last executing test programs: 2.468178395s ago: executing program 2 (id=3706): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d0d00000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2510"], 0xd0}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) 2.428913487s ago: executing program 2 (id=3708): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0xfc, 0x24, 0x3fe3aa0262d8c583, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_STAB={0xc8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xc, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3, 0x2}}, {0x8, 0x2, [0x200, 0x6]}}, {{0x1c, 0x1, {0x8, 0x92, 0x5, 0xfffffff8, 0x2, 0x6, 0x8, 0x5}}, {0xe, 0x2, [0x0, 0xfff, 0x2, 0x44, 0xe]}}, {{0x1c, 0x1, {0x8, 0x2, 0xee, 0x4, 0x2, 0x80, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x0, 0xdb, 0x602, 0x7a, 0x1, 0xc84, 0x5, 0x2}}, {0x8, 0x2, [0xd, 0x5]}}, {{0x1c, 0x1, {0x7b, 0x8, 0x8000, 0xaf, 0x0, 0x85, 0x3, 0x7}}, {0x12, 0x2, [0x2, 0x5, 0x8001, 0x2e2d, 0x4, 0x3, 0x5817]}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) 2.400293869s ago: executing program 2 (id=3710): ioperm(0x4, 0x5, 0x3) ioperm(0x4, 0x4, 0x5) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) syz_clone3(&(0x7f0000000540)={0x2080, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0], 0x1}, 0x58) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=@newtaction={0xe68, 0x30, 0xb, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffc, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0xfffffffb, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x9, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x87c, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x6, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x7}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x8, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x881}, {0x3a59, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x9, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8081, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 1.931178367s ago: executing program 3 (id=3716): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 1.87614334s ago: executing program 3 (id=3717): readv(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, 0x0) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030600"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000002000128008000100677470001400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32], 0x40}, 0x1, 0xba01}, 0x0) connect$rds(r2, &(0x7f0000000180)={0x2, 0x4e20, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x1, 0xcf57, 0xff00, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @loopback, 0x8000, 0x0, 0x0, 0x300}}) shutdown(r0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x0, @perf_config_ext={0x9, 0x7}, 0x118a, 0x4, 0x8406, 0x6, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r4, 0xbdd94000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r5) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0xf0, r6, 0x20, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x24014001}, 0x20040880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) 1.661068282s ago: executing program 3 (id=3723): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xebe2}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) symlink(0x0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_dev$vcsa(0x0, 0x3, 0x5c5980) (async, rerun: 64) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)="68dd64c90b429cb3f3cfb5da5670a7ba950bb63afa52eca5658cfb9239a617fb6b2307af22e4a4c3619ce5074ce9735e1366d74c6273a6972918f84ddb59d62da9e4f4751b533e9c918c66a530a3ad3182f83b173322b983ecb5bfce58d273917de8e0bcea3541d50573c810c990bad830041c69f6f8209b18") (async) openat$dir(0xffffff9c, &(0x7f0000000580)='./file0\x00', 0x4041, 0x148) r2 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0}) (async) io_uring_enter(r2, 0x4d10, 0x2, 0x2, 0x0, 0x0) (async) r5 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r5, 0x4008240b, &(0x7f00000013c0)) (async) r6 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x34, 0x0) mq_getsetattr(r6, 0x0, &(0x7f0000000280)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) (async) request_key(&(0x7f0000000680)='logon\x00', &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0xfffffffffffffff8) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r8 = socket(0xa, 0x5, 0x0) listen(r8, 0x100) (async, rerun: 32) sendmsg$inet_sctp(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="2000000000000000840000000200000000000d80080000000001000090eaf05f45f6dd134428dfedbec44f9fd5c81119", @ANYRES32=0x0], 0x20, 0x4000000}, 0x8010) (async, rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) (async) r10 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$SO_J1939_FILTER(r10, 0x6b, 0x1, &(0x7f0000000300)=[{0x3, 0x3, {0x2, 0x0, 0x1}, {0x1, 0x1}, 0xff, 0xff}, {0x1, 0x3, {0x1, 0xf0, 0x1}, {0x1, 0xff}, 0x2, 0xfd}, {0x1, 0x3, {0x0, 0x1, 0x3}, {0x2, 0x1}, 0x1}, {0x2, 0x2, {0x1, 0xf0, 0x1}, {0x2, 0xff, 0x2}, 0x1, 0xfe}, {0x2, 0x1, {0x3, 0xf0, 0x2}, {0x1, 0xff}, 0xfe, 0x1}, {0x1, 0x2, {0x2, 0x1}, {0x0, 0xff, 0x1}, 0xfb, 0xfd}, {0x1, 0x2, {0x0, 0xf0, 0x2}, {0x2, 0xf0}, 0x1, 0xff}], 0xe0) (async) syz_emit_ethernet(0x30, &(0x7f0000002d80)=ANY=[@ANYBLOB="cac851b35641ffffffffffff88f7808a1f"], 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) 1.546389989s ago: executing program 3 (id=3725): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) exit(0xffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x10, @void}, 0x10) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) r5 = bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x0, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1}, 0x50) unshare(0x62040200) r6 = socket(0x10, 0x2, 0x4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4c) setresuid(0x0, r7, r7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) r9 = gettid() r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac00080325fd000016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x40824) r11 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) r13 = getuid() stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r4, &(0x7f0000000540)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000080)={0x18, 0x39, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x8, 0xa2, 0x0, 0x0, @uid=r7}]}, 0x18}, {&(0x7f00000005c0)={0x1198, 0x15, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@typed={0xc, 0xa7, 0x0, 0x0, @u64=0x694}, @generic="db7368c6c2d104d137f6e277519eaaff0c967873a66b8fcfa4c3dff103135eef51a97baf0bc78e7500425d28d4b8686c354720232e9fa9c9ac75d6edbb8107347770e377febd01d588d995d1e1269fae83d195d0fd27baa4fed84ddad6c5b717", @generic="559e0711dd77ff9ef4ae9bdd48e1", @nested={0x10f4, 0x144, 0x0, 0x1, [@generic="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", @nested={0x4, 0x145}, @generic="b420da9ba4fd83562434e1c9ff213dc4036328c46359f9b47876e9394de243011d2b69decd387bb268ec60a6fcc1a420c46a6298691d2a4c81e4a276e60cb44f34e2f2e9429a901cd0ceafcf566f45ef6d90fbc0c27f0485a2bb6c1c384ca7144283f26e8aca9dacd60f0236ab6f1ef75b04d115b93fc8e665b0415a4808ebe243846542b7d8ca3767db6af6dd91e78358f9e776a9588e5145ae27d9abdee694ff533e80aac3631fa366625e5980739d9d5325b2c0e47bd19f5de63badc23c7713ee0d0d34836b0cebf4761e236cb12f5c029d8db3ba7acf5893faa5", @nested={0x4, 0x136}, @nested={0x4, 0x156}, @nested={0x4, 0x9a}, @generic, @nested={0x4, 0x11b}]}, @typed={0x4, 0x6b}, @typed={0x14, 0x7d, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x1198}, {&(0x7f0000001780)={0x10b8, 0x32, 0x200, 0x70bd2c, 0x25dfdbfd, "", [@generic="2e999534fc3bb8d4afe3967a3aae7b813146a63ecaba017e952f077a16b6bf56a4ce72a7d11b17538d94bed8e295ea602bcc88db68c77b1f1bab683c4041f02501af10b18a2ada881743c7da82976f50e0edecc4a5c4ae161b18", @generic="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", @typed={0x8, 0x68, 0x0, 0x0, @u32=0xf2}, @typed={0xc, 0x69, 0x0, 0x0, @u64=0x2}, @nested={0x30, 0x66, 0x0, 0x1, [@typed={0x8, 0x51, 0x0, 0x0, @pid=r8}, @nested={0x4, 0x9d}, @typed={0xc, 0xf0, 0x0, 0x0, @u64=0xfffffffffffffff7}, @typed={0x12, 0x62, 0x0, 0x0, @str='veth0_to_team\x00'}]}, @typed={0x8, 0xb3, 0x0, 0x0, @pid=r9}]}, 0x10b8}], 0x3, &(0x7f0000000340)=[@rights={{0x30, 0x1, 0x1, [r10, r5, r11, r4, r4, r5, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}], 0x50}, 0x800) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 1.501024122s ago: executing program 2 (id=3726): socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x20, r1, 0x1, 0x70bd26, 0x0, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000804) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r4, r2, 0x80000) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) 1.450995124s ago: executing program 4 (id=3727): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 1.441492665s ago: executing program 4 (id=3728): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x85862) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1181, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfffe, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) (fail_nth: 1) 1.18510436s ago: executing program 1 (id=3730): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r0 = eventfd2(0xfa, 0x0) read$eventfd(r0, &(0x7f0000000140), 0x8) modify_ldt$write2(0x11, &(0x7f0000000100)={0x8, 0x20000800, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$l2tp6(0xa, 0x2, 0x73) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$l2tp6(r3, &(0x7f0000000380)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xf7, 0x4}, 0x20) r4 = socket$pptp(0x18, 0x1, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x687961dbee5016e0) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x3, 0x100000, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) (fail_nth: 6) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffc, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000001000ffff29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300230a07002c0012800e00010069703667726574617000000018000280140007000002000000000000000000000000000108001f00080000000800"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) bind$pptp(r4, &(0x7f0000000200)={0x18, 0x2, {0xf6fe, @rand_addr=0x64010103}}, 0x1e) connect$pptp(r4, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) 1.066858487s ago: executing program 4 (id=3731): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0xfc, 0x24, 0x3fe3aa0262d8c583, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_STAB={0xc8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xc, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3, 0x2}}, {0x8, 0x2, [0x200, 0x6]}}, {{0x1c, 0x1, {0x8, 0x92, 0x5, 0xfffffff8, 0x2, 0x6, 0x8, 0x5}}, {0xe, 0x2, [0x0, 0xfff, 0x2, 0x44, 0xe]}}, {{0x1c, 0x1, {0x8, 0x2, 0xee, 0x4, 0x2, 0x80, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x0, 0xdb, 0x602, 0x7a, 0x1, 0xc84, 0x5, 0x2}}, {0x8, 0x2, [0xd, 0x5]}}, {{0x1c, 0x1, {0x7b, 0x8, 0x8000, 0xaf, 0x0, 0x85, 0x3, 0x7}}, {0x12, 0x2, [0x2, 0x5, 0x8001, 0x2e2d, 0x6, 0x3, 0x5817]}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) 1.048240498s ago: executing program 0 (id=3732): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r1, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x42, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800460000340000000000019078ac1e0001ac5b14aa440474f003009078030000004500000000000001002900000059653f141667708e33f111f083219b55c11be3f6f6ade520140927664b6cdab765e01f1a137704a951afac95022520732b5b31f82ceb49b5d12e1979dbc03a1d1b54ad8652cd7e33106b716fd3065678fc70f030a265ea105a51b2202bd4f847b2c70423e952960b34aff0e5ee356ae689d5313eec5b49c452a2ca11c721a2d20f9697239ae8a0dcd32f850136a93983034142ed1be0c57f00000000000000"], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x3, 0x100000, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) 1.0209198s ago: executing program 2 (id=3733): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') ioctl$NS_GET_PARENT(r2, 0x8004b709, 0x0) write$UHID_INPUT(r1, &(0x7f00000031c0)={0x8, {"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", 0x1000}}, 0x1006) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x17ae, 0xffffffff, 0xfffff18f, 0xd, 0x9}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 972.688612ms ago: executing program 4 (id=3734): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x59ca, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3, 0x0, 0x0, "5939a28fa005db30"}, 0x10}, 0x1, 0x0, 0x0, 0x4000051}, 0x811) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf250f0000002c000180110001006574683a6d6163766c616e300000000014000280080002000200000008f300001c8e2713000000"], 0x40}, 0x1, 0x0, 0x0, 0x60004080}, 0x24008800) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x0, 0x2b5}, &(0x7f0000000000)=0x0, &(0x7f0000000580)=0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x6004, 0x1) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xb0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(r5, 0x981, 0x6, 0x2) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r2, 0x46bc, 0x3, 0x20, 0x0, 0x20) 915.889856ms ago: executing program 1 (id=3735): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) ftruncate(r0, 0x4) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x3c, r1, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x1bb5818a0d1752a}, 0x44) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000b000000cc000000e56f"], 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001400e9"], 0xb8}}, 0x20040014) 852.848099ms ago: executing program 0 (id=3736): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x20048, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x1088b2, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r1, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) (fail_nth: 6) 850.25759ms ago: executing program 4 (id=3737): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, 0x0, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x8, 0x0, 0x8, 0x101, 0x4, 0x2, 0xa9, 0x7}, &(0x7f0000000040)=0x20) 803.182403ms ago: executing program 1 (id=3738): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 802.027813ms ago: executing program 2 (id=3739): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x400003) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="c021", 0x2}], 0x1, 0x7, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000001e00)={0x9, 0xda, 0x0, 0xf, 0x21a56e65, 0x7}) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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") chown(&(0x7f0000000000)='./file1\x00', 0xee00, 0xffffffffffffffff) getdents(r1, &(0x7f0000000dc0)=""/4106, 0x100a) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="45010080", @ANYRES16=r4, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x103440) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000400)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000380)={0x13, 0x1000, &(0x7f0000000440)="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"}) 713.088498ms ago: executing program 1 (id=3740): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000004c0)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x4, 0x9}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b80)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x24040841}, 0x40008) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) shutdown(0xffffffffffffffff, 0x1) r2 = fcntl$dupfd(r0, 0x406, r0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x50000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) sendto$inet(r0, &(0x7f00000002c0)="19c3ffae0539d53287cbbe82bdccdf7161bb3a50b2432898342fef441f9069afd7c357d3479b00991d84cc72ecf4c9e0ea636f0821ad7da26327c02961d03f2525deac1b551bb390f35cc0152525abd2597bdbb441b3bd7bbabe9f5664beb8646bb18b618b92bd71e2", 0x69, 0x20000000, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_GET_PARAMS(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan4\x00'}) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYRES32=r3], 0x310) 682.51888ms ago: executing program 1 (id=3741): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008001b000000000008000d0003"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x60707}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x46801}, 0x24040040) 674.46977ms ago: executing program 0 (id=3742): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30000000006c000000060a010400000000000000000100000008000b40000000000900010073797a30000000064400048014000180090001006c61737400000000040002"], 0xf4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioperm(0x8e9e, 0x7, 0x1f94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x74}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000380)=""/243, &(0x7f0000000080)=0xf3) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000580)={0x28, r3, 0x2312196d86466631, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040800}, 0x4000040) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) lseek(0xffffffffffffffff, 0xefffff62, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8002, &(0x7f0000000180)=0x3ff, 0xc, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00'], 