint+0x157/0x170 [ 58.070755][ T4587] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 58.077184][ T4587] ? css_rstat_updated+0xbb/0x280 [ 58.082646][ T4587] ? mod_memcg_state+0x182/0x260 [ 58.087709][ T4587] ? __rcu_read_unlock+0x4e/0x70 [ 58.092782][ T4587] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 58.098870][ T4587] ? pcpu_alloc_noprof+0xb08/0x1010 [ 58.104173][ T4587] ? should_fail_ex+0x30/0x280 [ 58.109068][ T4587] ? __kmalloc_noprof+0x2a3/0x580 [ 58.114140][ T4587] ? security_bpf_prog_load+0x60/0x140 [ 58.119873][ T4587] ? selinux_bpf_prog_load+0xac/0xd0 [ 58.125220][ T4587] ? security_bpf_prog_load+0x9e/0x140 [ 58.130875][ T4587] bpf_prog_load+0xf76/0x1140 [ 58.135668][ T4587] ? security_bpf+0x2b/0x90 [ 58.140223][ T4587] __sys_bpf+0x469/0x7b0 [ 58.144609][ T4587] __x64_sys_bpf+0x41/0x50 [ 58.149175][ T4587] x64_sys_call+0x28e1/0x3000 [ 58.154139][ T4587] do_syscall_64+0xc0/0x2a0 [ 58.158816][ T4587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.164759][ T4587] RIP: 0033:0x7f241f38aeb9 [ 58.169270][ T4587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.188949][ T4587] RSP: 002b:00007f241ddbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 58.197616][ T4587] RAX: ffffffffffffffda RBX: 00007f241f606090 RCX: 00007f241f38aeb9 [ 58.205801][ T4587] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 58.213816][ T4587] RBP: 00007f241f3f8c1f R08: 0000000000000000 R09: 0000000000000000 [ 58.222050][ T4587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.230158][ T4587] R13: 00007f241f606128 R14: 00007f241f606090 R15: 00007ffd709f30b8 [ 58.238229][ T4587] [ 58.241314][ T4587] ---[ end trace 0000000000000000 ]--- [ 58.251114][ T4595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.317240][ T4604] rock: directory entry would overflow storage [ 58.323585][ T4604] rock: sig=0x4654, size=5, remaining=4 [ 58.330905][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.375566][ T4604] isofs: Unable to find the ".." directory for NFS. [ 58.408268][ T4614] netlink: 32 bytes leftover after parsing attributes in process `syz.1.395'. [ 58.727318][ T4641] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 58.737230][ T4641] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 58.779999][ T4641] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.404: Invalid inode table block 1 in block_group 0 [ 58.793073][ T4641] EXT4-fs (loop4): Remounting filesystem read-only [ 58.825346][ T4641] EXT4-fs (loop4): get root inode failed [ 58.831148][ T4641] EXT4-fs (loop4): mount failed [ 58.977841][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 58.977860][ T29] audit: type=1400 audit(1770510055.023:559): avc: denied { watch } for pid=4652 comm="syz.1.409" path="/79/file1" dev="tmpfs" ino=435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 59.043764][ T4659] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4659 comm=syz.3.411 [ 59.053695][ T4661] netlink: 'syz.4.412': attribute type 10 has an invalid length. [ 59.189841][ T4674] EXT4-fs: inline encryption not supported [ 59.200702][ T29] audit: type=1400 audit(1770510055.243:560): avc: denied { getopt } for pid=4676 comm="syz.4.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.257544][ T4674] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 59.284701][ T4680] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.322079][ T29] audit: type=1400 audit(1770510055.363:561): avc: denied { getopt } for pid=4685 comm="syz.1.