last executing test programs: 34.331692574s ago: executing program 2 (id=843): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./trace\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r0, 0x0, 0x0}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000380)=0x1000000, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000500)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) 34.009722761s ago: executing program 2 (id=844): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000b80)={0x0, 0x1c, &(0x7f0000000bc0)=[@in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}]}, &(0x7f0000000c00)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0xd, &(0x7f0000000b40)="02eaff0000000000", 0x8) (fail_nth: 3) 33.711226248s ago: executing program 2 (id=846): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000940)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@private2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x9, 0x10000000, 0x1}, {0x0, 0x2, 0x7}, {0x40000, 0xffffffff, 0xae8}, 0x0, 0x3504, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000005}, 0x890) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=ANY=[@ANYBLOB="0c0100001a0007002abd700000000000fe80000000000000000000000000001b00000000000000000000000000000000000300004e2200050000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a000000000000000f00000000000000020000000000000004000000000000030000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0180000000000000e80a000000000000000000000a000200700000000000000014000e00ac14"], 0x10c}}, 0x8000) 33.709047458s ago: executing program 2 (id=848): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./tracefs_dir\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000280)='./tracefs_dir\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)='/', 0x1}], 0x1, 0x8, 0x4) (async) pwritev(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)='/', 0x1}], 0x1, 0x8, 0x4) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000400)='blkio.bfq.empty_time\x00', 0x275a, 0x0) ftruncate(r4, 0x8008975) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r4, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/156, 0x9c}], 0x1, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/116, 0x20001c34}], 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x708082, 0x0) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000480)=r7) (async) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000480)=r7) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000640)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000640)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000f0eca5ec07bd7000ffdbdf2507000000", @ANYRES32=r8], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000f0eca5ec07bd7000ffdbdf2507000000", @ANYRES32=r8], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) 33.583355721s ago: executing program 2 (id=849): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c0000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="03920000004000003c00128008000100677470003000028008000300eec2000008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="14000800fe8000000000000000000000000000bb08000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00T'], 0x6c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x200080c4) 31.762056585s ago: executing program 2 (id=858): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$ptp(r0, &(0x7f00000003c0)=""/201, 0xc9) 31.739071546s ago: executing program 32 (id=858): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$ptp(r0, &(0x7f00000003c0)=""/201, 0xc9) 8.036885787s ago: executing program 1 (id=991): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x83, 0x0, 0x0) open(&(0x7f0000000580)='./file1\x00', 0x66842, 0x21) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x15c, 0x1a, 0x713, 0x0, 0x25dfdbff, {{@in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in=@local, 0x104d2, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x38}, {0x5, 0x0, 0x800, 0xe91, 0xffffffff00000001, 0x10000000, 0x80000001, 0x543}, {0x1000000000004, 0x7fffffffffffffff, 0x100, 0xc}, {}, 0x70bd26, 0x3505, 0xa, 0x4, 0x40, 0x54}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 7.986464858s ago: executing program 1 (id=994): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001540)='blkio.bfq.idle_time\x00', 0x275a, 0x0) sendmsg$unix(r1, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000001640)=r2, 0x4) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000000000000, 0x40000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x3}, 0x10, 0x0, 0x0, 0x8, 0x5, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xf6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x2140) 7.91121681s ago: executing program 1 (id=995): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x4) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x5) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x230302, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000200)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000019200)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000019240)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000019280)='./tracing\x00', &(0x7f00000192c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000019300)='./tracing/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f0000019340)='8', 0x1) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x43c37000) perf_event_open(&(0x7f0000019380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x3, 0x9, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) (fail_nth: 2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000019400)=ANY=[], 0x20) 7.809548112s ago: executing program 4 (id=997): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x5, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) poll(&(0x7f0000000bc0), 0x20000000000000b5, 0x9) perf_event_open(0x0, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000a00)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x18049eae6f2378d6, 0x2021}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xfffffffe}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000980)=ANY=[], 0x1, 0x2d7, &(0x7f0000001340)="$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") write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @loopback}, {0xa, 0x4e20, 0x0, @loopback}, 0xffffffffffffffff, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f00000006c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000840)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x40091}, 0x40) 7.035873771s ago: executing program 1 (id=1001): perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_config_ext={0xf5, 0x5b6}, 0x11ecc9, 0x1224, 0x0, 0x7, 0x8, 0x2da0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f00000017c0), 0x200000000002, 0x103643) fadvise64(r0, 0x400000000065, 