0x48) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) r7 = socket$inet(0x2, 0xa, 0x266) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x6, @multicast}, 0x38, {0x2, 0x0, @broadcast}, 'batadv_slave_1\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f00000e5000/0x4000)=nil, 0x4000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001600)=@nat={'nat\x00', 0x1b, 0x5, 0x3b8, 0x250, 0x250, 0xffffffff, 0x160, 0xa8, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x5, &(0x7f00000002c0), {[{{@ip={@multicast1, @empty, 0xff000000, 0x0, 'ipvlan1\x00', 'sit0\x00', {}, {0xff}, 0x1d, 0x6, 0x45}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x2, @private=0xa010102, @loopback, @icmp_id=0x67, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private1, @ipv4=@broadcast, @icmp_id=0x65, @port=0x4e20}}}, {{@uncond, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@unspec=@pkttype={{0x28}, {0x1, 0xba9}}, @common=@socket0={{0x20}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1c, @dev={0xac, 0x14, 0x14, 0x44}, @empty, @gre_key=0x40, @icmp_id=0x64}}}}, {{@ip={@multicast1, @private=0xa010100, 0xff000000, 0xffffff00, 'xfrm0\x00', 'veth0\x00', {}, {0xff}, 0x2e, 0x0, 0x54}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x101, 0x5}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x12, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @gre_key=0xb, @gre_key=0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000000840)={@multicast, @local, @void, {@llc_tr={0x11, {@llc={0x4e, 0x2, "cd", "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"}}}}}, 0x0) 576.494866ms ago: executing program 3 (id=3743): r0 = socket$kcm(0x10, 0xf, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x169, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_unlink(&(0x7f0000000340)='eth0\x00') r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000080)={'ip6gre0\x00', @ifru_settings={0x9, 0x8, @fr=0x0}}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x810) socket$kcm(0x10, 0xf, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x169, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mq_unlink(&(0x7f0000000340)='eth0\x00') (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000080)={'ip6gre0\x00', @ifru_settings={0x9, 0x8, @fr=0x0}}) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x810) (async) 491.111161ms ago: executing program 0 (id=3744): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0xfc, 0x24, 0x3fe3aa0262d8c583, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_STAB={0xc8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xc, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3, 0x2}}, {0x8, 0x2, [0x200, 0x6]}}, {{0x1c, 0x1, {0x8, 0x92, 0x5, 0xfffffff8, 0x2, 0x6, 0x8, 0x5}}, {0xe, 0x2, [0x0, 0xfff, 0x2, 0x44, 0xe]}}, {{0x1c, 0x1, {0x8, 0x2, 0xee, 0x4, 0x2, 0x80, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x0, 0xdb, 0x602, 0x7a, 0x1, 0xc84, 0x5, 0x2}}, {0x8, 0x2, [0xd, 0x5]}}, {{0x1c, 0x1, {0x7b, 0x8, 0x8000, 0xaf, 0x0, 0x85, 0x3, 0x7}}, {0x12, 0x2, [0x2, 0x5, 0x8001, 0x2e2d, 0x6, 0x3, 0x5817]}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) 321.616051ms ago: executing program 3 (id=3745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpgrp(0xffffffffffffffff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r1) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x20000) socket$kcm(0x10, 0x7, 0x10) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000040)={'dvmrp1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b01", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0xfffffff6, [{0x2, 0x1, "c80600000004"}]}}}}}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a31000000000500010007000000080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) 301.914092ms ago: executing program 1 (id=3746): r0 = getpgrp(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = syz_pidfd_open(r0, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000018c0), 0x0, 0x0, 0x1) fremovexattr(r1, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mbind(&(0x7f00002fd000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x2) 268.770004ms ago: executing program 0 (id=3747): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x59ca, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3, 0x0, 0x0, "5939a28fa005db30"}, 0x10}, 0x1, 0x0, 0x0, 0x4000051}, 0x811) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf250f0000002c000180110001006574683a6d6163766c616e300000000014000280080002000200000008f300001c8e2713000000"], 0x40}, 0x1, 0x0, 0x0, 0x60004080}, 0x24008800) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x0, 0x2b5}, &(0x7f0000000000)=0x0, &(0x7f0000000580)=0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x6004, 0x1) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xb0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(r5, 0x981, 0x6, 0x2) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r2, 0x46bc, 0x3, 0x20, 0x0, 0x20) 114.851123ms ago: executing program 0 (id=3748): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x4, &(0x7f0000000000)=[{0x4, 0x5, 0x15, 0x7ffc0001}, {0x3, 0x8, 0x0, 0x7f}, {0x9, 0x4, 0x7, 0xf5e}, {0x8, 0xa7, 0x5, 0x1d1f}]}) migrate_pages(0x0, 0xb, 0x0, &(0x7f0000005080)=0x1) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, r1}) r2 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x6, &(0x7f00000002c0)) sched_setscheduler(r2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000000000aa011cb7323e7dc17dda576e1a35d3ae71bd489e", @ANYRES16=r5], 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x804) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000000104050000000000000000000700000006000640000200000500010002"], 0x34}}, 0x2000004) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000004c0)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x4, 0x9}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="4caf7600bff318ede0843695cead754f094ab16dcc0032e75ca3ea01ac2b8ae6ceff7940ca67bdcb40f612268209fdb741dc67195e37c4e83ac036f87b3b56975460fd6ee9b22353a32d000dfe8c5b35870a626b971da2a26a9441d61556760d", @ANYRESOCT=r3], 0x134}, 0x1, 0x0, 0x0, 0x8840}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) shutdown(0xffffffffffffffff, 0x1) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r7) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x50100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={&(0x7f00000001c0), 0xa}, 0xd492, 0x7, 0x43a1bd79, 0x2, 0x40000000000009, 0x6, 0x2, 0x0, 0xe1, 0x0, 0x200b}, r2, 0x4000000000, 0xffffffffffffffff, 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 4 (id=3749): r0 = socket$kcm(0x2, 0x5, 0x84) openat$vcs(0xffffffffffffff9c, 0x0, 0x410000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x8, 0x401, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff3}, {0x0, 0xb}}}, 0x24}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) kernel console output (not intermixed with test programs): ___sys_recvmsg+0xf5/0x280 [ 211.830594][T12841] ___sys_recvmsg+0x11f/0x3b0 [ 211.830636][T12841] do_recvmmsg+0x1ef/0x560 [ 211.830685][T12841] ? get_timespec64+0xd2/0x100 [ 211.830725][T12841] __x64_sys_recvmmsg+0xfb/0x170 [ 211.830753][T12841] x64_sys_call+0x2b75/0x3000 [ 211.830837][T12841] do_syscall_64+0xc0/0x2a0 [ 211.830896][T12841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.830927][T12841] RIP: 0033:0x7faa1d05aeb9 [ 211.830948][T12841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.830969][T12841] RSP: 002b:00007faa1bab7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 211.830997][T12841] RAX: ffffffffffffffda RBX: 00007faa1d2d5fa0 RCX: 00007faa1d05aeb9 [ 211.831017][T12841] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 211.831036][T12841] RBP: 00007faa1bab7090 R08: 0000200000003700 R09: 0000000000000000 [ 211.831052][T12841] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 211.831070][T12841] R13: 00007faa1d2d6038 R14: 00007faa1d2d5fa0 R15: 00007ffc8f18b6c8 [ 211.831098][T12841] [ 212.085767][T12730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.153319][ T29] audit: type=1400 audit(981.367:3959): avc: denied { search } for pid=12844 comm="syz.4.3186" name="/" dev="configfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 212.175142][ T29] audit: type=1400 audit(981.367:3960): avc: denied { search } for pid=12844 comm="syz.4.3186" name="/" dev="configfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 212.200126][T12858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=12858 comm=syz.3.3187 [ 212.212929][T12858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=12858 comm=syz.3.3187 [ 212.256325][T12730] veth0_vlan: entered promiscuous mode [ 212.280052][T12730] veth1_vlan: entered promiscuous mode [ 212.308798][T12730] veth0_macvtap: entered promiscuous mode [ 212.316550][T12730] veth1_macvtap: entered promiscuous mode [ 212.327732][T12730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.383902][T12730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.392261][ T29] audit: type=1400 audit(981.598:3961): avc: denied { unmount } for pid=12865 comm="syz.1.3190" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 212.428427][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.437711][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.463436][T12871] 9p: Bad value for 'rfdno' [ 212.470971][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.479791][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.513467][ T29] audit: type=1400 audit(981.745:3962): avc: denied { mount } for pid=12730 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 212.555672][T12880] bond3: (slave macvlan1): Releasing backup interface [ 212.581369][T12882] netlink: 'syz.4.3195': attribute type 3 has an invalid length. [ 212.663721][T12893] loop4: detected capacity change from 0 to 1024 [ 212.680276][T12894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=12894 comm=syz.3.3199 [ 212.693139][T12894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=12894 comm=syz.3.3199 [ 212.713168][T12893] ext4: Unknown parameter 'obj_type' [ 212.731048][T12896] netlink: 'syz.0.3200': attribute type 4 has an invalid length. [ 212.753881][T12893] x_tables: duplicate underflow at hook 2 [ 212.764551][T12896] netlink: 'syz.0.3200': attribute type 4 has an invalid length. [ 212.799696][T12900] loop4: detected capacity change from 0 to 512 [ 212.816658][T12902] FAULT_INJECTION: forcing a failure. [ 212.816658][T12902] name failslab, interval 1, probability 0, space 0, times 0 [ 212.829395][T12902] CPU: 0 UID: 0 PID: 12902 Comm: syz.3.3202 Not tainted syzkaller #0 PREEMPT(voluntary) [ 212.829426][T12902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 212.829440][T12902] Call Trace: [ 212.829448][T12902] [ 212.829456][T12902] __dump_stack+0x1d/0x30 [ 212.829485][T12902] dump_stack_lvl+0x95/0xd0 [ 212.829632][T12902] dump_stack+0x15/0x1b [ 212.829695][T12902] should_fail_ex+0x263/0x280 [ 212.829805][T12902] should_failslab+0x8c/0xb0 [ 212.829842][T12902] kmem_cache_alloc_noprof+0x68/0x490 [ 212.829891][T12902] ? alloc_empty_file+0x76/0x200 [ 212.829934][T12902] alloc_empty_file+0x76/0x200 [ 212.829973][T12902] alloc_file_pseudo+0xf6/0x190 [ 212.830016][T12902] sock_alloc_file+0x9c/0x1e0 [ 212.830076][T12902] do_accept+0x1e3/0x390 [ 212.830125][T12902] __sys_accept4+0xbe/0x170 [ 212.830169][T12902] __x64_sys_accept+0x42/0x50 [ 212.830210][T12902] x64_sys_call+0x2215/0x3000 [ 212.830302][T12902] do_syscall_64+0xc0/0x2a0 [ 212.830346][T12902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.830378][T12902] RIP: 0033:0x7faa1d05aeb9 [ 212.830400][T12902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.830467][T12902] RSP: 002b:00007faa1bab7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 212.830498][T12902] RAX: ffffffffffffffda RBX: 00007faa1d2d5fa0 RCX: 00007faa1d05aeb9 [ 212.830528][T12902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 212.830547][T12902] RBP: 00007faa1bab7090 R08: 0000000000000000 R09: 0000000000000000 [ 212.830566][T12902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.830585][T12902] R13: 00007faa1d2d6038 R14: 00007faa1d2d5fa0 R15: 00007ffc8f18b6c8 [ 212.830611][T12902] [ 213.062956][T12903] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.070372][T12903] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.079182][T12900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.138151][T11154] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.155803][T12903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.185573][T12903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.277500][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.289255][T12927] __nla_validate_parse: 6 callbacks suppressed [ 213.289276][T12927] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3209'. [ 213.304846][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.323267][T12927] netlink: 'syz.4.3209': attribute type 3 has an invalid length. [ 213.335218][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.344868][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.367711][T12934] ip6gre1: entered promiscuous mode [ 213.373009][T12934] ip6gre1: entered allmulticast mode [ 213.379893][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 213.387580][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 213.404121][ T3384] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 213.404621][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3209'. [ 213.448308][T12940] loop2: detected capacity change from 0 to 1024 [ 213.455511][T12940] ext4: Unknown parameter 'obj_type' [ 213.556284][ T3384] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 213.645315][T12951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12951 comm=syz.2.3218 [ 213.658660][T12951] bridge0: entered allmulticast mode [ 213.665650][T12951] bridge_slave_1: left allmulticast mode [ 213.671394][T12951] bridge_slave_1: left promiscuous mode [ 213.677136][T12951] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.685460][T12951] bridge_slave_0: left allmulticast mode [ 213.691308][T12951] bridge_slave_0: left promiscuous mode [ 213.697149][T12951] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.797047][T12957] loop0: detected capacity change from 0 to 256 [ 213.826731][T12957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3219'. [ 213.830699][T12959] FAULT_INJECTION: forcing a failure. [ 213.830699][T12959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.849035][T12959] CPU: 1 UID: 0 PID: 12959 Comm: syz.2.3220 Not tainted syzkaller #0 PREEMPT(voluntary) [ 213.849070][T12959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 213.849087][T12959] Call Trace: [ 213.849101][T12959] [ 213.849162][T12959] __dump_stack+0x1d/0x30 [ 213.849279][T12959] dump_stack_lvl+0x95/0xd0 [ 213.849308][T12959] dump_stack+0x15/0x1b [ 213.849376][T12959] should_fail_ex+0x263/0x280 [ 213.849405][T12959] should_fail+0xb/0x20 [ 213.849460][T12959] should_fail_usercopy+0x1a/0x20 [ 213.849490][T12959] _copy_from_user+0x1c/0xb0 [ 213.849561][T12959] kstrtouint_from_user+0x69/0xf0 [ 213.849592][T12959] proc_fail_nth_write+0x50/0x160 [ 213.849628][T12959] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 213.849653][T12959] vfs_write+0x269/0x9f0 [ 213.849751][T12959] ? __rcu_read_unlock+0x4e/0x70 [ 213.849779][T12959] ? __fget_files+0x184/0x1c0 [ 213.849854][T12959] ? mutex_lock+0x57/0x90 [ 213.849876][T12959] ksys_write+0xdc/0x1a0 [ 213.849894][T12959] __x64_sys_write+0x40/0x50 [ 213.849988][T12959] x64_sys_call+0x2847/0x3000 [ 213.850012][T12959] do_syscall_64+0xc0/0x2a0 [ 213.850041][T12959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.850070][T12959] RIP: 0033:0x7f995704b78e [ 213.850103][T12959] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 213.850128][T12959] RSP: 002b:00007f9955ae6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 213.850154][T12959] RAX: ffffffffffffffda RBX: 00007f9955ae76c0 RCX: 00007f995704b78e [ 213.850174][T12959] RDX: 0000000000000001 RSI: 00007f9955ae70a0 RDI: 0000000000000005 [ 213.850192][T12959] RBP: 00007f9955ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 213.850211][T12959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.850304][T12959] R13: 00007f9957306038 R14: 00007f9957305fa0 R15: 00007ffe47166698 [ 213.850326][T12959] [ 214.129918][T12964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=12964 comm=syz.2.3222 [ 214.142777][T12964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=12964 comm=syz.2.3222 [ 214.278001][T12973] netlink: 'syz.1.3225': attribute type 3 has an invalid length. [ 214.331479][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 214.331501][ T29] audit: type=1400 audit(983.657:3964): avc: denied { mount } for pid=12977 comm="syz.1.3227" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 214.394225][ T3407] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 214.403915][ T29] audit: type=1400 audit(983.688:3965): avc: denied { remount } for pid=12977 comm="syz.1.3227" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 214.825358][T12998] netlink: 