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.371429][ T4692] netlink: 'syz.0.423': attribute type 1 has an invalid length. [ 59.379406][ T4674] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.411: lblock 2 mapped to illegal pblock 2 (length 1) [ 59.456593][ T4674] EXT4-fs (loop3): Remounting filesystem read-only [ 59.463175][ T4674] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 59.495520][ T4674] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 59.539032][ T4674] EXT4-fs (loop3): 1 orphan inode deleted [ 59.555683][ T4674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.616876][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.664233][ T4722] xt_policy: output policy not valid in PREROUTING and INPUT [ 59.689054][ T4727] tipc: Enabled bearer , priority 10 [ 59.698073][ T4717] veth1_virt_wifi: entered promiscuous mode [ 59.739358][ T29] audit: type=1400 audit(1770510055.783:562): avc: denied { lock } for pid=4735 comm="syz.2.439" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.763879][ T4734] EXT4-fs: Ignoring removed orlov option [ 59.795628][ T4738] program syz.2.441 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.825392][ T4734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.859606][ T4745] __nla_validate_parse: 7 callbacks suppressed [ 59.859627][ T4745] netlink: 16 bytes leftover after parsing attributes in process `syz.3.442'. [ 59.882376][ T29] audit: type=1400 audit(1770510055.893:563): avc: denied { create } for pid=4743 comm="syz.2.443" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 59.903062][ T29] audit: type=1400 audit(1770510055.893:564): avc: denied { write } for pid=4743 comm="syz.2.443" name="file0" dev="tmpfs" ino=477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 59.934361][ T29] audit: type=1400 audit(1770510055.973:565): avc: denied { unlink } for pid=3312 comm="syz-executor" name="file0" dev="tmpfs" ino=477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 59.941992][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.004488][ T4748] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 60.019441][ T4748] EXT4-fs (loop0): mount failed [ 60.038812][ T4758] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.050576][ T4758] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.061159][ T29] audit: type=1400 audit(1770510056.093:566): avc: denied { create } for pid=4755 comm="syz.4.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.085207][ T4761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.449'. [ 60.100272][ T4758] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.120777][ T4761] vlan2: entered promiscuous mode [ 60.127211][ T4758] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.448: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 60.152606][ T4758] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.448: couldn't read orphan inode 11 (err -117) [ 60.167462][ T4758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.176593][ T4768] EXT4-fs: Ignoring removed nobh option [ 60.186887][ T4758] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.448: Invalid block bitmap block 0 in block_group 0 [ 60.202451][ T4758] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.448: Failed to acquire dquot type 0 [ 60.236761][ T4768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.240171][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.252654][ T4768] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.302197][ T4767] netlink: 'syz.4.450': attribute type 11 has an invalid length. [ 60.350968][ T4779] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.361329][ T4779] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 60.371514][ T4779] EXT4-fs (loop0): group descriptors corrupted! [ 60.406013][ T4781] set_capacity_and_notify: 10 callbacks suppressed [ 60.406030][ T4781] loop3: detected capacity change from 0 to 512 [ 60.434436][ T4783] random: crng reseeded on system resumption [ 60.452718][ T4781] ------------[ cut here ]------------ [ 60.458274][ T4781] EA inode 11 i_nlink=2 [ 60.458322][ T4781] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.3.455/4781 [ 60.473197][ T4781] Modules linked in: [ 60.477198][ T4781] CPU: 0 UID: 0 PID: 4781 Comm: syz.3.455 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 60.482942][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.488527][ T4781] Tainted: [W]=WARN [ 60.488538][ T4781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 60.488554][ T4781] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 