0x807187, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)={0x54, r2, 0x1, 0x70bd2b, 0xfffffffe, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc, 0x90, 0x80003}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x20044010) unshare(0x2c040480) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(r3, 0x84, 0x7d, &(0x7f0000001840)={0x1, 0x5}, 0x0) semtimedop(0x0, &(0x7f0000001780)=[{0x2, 0x4, 0x1000}], 0x1, 0x0) unshare(0x8000000) r4 = syz_io_uring_setup(0x7ac, &(0x7f0000000080)={0x0, 0x4ced, 0x10803, 0x7fffd, 0x40055}, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYBLOB="000000000000e0ff0600000000000000000020"], 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b000000000000000000000000000000000000000005000000000000020007000000000000000000"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='syzkaller\x00'}, 0x48) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000001800)=0x5) socket$inet6(0xa, 0x1, 0x3) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001640)={r7, 0x18000000000002a0, 0x22, 0x0, &(0x7f00000016c0)="b9ff0300600d698cff9e13f008004de7f9c764360000ff3a00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) syz_usbip_server_init(0x4) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x50, 0x2, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x1, 0xc4, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x9f, 0x0, 0x2}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x4, 0x6, 0x7f, 0x40, 0x98}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}}) 6.855067405s ago: executing program 4 (id=1006): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) pselect6(0x40, &(0x7f0000000000)={0x2, 0x3, 0xc, 0x8000000000000001, 0xe257, 0x10000, 0x2, 0x8001}, &(0x7f0000000140)={0x9, 0xfff, 0xfffffffffffff030, 0xc0, 0x8c, 0x8f, 0x400, 0x4}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={[0x1]}, 0x8}) 6.732987218s ago: executing program 4 (id=1007): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0xd}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0x1, 0xb}, {0x5, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000711036000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000940)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in6=@private0}, {@in6=@empty, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0xfffffffffffffffd, 0x5, 0x0, 0x2dcd}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x24}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) listen(r4, 0x8) connect$inet(r5, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) r6 = accept$inet(r4, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f000000040000000400000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0x6, &(0x7f0000000440)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r7}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8aa30905b3f90724a65051f35e91d9366e36a0a075c8aa9f83d51d873c39572ee0ee1076ea895d26669b18470d026961b5577ae89fb42751b7ae98922f2841b04a45f61a4957a81e95c4e8135a540d713f85138f59f429efa8ac5fecde037a944cb01eb8f609b710df8ff57d0b057656db223f760189ea56228d5b999ea7e4254e3412df44f0cfe59143492f143933eeb590eba1fe8aabbc9357b5", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r7, &(0x7f00000005c0), &(0x7f0000000600)=@tcp=r6}, 0x20) sendto(r6, &(0x7f0000000640)='ab', 0xfffffcf4, 0x11, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x7, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7ffffffe, 0xc44c}, 0x0, 0x0, 0x0, 0x4, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000a80)) sendmsg$NFT_BATCH(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x110}}, 0x0) 6.434417666s ago: executing program 5 (id=1009): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f00000018c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001900), 0x8, 0x10, &(0x7f0000001940), 0x10}, 0x94) 6.332424058s ago: executing program 5 (id=1010): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001540)='blkio.bfq.idle_time\x00', 0x275a, 0x0) sendmsg$unix(r1, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000001640)=r2, 0x4) recvmsg$unix(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x2140) (fail_nth: 2) 6.325405598s ago: executing program 5 (id=1011): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000440)="99a82b7ca6a7e841d4c1b7df1799e8c9b404f5f1cbcc913fff1759abbcfd9d0f16915f6549c6a1fd9a5f520fd6b0e96928b2859b3fe57153c7c2248d397f2746d91a08be3ac7e3b2f2d90ba6fe91a46d7d109a4c2708e5422c2b6b500fa765aa61bd", 0x62}], 0x1, 0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r4, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000001a00)={0x0, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000b00)={0x5, {{0xa, 0x4e20, 0x1, @mcast1, 0xffe}}, {{0xa, 0x4e22, 0xe308, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3ff}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000c40)=ANY=[@ANYBLOB="03000000000000000a004e240000000cff010000000000000000000000000001080400000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000dc0)=@newtfilter={0xacc, 0x2c, 0x800, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf, 0x6}, {0xfff2, 0xf}, {0x1, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @filter_kind_options=@f_bpf={{0x8}, {0xa88, 0x2, [@TCA_BPF_ACT={0x60c, 0x1, [@m_skbmod={0x14c, 0x12, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0x1, 0xffffffffffffffff, 0x1, 0x3c}, 0x3}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xa}]}, {0xe7, 0x6, "daf37cec9ff46becc8eda667b86fb97cf010ec6fa95971b7583a8f59380bb94ebe352370b6ee7dd1dc0d4f7dc3cd25af1b1ea1f21604134963ec271af5a1b3786039121c475e4e5929029128c8eab31bc6f685a5cac55cc0a47579fff91cf3334966c8f81dd6a6746a4ce7a224f4becd97c6c33b1b1232f4b33f8313662ad5c8cae78144df3eba57b59da4fdf6d46b926e27c77e3a82233d23fedd281ffaa123f0cef5aa0d32e5148e5acf75fa523c31799ff7d11b41e1b228fac2e5253575679f0183f53a5a2de94cf89c6b6b476dca113d123b94427496f77e7df3bb66d63ab0f5d4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_sample={0xd4, 0x2, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x4adcec42, 0x5, 0x2, 0x7}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7f}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x66, 0x6, "edba41d65f192c99ad2d9e4e574fa9d07f2072ca09601a57b84e1d936d4b9223b5389fc283e681ad4dc73b9a7f3773cc074f366446e9503d32a66e733e3de8b7a76ad3a3f28f263b3a36d445e6ec9c0d4200245f97d739ad5add71eecce234f9f4a7"}, {0xc}, {0xc, 0x8, {0x1, 0x6}}}}, @m_ife={0xd8, 0x13, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @random="1a2b0fede891"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x2d, 0x7, 0x9, 0x8365}}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x3d06}]}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x6}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xabb}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x7}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8001}]}]}, {0x3e, 