'syz.4.3234': attribute type 4 has an invalid length. [ 214.843078][T12998] netlink: 'syz.4.3234': attribute type 4 has an invalid length. [ 215.032809][T13006] hub 8-0:1.0: USB hub found [ 215.037681][T13006] hub 8-0:1.0: 8 ports detected [ 215.201854][T13014] loop0: detected capacity change from 0 to 256 [ 215.209505][T13014] msdos: Unknown parameter 'nodobs' [ 215.216182][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3240'. [ 215.252301][T13016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.261257][T13016] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.291238][T13016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.315728][T13019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.387989][T13028] netlink: 'syz.4.3246': attribute type 4 has an invalid length. [ 215.411383][T13028] netlink: 'syz.4.3246': attribute type 4 has an invalid length. [ 215.806042][T13047] netlink: 182 bytes leftover after parsing attributes in process `syz.1.3253'. [ 215.981778][T13056] IPv6: Can't replace route, no match found [ 216.049122][T13034] syz.2.3248 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 216.063393][T13034] CPU: 0 UID: 0 PID: 13034 Comm: syz.2.3248 Not tainted syzkaller #0 PREEMPT(voluntary) [ 216.063423][T13034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.063473][T13034] Call Trace: [ 216.063483][T13034] [ 216.063494][T13034] __dump_stack+0x1d/0x30 [ 216.063526][T13034] dump_stack_lvl+0x95/0xd0 [ 216.063549][T13034] dump_stack+0x15/0x1b [ 216.063570][T13034] dump_header+0x80/0x240 [ 216.063604][T13034] oom_kill_process+0x295/0x350 [ 216.063722][T13034] out_of_memory+0x97d/0xb80 [ 216.063757][T13034] try_charge_memcg+0x62e/0xa10 [ 216.063806][T13034] obj_cgroup_charge_pages+0x23/0xc0 [ 216.063853][T13034] __memcg_kmem_charge_page+0x9e/0x170 [ 216.063969][T13034] __alloc_frozen_pages_noprof+0x18a/0x350 [ 216.064065][T13034] alloc_pages_mpol+0xb3/0x260 [ 216.064114][T13034] alloc_pages_noprof+0x8f/0x130 [ 216.064307][T13034] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 216.064397][T13034] __kvmalloc_node_noprof+0x471/0x680 [ 216.064440][T13034] ? ip_set_alloc+0x24/0x30 [ 216.064486][T13034] ? ip_set_alloc+0x24/0x30 [ 216.064582][T13034] ip_set_alloc+0x24/0x30 [ 216.064641][T13034] hash_netiface_create+0x282/0x740 [ 216.064709][T13034] ? __pfx_hash_netiface_create+0x10/0x10 [ 216.064762][T13034] ip_set_create+0x3cf/0x970 [ 216.064899][T13034] ? __nla_parse+0x40/0x60 [ 216.064981][T13034] nfnetlink_rcv_msg+0x509/0x5d0 [ 216.065052][T13034] netlink_rcv_skb+0x123/0x220 [ 216.065137][T13034] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 216.065229][T13034] nfnetlink_rcv+0x167/0x1720 [ 216.065268][T13034] ? __kfree_skb+0x109/0x150 [ 216.065347][T13034] ? nlmon_xmit+0x4f/0x60 [ 216.065390][T13034] ? consume_skb+0x49/0x140 [ 216.065434][T13034] ? nlmon_xmit+0x4f/0x60 [ 216.065482][T13034] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 216.065609][T13034] ? __dev_queue_xmit+0x139a/0x1f20 [ 216.065690][T13034] ? __dev_queue_xmit+0x148/0x1f20 [ 216.065783][T13034] ? ref_tracker_free+0x37d/0x3e0 [ 216.065843][T13034] ? __netlink_deliver_tap+0x4dc/0x500 [ 216.065975][T13034] netlink_unicast+0x5c0/0x690 [ 216.066025][T13034] netlink_sendmsg+0x5c8/0x6f0 [ 216.066056][T13034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.066124][T13034] ____sys_sendmsg+0x5af/0x600 [ 216.066151][T13034] ___sys_sendmsg+0x195/0x1e0 [ 216.066222][T13034] __x64_sys_sendmsg+0xd4/0x160 [ 216.066249][T13034] x64_sys_call+0x17ba/0x3000 [ 216.066334][T13034] do_syscall_64+0xc0/0x2a0 [ 216.066371][T13034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.066426][T13034] RIP: 0033:0x7f995708aeb9 [ 216.066444][T13034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.066466][T13034] RSP: 002b:00007f9955ae7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.066490][T13034] RAX: ffffffffffffffda RBX: 00007f9957305fa0 RCX: 00007f995708aeb9 [ 216.066558][T13034] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008 [ 216.066573][T13034] RBP: 00007f99570f8c1f R08: 0000000000000000 R09: 0000000000000000 [ 216.066589][T13034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.066603][T13034] R13: 00007f9957306038 R14: 00007f9957305fa0 R15: 00007ffe47166698 [ 216.066627][T13034] [ 216.066638][T13034] memory: usage 307200kB, limit 307200kB, failcnt 361 [ 216.390854][T13034] memory+swap: usage 373112kB, limit 9007199254740988kB, failcnt 0 [ 216.398852][T13034] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 216.406205][T13034] Memory cgroup stats for /syz2: [ 216.410150][T13034] cache 4096 [ 216.418414][T13034] rss 20480 [ 216.421559][T13034] shmem 0 [ 216.424640][T13034] mapped_file 4096 [ 216.428387][T13034] dirty 0 [ 216.431345][T13034] writeback 0 [ 216.434677][T13034] workingset_refault_anon 69 [ 216.439338][T13034] workingset_refault_file 4613 [ 216.444222][T13034] swap 67497984 [ 216.447748][T13034] swapcached 4096 [ 216.451496][T13034] pgpgin 423771 [ 216.454973][T13034] pgpgout 423764 [ 216.458598][T13034] pgfault 229761 [ 216.462205][T13034] pgmajfault 64 [ 216.465681][T13034] inactive_anon 24576 [ 216.469698][T13034] active_anon 0 [ 216.473265][T13034] inactive_file 4096 [ 216.477191][T13034] active_file 0 [ 216.480720][T13034] unevictable 0 [ 216.484217][T13034] hierarchical_memory_limit 314572800 [ 216.489656][T13034] hierarchical_memsw_limit 9223372036854771712 [ 216.495849][T13034] total_cache 4096 [ 216.499770][T13034] total_rss 20480 [ 216.503486][T13034] total_shmem 0 [ 216.506976][T13034] total_mapped_file 4096 [ 216.511290][T13034] total_dirty 0 [ 216.514787][T13034] total_writeback 0 [ 216.518660][T13034] total_workingset_refault_anon 69 [ 216.523798][T13034] total_workingset_refault_file 4613 [ 216.529234][T13034] total_swap 67497984 [ 216.533249][T13034] total_swapcached 4096 [ 216.537500][T13034] total_pgpgin 423771 [ 216.541546][T13034] total_pgpgout 423764 [ 216.545690][T13034] total_pgfault 229761 [ 216.549895][T13034] total_pgmajfault 64 [ 216.553914][T13034] total_inactive_anon 24576 [ 216.558514][T13034] total_active_anon 0 [ 216.562624][T13034] total_inactive_file 4096 [ 216.567099][T13034] total_active_file 0 [ 216.571109][T13034] total_unevictable 0 [ 216.575156][T13034] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3248,pid=13033,uid=0 [ 216.589946][T13034] Memory cgroup out of memory: Killed process 13033 (syz.2.3248) total-vm:96180kB, anon-rss:1204kB, file-rss:22324kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 216.647923][T13065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.766142][T13065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.946172][T13073] FAULT_INJECTION: forcing a failure. [ 216.946172][T13073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.959399][T13073] CPU: 1 UID: 0 PID: 13073 Comm: syz.2.3264 Not tainted syzkaller #0 PREEMPT(voluntary) [ 216.959475][T13073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.959493][T13073] Call Trace: [ 216.959501][T13073] [ 216.959511][T13073] __dump_stack+0x1d/0x30 [ 216.959544][T13073] dump_stack_lvl+0x95/0xd0 [ 216.959652][T13073] dump_stack+0x15/0x1b [ 216.959684][T13073] should_fail_ex+0x263/0x280 [ 216.959746][T13073] should_fail+0xb/0x20 [ 216.959787][T13073] should_fail_usercopy+0x1a/0x20 [ 216.959888][T13073] _copy_from_iter+0xcf/0xea0 [ 216.959941][T13073] ? __alloc_skb+0x397/0x4b0 [ 216.960029][T13073] ? __alloc_skb+0x219/0x4b0 [ 216.960075][T13073] netlink_sendmsg+0x4ae/0x6f0 [ 216.960108][T13073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.960136][T13073] ____sys_sendmsg+0x5af/0x600 [ 216.960204][T13073] ___sys_sendmsg+0x195/0x1e0 [ 216.960239][T13073] __x64_sys_sendmsg+0xd4/0x160 [ 216.960266][T13073] x64_sys_call+0x17ba/0x3000 [ 216.960343][T13073] do_syscall_64+0xc0/0x2a0 [ 216.960454][T13073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.960539][T13073] RIP: 0033:0x7f995708aeb9 [ 216.960557][T13073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.960583][T13073] RSP: 002b:00007f9955ae7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.960608][T13073] RAX: ffffffffffffffda RBX: 00007f9957305fa0 RCX: 00007f995708aeb9 [ 216.960689][T13073] RDX: 0000000000004808 RSI: 0000200000001580 RDI: 0000000000000003 [ 216.960708][T13073] RBP: 00007f9955ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 216.960728][T13073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.960746][T13073] R13: 00007f9957306038 R14: 00007f9957305fa0 R15: 00007ffe47166698 [ 216.960775][T13073] [ 217.205116][T13077] loop2: detected capacity change from 0 to 512 [ 217.223895][T13077] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 217.241734][T13077] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3266: invalid indirect mapped block 2683928664 (level 1) [ 217.273927][T13077] EXT4-fs (loop2): Remounting filesystem read-only [ 217.319432][T13077] EXT4-fs (loop2): 1 truncate cleaned up [ 217.336832][T13077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.400958][T11796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.440900][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 217.465839][T13093] loop2: detected capacity change from 0 to 1024 [ 217.504471][T13093] ext4: Unknown parameter 'obj_type' [ 217.536541][T13096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.550063][T13096] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.586481][T13096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.618779][T13098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.734636][T13107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.744093][T13107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.822135][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 218.022857][T13109] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 218.025999][T13110] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 218.083345][T13112] loop0: detected capacity change from 0 to 512 [ 218.100948][T13112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.115113][T13112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3279'. [ 218.136209][T12730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.188537][T13121] loop0: detected capacity change from 0 to 512 [ 218.195433][T13121] EXT4-fs: Ignoring removed bh option [ 218.200985][T13121] EXT4-fs: Ignoring removed mblk_io_submit option [ 218.216982][T13121] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 218.227612][T13121] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 218.236088][T13121] EXT4-fs (loop0): orphan cleanup on readonly fs [ 218.260460][T13121] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4 [ 218.270281][T13121] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 218.283058][T13121] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.3282: Failed to acquire dquot type 1 [ 218.295195][T13121] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3282: Invalid block bitmap block 0 in block_group 0 [ 218.309752][T13121] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3282: Invalid block bitmap block 0 in block_group 0 [ 218.325703][T13121] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3282: Invalid block bitmap block 0 in block_group 0 [ 218.339462][T13121] Quota error (device loop0): write_blk: dquota write failed [ 218.347065][T13121] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 218.357028][T13121] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.3282: Failed to acquire dquot type 1 [ 218.371654][T13121] Quota error (device loop0): write_blk: dquota write failed [ 218.379130][T13121] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 218.389007][T13121] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.3282: Failed to acquire dquot type 1 [ 218.400602][T13121] EXT4-fs (loop0): 1 orphan inode deleted [ 218.413324][T13121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 218.438134][T12730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.481713][T13137] loop0: detected capacity change from 0 to 128 [ 218.494268][T13137] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.528013][T13137] EXT4-fs (loop0): shut down requested (0) [ 218.553555][T12730] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.607533][T13142] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.668016][T13142] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.684361][T13145] tipc: Enabled bearer , priority 0 [ 218.691945][T13145] syzkaller0: entered promiscuous mode [ 218.697463][T13145] syzkaller0: entered allmulticast mode [ 218.714112][T13145] tipc: Resetting bearer [ 218.721715][T13144] tipc: Resetting bearer [ 218.745894][T13144] tipc: Disabling bearer [ 218.821278][T13162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3295'. [ 218.905223][T13169] netlink: 'syz.1.3298': attribute type 4 has an invalid length. [ 218.919908][T13169] netlink: 'syz.1.3298': attribute type 4 has an invalid length. [ 219.074192][T13180] xt_TPROXY: Can be used only with -p tcp or -p udp [ 219.099221][T13182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.144406][T13187] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3305'. [ 219.162003][T13188] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13188 comm=syz.1.3305 [ 219.207110][T13194] netlink: 'syz.1.3307': attribute type 3 has an invalid length. [ 219.231565][T13196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3308'. [ 219.264591][T13200] netlink: 'syz.3.3310': attribute type 4 has an invalid length. [ 219.283429][T13200] netlink: 'syz.3.3310': attribute type 4 has an invalid length. [ 219.435755][T13206] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26900 sclass=netlink_xfrm_socket pid=13206 comm=wޣ [ 219.448201][T13211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.451963][T13211] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.487666][T13211] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.587108][T13223] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3320'. [ 219.621689][T13223] netlink: 'syz.4.3320': attribute type 3 has an invalid length. [ 219.660189][ T4002] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.673035][T13227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.682226][T13227] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.749199][T13230] -1: renamed from syzkaller0 [ 219.811470][T13242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3325'. [ 219.860798][T13246] loop2: detected capacity change from 0 to 1024 [ 219.882725][T13246] ext4: Unknown parameter 'obj_type' [ 219.902931][T13167] loop0: detected capacity change from 0 to 2048 [ 219.959091][T13251] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26900 sclass=netlink_xfrm_socket pid=13251 comm=wޣ [ 219.998067][T13229] chnl_net:caif_netlink_parms(): no params data found [ 220.023795][T13258] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3329'. [ 220.029536][T13167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.076664][T13261] net_ratelimit: 2 callbacks suppressed [ 220.076678][T13261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.092784][T13167] EXT4-fs (loop0): Online defrag not supported with bigalloc [ 220.116718][ T29] audit: type=1400 audit(989.696:3966): avc: denied { ioctl } for pid=13166 comm="syz.0.3297" path="/20/bus/file1" dev="loop0" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 220.223390][T12730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.248904][T13229] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.256203][T13229] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.264051][T13229] bridge_slave_0: entered allmulticast mode [ 220.281730][T13229] bridge_slave_0: entered promiscuous mode [ 220.295780][T13274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=13274 comm=syz.0.3333 [ 220.308624][T13274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=13274 comm=syz.0.3333 [ 220.324122][T13229] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.331419][T13229] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.340414][T13277] netlink: 'syz.1.3335': attribute type 3 has an invalid length. [ 220.344093][T13229] bridge_slave_1: entered allmulticast mode [ 220.355463][T13229] bridge_slave_1: entered promiscuous mode [ 220.402935][T13229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.414670][ T4681] bridge0: port 4(team0) entered disabled state [ 220.435612][ T4681] gretap0: left allmulticast mode [ 220.440787][ T4681] gretap0: left promiscuous mode [ 220.445992][ T4681] bridge0: port 3(gretap0) entered disabled state [ 220.476313][ T4681] bridge_slave_1: left allmulticast mode [ 220.482085][ T4681] bridge_slave_1: left promiscuous mode [ 220.488023][ T4681] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.497653][ T4681] bridge_slave_0: left allmulticast mode [ 220.503391][ T4681] bridge_slave_0: left promiscuous mode [ 220.509378][ T4681] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.607056][ T4681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.617277][ T4681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.631480][ T4681] bond0 (unregistering): Released all