60.488597][ T4781] Code: 64 e4 9a ff 4c 8d 2d bd 1f 3e 05 49 8d 7e 40 e8 74 ce b6 ff 49 8b 6e 40 4c 89 e7 e8 a8 c9 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 4f de d0 03 66 66 66 66 66 66 2e [ 60.537950][ T4781] RSP: 0018:ffffc90001377778 EFLAGS: 00010246 [ 60.544072][ T4781] RAX: ffff88812db14c90 RBX: ffff88811a4ee950 RCX: ffffffff81be1d78 [ 60.552245][ T4781] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fc3d20 [ 60.560544][ T4781] RBP: 000000000000000b R08: 000188811a4ee903 R09: 0000000000000000 [ 60.568588][ T4781] R10: ffffc900013776a8 R11: 0001c900013776a8 R12: ffff88811a4ee900 [ 60.576707][ T4781] R13: ffffffff86fc3d20 R14: ffff88811a4ee8b8 R15: 0000000000000001 [ 60.584810][ T4781] FS: 00007fd1c8ff76c0(0000) GS:ffff8882aeb57000(0000) knlGS:0000000000000000 [ 60.594010][ T4781] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.600655][ T4781] CR2: 000000110c2e5b8a CR3: 000000011afa2000 CR4: 00000000003506f0 [ 60.608776][ T4781] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.616822][ T4781] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 60.624832][ T4781] Call Trace: [ 60.628193][ T4781] [ 60.631167][ T4781] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 60.631228][ T4788] netlink: 48 bytes leftover after parsing attributes in process `syz.0.459'. [ 60.637150][ T4781] ? errseq_check+0x2c/0x50 [ 60.637190][ T4781] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 60.656145][ T4781] ? ext4_truncate+0x92b/0xad0 [ 60.660987][ T4781] ext4_evict_inode+0xa1f/0xd40 [ 60.665946][ T4781] ? __pfx_ext4_evict_inode+0x10/0x10 [ 60.671452][ T4781] evict+0x2af/0x510 [ 60.675449][ T4781] ? __dquot_initialize+0x146/0x7c0 [ 60.680759][ T4781] iput+0x4b9/0x650 [ 60.684620][ T4781] ext4_process_orphan+0x1a9/0x1c0 [ 60.689844][ T4781] ext4_orphan_cleanup+0x6a8/0xa00 [ 60.695079][ T4781] ext4_fill_super+0x3476/0x3800 [ 60.700103][ T4781] ? set_blocksize+0x1a3/0x310 [ 60.704961][ T4781] ? setup_bdev_super+0x30e/0x370 [ 60.710096][ T4781] ? __pfx_ext4_fill_super+0x10/0x10 [ 60.715455][ T4781] get_tree_bdev_flags+0x291/0x300 [ 60.720624][ T4781] ? __pfx_ext4_fill_super+0x10/0x10 [ 60.726072][ T4781] get_tree_bdev+0x1f/0x30 [ 60.730532][ T4781] ext4_get_tree+0x1c/0x30 [ 60.734991][ T4781] vfs_get_tree+0x57/0x1d0 [ 60.739480][ T4781] do_new_mount+0x288/0x700 [ 60.744042][ T4781] path_mount+0x4d0/0xbc0 [ 60.748524][ T4781] ? user_path_at+0xbf/0x130 [ 60.753373][ T4781] __se_sys_mount+0x28c/0x2e0 [ 60.758148][ T4781] __x64_sys_mount+0x67/0x80 [ 60.762835][ T4781] x64_sys_call+0x2cca/0x3000 [ 60.767767][ T4781] do_syscall_64+0xc0/0x2a0 [ 60.772376][ T4781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.778529][ T4781] RIP: 0033:0x7fd1ca59c14a [ 60.783014][ T4781] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.788313][ T4794] FAULT_INJECTION: forcing a failure. [ 60.788313][ T4794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.802751][ T4781] RSP: 002b:00007fd1c8ff6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 60.802794][ T4781] RAX: ffffffffffffffda RBX: 00007fd1c8ff6ee0 RCX: 00007fd1ca59c14a [ 60.816045][ T4794] CPU: 1 UID: 0 PID: 4794 Comm: syz.1.462 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 60.816207][ T4794] Tainted: [W]=WARN [ 60.816229][ T4794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 60.816278][ T4794] Call Trace: [ 60.816300][ T4794] [ 60.816330][ T4794] __dump_stack+0x1d/0x30 [ 60.816406][ T4794] dump_stack_lvl+0x95/0xd0 [ 60.816479][ T4794] dump_stack+0x15/0x1b [ 60.816623][ T4794] should_fail_ex+0x263/0x280 [ 60.816762][ T4794] should_fail+0xb/0x20 [ 60.816854][ T4794] should_fail_usercopy+0x1a/0x20 [ 60.817049][ T4794] _copy_to_user+0x20/0xa0 [ 60.817116][ T4794] simple_read_from_buffer+0xb5/0x130 [ 60.817302][ T4794] proc_fail_nth_read+0x10e/0x150 [ 60.817399][ T4794] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.817549][ T4794] vfs_read+0x1ab/0x7f0 [ 60.817613][ T4794] ? __rcu_read_unlock+0x4e/0x70 [ 60.817708][ T4794] ? __fget_files+0x184/0x1c0 [ 60.817800][ T4794] ? mutex_lock+0x57/0x90 [ 60.817882][ T4794] ksys_read+0xdc/0x1a0 [ 60.817953][ T4794] __x64_sys_read+0x40/0x50 [ 60.818016][ T4794] x64_sys_call+0x2889/0x3000 [ 60.818163][ T4794] do_syscall_64+0xc0/0x2a0 [ 60.818260][ T4794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.818333][ T4794] RIP: 0033:0x7f241f34b78e [ 60.818457][ T4794] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 60.818512][ T4794] RSP: 002b:00007f241dddefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.818593][ T4794] RAX: ffffffffffffffda RBX: 00007f241dddf6c0 RCX: 00007f241f34b78e [ 60.818638][ T4794] RDX: 000000000000000f RSI: 00007f241dddf0a0 RDI: 0000000000000005 [ 60.818680][ T4794] RBP: 00007f241dddf090 R08: 0000000000000000 R09: 0000000000000000 [ 60.818716][ T4794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.818758][ T4794] R13: 00007f241f606038 R14: 00007f241f605fa0 R15: 00007ffd709f30b8 [ 60.818839][ T4794] [ 61.030505][ T4781] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fd1c8ff6ea0 [ 61.030710][ T4801] netlink: 84 bytes leftover after parsing attributes in process `syz.2.465'. [ 61.038634][ T4781] RBP: 00002000000009c0 R08: 00007fd1c8ff6ee0 R09: 0000000000800718 [ 61.047878][ T4801] net_ratelimit: 1 callbacks suppressed [ 61.047920][ T4801] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 61.055577][ T4781] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 61.055598][ T4781] R13: 00007fd1c8ff6ea0 R14: 000000000000048d R15: 0000200000000200 [ 61.055625][ T4781] [ 61.055634][ T4781] ---[ end trace 0000000000000000 ]--- [ 61.093512][ T3420] tipc: Node number set to 2886997007 [ 61.103579][ T4781] EXT4-fs (loop3): 1 orphan inode deleted [ 61.109886][ T4781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.177322][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.195842][ T4809] FAULT_INJECTION: forcing a failure. [ 61.195842][ T4809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.209072][ T4809] CPU: 0 UID: 0 PID: 4809 Comm: syz.2.467 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 61.209112][ T4809] Tainted: [W]=WARN [ 61.209121][ T4809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 61.209159][ T4809] Call Trace: [ 61.209169][ T4809] [ 61.209179][ T4809] __dump_stack+0x1d/0x30 [ 61.209208][ T4809] dump_stack_lvl+0x95/0xd0 [ 61.209294][ T4809] dump_stack+0x15/0x1b [ 61.209314][ T4809] should_fail_ex+0x263/0x280 [ 61.209379][ T4809] should_fail+0xb/0x20 [ 61.209413][ T4809] should_fail_usercopy+0x1a/0x20 [ 61.209447][ T4809] _copy_from_iter+0x21c/0xea0 [ 61.209532][ T4809] ? avc_has_perm+0x101/0x190 [ 61.209574][ T4809] j1939_sk_sendmsg+0x623/0xc00 [ 61.209604][ T4809] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 61.209627][ T4809] ____sys_sendmsg+0x5af/0x600 [ 61.209653][ T4809] ___sys_sendmsg+0x195/0x1e0 [ 61.209690][ T4809] __sys_sendmmsg+0x185/0x320 [ 61.209724][ T4809] __x64_sys_sendmmsg+0x57/0x70 [ 61.209751][ T4809] x64_sys_call+0x1e28/0x3000 [ 61.209784][ T4809] do_syscall_64+0xc0/0x2a0 [ 61.209861][ T4809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.209938][ T4809] RIP: 0033:0x7f159ea1aeb9 [ 61.209959][ T4809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.209979][ T4809] RSP: 002b:00007f159d46f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 61.210015][ T4809] RAX: ffffffffffffffda RBX: 00007f159ec95fa0 RCX: 00007f159ea1aeb9 [ 61.210099][ T4809] RDX: 0000000000000001 RSI: 00002000000038c0 RDI: 0000000000000003 [ 61.210114][ T4809] RBP: 00007f159d46f090 R08: 0000000000000000 R09: 0000000000000000 [ 61.210132][ T4809] R10: 0000000000000881 R11: 0000000000000246 R12: 0000000000000001 [ 61.210148][ T4809] R13: 00007f159ec96038 R14: 00007f159ec95fa0 R15: 00007ffc034b5b88 [ 61.210175][ T4809] [ 61.469106][ T4813] netlink: 24 bytes leftover after parsing attributes in process `syz.3.468'. [ 61.503725][ T4820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.472'. [ 61.543817][ T4822] loop2: detected