0x6, "05f5d03ae9800cdfd5e3fc6bcb34e2b262b7a186c6d73cf5ef33570d7ab9503883b067f5e22c2f9dfde876f0a4e27f22b80d5bd123098ce6ff3c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0xb8, 0x0, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}]}, {0x84, 0x6, "16f8b75c67c2d887f086ce35ed3b6f5041c29af22ca939b53fac7caa4056e841842ca4a4a5f4528a300dbb4408944c1ce75d51f02ecf4a56668ccd8be194fe7f09c72824008b8c7404f213e257dc17b3590bb38c65ddcf5c3ee7ec2d5104c832b8eb1bec5ef9ee893ce98f922c10bd61d0c7274ea491a92312f6f53dd38923e5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_xt={0x1d0, 0x10, 0x0, 0x0, {{0x7}, {0xe0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x50, 0x6, {0x7ff, 'mangle\x00', 0x6, 0xfffe, "62c3909d7c6314569becd84e7e8af5fe0fb150236fb9df4929a09f904fdf1b1648e1b32cdd5c"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x67, 0x6, {0xfeff, 'raw\x00', 0x49, 0x1, "d9dfe6450355a5aeb45a7f2216de91efa65509f75010038a81fa75ac200d2ff778262246b3908b7ef34dfcafe1d95891d921d08c0c38b66b43e3aac6e5"}}]}, {0xcb, 0x6, "b126bb4efb41229f6d5952816cd44e7827350431b8565af18d489e0beef335f96436e73ffbf396e6b3226446fe8ebecb688593caf77342c88f513925d5bf9e897c1f78013c0f0e7662d35c4a37957f80877c89d6b62f22a129e21f2a54e58c3382e6268232f954ffe941fd0c5263627fe406c6fd51d008a53124b0bad2e2ca06555b82961ae250d825b9d7eff22602bf9e2c1e8fac8f44c3a8b27d71b0178d6cbf569c824a1bae27fac8ac21854dac3bf8feddd365d5b0aabdcffbcc602339cdcce8650a264f6a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x30, 0x1c, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0x58, 0x17, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, ' \x01\x00'}, @TCA_DEF_DATA={0x7, 0x3, ' \x01\x00'}]}, {0x1b, 0x6, "4d620d68e31d89fec04d0972453b03f2952350f0f3c3f1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_POLICE={0x464, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x2, 0x2, 0xc, {0x93, 0x2, 0x2800, 0x4, 0x8001, 0x7}, {0x8, 0x2, 0xffff, 0x3, 0xffff, 0x2}, 0x0, 0x4, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff7, 0x120, 0xff, 0x9, 0x4, 0x3, 0x1c, 0x61598575, 0x6, 0x7ff, 0xf, 0x3, 0x3, 0x8, 0xfff, 0xf, 0x6, 0x523, 0x8, 0x30a8, 0x3, 0xb3, 0x0, 0x9c9, 0x3, 0x4, 0xfffffff8, 0x5de, 0x3, 0x80000001, 0x3, 0x0, 0x1, 0x3, 0x10001, 0xfffffffe, 0x1, 0x8000, 0x0, 0x351, 0x8, 0x3, 0x1, 0x7fffffff, 0x80, 0x8, 0x7, 0x9, 0x401, 0x7927, 0x9, 0x9, 0xdbb9, 0x7, 0x10, 0x27, 0x31f9, 0x8, 0x3ff, 0x4, 0xe87, 0x7, 0x8, 0x2, 0xe4e, 0x4, 0xd38e, 0x6, 0x3, 0xd6ce, 0x1, 0x1ff, 0x1, 0x0, 0xc94c, 0xe7e3, 0x8, 0xfffffffe, 0x56, 0x1, 0xfffffffe, 0x8, 0x4, 0x2, 0xfffffffc, 0x8, 0xa, 0x3, 0x3210, 0x5, 0x1, 0x7ff, 0x2, 0x2, 0x8, 0x30000000, 0x1e000, 0x200, 0x4c2, 0x5, 0x200, 0x8, 0x6, 0x9, 0x1ff, 0x2, 0x4, 0x7, 0x10001, 0x0, 0x40, 0x3000, 0x6, 0xa, 0x247, 0x1, 0x6, 0x8fb, 0x10, 0x95, 0x1, 0x30000, 0x10000, 0x9, 0x6, 0x55, 0x2, 0x1, 0x5, 0x3, 0x7, 0x7, 0x1000, 0x1, 0x7, 0x6, 0xd, 0x9, 0xe607, 0x770, 0x80000001, 0x10000, 0x6, 0xa00000, 0x4, 0x5, 0x11885518, 0x8001, 0xe98e, 0x3, 0x4, 0xcfc, 0x8, 0x9, 0xfcd, 0xffffffff, 0x2, 0x40, 0x10001, 0x1ff, 0x7, 0x1, 0x4, 0x80, 0xc, 0x800, 0x3, 0x4, 0x0, 0x8001, 0x4, 0x5, 0x8, 0xffff, 0xfff, 0x8, 0x5, 0x0, 0x53, 0x80, 0x4, 0x5, 0x0, 0x10, 0x80000000, 0x9, 0xfd, 0x7026, 0x8, 0x7, 0x0, 0x0, 0x1, 0x0, 0x6, 0x6, 0x1ff, 0xfa4e, 0x6, 0x7fff, 0x9, 0x5, 0x3, 0x5, 0x7ff, 0xc, 0x10000, 0x4bd9, 0x1, 0xa8, 0x3, 0x3, 0xf8, 0x1, 0x9, 0xd, 0x4, 0x0, 0xffff0001, 0x81, 0xa, 0x2, 0x9, 0x7, 0x4, 0x0, 0x3, 0x7fffffff, 0x2, 0x7, 0x4, 0x9, 0x9, 0x0, 0x8a6, 0x40, 0x1, 0x7ff, 0x3, 0xd32, 0x1, 0x4, 0xbe, 0x1, 0x684d, 0x8, 0xc, 0x9, 0x1000, 0x5960, 0xfa, 0xfffffff9, 0x7, 0x0, 0x4, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3ff}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0xd9}]}, 0xacc}, 0x1, 0x0, 0x0, 0x8004005}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)=@ipv6_newrule={0xa4, 0x20, 0x600, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0xb, 0x5, 0x0, 0x0, 0x6, 0x8}, [@FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00'}, @FRA_DST={0x14, 0x1, @empty}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x1}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x6}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth0_macvtap\x00'}, @FRA_SRC={0x14, 0x2, @remote}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4001000}, 0x4) socket$rxrpc(0x21, 0x2, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, 0x0, 0x0, 0x4008440) socket$nl_rdma(0x10, 0x3, 0x14) quotactl_fd$Q_GETINFO(r4, 0xffffffff80000501, 0x0, &(0x7f0000000d00)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) 6.015490915s ago: executing program 5 (id=1012): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000240)=""/50, 0x32}], 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2180, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5a}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r2) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r5, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x804}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20008801) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000400)={'pimreg0\x00', 0x7c2}) sendmmsg(r1, &(0x7f0000000080)=[{{&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}, 0x3}}, 0x80, 0x0}, 0x5b4}], 0x1, 0x20000850) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 3.924022746s ago: executing program 4 (id=1013): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80000) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f0000000180)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x4e20, 0x100bf2c, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffff805}, 0x1c) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f00000002c0)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCFLSH(r6, 0x541b, 0xfffffffffffffffd) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000040)=""/139) close(r1) close(r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r3) 3.840363958s ago: executing program 1 (id=1016): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) tkill(0x0, 0x7) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f0000000100)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000540)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x181042, 0x65) pwrite64(r1, &(0x7f00000009c0)='2', 0x1, 0x84fed0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x129042, 0xa1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x4000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000140)={{{@in=@private, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, &(0x7f0000000d80), &(0x7f0000000dc0)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.834056338s ago: executing program 5 (id=1017): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x5, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) poll(&(0x7f0000000bc0), 0x20000000000000b5, 0x9) perf_event_open(0x0, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000a00)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x18049eae6f2378d6, 