slaves [ 220.640530][ T4681] bond1 (unregistering): Released all slaves [ 220.658097][ T4681] bond2 (unregistering): Released all slaves [ 220.667076][ T4681] bond3 (unregistering): Released all slaves [ 220.676101][ T4681] bond4 (unregistering): Released all slaves [ 220.685182][ T4681] bond5 (unregistering): Released all slaves [ 220.694853][T13229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.747608][T13304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.793431][T13305] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.810873][T13313] netlink: 182 bytes leftover after parsing attributes in process `syz.1.3344'. [ 220.822263][ T4681] tipc: Disabling bearer [ 220.827550][ T4681] tipc: Disabling bearer [ 220.832897][ T4681] tipc: Left network mode [ 220.838875][T13229] team0: Port device team_slave_0 added [ 220.860251][T13229] team0: Port device team_slave_1 added [ 220.905048][ T4681] hsr_slave_0: left promiscuous mode [ 220.917606][ T4681] hsr_slave_1: left promiscuous mode [ 220.928365][ T4681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.938003][ T4681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.006160][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3348'. [ 221.016475][ T4681] team_slave_1 (unregistering): left promiscuous mode [ 221.023440][ T4681] team_slave_1 (unregistering): left allmulticast mode [ 221.033792][ T4681] team0 (unregistering): Port device team_slave_1 removed [ 221.044051][ T4681] team_slave_0 (unregistering): left promiscuous mode [ 221.051026][ T4681] team_slave_0 (unregistering): left allmulticast mode [ 221.059137][ T4681] team0 (unregistering): Port device team_slave_0 removed [ 221.111151][T13229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.118189][T13229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.144188][T13229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.168526][T13229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.175732][T13229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.201877][T13229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.222650][T13343] loop2: detected capacity change from 0 to 1024 [ 221.229622][T13343] ext4: Unknown parameter 'obj_type' [ 221.254135][T13229] hsr_slave_0: entered promiscuous mode [ 221.260516][T13229] hsr_slave_1: entered promiscuous mode [ 221.266423][T13229] debugfs: 'hsr0' already exists in 'hsr' [ 221.272204][T13229] Cannot create hsr debugfs directory [ 221.502201][T13375] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3354'. [ 221.513780][T13375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=13375 comm=syz.2.3354 [ 221.635499][T13229] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 221.651715][T13229] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 221.663001][T13229] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.675244][T13229] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.717729][T13399] loop4: detected capacity change from 0 to 128 [ 221.736803][T13399] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 221.816834][T13229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.829719][T13399] EXT4-fs (loop4): shut down requested (0) [ 221.840808][T13229] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.862202][T11154] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.873387][ T4687] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.880541][ T4687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.898789][ T4687] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.906040][ T4687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.953291][T13416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=13416 comm=syz.4.3358 [ 221.966229][T13416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=13416 comm=syz.4.3358 [ 222.068049][T13431] loop0: detected capacity change from 0 to 1024 [ 222.075717][T13229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.114984][T13431] ext4: Unknown parameter 'obj_type' [ 222.228267][T13229] veth0_vlan: entered promiscuous mode [ 222.238069][T13229] veth1_vlan: entered promiscuous mode [ 222.262674][T13229] veth0_macvtap: entered promiscuous mode [ 222.273380][T13229] veth1_macvtap: entered promiscuous mode [ 222.293010][T13229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.307699][T13229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.322876][ T4687] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.362647][ T4687] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.381118][ T4687] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.396370][ T4687] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.413534][ T29] audit: type=1326 audit(992.143:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13453 comm="syz.0.3364" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f651037aeb9 code=0x0 [ 222.467694][ T29] audit: type=1400 audit(992.196:3968): avc: denied { read } for pid=13455 comm="syz.3.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 222.498118][ T29] audit: type=1326 audit(992.238:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13464 comm="syz.1.3366" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b5f38aeb9 code=0x0 [ 222.572880][T13469] loop3: detected capacity change from 0 to 128 [ 222.582426][T13469] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 222.614477][T13469] EXT4-fs (loop3): shut down requested (0) [ 222.633952][T13229] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 222.657156][T13472] loop3: detected capacity change from 0 to 512 [ 222.667406][T13472] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.3368: inode has both inline data and extents flags [ 222.681234][T13472] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3368: couldn't read orphan inode 15 (err -117) [ 222.694740][T13472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.707457][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 222.764722][T13229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.803710][T13478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 222.862051][ T29] audit: type=1400 audit(992.616:3970): avc: denied { setattr } for pid=13483 comm="syz.3.3372" name="NETLINK" dev="sockfs" ino=43567 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 222.880967][T13484] team1: entered promiscuous mode [ 222.890654][T13484] team1: entered allmulticast mode [ 222.940231][T13488] FAULT_INJECTION: forcing a failure. [ 222.940231][T13488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.953467][T13488] CPU: 1 UID: 0 PID: 13488 Comm: syz.3.3374 Not tainted syzkaller #0 PREEMPT(voluntary) [ 222.953522][T13488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 222.953540][T13488] Call Trace: [ 222.953549][T13488] [ 222.953559][T13488] __dump_stack+0x1d/0x30 [ 222.953592][T13488] dump_stack_lvl+0x95/0xd0 [ 222.953725][T13488] dump_stack+0x15/0x1b [ 222.953749][T13488] should_fail_ex+0x263/0x280 [ 222.953788][T13488] should_fail+0xb/0x20 [ 222.953821][T13488] should_fail_usercopy+0x1a/0x20 [ 222.953899][T13488] _copy_to_user+0x20/0xa0 [ 222.953926][T13488] simple_read_from_buffer+0xb5/0x130 [ 222.953992][T13488] proc_fail_nth_read+0x10e/0x150 [ 222.954018][T13488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.954042][T13488] vfs_read+0x1ab/0x7f0 [ 222.954137][T13488] ? __rcu_read_unlock+0x4e/0x70 [ 222.954166][T13488] ? __fget_files+0x184/0x1c0 [ 222.954219][T13488] ? ldsem_up_read+0x8a/0xd0 [ 222.954249][T13488] ? mutex_lock+0x57/0x90 [ 222.954373][T13488] ksys_read+0xdc/0x1a0 [ 222.954392][T13488] __x64_sys_read+0x40/0x50 [ 222.954410][T13488] x64_sys_call+0x2889/0x3000 [ 222.954508][T13488] do_syscall_64+0xc0/0x2a0 [ 222.954545][T13488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.954565][T13488] RIP: 0033:0x7f28f624b78e [ 222.954581][T13488] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 222.954597][T13488] RSP: 002b:00007f28f4ce6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 222.954622][T13488] RAX: ffffffffffffffda RBX: 00007f28f4ce76c0 RCX: 00007f28f624b78e [ 222.954671][T13488] RDX: 000000000000000f RSI: 00007f28f4ce70a0 RDI: 0000000000000004 [ 222.954683][T13488] RBP: 00007f28f4ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 222.954695][T13488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.954706][T13488] R13: 00007f28f6506038 R14: 00007f28f6505fa0 R15: 00007ffc9ced32a8 [ 222.954725][T13488] [ 223.171938][T13494] loop3: detected capacity change from 0 to 512 [ 223.178692][T13494] EXT4-fs: Ignoring removed bh option [ 223.184317][T13494] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.192493][T13494] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 223.202837][T13494] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 223.211325][T13494] EXT4-fs (loop3): orphan cleanup on readonly fs [ 223.218159][T13494] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 223.227944][T13494] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 223.238000][T13494] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3377: Failed to acquire dquot type 1 [ 223.250726][T13494] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3377: Invalid block bitmap block 0 in block_group 0 [ 223.266623][T13494] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3377: Invalid block bitmap block 0 in block_group 0 [ 223.287487][T13494] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3377: Invalid block bitmap block 0 in block_group 0 [ 223.315097][T13494] Quota error (device loop3): write_blk: dquota write failed [ 223.322620][T13494] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 223.330390][ T29] audit: type=1326 audit(993.099:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13496 comm="syz.0.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651037aeb9 code=0x7ffc0000 [ 223.332580][T13494] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3377: Failed to acquire dquot type 1 [ 223.368320][T13494] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3377: Failed to acquire dquot type 1 [ 223.384829][T13499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.392003][T13494] EXT4-fs (loop3): 1 orphan inode deleted [ 223.398822][T13494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 223.411503][T13499] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 223.430052][T13499] bond0: (slave gre0): Error -95 calling set_mac_address [ 223.476889][T13508] __nla_validate_parse: 2 callbacks suppressed [ 223.476911][T13508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3380'. [ 223.503838][T13510] netlink: 'syz.2.3381': attribute type 11 has an invalid length. [ 223.511841][T13510] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3381'. [ 223.531428][T13229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.540694][T13513] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.589224][T13510] netlink: 'syz.2.3381': attribute type 11 has an invalid length. [ 223.597194][T13510] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3381'. [ 223.628043][T13521] loop4: detected capacity change from 0 to 1024 [ 223.654696][T13523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3383'. [ 223.664350][T13521] ext4: Unknown parameter 'obj_type' [ 223.738508][T13535] loop4: detected capacity change from 0 to 764 [ 223.767411][T13535] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 223.850837][T13545] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.850910][T13535] syzkaller0: entered promiscuous mode [ 223.868936][T13535] syzkaller0: entered allmulticast mode [ 223.922509][T13545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.931131][T13545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.042131][T13571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3392'. [ 224.162996][ T3410] IPVS: starting estimator thread 0... [ 224.172115][ T4682] Bluetooth: hci1: Frame reassembly failed (-84) [ 224.267558][T13583] IPVS: using max 2064 ests per chain, 103200 per kthread [ 224.485435][T13588] ip6gre1: entered promiscuous mode [ 224.492063][T13588] ip6gre1: entered allmulticast mode [ 224.513732][ T4682] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 224.521456][ T4682] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 224.531700][T13589] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 224.543933][ T3410] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 224.616203][T13574] syz.4.3393 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 224.630453][T13574] CPU: 1 UID: 0 PID: 13574 Comm: syz.4.3393 Not tainted syzkaller #0 PREEMPT(voluntary) [ 224.630547][T13574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.630561][T13574] Call Trace: [ 224.630567][T13574] [ 224.630575][T13574] __dump_stack+0x1d/0x30 [ 224.630676][T13574] dump_stack_lvl+0x95/0xd0 [ 224.630779][T13574] dump_stack+0x15/0x1b [ 224.630804][T13574] dump_header+0x80/0x240 [ 224.630824][T13574] oom_kill_process+0x295/0x350 [ 224.630850][T13574] out_of_memory+0x97d/0xb80 [ 224.630875][T13574] try_charge_memcg+0x62e/0xa10 [ 224.630902][T13574] obj_cgroup_charge_pages+0x23/0xc0 [ 224.630952][T13574] __memcg_kmem_charge_page+0x9e/0x170 [ 224.630982][T13574] __alloc_frozen_pages_noprof+0x18a/0x350 [ 224.631081][T13574] alloc_pages_mpol+0xb3/0x260 [ 224.631114][T13574] alloc_pages_noprof+0x8f/0x130 [ 224.631207][T13574] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 224.631245][T13574] __kvmalloc_node_noprof+0x471/0x680 [ 224.631363][T13574] ? ip_set_alloc+0x24/0x30 [ 224.631392][T13574] ? ip_set_alloc+0x24/0x30 [ 224.631422][T13574] ip_set_alloc+0x24/0x30 [ 224.631537][T13574] hash_netiface_create+0x282/0x740 [ 224.631589][T13574] ? __pfx_hash_netiface_create+0x10/0x10 [ 224.631618][T13574] ip_set_create+0x3cf/0x970 [ 224.631660][T13574] ? __nla_parse+0x40/0x60 [ 224.631693][T13574] nfnetlink_rcv_msg+0x509/0x5d0 [ 224.631809][T13574] netlink_rcv_skb+0x123/0x220 [ 224.631893][T13574] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 224.631960][T13574] nfnetlink_rcv+0x167/0x1720 [ 224.632020][T13574] ? __kfree_skb+0x109/0x150 [ 224.632049][T13574] ? nlmon_xmit+0x4f/0x60 [ 224.632127][T13574] ? consume_skb+0x49/0x140 [ 224.632157][T13574] ? nlmon_xmit+0x4f/0x60 [ 224.632187][T13574] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 224.632282][T13574] ? __dev_queue_xmit+0x139a/0x1f20 [ 224.632314][T13574] ? __dev_queue_xmit+0x148/0x1f20 [ 224.632395][T13574] ? ref_tracker_free+0x37d/0x3e0 [ 224.632454][T13574] ? __netlink_deliver_tap+0x4dc/0x500 [ 224.632528][T13574] netlink_unicast+0x5c0/0x690 [ 224.632579][T13574] netlink_sendmsg+0x5c8/0x6f0 [ 224.632628][T13574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.632656][T13574] ____sys_sendmsg+0x5af/0x600 [ 224.632678][T13574] ___sys_sendmsg+0x195/0x1e0 [ 224.632712][T13574] __x64_sys_sendmsg+0xd4/0x160 [ 224.632736][T13574] x64_sys_call+0x17ba/0x3000 [ 224.632760][T13574] do_syscall_64+0xc0/0x2a0 [ 224.632791][T13574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.632894][T13574] RIP: 0033:0x7fd8f78baeb9 [ 224.632938][T13574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.632964][T13574] RSP: 002b:00007fd8f6317028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.632992][T13574] RAX: ffffffffffffffda RBX: 00007fd8f7b35fa0 RCX: 00007fd8f78baeb9 [ 224.633012][T13574] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 224.633092][T13574] RBP: 00007fd8f7928c1f R08: 0000000000000000 R09: 0000000000000000 [ 224.633110][T13574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.633126][T13574] R13: 00007fd8f7b36038 R14: 00007fd8f7b35fa0 R15: 00007fffb0be6e88 [ 224.633153][T13574] [ 224.633162][T13574] memory: usage 307200kB, limit 307200kB, failcnt 6627 [ 224.954673][T13574] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 224.962583][T13574] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 224.969931][T13574] Memory cgroup stats for /syz4: [ 224.970329][T13574] cache 0 [ 224.972987][T12730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.975434][T13574] rss 0 [ 224.990118][T13574] shmem 0 [ 224.993194][T13574] mapped_file 0 [ 224.996779][T13574] dirty 0 [ 224.999736][T13574] writeback 0 [ 225.003256][T13574] workingset_refault_anon 720 [ 225.008003][T13574] workingset_refault_file 15099 [ 225.012989][T13574] swap 196608 [ 225.016481][T13574] swapcached 12288 [ 225.020278][T13574] pgpgin 297011 [ 225.023816][T13574] pgpgout 297007 [ 225.027443][T13574] pgfault 176803 [ 225.031044][T13574] pgmajfault 541 [ 225.034671][T13574] inactive_anon 12288 [ 225.038733][T13574] active_anon 0 [ 225.042293][T13574] inactive_file 4096 [ 225.046351][T13574] active_file 0 [ 225.049878][T13574] unevictable 0 [ 225.053363][T13574] hierarchical_memory_limit 314572800 [ 225.058825][T13574] hierarchical_memsw_limit 9223372036854771712 [ 225.065014][T13574] total_cache 0 [ 225.068537][T13574] total_rss 0 [ 225.071891][T13574] total_shmem 0 [ 225.075484][T13574] total_mapped_file 0 [ 225.079542][T13574] total_dirty 0 [ 225.083026][T13574] total_writeback 0 [ 225.086879][T13574] total_workingset_refault_anon 720 [ 225.092214][T13574] total_workingset_refault_file 15099 [ 225.097746][T13574] total_swap 196608 [ 225.101593][T13574] total_swapcached 12288 [ 225.105931][T13574] total_pgpgin 297011 [ 225.110010][T13574] total_pgpgout 297007 [ 225.114124][T13574] total_pgfault 176803 [ 225.118280][T13574] total_pgmajfault 541 [ 225.122374][T13574] total_inactive_anon 12288 [ 225.126929][T13574] total_active_anon 0 [ 225.130933][T13574] total_inactive_file 4096 [ 225.135437][T13574] total_active_file 0 [ 225.139459][T13574] total_unevictable 0 [ 225.143520][T13574] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3393,pid=13573,uid=0 [ 225.153373][ T3410] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 225.158416][T13574] Memory cgroup out of memory: Killed process 13573 (syz.4.3393) total-vm:94132kB, anon-rss:1204kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 225.211860][T13596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=13596 comm=syz.0.3396 [ 225.220027][ T3410] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 225.224764][T13596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=13596 comm=syz.0.3396 [ 225.279420][T13598] set_capacity_and_notify: 2 callbacks suppressed [ 225.279438][T13598] loop0: detected capacity change from 0 to 1024 [ 225.294202][T13598] ext4: Unknown parameter 'obj_type' [ 225.358299][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 225.358319][ T29] audit: type=1400 audit(995.231:3995): avc: denied { read } for pid=13600 comm="syz.4.3398" dev="sockfs" ino=44580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 225.430750][T13608] netlink: 1040 bytes leftover after parsing attributes in process `syz.0.3402'. [ 225.460913][ T29] audit: type=1326 audit(995.326:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13607 comm="syz.0.