capacity change from 0 to 1764 [ 61.566513][ T4822] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 61.566517][ T4824] netlink: 'syz.0.474': attribute type 10 has an invalid length. [ 61.566537][ T4824] netlink: 2 bytes leftover after parsing attributes in process `syz.0.474'. [ 61.566989][ T4824] bridge0: port 3(bond0) entered blocking state [ 61.597566][ T4824] bridge0: port 3(bond0) entered disabled state [ 61.627644][ T4824] bond0: entered allmulticast mode [ 61.632857][ T4824] bond_slave_0: entered allmulticast mode [ 61.638690][ T4824] bond_slave_1: entered allmulticast mode [ 61.646341][ T4824] bond0: left allmulticast mode [ 61.651267][ T4824] bond_slave_0: left allmulticast mode [ 61.656907][ T4824] bond_slave_1: left allmulticast mode [ 61.663336][ T4829] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 61.810070][ T4842] IPVS: Error connecting to the multicast addr [ 61.864250][ T4847] loop0: detected capacity change from 0 to 512 [ 61.889295][ T4850] program syz.4.486 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.899171][ T4847] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.914149][ T4847] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 61.924797][ T4847] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 61.936250][ T4851] loop2: detected capacity change from 0 to 512 [ 61.944620][ T4847] System zones: 1-12 [ 61.955350][ T4847] EXT4-fs (loop0): orphan cleanup on readonly fs [ 61.965366][ T4847] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.485: bg 0: block 361: padding at end of block bitmap is not set [ 62.055039][ T4847] EXT4-fs (loop0): Remounting filesystem read-only [ 62.078625][ T4847] EXT4-fs (loop0): 1 truncate cleaned up [ 62.109036][ T4860] loop2: detected capacity change from 0 to 1764 [ 62.109901][ T4862] netlink: 28 bytes leftover after parsing attributes in process `syz.4.492'. [ 62.139852][ T4860] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 62.210649][ T4873] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.485: error -117 reading directory block [ 62.261808][ T4878] xt_CT: You must specify a L4 protocol and not use inversions on it [ 62.276888][ T4881] netlink: 132 bytes leftover after parsing attributes in process `syz.1.495'. [ 62.515139][ T4909] loop3: detected capacity change from 0 to 512 [ 62.640886][ T4912] usb usb8: usbfs: process 4912 (syz.4.506) did not claim interface 0 before use [ 62.695710][ T4931] process 'syz.3.507' launched '/dev/fd/6' with NULL argv: empty string added [ 62.817223][ T4952] loop0: detected capacity change from 0 to 512 [ 62.840693][ T4952] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.509: bg 0: block 248: padding at end of block bitmap is not set [ 62.855809][ T4952] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.509: Failed to acquire dquot type 1 [ 62.878851][ T4952] EXT4-fs (loop0): 1 truncate cleaned up [ 62.907782][ T4952] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.946697][ T4963] netlink: 20 bytes leftover after parsing attributes in process `syz.3.511'. [ 62.972055][ T4963] loop3: detected capacity change from 0 to 1024 [ 63.015931][ T4962] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 63.125623][ T4976] netlink: 'syz.2.512': attribute type 4 has an invalid length. [ 63.270144][ T5024] loop3: detected capacity change from 0 to 1024 [ 63.287312][ T5027] FAULT_INJECTION: forcing a failure. [ 63.287312][ T5027] name failslab, interval 1, probability 0, space 0, times 0 [ 63.288113][ T5024] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.300103][ T5027] CPU: 1 UID: 0 PID: 5027 Comm: syz.1.520 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 63.300233][ T5027] Tainted: [W]=WARN [ 63.300262][ T5027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 63.300303][ T5027] Call Trace: [ 63.300325][ T5027] [ 63.300348][ T5027] __dump_stack+0x1d/0x30 [ 63.300431][ T5027] dump_stack_lvl+0x95/0xd0 [ 63.300505][ T5027] dump_stack+0x15/0x1b [ 63.300562][ T5027] should_fail_ex+0x263/0x280 [ 63.300684][ T5027] should_failslab+0x8c/0xb0 [ 63.300741][ T5027] __kmalloc_cache_noprof+0x64/0x4a0 [ 63.300837][ T5027] ? update_ref_ctr+0x2be/0x730 [ 63.300930][ T5027] update_ref_ctr+0x2be/0x730 [ 63.301040][ T5027] uprobe_write+0x3a3/0x1230 [ 63.301135][ T5027] ? insn_get_modrm+0x367/0x390 [ 63.301222][ T5027] ? insn_get_displacement+0x16d/0x460 [ 63.301317][ T5027] ? __pfx_verify_opcode+0x10/0x10 [ 63.301433][ T5027] uprobe_write_opcode+0x67/0xa0 [ 63.301561][ T5027] set_swbp+0x7f/0x160 [ 63.301683][ T5027] install_breakpoint+0x42d/0x550 [ 63.301801][ T5027] register_for_each_vma+0x71f/0x890 [ 63.301922][ T5027] uprobe_register+0x612/0x7f0 [ 63.301954][ T5027] ? bpf_uprobe_multi_link_attach+0x34b/0x910 [ 63.301990][ T5027] bpf_uprobe_multi_link_attach+0x7d4/0x910 [ 63.302100][ T5027] link_create+0x639/0x690 [ 63.302198][ T5027] __sys_bpf+0x628/0x7b0 [ 63.302306][ T5027] __x64_sys_bpf+0x41/0x50 [ 63.302389][ T5027] x64_sys_call+0x28e1/0x3000 [ 63.302465][ T5027] do_syscall_64+0xc0/0x2a0 [ 63.302569][ T5027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.302654][ T5027] RIP: 0033:0x7f241f38aeb9 [ 63.302708][ T5027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.302772][ T5027] RSP: 002b:00007f241dddf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 63.302836][ T5027] RAX: ffffffffffffffda RBX: 00007f241f605fa0 RCX: 00007f241f38aeb9 [ 63.302873][ T5027] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 63.302931][ T5027] RBP: 00007f241dddf090 R08: 0000000000000000 R09: 0000000000000000 [ 63.302987][ T5027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.303036][ T5027] R13: 00007f241f606038 R14: 00007f241f605fa0 R15: 00007ffd709f30b8 [ 63.303108][ T5027] [ 63.536886][ T5024] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 63.552372][ T5024] EXT4-fs error (device loop3): __ext4_iget:5426: inode #12: block 13: comm syz.3.518: invalid block [ 63.563502][ T5024] EXT4-fs (loop3): Remounting filesystem read-only [ 63.769073][ T5045] loop0: detected capacity change from 0 to 1764 [ 63.797511][ T5045] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 63.806878][ T5045] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 63.854504][ T5054] serio: Serial port ttyS3 [ 63.960149][ T5055] ================================================================== [ 63.968292][ T5055] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter [ 63.975707][ T5055] [ 63.978070][ T5055] write to 0xffff88812f20c000 of 4096 bytes by task 5063 on cpu 0: [ 63.985992][ T5055] _copy_from_iter+0x106/0xea0 [ 63.990814][ T5055] copy_page_from_iter+0x178/0x2a0 [ 63.995966][ T5055] process_vm_rw+0x6ad/0x9c0 [ 64.000624][ T5055] __x64_sys_process_vm_writev+0x78/0x90 [ 64.006296][ T5055] x64_sys_call+0x27ef/0x3000 [ 64.011004][ T5055] do_syscall_64+0xc0/0x2a0 [ 64.015555][ T5055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.021493][ T5055] [ 64.023848][ T5055] write to 0xffff88812f20c000 of 4096 bytes by task 5055 on cpu 1: [ 64.031767][ T5055] _copy_from_iter+0x106/0xea0 [ 64.036567][ T5055] copy_page_from_iter+0x178/0x2a0 [ 64.041716][ T5055] process_vm_rw+0x6ad/0x9c0 [ 64.046350][ T5055] __x64_sys_process_vm_writev+0x78/0x90 [ 64.052021][ T5055] x64_sys_call+0x27ef/0x3000 [ 64.056839][ T5055] do_syscall_64+0xc0/0x2a0 [ 64.061387][ T5055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.067326][ T5055] [ 64.069675][ T5055] Reported by Kernel Concurrency Sanitizer on: [ 64.075856][ T5055] CPU: 1 UID: 0 PID: 5055 Comm: syz.3.530 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 64.087098][ T5055] Tainted: [W]=WARN [ 64.090920][ T5055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 64.100990][ T5055] ================================================================== [ 64.125537][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 64.125556][ T29] audit: type=1400 audit(1770510060.063:658): avc: denied { getopt } for pid=5047 comm="syz.4.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1