0x2021}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xfffffffe}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000980)=ANY=[], 0x1, 0x2d7, &(0x7f0000001340)="$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") write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @loopback}, {0xa, 0x4e20, 0x0, @loopback}, 0xffffffffffffffff, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f00000006c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000840)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x40091}, 0x40) 3.535488605s ago: executing program 0 (id=1018): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01012dbd7000fedbdf251100000008001500c00000000800150000000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000804) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000effd0010000000004000700070100000807f3007500fcff0003000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x109, &(0x7f0000000240)=""/265, 0x41000}, 0x94) sendmsg$nl_generic(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000002b40)={0x18, 0x40, 0x107, 0x70ad2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000021}, 0x80) 3.469723397s ago: executing program 0 (id=1019): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x1082, 0x80000000, 0x0, 0x9, 0x7ffffc, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)=""/219, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)) semop(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x98, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xd], 0x0, [0x1, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7ff}]}}]}, 0x98}}, 0x0) (fail_nth: 2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x200a0204) keyctl$join(0x1, 0x0) r2 = socket(0x15, 0x2, 0x200000) r3 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r3, &(0x7f00000003c0)="30000000240001060100"/20, 0x14) write(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r2, 0x84, 0x7a, &(0x7f0000000240)={0x1, 0xffffffffffffffff, 0x1800}, &(0x7f0000000280)=0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r4, &(0x7f00000004c0)='4', 0x1) 3.427312478s ago: executing program 0 (id=1020): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000280)="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", 0x110, 0xfffffffffffffffd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x1e, 0x7ffffffe}]}) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000680)="314dd0", 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/llc/core\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/141, 0x8d}], 0x1, 0x7f, 0x8) preadv2(r1, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/212, 0xd4}], 0x1, 0x8, 0x4, 0x14) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000006c0)={0x2, 0x7fffffff, 0x6, 0x94, 0xd800}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000e80301800000000000"], 0x28}}, 0x4010) 3.401182388s ago: executing program 0 (id=1022): socket$kcm(0x11, 0x200000000000003, 0x300) r0 = socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x60000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 3.32418619s ago: executing program 3 (id=1023): r0 = syz_ublk_setup_io_uring(0x68e7, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000001c0)={0x20000000}) dup3(r0, r1, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000200)={0xa0000013}) 3.163842574s ago: executing program 0 (id=1024): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000440)="99a82b7ca6a7e841d4c1b7df1799e8c9b404f5f1cbcc913fff1759abbcfd9d0f16915f6549c6a1fd9a5f520fd6b0e96928b2859b3fe57153c7c2248d397f2746d91a08be3ac7e3b2f2d90ba6fe91a46d7d109a4c2708e5422c2b6b500fa765aa61bd", 0x62}], 0x1, 0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r4, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000001a00)={0x0, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000b00)={0x5, {{0xa, 0x4e20, 0x1, @mcast1, 0xffe}}, {{0xa, 0x4e22, 0xe308, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3ff}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000c40)=ANY=[@ANYBLOB="03000000000000000a004e240000000cff010000000000000000000000000001080400000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000dc0)=@newtfilter={0xbe4, 0x2c, 0x800, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf, 0x6}, {0xfff2, 0xf}, {0x1, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @filter_kind_options=@f_bpf={{0x8}, {0xba0, 0x2, [@TCA_BPF_ACT={0x724, 0x1, [@m_skbmod={0x14c, 0x12, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0x1, 0xffffffffffffffff, 0x1, 0x3c}, 0x3}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xa}]}, {0xe7, 0x6, "daf37cec9ff46becc8eda667b86fb97cf010ec6fa95971b7583a8f59380bb94ebe352370b6ee7dd1dc0d4f7dc3cd25af1b1ea1f21604134963ec271af5a1b3786039121c475e4e5929029128c8eab31bc6f685a5cac55cc0a47579fff91cf3334966c8f81dd6a6746a4ce7a224f4becd97c6c33b1b1232f4b33f8313662ad5c8cae78144df3eba57b59da4fdf6d46b926e27c77e3a82233d23fedd281ffaa123f0cef5aa0d32e5148e5acf75fa523c31799ff7d11b41e1b228fac2e5253575679f0183f53a5a2de94cf89c6b6b476dca113d123b94427496f77e7df3bb66d63ab0f5d4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_sample={0xd4, 0x2, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x4adcec42, 0x5, 0x2, 0x7}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7f}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x66, 0x6, "edba41d65f192c99ad2d9e4e574fa9d07f2072ca09601a57b84e1d936d4b9223b5389fc283e681ad4dc73b9a7f3773cc074f366446e9503d32a66e733e3de8b7a76ad3a3f28f263b3a36d445e6ec9c0d4200245f97d739ad5add71eecce234f9f4a7"}, {0xc}, {0xc, 0x8, {0x1, 0x6}}}}, @m_ife={0xd8, 0x13, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @random="1a2b0fede891"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x2d, 0x7, 0x9, 0x8365}}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x3d06}]}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x6}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xabb}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x7}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8001}]}]}, {0x3e, 0x6, "05f5d03ae9800cdfd5e3fc6bcb34e2b262b7a186c6d73cf5ef33570d7ab9503883b067f5e22c2f9dfde876f0a4e27f22b80d5bd123098ce6ff3c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0xb8, 0x0, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}]}, {0x84, 0x6, "16f8b75c67c2d887f086ce35ed3b6f5041c29af22ca939b53fac7caa4056e841842ca4a4a5f4528a300dbb4408944c1ce75d51f02ecf4a56668ccd8be194fe7f09c72824008b8c7404f213e257dc17b3590bb38c65ddcf5c3ee7ec2d5104c832b8eb1bec5ef9ee893ce98f922c10bd61d0c7274ea491a92312f6f53dd38923e5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_tunnel_key={0x118, 0x1b, 0x0, 0x0, {{0xf}, {0x4}, {0xe7, 