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651037aeb9 code=0x7ffc0000 [ 225.483985][ T29] audit: type=1326 audit(995.326:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13607 comm="syz.0.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651037aeb9 code=0x7ffc0000 [ 225.507243][ T29] audit: type=1326 audit(995.326:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13607 comm="syz.0.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651037aeb9 code=0x7ffc0000 [ 225.530538][ T29] audit: type=1326 audit(995.326:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13607 comm="syz.0.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f651037aeb9 code=0x7ffc0000 [ 225.553518][ T29] audit: type=1326 audit(995.326:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13607 comm="syz.0.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651037aeb9 code=0x7ffc0000 [ 225.576758][ T29] audit: type=1326 audit(995.326:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13607 comm="syz.0.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651037aeb9 code=0x7ffc0000 [ 225.599722][ T29] audit: type=1326 audit(995.326:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13607 comm="syz.0.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651037aeb9 code=0x7ffc0000 [ 225.622755][ T29] audit: type=1326 audit(995.326:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13607 comm="syz.0.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f651037aeb9 code=0x7ffc0000 [ 225.645588][ T29] audit: type=1326 audit(995.326:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13607 comm="syz.0.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651037aeb9 code=0x7ffc0000 [ 225.668717][T13614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.803134][T13625] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.996609][T13623] syz.2.3409 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 226.010828][T13623] CPU: 0 UID: 0 PID: 13623 Comm: syz.2.3409 Not tainted syzkaller #0 PREEMPT(voluntary) [ 226.010865][T13623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 226.010885][T13623] Call Trace: [ 226.010894][T13623] [ 226.010904][T13623] __dump_stack+0x1d/0x30 [ 226.010947][T13623] dump_stack_lvl+0x95/0xd0 [ 226.011029][T13623] dump_stack+0x15/0x1b [ 226.011061][T13623] dump_header+0x80/0x240 [ 226.011092][T13623] oom_kill_process+0x295/0x350 [ 226.011130][T13623] out_of_memory+0x97d/0xb80 [ 226.011240][T13623] try_charge_memcg+0x62e/0xa10 [ 226.011278][T13623] obj_cgroup_charge_pages+0x23/0xc0 [ 226.011401][T13623] __memcg_kmem_charge_page+0x9e/0x170 [ 226.011447][T13623] __alloc_frozen_pages_noprof+0x18a/0x350 [ 226.011513][T13623] alloc_pages_mpol+0xb3/0x260 [ 226.011618][T13623] alloc_pages_noprof+0x8f/0x130 [ 226.011742][T13623] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 226.011798][T13623] __kvmalloc_node_noprof+0x471/0x680 [ 226.011838][T13623] ? ip_set_alloc+0x24/0x30 [ 226.011886][T13623] ? ip_set_alloc+0x24/0x30 [ 226.011939][T13623] ip_set_alloc+0x24/0x30 [ 226.012082][T13623] hash_netiface_create+0x282/0x740 [ 226.012129][T13623] ? __pfx_hash_netiface_create+0x10/0x10 [ 226.012175][T13623] ip_set_create+0x3cf/0x970 [ 226.012289][T13623] ? __nla_parse+0x40/0x60 [ 226.012347][T13623] nfnetlink_rcv_msg+0x509/0x5d0 [ 226.012465][T13623] netlink_rcv_skb+0x123/0x220 [ 226.012570][T13623] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 226.012617][T13623] nfnetlink_rcv+0x167/0x1720 [ 226.012659][T13623] ? __kfree_skb+0x109/0x150 [ 226.012703][T13623] ? nlmon_xmit+0x4f/0x60 [ 226.012831][T13623] ? consume_skb+0x49/0x140 [ 226.012952][T13623] ? nlmon_xmit+0x4f/0x60 [ 226.012998][T13623] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 226.013050][T13623] ? __dev_queue_xmit+0x139a/0x1f20 [ 226.013130][T13623] ? __dev_queue_xmit+0x148/0x1f20 [ 226.013181][T13623] ? ref_tracker_free+0x37d/0x3e0 [ 226.013234][T13623] ? __netlink_deliver_tap+0x4dc/0x500 [ 226.013338][T13623] netlink_unicast+0x5c0/0x690 [ 226.013385][T13623] netlink_sendmsg+0x5c8/0x6f0 [ 226.013477][T13623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.013538][T13623] ____sys_sendmsg+0x5af/0x600 [ 226.013570][T13623] ___sys_sendmsg+0x195/0x1e0 [ 226.013612][T13623] __x64_sys_sendmsg+0xd4/0x160 [ 226.013646][T13623] x64_sys_call+0x17ba/0x3000 [ 226.013684][T13623] do_syscall_64+0xc0/0x2a0 [ 226.013737][T13623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.013769][T13623] RIP: 0033:0x7f995708aeb9 [ 226.013794][T13623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.013821][T13623] RSP: 002b:00007f9955ae7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.013845][T13623] RAX: ffffffffffffffda RBX: 00007f9957305fa0 RCX: 00007f995708aeb9 [ 226.013895][T13623] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008 [ 226.013921][T13623] RBP: 00007f99570f8c1f R08: 0000000000000000 R09: 0000000000000000 [ 226.013942][T13623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.013961][T13623] R13: 00007f9957306038 R14: 00007f9957305fa0 R15: 00007ffe47166698 [ 226.013991][T13623] [ 226.014001][T13623] memory: usage 307200kB, limit 307200kB, failcnt 547 [ 226.129126][ T7286] Bluetooth: hci1: command 0x1003 tx timeout [ 226.134883][T13623] memory+swap: usage 373108kB, limit 9007199254740988kB, failcnt 0 [ 226.134937][T13623] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 226.134953][T13623] Memory cgroup stats for /syz2: [ 226.153606][T13623] cache 4096 [ 226.157061][ T3522] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 226.159323][T13623] rss 32768 [ 226.159336][T13623] shmem 0 [ 226.378102][T13623] mapped_file 4096 [ 226.381888][T13623] dirty 0 [ 226.384861][T13623] writeback 0 [ 226.388193][T13623] workingset_refault_anon 87 [ 226.392888][T13623] workingset_refault_file 5011 [ 226.397695][T13623] swap 67489792 [ 226.401227][T13623] swapcached 0 [ 226.404646][T13623] pgpgin 439062 [ 226.408132][T13623] pgpgout 439053 [ 226.411760][T13623] pgfault 251047 [ 226.415340][T13623] pgmajfault 83 [ 226.418827][T13623] inactive_anon 16384 [ 226.422884][T13623] active_anon 16384 [ 226.426796][T13623] inactive_file 4096 [ 226.430770][T13623] active_file 0 [ 226.434342][T13623] unevictable 0 [ 226.437873][T13623] hierarchical_memory_limit 314572800 [ 226.443383][T13623] hierarchical_memsw_limit 9223372036854771712 [ 226.449691][T13623] total_cache 4096 [ 226.453517][T13623] total_rss 32768 [ 226.457419][T13623] total_shmem 0 [ 226.461060][T13623] total_mapped_file 4096 [ 226.465326][T13623] total_dirty 0 [ 226.468860][T13623] total_writeback 0 [ 226.472716][T13623] total_workingset_refault_anon 87 [ 226.477885][T13623] total_workingset_refault_file 5011 [ 226.483197][T13623] total_swap 67489792 [ 226.487268][T13623] total_swapcached 0 [ 226.491210][T13623] total_pgpgin 439062 [ 226.495272][T13623] total_pgpgout 439053 [ 226.499411][T13623] total_pgfault 251047 [ 226.503505][T13623] total_pgmajfault 83 [ 226.507554][T13623] total_inactive_anon 16384 [ 226.512096][T13623] total_active_anon 16384 [ 226.516495][T13623] total_inactive_file 4096 [ 226.520996][T13623] total_active_file 0 [ 226.525076][T13623] total_unevictable 0 [ 226.529093][T13623] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3409,pid=13621,uid=0 [ 226.543910][T13623] Memory cgroup out of memory: Killed process 13621 (syz.2.3409) total-vm:94132kB, anon-rss:1332kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 226.617456][T13643] loop0: detected capacity change from 0 to 1024 [ 226.641293][T13643] ext4: Unknown parameter 'obj_type' [ 226.663083][T13646] loop2: detected capacity change from 0 to 512 [ 226.701766][T13646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.745881][T11796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.968077][T13660] loop2: detected capacity change from 0 to 512 [ 226.983532][T13660] EXT4-fs: Ignoring removed bh option [ 226.989032][T13660] EXT4-fs: Ignoring removed mblk_io_submit option [ 227.011348][T13660] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 227.029304][T13660] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 227.037561][T13660] EXT4-fs (loop2): orphan cleanup on readonly fs [ 227.050532][T13660] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.3420: Failed to acquire dquot type 1 [ 227.109337][T13665] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3422'. [ 227.130941][T13665] ip6erspan0: entered promiscuous mode [ 227.137008][T13660] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3420: Invalid block bitmap block 0 in block_group 0 [ 227.172643][T13660] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3420: Invalid block bitmap block 0 in block_group 0 [ 227.204334][T13660] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3420: Invalid block bitmap block 0 in block_group 0 [ 227.218338][T13660] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.3420: Failed to acquire dquot type 1 [ 227.231213][T13660] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.3420: Failed to acquire dquot type 1 [ 227.243716][T13660] EXT4-fs (loop2): 1 orphan inode deleted [ 227.251872][T13660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 227.282734][T13669] loop4: detected capacity change from 0 to 128 [ 227.299844][T13669] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 227.428137][T11796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.450158][T13677] EXT4-fs (loop4): shut down requested (0) [ 227.484841][T11154] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 227.491797][T13680] loop2: detected capacity change from 0 to 1024 [ 227.507808][T13681] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26900 sclass=netlink_xfrm_socket pid=13681 comm=wޣ [ 227.565626][T13680] ext4: Unknown parameter 'obj_type' [ 227.598600][T13683] netlink: 'syz.4.3428': attribute type 4 has an invalid length. [ 227.608469][T13683] netlink: 'syz.4.3428': attribute type 4 has an invalid length. [ 227.791331][T13688] netlink: 'syz.2.3430': attribute type 4 has an invalid length. [ 227.811670][T13688] netlink: 'syz.2.3430': attribute type 4 has an invalid length. [ 228.010195][T13674] syz.0.3425 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 228.024476][T13674] CPU: 1 UID: 0 PID: 13674 Comm: syz.0.3425 Not tainted syzkaller #0 PREEMPT(voluntary) [ 228.024542][T13674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 228.024561][T13674] Call Trace: [ 228.024570][T13674] [ 228.024580][T13674] __dump_stack+0x1d/0x30 [ 228.024678][T13674] dump_stack_lvl+0x95/0xd0 [ 228.024707][T13674] dump_stack+0x15/0x1b [ 228.024737][T13674] dump_header+0x80/0x240 [ 228.024791][T13674] oom_kill_process+0x295/0x350 [ 228.024879][T13674] out_of_memory+0x97d/0xb80 [ 228.024918][T13674] try_charge_memcg+0x62e/0xa10 [ 228.024958][T13674] obj_cgroup_charge_pages+0x23/0xc0 [ 228.025012][T13674] __memcg_kmem_charge_page+0x9e/0x170 [ 228.025066][T13674] __alloc_frozen_pages_noprof+0x18a/0x350 [ 228.025189][T13674] alloc_pages_mpol+0xb3/0x260 [ 228.025308][T13674] alloc_pages_noprof+0x8f/0x130 [ 228.025355][T13674] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 228.025413][T13674] __kvmalloc_node_noprof+0x471/0x680 [ 228.025455][T13674] ? ip_set_alloc+0x24/0x30 [ 228.025670][T13674] ? ip_set_alloc+0x24/0x30 [ 228.025703][T13674] ip_set_alloc+0x24/0x30 [ 228.025847][T13674] hash_netiface_create+0x282/0x740 [ 228.025881][T13674] ? __pfx_hash_netiface_create+0x10/0x10 [ 228.025916][T13674] ip_set_create+0x3cf/0x970 [ 228.025977][T13674] ? __nla_parse+0x40/0x60 [ 228.026059][T13674] nfnetlink_rcv_msg+0x509/0x5d0 [ 228.026136][T13674] netlink_rcv_skb+0x123/0x220 [ 228.026171][T13674] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 228.026221][T13674] nfnetlink_rcv+0x167/0x1720 [ 228.026320][T13674] ? __kfree_skb+0x109/0x150 [ 228.026353][T13674] ? nlmon_xmit+0x4f/0x60 [ 228.026399][T13674] ? consume_skb+0x49/0x140 [ 228.026555][T13674] ? nlmon_xmit+0x4f/0x60 [ 228.026630][T13674] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 228.026678][T13674] ? __dev_queue_xmit+0x139a/0x1f20 [ 228.026727][T13674] ? __dev_queue_xmit+0x148/0x1f20 [ 228.026833][T13674] ? ref_tracker_free+0x37d/0x3e0 [ 228.026948][T13674] ? __netlink_deliver_tap+0x4dc/0x500 [ 228.026999][T13674] netlink_unicast+0x5c0/0x690 [ 228.027068][T13674] netlink_sendmsg+0x5c8/0x6f0 [ 228.027099][T13674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.027201][T13674] ____sys_sendmsg+0x5af/0x600 [ 228.027230][T13674] ___sys_sendmsg+0x195/0x1e0 [ 228.027275][T13674] __x64_sys_sendmsg+0xd4/0x160 [ 228.027309][T13674] x64_sys_call+0x17ba/0x3000 [ 228.027393][T13674] do_syscall_64+0xc0/0x2a0 [ 228.027460][T13674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.027492][T13674] RIP: 0033:0x7f651037aeb9 [ 228.027514][T13674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.027534][T13674] RSP: 002b:00007f650edd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.027556][T13674] RAX: ffffffffffffffda RBX: 00007f65105f5fa0 RCX: 00007f651037aeb9 [ 228.027574][T13674] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008 [ 228.027669][T13674] RBP: 00007f65103e8c1f R08: 0000000000000000 R09: 0000000000000000 [ 228.027685][T13674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.027702][T13674] R13: 00007f65105f6038 R14: 00007f65105f5fa0 R15: 00007ffea03aafd8 [ 228.027725][T13674] [ 228.027735][T13674] memory: usage 307200kB, limit 307200kB, failcnt 456 [ 228.349268][T13674] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 228.357232][T13674] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 228.364585][T13674] Memory cgroup stats for /syz0: [ 228.365372][T13674] cache 0 [ 228.373345][T13674] rss 16384 [ 228.376495][T13674] shmem 0 [ 228.379472][T13674] mapped_file 0 [ 228.383014][T13674] dirty 0 [ 228.386030][T13674] writeback 0 [ 228.389343][T13674] workingset_refault_anon 85 [ 228.393990][T13674] workingset_refault_file 3617 [ 228.398866][T13674] swap 184320 [ 228.402207][T13674] swapcached 20480 [ 228.405969][T13674] pgpgin 271811 [ 228.409582][T13674] pgpgout 271806 [ 228.413178][T13674] pgfault 197423 [ 228.416805][T13674] pgmajfault 61 [ 228.420332][T13674] inactive_anon 20480 [ 228.424348][T13674] active_anon 0 [ 228.427868][T13674] inactive_file 0 [ 228.431655][T13674] active_file 0 [ 228.435297][T13674] unevictable 0 [ 228.438845][T13674] hierarchical_memory_limit 314572800 [ 228.444242][T13674] hierarchical_memsw_limit 9223372036854771712 [ 228.450468][T13674] total_cache 0 [ 228.453971][T13674] total_rss 16384 [ 228.457680][T13674] total_shmem 0 [ 228.461246][T13674] total_mapped_file 0 [ 228.465254][T13674] total_dirty 0 [ 228.468793][T13674] total_writeback 0 [ 228.472634][T13674] total_workingset_refault_anon 85 [ 228.477877][T13674] total_workingset_refault_file 3617 [ 228.483205][T13674] total_swap 184320 [ 228.487212][T13674] total_swapcached 20480 [ 228.491488][T13674] total_pgpgin 271811 [ 228.495537][T13674] total_pgpgout 271806 [ 228.499640][T13674] total_pgfault 197423 [ 228.503739][T13674] total_pgmajfault 61 [ 228.507786][T13674] total_inactive_anon 20480 [ 228.512328][T13674] total_active_anon 0 [ 228.516392][T13674] total_inactive_file 0 [ 228.520598][T13674] total_active_file 0 [ 228.524639][T13674] total_unevictable 0 [ 228.528714][T13674] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3425,pid=13672,uid=0 [ 228.543541][T13674] Memory cgroup out of memory: Killed process 13672 (syz.0.3425) total-vm:94132kB, anon-rss:1204kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 228.782433][T13721] FAULT_INJECTION: forcing a failure. [ 228.782433][T13721] name failslab, interval 1, probability 0, space 0, times 0 [ 228.795223][T13721] CPU: 1 UID: 0 PID: 13721 Comm: syz.0.3438 Not tainted syzkaller #0 PREEMPT(voluntary) [ 228.795261][T13721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 228.795279][T13721] Call Trace: [ 228.795287][T13721] [ 228.795298][T13721] __dump_stack+0x1d/0x30 [ 228.795342][T13721] dump_stack_lvl+0x95/0xd0 [ 228.795368][T13721] dump_stack+0x15/0x1b [ 228.795395][T13721] should_fail_ex+0x263/0x280 [ 228.795465][T13721] should_failslab+0x8c/0xb0 [ 228.795497][T13721] __kmalloc_cache_node_noprof+0x69/0x4a0 [ 228.795528][T13721] ? alloc_workqueue_noprof+0x4f2/0x1710 [ 228.795605][T13721] alloc_workqueue_noprof+0x4f2/0x1710 [ 228.795644][T13721] ? kfree_const+0x3e/0x50 [ 228.795670][T13721] ? kobject_set_name_vargs+0xc0/0xe0 [ 228.795732][T13721] ? dev_set_name+0x83/0xb0 [ 228.795790][T13721] hci_register_dev+0x167/0x570 [ 228.795831][T13721] hci_uart_tty_ioctl+0x520/0x5c0 [ 228.795858][T13721] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 228.795886][T13721] tty_ioctl+0x83e/0xb80 [ 228.795971][T13721] ? __pfx_tty_ioctl+0x10/0x10 [ 228.796007][T13721] __se_sys_ioctl+0xce/0x140 [ 228.796080][T13721] __x64_sys_ioctl+0x43/0x50 [ 228.796161][T13721] x64_sys_call+0x14b0/0x3000 [ 228.796195][T13721] do_syscall_64+0xc0/0x2a0 [ 228.796272][T13721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.796295][T13721] RIP: 0033:0x7f651037aeb9 [ 228.796385][T13721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.796405][T13721] RSP: 002b:00007f650edd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.796429][T13721] RAX: ffffffffffffffda RBX: 00007f65105f5fa0 RCX: 00007f651037aeb9 [ 228.796445][T13721] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 228.796461][T13721] RBP: 00007f650edd7090 R08: 0000000000000000 R09: 0000000000000000 [ 228.796475][T13721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.796496][T13721] R13: 00007f65105f6038 R14: 00007f65105f5fa0 R15: 00007ffea03aafd8 [ 228.796516][T13721] [ 228.796527][T13721] Bluetooth: Can't register HCI device [ 229.382026][T13740] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.426530][T13751] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3451'. [ 229.547476][T13757] loop2: detected capacity change from 0 to 512 [ 229.565755][T13757] EXT4-fs: Ignoring removed bh option [ 229.571304][T13757] EXT4-fs: Ignoring removed mblk_io_submit option [ 229.589561][T13757] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 229.600921][T13757] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 229.609066][T13757] EXT4-fs (loop2): orphan cleanup on readonly fs [ 229.616180][T13757] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.3453: Failed to acquire dquot type 1 [ 229.640274][T13757] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3453: Invalid block bitmap block 0 in block_group 0 [ 229.701899][T13743] syz.4.3449 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 229.712985][T13743] CPU: 1 UID: 0 PID: 13743 Comm: syz.4.3449 Not tainted syzkaller #0 PREEMPT(voluntary) [ 229.713022][T13743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 229.713161][T13743] Call Trace: [ 229.713169][T13743] [ 229.713177][T13743] __dump_stack+0x1d/0x30 [ 229.713210][T13743] dump_stack_lvl+0x95/0xd0 [ 229.713240][T13743] dump_stack+0x15/0x1b [ 229.713268][T13743] dump_header+0x80/0x240 [ 229.713371][T13743] oom_kill_process+0x295/0x350 [ 229.713400][T13743] out_of_memory+0x97d/0xb80 [ 229.713440][T13743] try_charge_memcg+0x62e/0xa10 [ 229.713477][T13743] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 229.713551][T13743] __read_swap_cache_async+0x17b/0x2d0 [ 229.713594][T13743] swap_cluster_readahead+0x262/0x3c0 [ 229.713645][T13743] swapin_readahead+0xde/0x840 [ 229.713680][T13743] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 229.713715][T13743] ? lruvec_stat_mod_folio+0xd2/0x110 [ 229.713830][T13743] ? __rcu_read_unlock+0x4e/0x70 [ 229.713872][T13743] ? swap_cache_get_folio+0x26f/0x280 [ 229.713927][T13743] do_swap_page+0x59b/0x2a50 [ 229.713985][T13743] ? __rcu_read_lock+0x36/0x50 [ 229.714021][T13743] ? __pfx_default_wake_function+0x10/0x10 [ 229.714056][T13743] handle_mm_fault+0xb40/0x3030 [ 229.714162][T13743] ? vma_start_read+0x1c7/0x2c0 [ 229.714204][T13743] do_user_addr_fault+0x62f/0x1050 [ 229.714295][T13743] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 229.714322][T13743] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 229.714402][T13743] ? irqentry_exit+0x3c/0x510 [ 229.714436][T13743] exc_page_fault+0x62/0xa0 [ 229.714469][T13743] asm_exc_page_fault+0x26/0x30 [ 229.714567][T13743] RIP: 0033:0x7fd8f778894c [ 229.714589][T13743] Code: ca 30 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 229.714614][T13743] RSP: 002b:00007fffb0be6ff0 EFLAGS: 00010202 [ 229.714637][T13743] RAX: 0000000000000000 RBX: 00007fd8f7b37080 RCX: 000055558dc67808 [ 229.714676][T13743] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 229.714690][T13743] RBP: 00007fd8f7b37da0 R08: 0000000000000000 R09: 0000000000000000 [ 229.714703][T13743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000038b15 [ 229.714717][T13743] R13: 00007fd8f7b3609c R14: 00000000000388d5 R15: 00007fd8f7b36090 [ 229.714738][T13743] [ 229.894646][T13757] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3453: Invalid block bitmap block 0 in block_group 0 [ 229.897078][T13743] memory: usage 307200kB, limit 307200kB, failcnt 6983 [ 229.907889][T13757] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3453: Invalid block bitmap block 0 in block_group 0 [ 229.910980][T13743] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 229.942818][T13757] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.3453: Failed to acquire dquot type 1 [ 229.945725][T13743] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 230.006037][T13743] Memory cgroup stats for /syz4: [ 230.014019][T13757] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.3453: Failed to acquire dquot type 1 [ 230.033196][T13743] cache 0 [ 230.036197][T13743] rss 0 [ 230.039065][T13743] shmem 0 [ 230.042163][T13743] mapped_file 0 [ 230.045646][T13743] dirty 0 [ 230.048641][T13743] writeback 16384 [ 230.052302][T13743] workingset_refault_anon 766 [ 230.057049][T13743] workingset_refault_file 15355 [ 230.061938][T13743] swap 180224 [ 230.065247][T13743] swapcached 28672 [ 230.069028][T13743] pgpgin 300858 [ 230.072510][T13743] pgpgout 300850 [ 230.076111][T13743] pgfault 181127 [ 230.079746][T13743] pgmajfault 579 [ 230.083316][T13743] inactive_anon 20480 [ 230.087385][T13743] active_anon 8192 [ 230.091149][T13743] inactive_file 0 [ 230.094925][T13743] active_file 4096 [ 230.098794][T13743] unevictable 0 [ 230.102284][T13743] hierarchical_memory_limit 314572800 [ 230.107812][T13743] hierarchical_memsw_limit 9223372036854771712 [ 230.114021][T13743] total_cache 0 [ 230.117559][T13743] total_rss 0 [ 230.120934][T13743] total_shmem 0 [ 230.124438][T13743] total_mapped_file 0 [ 230.128504][T13743] total_dirty 0 [ 230.131995][T13743] total_writeback 16384 [ 230.136224][T13743] total_workingset_refault_anon 766 [ 230.141449][T13743] total_workingset_refault_file 15355 [ 230.146882][T13743] total_swap 180224 [ 230.150782][T13743] total_swapcached 28672 [ 230.155126][T13743] total_pgpgin 300858 [ 230.159144][T13743] total_pgpgout 300850 [ 230.163280][T13743] total_pgfault 181127 [ 230.167385][T13743] total_pgmajfault 579 [ 230.171529][T13743] total_inactive_anon 20480 [ 230.176073][T13743] total_active_anon 8192 [ 230.180437][T13743] total_inactive_file 0 [ 230.184620][T13743] total_active_file 4096 [ 230.188966][T13743] total_unevictable 0 [ 230.193192][T13743] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3449,pid=13743,uid=0 [ 230.208237][T13743] Memory cgroup out of memory: Killed process 13743 (syz.4.3449) total-vm:94132kB, anon-rss:1204kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 230.247258][T13757] EXT4-fs (loop2): 1 orphan inode deleted [ 230.270338][T13757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 230.357086][T13763] loop4: detected capacity change from 0 to 512 [ 230.364021][T13763] EXT4-fs: Ignoring removed bh option [ 230.369527][T13763] EXT4-fs: Ignoring removed mblk_io_submit option [ 230.376744][T13763] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 230.401592][T13763] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 230.418309][T13763] EXT4-fs (loop4): orphan cleanup on readonly fs [ 230.428583][T11796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.443810][T13766] ip6t_srh: unknown srh match flags 4000 [ 230.456511][T13763] __quota_error: 87 callbacks suppressed [ 230.456532][T13763] Quota error (device loop4): do_insert_tree: Free block already used in tree: block 4 [ 230.472046][T13763] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 230.529872][T13774] loop0: detected capacity change from 0 to 128 [ 230.552244][T13763] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3455: Failed to acquire dquot type 1 [ 230.563991][T13774] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 230.592214][T13763] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3455: Invalid block bitmap block 0 in block_group 0 [ 230.611172][T13763] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3455: Invalid block bitmap block 0 in block_group 0 [ 230.626356][T13763] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3455: Invalid block bitmap block 0 in block_group 0 [ 230.646806][T13763] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3455: Invalid block bitmap block 0 in block_group 0 [ 230.656787][T13784] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3463'. [ 230.677214][T13784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.701166][T13786] EXT4-fs (loop0): shut down requested (0) [ 230.708707][T13763] Quota error (device loop4): write_blk: dquota write failed [ 230.716180][T13763] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 230.726279][T13763] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3455: Failed to acquire dquot type 1 [ 230.754017][T13763] Quota error (device loop4): write_blk: dquota write failed [ 230.761484][T13763] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 230.771509][T13763] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3455: Failed to acquire dquot type 1 [ 230.783708][T12730] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 230.797677][T13763] EXT4-fs (loop4): 1 orphan inode deleted [ 230.817508][T13763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 230.819940][T13792] netlink: 170 bytes leftover after parsing attributes in process `syz.0.3465'. [ 230.906541][T11154] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.984114][T13809] netlink: 'syz.2.3470': attribute type 4 has an invalid length. [ 230.993848][T13809] netlink: 'syz.2.3470': attribute type 4 has an invalid length. [ 231.122522][T13821] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3475'. [ 231.160003][ T29] audit: type=1326 audit(1001.323:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13824 comm="syz.2.3477" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f995708aeb9 code=0x0 [ 231.223407][ T29] audit: type=1326 audit(1001.396:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13828 comm="syz.3.3478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f628aeb9 code=0x7ffc0000 [ 231.262666][T13829] loop3: detected capacity change from 0 to 2048 [ 231.283099][T13826] loop0: detected capacity change from 0 to 164 [ 231.291935][T13826] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 231.338610][ T29] audit: type=1326 audit(1001.428:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13828 comm="syz.3.3478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f28f628aeb9 code=0x7ffc0000 [ 231.361799][ T29] audit: type=1326 audit(1001.428:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13828 comm="syz.3.3478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f628aeb9 code=0x7ffc0000 [ 231.467281][T13835] netlink: 170 bytes leftover after parsing attributes in process `syz.3.3479'. [ 231.500271][T13837] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3480'. [ 231.565790][T13843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3483'. [ 231.574917][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3483'. [ 231.612280][T13846] loop3: detected capacity change from 0 to 512 [ 231.622565][T13846] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 231.640059][T13846] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 231.654776][T13846] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3484: bg 0: block 248: padding at end of block bitmap is not set [ 231.672332][T13846] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3484: Failed to acquire dquot type 1 [ 231.684601][T13846] EXT4-fs (loop3): 1 truncate cleaned up [ 231.690834][T13846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 231.709061][T13846] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3484: Failed to acquire dquot type 1 [ 231.825816][T13229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 231.952158][T13864] batadv_slave_0: entered promiscuous mode [ 232.147208][T13869] batadv_slave_0: entered promiscuous mode [ 232.216665][T13871] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3492'. [ 232.351281][T13860] batadv_slave_0: left promiscuous mode [ 232.385769][T13877] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3493'. [ 232.426332][T13877] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.463234][T13879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.471746][T13879] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.494008][T13879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.511363][T13865] batadv_slave_0: left promiscuous mode [ 232.690677][T13900] loop0: detected capacity change from 0 to 1024 [ 232.710002][T13900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.874388][T13890] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 232.917468][T12730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.307069][T13924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.325821][T13924] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.355091][T13924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 233.570703][T13944] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 233.638517][T13950] netlink: 'syz.0.3523': attribute type 1 has an invalid length. [ 233.660571][T13950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.711733][T13951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 233.756332][T13954] loop2: detected capacity change from 0 to 2048 [ 233.760040][T13956] 9p: Could not find request transport: f< L6d [ 233.832383][T13959] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13959 comm=syz.0.3525 [ 233.838703][T13954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.859620][T13965] loop4: detected capacity change from 0 to 512 [ 233.875171][T13965] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 234.085909][T13983] netlink: 'syz.3.3535': attribute type 1 has an invalid length. [ 234.113005][T13983] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.162541][T13992] loop3: detected capacity change from 0 to 256 [ 234.169234][T13992] msdos: Unknown parameter 'nod/id' [ 234.178395][T11796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.207991][T13995] netlink: 'syz.3.3541': attribute type 4 has an invalid length. [ 234.221034][T13995] netlink: 'syz.3.3541': attribute type 4 has an invalid length. [ 234.266927][T13995] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.274279][T13995] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.315454][T14000] loop2: detected capacity change from 0 to 128 [ 234.400329][T13995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.411789][T13995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.477513][ T4682] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.486821][ T4682] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.496112][ T4682] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.515401][T14021] __nla_validate_parse: 5 callbacks suppressed [ 234.515420][T14021] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3547'. [ 234.546786][ T4687] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.566706][T14025] netlink: 'syz.3.3548': attribute type 1 has an invalid length. [ 234.592021][T14027] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3549'. [ 234.645683][T14025] 8021q: adding VLAN 0 to HW filter on device bond2 [ 234.889760][T14039] FAULT_INJECTION: forcing a failure. [ 234.889760][T14039] name failslab, interval 1, probability 0, space 0, times 0 [ 234.903368][T14039] CPU: 0 UID: 0 PID: 14039 Comm: syz.2.3553 Not tainted syzkaller #0 PREEMPT(voluntary) [ 234.903423][T14039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 