0x6, "b9cbce0be480ca6d58704fd3b56250ba11d901b6111768a3dac09566d16679133e9cd8b7807d350a525f48ecc85fe20f653c248d9b696bd7e2f937e0f2aac9f7fcced65946f8cba46bc6e6963cb511781fcf9a1f2df9e4cfffa71379839f4a8f787d001cb8dce5823183672497bba223ba540509ff1f87d40914a0b249bf5f827f76d379b8ccaa77065ca749fac6a85809ed86cd60cc668b8378eb9984e691ba9815f4a154f9ac872733b3a6b186d21d2214e0e54d8e59f1f79b0f82aa2504c9f513beec602401c5e3f59c042e53df0738edc598275d6ffb91baab23c303d0249d37e6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7, 0x1}}}}, @m_xt={0x1d0, 0x10, 0x0, 0x0, {{0x7}, {0xe0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x50, 0x6, {0x7ff, 'mangle\x00', 0x6, 0xfffe, "62c3909d7c6314569becd84e7e8af5fe0fb150236fb9df4929a09f904fdf1b1648e1b32cdd5c"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x67, 0x6, {0xfeff, 'raw\x00', 0x49, 0x1, "d9dfe6450355a5aeb45a7f2216de91efa65509f75010038a81fa75ac200d2ff778262246b3908b7ef34dfcafe1d95891d921d08c0c38b66b43e3aac6e5"}}]}, {0xcb, 0x6, "b126bb4efb41229f6d5952816cd44e7827350431b8565af18d489e0beef335f96436e73ffbf396e6b3226446fe8ebecb688593caf77342c88f513925d5bf9e897c1f78013c0f0e7662d35c4a37957f80877c89d6b62f22a129e21f2a54e58c3382e6268232f954ffe941fd0c5263627fe406c6fd51d008a53124b0bad2e2ca06555b82961ae250d825b9d7eff22602bf9e2c1e8fac8f44c3a8b27d71b0178d6cbf569c824a1bae27fac8ac21854dac3bf8feddd365d5b0aabdcffbcc602339cdcce8650a264f6a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x30, 0x1c, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0x58, 0x17, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, ' \x01\x00'}, @TCA_DEF_DATA={0x7, 0x3, ' \x01\x00'}]}, {0x1b, 0x6, "4d620d68e31d89fec04d0972453b03f2952350f0f3c3f1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_POLICE={0x464, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x2, 0x2, 0xc, {0x93, 0x2, 0x2800, 0x4, 0x8001, 0x7}, {0x8, 0x2, 0xffff, 0x3, 0xffff, 0x2}, 0x0, 0x4, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff7, 0x120, 0xff, 0x9, 0x4, 0x3, 0x1c, 0x61598575, 0x6, 0x7ff, 0xf, 0x3, 0x3, 0x8, 0xfff, 0xf, 0x6, 0x523, 0x8, 0x30a8, 0x3, 0xb3, 0x0, 0x9c9, 0x3, 0x4, 0xfffffff8, 0x5de, 0x3, 0x80000001, 0x3, 0x0, 0x1, 0x3, 0x10001, 0xfffffffe, 0x1, 0x8000, 0x0, 0x351, 0x8, 0x3, 0x1, 0x7fffffff, 0x80, 0x8, 0x7, 0x9, 0x401, 0x7927, 0x9, 0x9, 0xdbb9, 0x7, 0x10, 0x27, 0x31f9, 0x8, 0x3ff, 0x4, 0xe87, 0x7, 0x8, 0x2, 0xe4e, 0x4, 0xd38e, 0x6, 0x3, 0xd6ce, 0x1, 0x1ff, 0x1, 0x0, 0xc94c, 0xe7e3, 0x8, 0xfffffffe, 0x56, 0x1, 0xfffffffe, 0x8, 0x4, 0x2, 0xfffffffc, 0x8, 0xa, 0x3, 0x3210, 0x5, 0x1, 0x7ff, 0x2, 0x2, 0x8, 0x30000000, 0x1e000, 0x200, 0x4c2, 0x5, 0x200, 0x8, 0x6, 0x9, 0x1ff, 0x2, 0x4, 0x7, 0x10001, 0x0, 0x40, 0x3000, 0x6, 0xa, 0x247, 0x1, 0x6, 0x8fb, 0x10, 0x95, 0x1, 0x30000, 0x10000, 0x9, 0x6, 0x55, 0x2, 0x1, 0x5, 0x3, 0x7, 0x7, 0x1000, 0x1, 0x7, 0x6, 0xd, 0x9, 0xe607, 0x770, 0x80000001, 0x10000, 0x6, 0xa00000, 0x4, 0x5, 0x11885518, 0x8001, 0xe98e, 0x3, 0x4, 0xcfc, 0x8, 0x9, 0xfcd, 0xffffffff, 0x2, 0x40, 0x10001, 0x1ff, 0x7, 0x1, 0x4, 0x80, 0xc, 0x800, 0x3, 0x4, 0x0, 0x8001, 0x4, 0x5, 0x8, 0xffff, 0xfff, 0x8, 0x5, 0x0, 0x53, 0x80, 0x4, 0x5, 0x0, 0x10, 0x80000000, 0x9, 0xfd, 0x7026, 0x8, 0x7, 0x0, 0x0, 0x1, 0x0, 0x6, 0x6, 0x1ff, 0xfa4e, 0x6, 0x7fff, 0x9, 0x5, 0x3, 0x5, 0x7ff, 0xc, 0x10000, 0x4bd9, 0x1, 0xa8, 0x3, 0x3, 0xf8, 0x1, 0x9, 0xd, 0x4, 0x0, 0xffff0001, 0x81, 0xa, 0x2, 0x9, 0x7, 0x4, 0x0, 0x3, 0x7fffffff, 0x2, 0x7, 0x4, 0x9, 0x9, 0x0, 0x8a6, 0x40, 0x1, 0x7ff, 0x3, 0xd32, 0x1, 0x4, 0xbe, 0x1, 0x684d, 0x8, 0xc, 0x9, 0x1000, 0x5960, 0xfa, 0xfffffff9, 0x7, 0x0, 0x4, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3ff}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0xd9}]}, 0xbe4}, 0x1, 0x0, 0x0, 0x8004005}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)=@ipv6_newrule={0xa4, 0x20, 0x600, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0xb, 0x5, 0x0, 0x0, 0x6, 0x8}, [@FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00'}, @FRA_DST={0x14, 0x1, @empty}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x1}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x6}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth0_macvtap\x00'}, @FRA_SRC={0x14, 0x2, @remote}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4001000}, 0x4) socket$rxrpc(0x21, 0x2, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, 0x0, 0x0, 0x4008440) socket$nl_rdma(0x10, 0x3, 0x14) quotactl_fd$Q_GETINFO(r4, 0xffffffff80000501, 0x0, &(0x7f0000000d00)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) 3.154285374s ago: executing program 1 (id=1025): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0xd}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0x1, 0xb}, {0x5, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000711036000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000940)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in6=@private0}, {@in6=@empty, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0xfffffffffffffffd, 0x5, 0x0, 0x2dcd}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x24}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) listen(r4, 0x8) connect$inet(r5, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) r6 = accept$inet(r4, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f000000040000000400000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0x6, &(0x7f0000000440)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r7}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8aa30905b3f90724a65051f35e91d9366e36a0a075c8aa9f83d51d873c39572ee0ee1076ea895d26669b18470d026961b5577ae89fb42751b7ae98922f2841b04a45f61a4957a81e95c4e8135a540d713f85138f59f429efa8ac5fecde037a944cb01eb8f609b710df8ff57d0b057656db223f760189ea56228d5b999ea7e4254e3412df44f0cfe59143492f143933eeb590eba1fe8aabbc9357b5", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r7, &(0x7f00000005c0), &(0x7f0000000600)=@tcp=r6}, 0x20) sendto(r6, &(0x7f0000000640)='ab', 0xfffffcf4, 0x11, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x7, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7ffffffe, 0xc44c}, 0x0, 0x0, 0x0, 0x4, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000a80)) sendmsg$NFT_BATCH(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x110}}, 0x0) 3.150867074s ago: executing program 3 (id=1026): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca58c30f81b6079f}) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) fchdir(r0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x200000, &(0x7f00000009c0)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000a00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000dc0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x1224, 0x88, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) (rerun: 32) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000e40)) sendmsg$nl_xfrm(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="500100001000130700000000fcdbdf256401010100000000000000000000000020010000000000000000000000000002000400004e2100030a0000a021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x8040880}, 0x2014) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001080)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r3, 