234.903441][T14039] Call Trace: [ 234.903455][T14039] [ 234.903463][T14039] __dump_stack+0x1d/0x30 [ 234.903490][T14039] dump_stack_lvl+0x95/0xd0 [ 234.903512][T14039] dump_stack+0x15/0x1b [ 234.903591][T14039] should_fail_ex+0x263/0x280 [ 234.903634][T14039] should_failslab+0x8c/0xb0 [ 234.903664][T14039] kmem_cache_alloc_noprof+0x68/0x490 [ 234.903839][T14039] ? security_file_alloc+0x32/0xf0 [ 234.903870][T14039] security_file_alloc+0x32/0xf0 [ 234.903893][T14039] init_file+0x5c/0x1c0 [ 234.903928][T14039] alloc_empty_file+0x8b/0x200 [ 234.903994][T14039] path_openat+0x62/0x23c0 [ 234.904035][T14039] ? __rcu_read_unlock+0x33/0x70 [ 234.904076][T14039] ? filemap_map_pages+0xc98/0xf00 [ 234.904114][T14039] ? _parse_integer_limit+0x170/0x190 [ 234.904215][T14039] ? css_rstat_updated+0xbb/0x280 [ 234.904309][T14039] do_filp_open+0x15d/0x280 [ 234.904357][T14039] do_sys_openat2+0xa6/0x150 [ 234.904416][T14039] __x64_sys_openat+0xf2/0x120 [ 234.904465][T14039] x64_sys_call+0x2b07/0x3000 [ 234.904492][T14039] do_syscall_64+0xc0/0x2a0 [ 234.904525][T14039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.904625][T14039] RIP: 0033:0x7f995704b78e [ 234.904646][T14039] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 234.904666][T14039] RSP: 002b:00007f9955ae6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 234.904687][T14039] RAX: ffffffffffffffda RBX: 00007f9955ae76c0 RCX: 00007f995704b78e [ 234.904701][T14039] RDX: 0000000000000482 RSI: 00007f9955ae6c00 RDI: ffffffffffffff9c [ 234.904718][T14039] RBP: 00007f9955ae6c00 R08: 0000000000000000 R09: 0000000000000000 [ 234.904736][T14039] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 234.904755][T14039] R13: 00007f9957306038 R14: 00007f9957305fa0 R15: 00007ffe47166698 [ 234.904782][T14039] [ 235.178531][T14052] netlink: 'syz.2.3559': attribute type 4 has an invalid length. [ 235.199193][T14052] netlink: 'syz.2.3559': attribute type 4 has an invalid length. [ 235.359972][T14058] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3560'. [ 235.586065][T14080] batadv_slave_0: entered promiscuous mode [ 235.656366][T14081] batadv_slave_0: entered promiscuous mode [ 235.746980][T14075] batadv_slave_0: left promiscuous mode [ 235.780707][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 235.780727][ T29] audit: type=1400 audit(1006.186:4160): avc: denied { read } for pid=14084 comm="syz.4.3569" laddr=fe80::a8aa:aaff:feaa:aa10 lport=36138 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 235.873473][T14078] batadv_slave_0: left promiscuous mode [ 235.975764][T14098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3571'. [ 236.030220][T14100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.038412][T14100] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.079583][T14104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3571'. [ 236.088862][T14100] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.091573][T14102] ip6gre1: entered promiscuous mode [ 236.091591][T14102] ip6gre1: entered allmulticast mode [ 236.200699][T14110] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3575'. [ 236.347314][T14114] netlink: 'syz.0.3577': attribute type 4 has an invalid length. [ 236.350053][ T52] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 236.350125][ T52] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 236.350697][T14114] netlink: 'syz.0.3577': attribute type 4 has an invalid length. [ 236.378377][ T3410] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 236.492578][ T3410] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 236.584373][T14125] batadv_slave_0: entered promiscuous mode [ 236.621898][T14121] batadv_slave_0: left promiscuous mode [ 236.711182][T14128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3582'. [ 236.722043][T14128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3582'. [ 236.787207][T14133] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3585'. [ 236.915421][ T29] audit: type=1326 audit(1007.373:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14139 comm="syz.3.3590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f628aeb9 code=0x7ffc0000 [ 236.938556][ T29] audit: type=1326 audit(1007.373:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14139 comm="syz.3.3590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f28f628aeb9 code=0x7ffc0000 [ 236.961785][ T29] audit: type=1326 audit(1007.373:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14139 comm="syz.3.3590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f628aeb9 code=0x7ffc0000 [ 237.020413][T14141] lo speed is unknown, defaulting to 1000 [ 237.025317][T14142] loop0: detected capacity change from 0 to 512 [ 237.034351][T14146] netlink: 'syz.2.3591': attribute type 4 has an invalid length. [ 237.045152][T14142] ext4: Unknown parameter '' [ 237.054365][T14141] lo speed is unknown, defaulting to 1000 [ 237.060552][T14141] lo speed is unknown, defaulting to 1000 [ 237.070796][T14141] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 237.092887][ T3384] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 237.104524][ T29] audit: type=1326 audit(1007.446:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14139 comm="syz.3.3590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f28f628aeb9 code=0x7ffc0000 [ 237.127509][ T29] audit: type=1326 audit(1007.446:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14139 comm="syz.3.3590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f628aeb9 code=0x7ffc0000 [ 237.150823][ T29] audit: type=1326 audit(1007.446:4166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14139 comm="syz.3.3590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f628aeb9 code=0x7ffc0000 [ 237.174037][ T29] audit: type=1326 audit(1007.446:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14139 comm="syz.3.3590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f28f628aeb9 code=0x7ffc0000 [ 237.197069][ T29] audit: type=1326 audit(1007.446:4168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14139 comm="syz.3.3590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f628aeb9 code=0x7ffc0000 [ 237.220104][ T29] audit: type=1326 audit(1007.457:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14139 comm="syz.3.3590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f28f628aeb9 code=0x7ffc0000 [ 237.260706][T14141] lo speed is unknown, defaulting to 1000 [ 237.269522][T14141] lo speed is unknown, defaulting to 1000 [ 237.290093][T14141] lo speed is unknown, defaulting to 1000 [ 237.296281][T14141] lo speed is unknown, defaulting to 1000 [ 237.303807][T14141] lo speed is unknown, defaulting to 1000 [ 237.319813][T14141] lo speed is unknown, defaulting to 1000 [ 237.785196][T14171] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3599'. [ 238.426577][T14184] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.729977][T14199] loop4: detected capacity change from 0 to 512 [ 238.736745][T14199] ext4: Unknown parameter '' [ 238.928470][ T5271] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 238.938165][T14209] loop0: detected capacity change from 0 to 128 [ 238.945485][ T5271] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 238.992889][T14213] bridge_slave_0: left allmulticast mode [ 238.999339][T14213] bridge_slave_0: left promiscuous mode [ 239.005102][T14213] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.047620][T14213] bridge_slave_1: left allmulticast mode [ 239.053404][T14213] bridge_slave_1: left promiscuous mode [ 239.059261][T14213] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.090134][T14213] bond0: (slave bond_slave_0): Releasing backup interface [ 239.113522][T14213] bond0: (slave bond_slave_1): Releasing backup interface [ 239.128600][T14213] team0: Port device team_slave_0 removed [ 239.136058][T14213] team0: Port device team_slave_1 removed [ 239.146006][T14213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.158190][T14213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.168399][T14213] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 239.237297][T14217] validate_nla: 1 callbacks suppressed [ 239.237318][T14217] netlink: 'syz.3.3615': attribute type 4 has an invalid length. [ 239.251809][T14217] netlink: 'syz.3.3615': attribute type 4 has an invalid length. [ 239.261009][ T3384] lo speed is unknown, defaulting to 1000 [ 239.270427][ T5271] lo speed is unknown, defaulting to 1000 [ 239.364289][T14230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=14230 comm=syz.3.3618 [ 239.377851][T14230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=14230 comm=syz.3.3618 [ 239.498596][T14240] netlink: 'syz.0.3623': attribute type 11 has an invalid length. [ 239.507238][T14240] __nla_validate_parse: 3 callbacks suppressed [ 239.507256][T14240] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3623'. [ 239.559945][T14240] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3623'. [ 239.572970][T14240] loop0: detected capacity change from 0 to 512 [ 239.581733][T14240] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 239.609652][T14240] EXT4-fs (loop0): orphan cleanup on readonly fs [ 239.619445][T14245] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3625'. [ 239.636876][T14240] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 239.664420][T14240] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 239.671171][T14245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.679954][T14245] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.690172][T14245] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.691167][T14240] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #13: comm syz.0.3623: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 239.705966][ T3384] lo speed is unknown, defaulting to 1000 [ 239.705998][ T3384] syz: Port: 1 Link ACTIVE [ 239.744611][T14240] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3623: couldn't read orphan inode 13 (err -117) [ 239.763742][T14248] serio: Serial port ttyS3 [ 239.773012][T14254] netlink: 'syz.2.3627': attribute type 4 has an invalid length. [ 239.788317][T14256] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3628'. [ 239.797715][T14240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 239.821115][T14240] EXT4-fs error (device loop0): ext4_lookup:1785: comm syz.0.3623: inode #15: comm syz.0.3623: iget: illegal inode # [ 239.835004][T14240] EXT4-fs error (device loop0): ext4_lookup:1785: comm syz.0.3623: inode #15: comm syz.0.3623: iget: illegal inode # [ 239.890886][T12730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.929005][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3633'. [ 240.034564][T14283] loop0: detected capacity change from 0 to 512 [ 240.039726][T14284] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3637'. [ 240.061993][T14283] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.095163][T12730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.133040][T14292] loop3: detected capacity change from 0 to 512 [ 240.142994][T14292] EXT4-fs: Ignoring removed bh option [ 240.148765][T14292] EXT4-fs: Ignoring removed mblk_io_submit option [ 240.158682][T14292] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 240.176384][T14292] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 240.186116][T14297] netlink: 'syz.0.3640': attribute type 4 has an invalid length. [ 240.194462][T14292] EXT4-fs (loop3): orphan cleanup on readonly fs [ 240.204977][T14292] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3641: Failed to acquire dquot type 1 [ 240.216956][T14292] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3641: Invalid block bitmap block 0 in block_group 0 [ 240.231103][T14292] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3641: Invalid block bitmap block 0 in block_group 0 [ 240.245240][T14292] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3641: Invalid block bitmap block 0 in block_group 0 [ 240.259606][T14292] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3641: Failed to acquire dquot type 1 [ 240.271440][T14292] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3641: Failed to acquire dquot type 1 [ 240.283313][T14292] EXT4-fs (loop3): 1 orphan inode deleted [ 240.289762][T14292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 240.343620][T13229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.401303][T14304] SELinux: failed to load policy [ 240.430450][T14311] netlink: 'syz.3.3644': attribute type 1 has an invalid length. [ 240.509901][T14320] loop0: detected capacity change from 0 to 128 [ 240.556212][T14328] loop4: detected capacity change from 0 to 512 [ 240.568121][T14328] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.3652: inode has both inline data and extents flags [ 240.583514][T14328] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3652: couldn't read orphan inode 15 (err -117) [ 240.627554][T14332] netlink: 'syz.0.3653': attribute type 4 has an invalid length. [ 240.631027][T14328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.656288][T14328] EXT4-fs error (device loop4): ext4_add_entry:2415: inode #2: comm syz.4.3652: Directory hole found for htree leaf block 0 [ 240.673127][T14328] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3652'. [ 240.719741][T11154] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.758116][T14333] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3654'. [ 240.797093][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 240.808542][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 240.808558][ T29] audit: type=1326 audit(1011.469:4225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14344 comm="syz.4.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f78baeb9 code=0x7ffc0000 [ 240.838602][ T29] audit: type=1326 audit(1011.500:4226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14344 comm="syz.4.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fd8f78baeb9 code=0x7ffc0000 [ 240.866229][T14351] batadv_slave_0: entered promiscuous mode [ 240.905857][T14353] loop4: detected capacity change from 0 to 1024 [ 240.929813][T14340] batadv_slave_0: left promiscuous mode [ 240.990524][T14353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.055537][ T29] audit: type=1400 audit(1011.710:4227): avc: denied { getopt } for pid=14360 comm="syz.0.3661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 241.074874][ T29] audit: type=1400 audit(1011.721:4228): avc: denied { name_connect } for pid=14360 comm="syz.0.3661" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 241.098552][T14363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3662'. [ 241.108652][T14363] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3662'. [ 241.140847][T14365] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 241.147419][T14365] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 241.155066][T14365] vhci_hcd vhci_hcd.0: Device attached [ 241.164413][T14365] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 241.170987][T14365] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 241.179394][T14365] vhci_hcd vhci_hcd.0: Device attached [ 241.185941][T14365] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(8) [ 241.192951][T14365] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 241.200629][T14365] vhci_hcd vhci_hcd.0: Device attached [ 241.207440][T14365] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 241.216447][T14365] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(12) [ 241.223164][T14365] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 241.230897][T14365] vhci_hcd vhci_hcd.0: Device attached [ 241.240997][T14365] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(14) [ 241.247659][T14365] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 241.255885][T14365] vhci_hcd vhci_hcd.0: Device attached [ 241.263148][T14365] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(16) [ 241.269806][T14365] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 241.277477][T14365] vhci_hcd vhci_hcd.0: Device attached [ 241.386586][ T3410] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 241.409545][T14381] atomic_op ffff88811ae48528 conn xmit_atomic 0000000000000000 [ 241.462774][T14377] vhci_hcd: connection closed [ 241.462782][T14375] vhci_hcd: connection closed [ 241.463409][ T52] vhci_hcd vhci_hcd.2: stop threads [ 241.468344][T14369] vhci_hcd: connection closed [ 241.474060][ T52] vhci_hcd vhci_hcd.2: release socket [ 241.478994][T14366] vhci_hcd: connection reset by peer [ 241.482330][ T52] vhci_hcd vhci_hcd.2: disconnect device [ 241.491775][T14371] vhci_hcd: connection closed [ 241.499329][T14373] vhci_hcd: connection closed [ 241.502236][ T52] vhci_hcd vhci_hcd.2: stop threads [ 241.514747][ T52] vhci_hcd vhci_hcd.2: release socket [ 241.520198][ T52] vhci_hcd vhci_hcd.2: disconnect device [ 241.526775][ T52] vhci_hcd vhci_hcd.2: stop threads [ 241.532066][ T52] vhci_hcd vhci_hcd.2: release socket [ 241.537632][ T52] vhci_hcd vhci_hcd.2: disconnect device [ 241.543606][ T52] vhci_hcd vhci_hcd.2: stop threads [ 241.549636][ T52] vhci_hcd vhci_hcd.2: release socket [ 241.555298][ T52] vhci_hcd vhci_hcd.2: disconnect device [ 241.561354][ T52] vhci_hcd vhci_hcd.2: stop threads [ 241.566582][ T52] vhci_hcd vhci_hcd.2: release socket [ 241.572113][ T52] vhci_hcd vhci_hcd.2: disconnect device [ 241.578939][ T52] vhci_hcd vhci_hcd.2: stop threads [ 241.584174][ T52] vhci_hcd vhci_hcd.2: release socket [ 241.589653][ T52] vhci_hcd vhci_hcd.2: disconnect device [ 241.626002][T11154] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 241.984704][ T29] audit: type=1326 audit(1012.698:4229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14406 comm="syz.2.