0xc17a) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffefffc, 0x4e0e7b2abb8edb28, @perf_config_ext={0xc8d, 0x9}, 0x1ccc8, 0x201224, 0x0, 0x6, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001140)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) ftruncate(r4, 0xc17a) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x6, 0x0) (async) r5 = socket(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001180)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000280000000000069078ac1414bbac1414aa00004e22140a6fe5b324be57a966c564230d033b95073eb35f094ba2e01e7ad9bb0c94d5fa2ee03c874a2200b4126241f2bbe6df4a8f09987c4943f0e6261859e12864464b713b8b603b8c0dec7c28d4af6f56ac4a5fa0fbd445ae261efe86efb5fcc847591860b52901fd7e2b07311ce7c1f82964a743a4b5a6a1df3857b7937ced1cc609c92f2bb7d899203fe645edf984859da4037148547887a84060744bebcc6fefa30a3e52847f6d077f0e495c4a8328e33e069a89", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 3.085071116s ago: executing program 0 (id=1027): perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_config_ext={0xf5, 0x5b6}, 0x11ecc9, 0x1224, 0x0, 0x7, 0x8, 0x2da0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f00000017c0), 0x200000000002, 0x103643) fadvise64(r0, 0x400000000065, 0x807187, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)={0x54, r2, 0x1, 0x70bd2b, 0xfffffffe, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc, 0x90, 0x80003}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x20044010) unshare(0x2c040480) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(r3, 0x84, 0x7d, &(0x7f0000001840)={0x1, 0x5}, 0x0) semtimedop(0x0, &(0x7f0000001780)=[{0x2, 0x4, 0x1000}], 0x1, 0x0) unshare(0x8000000) r4 = syz_io_uring_setup(0x7ac, &(0x7f0000000080)={0x0, 0x4ced, 0x10803, 0x7fffd, 0x40055}, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYBLOB="000000000000e0ff0600000000000000000020"], 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b000000000000000000000000000000000000000005000000000000020007000000000000000000"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='syzkaller\x00'}, 0x48) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000001800)=0x5) socket$inet6(0xa, 0x1, 0x3) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001640)={r7, 0x18000000000002a0, 0x22, 0x0, &(0x7f00000016c0)="b9ff0300600d698cff9e13f008004de7f9c764360000ff3a00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) syz_usbip_server_init(0x4) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x50, 0x2, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x1, 0xc4, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x9f, 0x0, 0x2}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x4, 0x6, 0x7f, 0x40, 0x98}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}}) 3.017662528s ago: executing program 4 (id=1028): fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) pselect6(0x40, &(0x7f0000000000)={0x2, 0x3, 0xc, 0x8000000000000001, 0xe257, 0x10000, 0x2, 0x8001}, &(0x7f0000000140)={0x9, 0xfff, 0xfffffffffffff030, 0xc0, 0x8c, 0x8f, 0x400, 0x4}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={[0x1]}, 0x8}) 2.951247359s ago: executing program 4 (id=1029): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x1082, 0x80000000, 0x0, 0x9, 0x7ffffc, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)=""/219, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)) semop(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x98, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xd], 0x0, [0x1, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7ff}]}}]}, 0x98}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x200a0204) keyctl$join(0x1, 0x0) r2 = socket(0x15, 0x2, 0x200000) r3 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x1224, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x10, 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000bf0300000000000085000000b5000000b70000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r3, &(0x7f00000003c0)="30000000240001060100"/20, 0x14) write(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r2, 0x84, 0x7a, &(0x7f0000000240)={0x1, 0xffffffffffffffff, 0x1800}, &(0x7f0000000280)=0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, &(0x7f00000004c0)='4', 0x1) 2.951040979s ago: executing program 3 (id=1030): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)={0x18, 0x66, 0x503, 0x0, 0x0, "", [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0x110, 0x0, 0x0, @binary}]}]}, 0x18}], 0x1, 0x0, 0x0, 0x24008881}, 0x14008010) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xffffffffffffffe0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2.92445388s ago: executing program 3 (id=1031): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0xa8, 0x0, 0x45f55138, 0x0, 0x0, 0x3}, 0x0, 0xffffffffbfffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x25) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000540)={0x0, 0x6, 0x30}, &(0x7f0000000580)=0xc) set_mempolicy(0x3, 0x0, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000680)={'filter\x00', 0x10000000000002a9, [{}, {0x0, 0x100000000000000}]}, 0x68) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000700)=ANY=[], 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) write(r4, &(0x7f0000000980)='100\n', 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)) perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x7, 0x100}, 0x205, 0x4, 0x43a1bd76, 0x8, 0x109, 0x6, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x777) perf_event_open(&(0x7f0000000ac0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = fsopen(&(0x7f0000000b40)='configfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b80)='\x00', &(0x7f0000000bc0)='(!\xef(.(\\-]\x00', 0x0) close(r5) 2.90490901s ago: executing program 5 (id=1032): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = shmget$private(0x0, 0x4000, 0x400, &(0x7f00003c6000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r1 = shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r1) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x3ff) r2 = getpid() bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x38) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x9, &(0x7f0000000940)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa10000000000000701000006feffffb702000008000000b70300000000000085000000ce00000095"], &(0x7f00000009c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) close(r5) r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000200)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x10000, 0x7fff, 0x100, 0xa, 0x3, 0xffffffff, 0x0, 0x5}}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRESOCT=r4], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x104}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000c00)='syzkaller\x00'}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000d40)=ANY=[@ANYRES64=r9], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r7, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.868526781s