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f995708aeb9 code=0x7ffc0000 [ 242.008059][ T29] audit: type=1326 audit(1012.698:4230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14406 comm="syz.2.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f995708aeb9 code=0x7ffc0000 [ 242.031705][ T29] audit: type=1326 audit(1012.698:4231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14406 comm="syz.2.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f995708aeb9 code=0x7ffc0000 [ 242.054715][ T29] audit: type=1326 audit(1012.698:4232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14406 comm="syz.2.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f995708aeb9 code=0x7ffc0000 [ 242.054845][T14411] FAULT_INJECTION: forcing a failure. [ 242.054845][T14411] name failslab, interval 1, probability 0, space 0, times 0 [ 242.078037][ T29] audit: type=1326 audit(1012.698:4233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14406 comm="syz.2.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f995708aeb9 code=0x7ffc0000 [ 242.078078][ T29] audit: type=1326 audit(1012.698:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14406 comm="syz.2.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f995708aeb9 code=0x7ffc0000 [ 242.137983][T14411] CPU: 0 UID: 0 PID: 14411 Comm: syz.2.3677 Not tainted syzkaller #0 PREEMPT(voluntary) [ 242.138009][T14411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 242.138021][T14411] Call Trace: [ 242.138028][T14411] [ 242.138036][T14411] __dump_stack+0x1d/0x30 [ 242.138162][T14411] dump_stack_lvl+0x95/0xd0 [ 242.138183][T14411] dump_stack+0x15/0x1b [ 242.138202][T14411] should_fail_ex+0x263/0x280 [ 242.138287][T14411] should_failslab+0x8c/0xb0 [ 242.138309][T14411] __kmalloc_noprof+0xb8/0x580 [ 242.138333][T14411] ? security_prepare_creds+0x52/0x120 [ 242.138358][T14411] security_prepare_creds+0x52/0x120 [ 242.138420][T14411] prepare_creds+0x37e/0x550 [ 242.138479][T14411] __sys_setresuid+0x463/0x6d0 [ 242.138567][T14411] __x64_sys_setresuid+0x3f/0x50 [ 242.138652][T14411] x64_sys_call+0x1e85/0x3000 [ 242.138675][T14411] do_syscall_64+0xc0/0x2a0 [ 242.138704][T14411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.138821][T14411] RIP: 0033:0x7f995708aeb9 [ 242.138852][T14411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.138946][T14411] RSP: 002b:00007f9955ac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 242.138965][T14411] RAX: ffffffffffffffda RBX: 00007f9957306090 RCX: 00007f995708aeb9 [ 242.138978][T14411] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 242.138989][T14411] RBP: 00007f9955ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 242.139025][T14411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.139040][T14411] R13: 00007f9957306128 R14: 00007f9957306090 R15: 00007ffe47166698 [ 242.139059][T14411] [ 242.394787][T14418] netlink: 'syz.0.3680': attribute type 4 has an invalid length. [ 242.728923][ T7286] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 242.735107][ T3522] Bluetooth: hci1: command 0x1003 tx timeout [ 242.750576][T14428] lo speed is unknown, defaulting to 1000 [ 242.909504][T14442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.961556][T14452] loop3: detected capacity change from 0 to 512 [ 243.034714][T14458] netlink: 'syz.0.3691': attribute type 4 has an invalid length. [ 243.113395][T14462] loop3: detected capacity change from 0 to 512 [ 243.177640][T14462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.524729][T14484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.533578][T14484] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.542615][T14484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.704121][T13229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.724011][T14490] loop2: detected capacity change from 0 to 1764 [ 243.732413][T14490] iso9660: Unknown parameter '' [ 243.926464][T14517] FAULT_INJECTION: forcing a failure. [ 243.926464][T14517] name failslab, interval 1, probability 0, space 0, times 0 [ 243.939321][T14517] CPU: 1 UID: 0 PID: 14517 Comm: syz.3.3709 Not tainted syzkaller #0 PREEMPT(voluntary) [ 243.939358][T14517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.939436][T14517] Call Trace: [ 243.939445][T14517] [ 243.939457][T14517] __dump_stack+0x1d/0x30 [ 243.939520][T14517] dump_stack_lvl+0x95/0xd0 [ 243.939550][T14517] dump_stack+0x15/0x1b [ 243.939578][T14517] should_fail_ex+0x263/0x280 [ 243.939619][T14517] should_failslab+0x8c/0xb0 [ 243.939698][T14517] __kmalloc_noprof+0xb8/0x580 [ 243.939773][T14517] ? tracepoint_add_func+0x1f4/0x6b0 [ 243.939807][T14517] ? __pfx_perf_trace_sys_exit+0x10/0x10 [ 243.939903][T14517] tracepoint_add_func+0x1f4/0x6b0 [ 243.939940][T14517] ? pcpu_alloc_noprof+0xb08/0x1010 [ 243.939980][T14517] ? __pfx_perf_trace_sys_exit+0x10/0x10 [ 243.940030][T14517] tracepoint_probe_register+0x5b/0x90 [ 243.940067][T14517] ? __pfx_perf_trace_sys_exit+0x10/0x10 [ 243.940103][T14517] ? __pfx_perf_trace_sys_exit+0x10/0x10 [ 243.940174][T14517] trace_event_reg+0x15c/0x190 [ 243.940196][T14517] perf_trace_event_init+0x35c/0x7b0 [ 243.940230][T14517] perf_trace_init+0x15f/0x1d0 [ 243.940265][T14517] perf_tp_event_init+0x68/0xc0 [ 243.940376][T14517] perf_try_init_event+0x25a/0x6f0 [ 243.940404][T14517] ? kmem_cache_alloc_node_noprof+0x29a/0x4a0 [ 243.940441][T14517] perf_event_alloc+0xb39/0x18d0 [ 243.940464][T14517] ? __fget_files+0x184/0x1c0 [ 243.940570][T14517] __se_sys_perf_event_open+0x656/0x1290 [ 243.940603][T14517] __x64_sys_perf_event_open+0x67/0x80 [ 243.940633][T14517] x64_sys_call+0x78c/0x3000 [ 243.940668][T14517] do_syscall_64+0xc0/0x2a0 [ 243.940795][T14517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.940901][T14517] RIP: 0033:0x7f28f628aeb9 [ 243.940919][T14517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.940939][T14517] RSP: 002b:00007f28f4ce7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 243.940960][T14517] RAX: ffffffffffffffda RBX: 00007f28f6505fa0 RCX: 00007f28f628aeb9 [ 243.940999][T14517] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000010c0 [ 243.941017][T14517] RBP: 00007f28f4ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 243.941034][T14517] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 243.941052][T14517] R13: 00007f28f6506038 R14: 00007f28f6505fa0 R15: 00007ffc9ced32a8 [ 243.941078][T14517] [ 244.277030][T14527] __nla_validate_parse: 4 callbacks suppressed [ 244.277077][T14527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3713'. [ 244.295941][T14525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3712'. [ 244.306948][T14529] tipc: Started in network mode [ 244.312016][T14529] tipc: Node identity 7f000001, cluster identity 4711 [ 244.320041][T14529] tipc: Enabled bearer , priority 10 [ 244.339675][T14530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.348372][T14530] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.380552][T14530] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.496691][T14539] netlink: 'syz.0.3718': attribute type 11 has an invalid length. [ 244.504627][T14539] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3718'. [ 244.532368][T14539] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3718'. [ 244.550682][T14537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14537 comm=syz.3.3717 [ 244.731471][T14555] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3724'. [ 244.926750][T14566] FAULT_INJECTION: forcing a failure. [ 244.926750][T14566] name failslab, interval 1, probability 0, space 0, times 0 [ 244.939640][T14566] CPU: 1 UID: 0 PID: 14566 Comm: syz.4.3728 Not tainted syzkaller #0 PREEMPT(voluntary) [ 244.939705][T14566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 244.939723][T14566] Call Trace: [ 244.939733][T14566] [ 244.939745][T14566] __dump_stack+0x1d/0x30 [ 244.939811][T14566] dump_stack_lvl+0x95/0xd0 [ 244.939835][T14566] dump_stack+0x15/0x1b [ 244.939863][T14566] should_fail_ex+0x263/0x280 [ 244.939902][T14566] should_failslab+0x8c/0xb0 [ 244.939963][T14566] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 244.939999][T14566] ? dup_task_struct+0x5b/0x940 [ 244.940090][T14566] dup_task_struct+0x5b/0x940 [ 244.940124][T14566] ? copy_process+0x36d/0x1f10 [ 244.940165][T14566] copy_process+0x37e/0x1f10 [ 244.940279][T14566] ? kstrtouint+0x76/0xc0 [ 244.940338][T14566] ? kstrtouint_from_user+0xa8/0xf0 [ 244.940386][T14566] kernel_clone+0x16b/0x5b0 [ 244.940412][T14566] ? vfs_write+0x86e/0x9f0 [ 244.940439][T14566] __x64_sys_clone+0x143/0x180 [ 244.940473][T14566] x64_sys_call+0x12d0/0x3000 [ 244.940540][T14566] do_syscall_64+0xc0/0x2a0 [ 244.940599][T14566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.940628][T14566] RIP: 0033:0x7fd8f78baeb9 [ 244.940650][T14566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.940670][T14566] RSP: 002b:00007fd8f6316fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 244.940691][T14566] RAX: ffffffffffffffda RBX: 00007fd8f7b35fa0 RCX: 00007fd8f78baeb9 [ 244.940761][T14566] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 244.940809][T14566] RBP: 00007fd8f6317090 R08: 0000000000000000 R09: 0000000000000000 [ 244.940824][T14566] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 244.940838][T14566] R13: 00007fd8f7b36038 R14: 00007fd8f7b35fa0 R15: 00007fffb0be6e88 [ 244.940863][T14566] [ 244.944481][T14567] loop0: detected capacity change from 0 to 512 [ 245.157712][T14567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.221041][T14567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3729'. [ 245.293609][T12730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.352346][T14579] SELinux: Context : is not valid (left unmapped). [ 245.380811][T14581] loop2: detected capacity change from 0 to 8192 [ 245.387393][ T3395] tipc: Node number set to 2130706433 [ 245.444916][T14587] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3735'. [ 245.517993][T14582] lo speed is unknown, defaulting to 1000 [ 245.527413][T14593] macvtap1: entered promiscuous mode [ 245.532935][T14593] macvtap1: entered allmulticast mode [ 245.539632][T14593] syz_tun: entered promiscuous mode [ 245.545059][T14593] syz_tun: entered allmulticast mode [ 245.558530][T14593] team0: Device macvtap1 failed to register rx_handler [ 245.573452][T14593] syz_tun: left allmulticast mode [ 245.578698][T14593] syz_tun: left promiscuous mode [ 245.644821][T14597] loop2: detected capacity change from 0 to 512 [ 245.726953][T14604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.730609][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 245.730661][ T29] audit: type=1326 audit(1016.626:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14608 comm="syz.3.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f628aeb9 code=0x7ffc0000 [ 245.776284][T14597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.791512][ T29] audit: type=1326 audit(1016.689:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14608 comm="syz.3.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f28f628aeb9 code=0x7ffc0000 [ 245.815179][ T29] audit: type=1326 audit(1016.689:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14608 comm="syz.3.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f628aeb9 code=0x7ffc0000 [ 245.838286][ T29] audit: type=1326 audit(1016.689:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14608 comm="syz.3.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f28f628aeb9 code=0x7ffc0000 [ 245.861984][ T29] audit: type=1326 audit(1016.699:4402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14608 comm="syz.3.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f628aeb9 code=0x7ffc0000 [ 245.884992][ T29] audit: type=1326 audit(1016.699:4403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14608 comm="syz.3.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f28f628aeb9 code=0x7ffc0000 [ 245.908721][ T29] audit: type=1326 audit(1016.699:4404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14608 comm="syz.3.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f628aeb9 code=0x7ffc0000 [ 245.932510][ T29] audit: type=1326 audit(1016.699:4405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14608 comm="syz.3.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f28f628aeb9 code=0x7ffc0000 [ 245.955452][ T29] audit: type=1326 audit(1016.699:4406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14608 comm="syz.3.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f628aeb9 code=0x7ffc0000 [ 245.979264][ T29] audit: type=1326 audit(1016.699:4407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14608 comm="syz.3.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f28f628aeb9 code=0x7ffc0000 [ 246.002732][T14609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.046489][T14618] netlink: 'syz.3.3745': attribute type 1 has an invalid length. [ 246.104771][T14618] 8021q: adding VLAN 0 to HW filter on device bond3 [ 246.131797][T14618] erspan0: entered allmulticast mode [ 246.140864][T14618] bond3: (slave erspan0): making interface the new active one [ 246.149997][T14618] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 246.159011][ T3410] usb 5-1: enqueue for inactive port 0 [ 246.170189][ T3410] usb 5-1: enqueue for inactive port 0 [ 246.197114][T14618] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3745'. [ 246.263782][ T3410] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 246.365567][T14630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3749'. [ 246.404027][T14620] ================================================================== [ 246.412189][T14620] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 246.422064][T14620] [ 246.424425][T14620] read-write to 0xffffffff86a09a00 of 8 bytes by interrupt on cpu 1: [ 246.432534][T14620] tick_do_update_jiffies64+0x113/0x1c0 [ 246.438118][T14620] tick_nohz_handler+0x8d/0x3d0 [ 246.443007][T14620] __hrtimer_run_queues+0x20f/0x590 [ 246.448268][T14620] hrtimer_interrupt+0x269/0x810 [ 246.453262][T14620] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 246.459214][T14620] sysvec_apic_timer_interrupt+0x32/0x80 [ 246.464972][T14620] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 246.471001][T14620] [ 246.473348][T14620] read to 0xffffffff86a09a00 of 8 bytes by task 14620 on cpu 0: [ 246.480998][T14620] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 246.487277][T14620] count_shadow_nodes+0x6a/0x230 [ 246.492258][T14620] do_shrink_slab+0x63/0x670 [ 246.496885][T14620] shrink_slab+0x538/0x880 [ 246.501331][T14620] shrink_node+0x6cb/0x2000 [ 246.505885][T14620] do_try_to_free_pages+0x404/0xcc0 [ 246.511129][T14620] try_to_free_mem_cgroup_pages+0x222/0x470 [ 246.517080][T14620] try_charge_memcg+0x37e/0xa10 [ 246.521954][T14620] obj_cgroup_charge_pages+0x23/0xc0 [ 246.527287][T14620] __memcg_kmem_charge_page+0x9e/0x170 [ 246.532781][T14620] __alloc_frozen_pages_noprof+0x18a/0x350 [ 246.538627][T14620] alloc_pages_mpol+0xb3/0x260 [ 246.543514][T14620] alloc_pages_noprof+0x8f/0x130 [ 246.548492][T14620] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 246.554458][T14620] __kvmalloc_node_noprof+0x471/0x680 [ 246.559872][T14620] ip_set_alloc+0x24/0x30 [ 246.564253][T14620] hash_netiface_create+0x282/0x740 [ 246.569490][T14620] ip_set_create+0x3cf/0x970 [ 246.574120][T14620] nfnetlink_rcv_msg+0x509/0x5d0 [ 246.579094][T14620] netlink_rcv_skb+0x123/0x220 [ 246.583895][T14620] nfnetlink_rcv+0x167/0x1720 [ 246.588608][T14620] netlink_unicast+0x5c0/0x690 [ 246.593411][T14620] netlink_sendmsg+0x5c8/0x6f0 [ 246.598198][T14620] ____sys_sendmsg+0x5af/0x600 [ 246.603014][T14620] ___sys_sendmsg+0x195/0x1e0 [ 246.607717][T14620] __x64_sys_sendmsg+0xd4/0x160 [ 246.612592][T14620] x64_sys_call+0x17ba/0x3000 [ 246.617303][T14620] do_syscall_64+0xc0/0x2a0 [ 246.621852][T14620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.627779][T14620] [ 246.630119][T14620] value changed: 0x00000000ffffebf9 -> 0x00000000ffffebfa [ 246.637242][T14620] [ 246.639578][T14620] Reported by Kernel Concurrency Sanitizer on: [ 246.645747][T14620] CPU: 0 UID: 0 PID: 14620 Comm: syz.1.3746 Not tainted syzkaller #0 PREEMPT(voluntary) [ 246.655578][T14620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.665661][T14620] ================================================================== [ 246.724407][T11796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.805051][T14633] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3748'. [ 250.727079][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!