ago: executing program 3 (id=1033): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000280)="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", 0x110, 0xfffffffffffffffd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x1e, 0x7ffffffe}]}) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000680)="314dd0", 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/llc/core\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/141, 0x8d}], 0x1, 0x7f, 0x8) preadv2(r1, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/212, 0xd4}], 0x1, 0x8, 0x4, 0x14) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000006c0)={0x2, 0x7fffffff, 0x6, 0x94, 0xd800}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000e80301800000000000"], 0x28}}, 0x4010) 0s ago: executing program 3 (id=1034): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x681c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7, 0x4}, 0x13c0e8, 0x0, 0x0, 0x989c6d54a3fb7abf, 0x3, 0x10005, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) process_mrelease(0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xd, 0x7, 0xa8, 0x0, 0x0, 0x5, 0x40802, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x8000000000000, 0x1}, 0x201, 0x40, 0x2, 0x7, 0xfffffffffffffff7, 0xc3c2, 0x8, 0x0, 0xb6cd, 0x0, 0x100000001}, 0x0, 0xe, r0, 0xa) (async) socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='handle 2000000000 0 D', 0x15) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000280)={0x5, 0x200, 0x0, 'queue1\x00', 0x71530568}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 104.995019][ T6177] loop0: p210 start 16776960 is beyond EOD, truncated [ 104.999179][ T6177] loop0: p211 start 16776960 is beyond EOD, truncated [ 104.999240][ T6177] loop0: p212 start 16776960 is beyond EOD, truncated [ 104.999292][ T6177] loop0: p213 start 16776960 is beyond EOD, truncated [ 104.999337][ T6177] loop0: p214 start 16776960 is beyond EOD, truncated [ 104.999455][ T6177] loop0: p215 start 16776960 is beyond EOD, truncated [ 105.001128][ T6177] loop0: p216 start 16776960 is beyond EOD, truncated [ 105.001179][ T6177] loop0: p217 start 16776960 is beyond EOD, truncated [ 105.001230][ T6177] loop0: p218 start 16776960 is beyond EOD, truncated [ 105.001275][ T6177] loop0: p219 start 16776960 is beyond EOD, truncated [ 105.001391][ T6177] loop0: p220 start 16776960 is beyond EOD, truncated [ 105.001503][ T6177] loop0: p221 start 16776960 is beyond EOD, truncated [ 105.001549][ T6177] loop0: p222 start 16776960 is beyond EOD, truncated [ 105.001592][ T6177] loop0: p223 start 16776960 is beyond EOD, truncated [ 105.001643][ T6177] loop0: p224 start 16776960 is beyond EOD, truncated [ 105.001687][ T6177] loop0: p225 start 16776960 is beyond EOD, truncated [ 105.001738][ T6177] loop0: p226 start 16776960 is beyond EOD, truncated [ 105.001832][ T6177] loop0: p227 start 16776960 is beyond EOD, truncated [ 105.001876][ T6177] loop0: p228 start 16776960 is beyond EOD, truncated [ 105.001928][ T6177] loop0: p229 start 16776960 is beyond EOD, truncated [ 105.001980][ T6177] loop0: p230 start 16776960 is beyond EOD, truncated [ 105.002052][ T6177] loop0: p231 start 16776960 is beyond EOD, truncated [ 105.002104][ T6177] loop0: p232 start 16776960 is beyond EOD, truncated [ 105.033498][ T6177] loop0: p233 start 16776960 is beyond EOD, truncated [ 105.033560][ T6177] loop0: p234 start 16776960 is beyond EOD, truncated [ 105.033614][ T6177] loop0: p235 start 16776960 is beyond EOD, truncated [ 105.033666][ T6177] loop0: p236 start 16776960 is beyond EOD, truncated [ 105.033718][ T6177] loop0: p237 start 16776960 is beyond EOD, truncated [ 105.033791][ T6177] loop0: p238 start 16776960 is beyond EOD, truncated [ 105.033842][ T6177] loop0: p239 start 16776960 is beyond EOD, truncated [ 105.033886][ T6177] loop0: p240 start 16776960 is beyond EOD, truncated [ 105.033938][ T6177] loop0: p241 start 16776960 is beyond EOD, truncated [ 105.033981][ T6177] loop0: p242 start 16776960 is beyond EOD, truncated [ 105.034026][ T6177] loop0: p243 start 16776960 is beyond EOD, truncated [ 105.034055][ T6177] loop0: p244 start 16776960 is beyond EOD, truncated [ 105.034151][ T6177] loop0: p245 start 16776960 is beyond EOD, truncated [ 105.040529][ T6177] loop0: p246 start 16776960 is beyond EOD, truncated [ 105.040678][ T6177] loop0: p247 start 16776960 is beyond EOD, truncated [ 105.040723][ T6177] loop0: p248 start 16776960 is beyond EOD, truncated [ 105.040776][ T6177] loop0: p249 start 16776960 is beyond EOD, truncated [ 105.040866][ T6177] loop0: p250 start 16776960 is beyond EOD, truncated [ 105.040909][ T6177] loop0: p251 start 16776960 is beyond EOD, truncated [ 105.040948][ T6177] loop0: p252 start 16776960 is beyond EOD, truncated [ 105.042777][ T6177] loop0: p253 start 16776960 is beyond EOD, truncated [ 105.042829][ T6177] loop0: p254 start 16776960 is beyond EOD, truncated [ 105.042881][ T6177] loop0: p255 start 16776960 is beyond EOD, truncated [ 105.210607][ T6190] netlink: 156 bytes leftover after parsing attributes in process `syz.2.565'. [ 105.902496][ T6212] netlink: 'syz.4.572': attribute type 62 has an invalid length. [ 105.937942][ T6213] siw: device registration error -23 [ 105.960497][ T6213] loop2: detected capacity change from 0 to 512 [ 105.969767][ T6213] FAT-fs (loop2): bogus number of FAT sectors [ 105.969820][ T6213] FAT-fs (loop2): Can't find a valid FAT filesystem [ 106.036508][ T6217] loop1: detected capacity change from 0 to 512 [ 106.093603][ T6217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.102297][ T6217] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.131891][ T29] audit: type=1400 audit(1792580685.231:456): avc: denied { write } for pid=6214 comm="syz.1.573" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.138073][ T6217] FAULT_INJECTION: forcing a failure. [ 106.138073][ T6217] name failslab, interval 1, probability 0, space 0, times 0 [ 106.138167][ T6217] CPU: 1 UID: 0 PID: 6217 Comm: syz.1.573 Not tainted syzkaller #0 PREEMPT(lazy) [ 106.138249][ T6217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 106.138285][ T6217] Call Trace: [ 106.138307][ T6217] [ 106.138331][ T6217] __dump_stack+0x1d/0x30 [ 106.138414][ T6217] dump_stack_lvl+0x95/0xd0 [ 106.138499][ T6217] dump_stack+0x15/0x1b [ 106.138571][ T6217] should_fail_ex+0x262/0x280 [ 106.138744][ T6217] ? find_next_id+0x3d/0x550 [ 106.138791][ T6217] should_failslab+0x8c/0xb0 [ 106.138847][ T6217] __kmalloc_noprof+0xb6/0x4b0 [ 106.138880][ T6217] ? find_next_id+0x3d/0x550 [ 106.138944][ T6217] find_next_id+0x3d/0x550 [ 106.139086][ T6217] ? lockref_put_return+0xf7/0x130 [ 106.139220][ T6217] ? from_kuid+0x151/0x340 [ 106.139379][ T6217] qtree_get_next_id+0x55/0x120 [ 106.139490][ T6217] v2_get_next_id+0x7c/0xb0 [ 106.139595][ T6217] ? __pfx_v2_get_next_id+0x10/0x10 [ 106.139691][ T6217] dquot_get_next_id+0xb2/0xe0 [ 106.139815][ T6217] dquot_get_next_dqblk+0x44/0x200 [ 106.139918][ T6217] quota_getnextquota+0x16d/0x370 [ 106.140012][ T6217] do_quotactl+0x382/0x660 [ 106.140075][ T6217] __se_sys_quotactl_fd+0x229/0x3b0 [ 106.140220][ T6217] __x64_sys_quotactl_fd+0x55/0x70 [ 106.140285][ T6217] x64_sys_call+0x1d0a/0x2550 [ 106.140370][ T6217] do_syscall_64+0x112/0x360 [ 106.140504][ T6217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.140646][ T6217] RIP: 0033:0x7f310d2df559 [ 106.140698][ T6217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.140758][ T6217] RSP: 002b:00007f310bd37028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bb [ 106.140901][ T6217] RAX: ffffffffffffffda RBX: 00007f310d565fa0 RCX: 00007f310d2df559 [ 106.140944][ T6217] RDX: 0000000000000000 RSI: ffffffff80000900 RDI: 0000000000000003 [ 106.141052][ T6217] RBP: 00007f310bd37090 R08: 0000000000000000 R09: 0000000000000000 [ 106.141094][ T6217] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 106.141136][ T6217] R13: 00007f310d566038 R14: 00007f310d565fa0 R15: 00007ffecf4772a8 [ 106.141200][ T6217] [ 106.309169][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.960236][ T3405] usb 7-1: enqueue for inactive port 0 [ 106.960273][ T3405] usb 7-1: enqueue for inactive port 0 [ 107.029098][ T3405] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 107.270112][ T6251] loop1: detected capacity change from 0 to 512 [ 107.305429][ T6251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.305561][ T6251] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.355975][ T6245] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 108.268664][ T6346] loop2: detected capacity change from 0 to 1024 [ 108.270015][ T6346] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 108.270049][ T6346] EXT4-fs (loop2): group descriptors corrupted! [ 108.546755][ T6348] netlink: 48 bytes leftover after parsing attributes in process `syz.2.581'. [ 108.550603][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 108.550616][ T29] audit: type=1400 audit(1792580687.651:458): avc: denied { write } for pid=6345 comm="syz.2.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.550664][ T29] audit: type=1400 audit(1792580687.651:459): avc: denied { setopt } for pid=6345 comm="syz.2.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 109.213085][ T6354] loop2: detected capacity change from 0 to 128 [ 109.252747][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.315548][ T6354] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.322859][ T6354] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.372515][ T6354] FAULT_INJECTION: forcing a failure. [ 109.372515][ T6354] name failslab, interval 1, probability 0, space 0, times 0 [ 109.372584][ T6354] CPU: 1 UID: 0 PID: 6354 Comm: syz.2.584 Not tainted syzkaller #0 PREEMPT(lazy) [ 109.372611][ T6354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 109.372624][ T6354] Call Trace: [ 109.372630][ T6354] [ 109.372638][ T6354] __dump_stack+0x1d/0x30 [ 109.372674][ T6354] dump_stack_lvl+0x95/0xd0 [ 109.372800][ T6354] dump_stack+0x15/0x1b [ 109.372839][ T6354] should_fail_ex+0x262/0x280 [ 109.372881][ T6354] ? ext4_find_extent+0x17f/0x7a0 [ 109.372913][ T6354] should_failslab+0x8c/0xb0 [ 109.372959][ T6354] __kmalloc_noprof+0xb6/0x4b0 [ 109.373077][ T6354] ? ext4_find_extent+0x17f/0x7a0 [ 109.373250][ T6354] ext4_find_extent+0x17f/0x7a0 [ 109.373346][ T6354] ? try_charge_memcg+0x269/0xae0 [ 109.373390][ T6354] ext4_ext_map_blocks+0x10b/0x2f40 [ 109.373422][ T6354] ? __rcu_read_unlock+0x4e/0x70 [ 109.373501][ T6354] ? xa_load+0xb1/0xe0 [ 109.373542][ T6354] ? __rcu_read_unlock+0x4e/0x70 [ 109.373603][ T6354] ? __memcg_slab_post_alloc_hook+0x367/0x8d0 [ 109.373640][ T6354] ? should_fail_ex+0x31/0x280 [ 109.373710][ T6354] ? security_inode_alloc+0x37/0x100 [ 109.373757][ T6354] ext4_map_query_blocks+0xa1/0x500 [ 109.373794][ T6354] ? ext4_es_lookup_extent+0x390/0x4f0 [ 109.373899][ T6354] ext4_map_blocks+0x300/0x9a0 [ 109.373982][ T6354] ext4_getblk+0x135/0x540 [ 109.374022][ T6354] ext4_bread_batch+0x5c/0x320 [ 109.374120][ T6354] __ext4_find_entry+0x869/0xdf0 [ 109.374191][ T6354] ? __memcg_slab_post_alloc_hook+0x367/0x8d0 [ 109.374237][ T6354] ? kmem_cache_alloc_lru_noprof+0x1d6/0x3e0 [ 109.374286][ T6354] ? __d_alloc+0x34/0x320 [ 109.374317][ T6354] ? __d_alloc+0x34/0x320 [ 109.374358][ T6354] ext4_lookup+0xcd/0x3a0 [ 109.374437][ T6354] lookup_one_qstr_excl+0xc7/0x240 [ 109.374485][ T6354] filename_create+0x155/0x220 [ 109.374596][ T6354] filename_mkdirat+0x81/0x300 [ 109.374626][ T6354] __se_sys_mkdirat+0x32/0xf0 [ 109.374655][ T6354] __x64_sys_mkdirat+0x43/0x50 [ 109.374727][ T6354] x64_sys_call+0x368/0x2550 [ 109.374763][ T6354] do_syscall_64+0x112/0x360 [ 109.374801][ T6354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.374840][ T6354] RIP: 0033:0x7feac591f559 [ 109.374862][ T6354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.374888][ T6354] RSP: 002b:00007feac436f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 109.374916][ T6354] RAX: ffffffffffffffda RBX: 00007feac5ba5fa0 RCX: 00007feac591f559 [ 109.375008][ T6354] RDX: 00000000000001ff RSI: 0000200000000f40 RDI: ffffffffffffff9c [ 109.375117][ T6354] RBP: 00007feac436f090 R08: 0000000000000000 R09: 0000000000000000 [ 109.375136][ T6354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.375153][ T6354] R13: 00007feac5ba6038 R14: 00007feac5ba5fa0 R15: 00007ffed052e4d8 [ 109.375179][ T6354] [ 109.416355][ T6365] siw: device registration error -23 [ 109.462910][ T6365] loop1: detected capacity change from 0 to 512 [ 109.479110][ T6365] FAT-fs (loop1): bogus number of FAT sectors [ 109.479155][ T6365] FAT-fs (loop1): Can't find a valid FAT filesystem [ 109.626122][ T29] audit: type=1400 audit(1792580688.731:460): avc: denied { getopt } for pid=6368 comm="syz.3.590" lport=46002 faddr=::ffff:172.30.0.4 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 109.678128][ T6354] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.689919][ T29] audit: type=1400 audit(1792580688.791:461): avc: denied { create } for pid=6368 comm="syz.3.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 109.700874][ T29] audit: type=1400 audit(1792580688.801:462): avc: denied { getopt } for pid=6368 comm="syz.3.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 109.761636][ T6374] FAULT_INJECTION: forcing a failure. [ 109.761636][ T6374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.761729][ T6374] CPU: 1 UID: 0 PID: 6374 Comm: syz.2.592 Not tainted syzkaller #0 PREEMPT(lazy) [ 109.761804][ T6374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 109.761978][ T6374] Call Trace: [ 109.762000][ T6374] [ 109.762022][ T6374] __dump_stack+0x1d/0x30 [ 109.762105][ T6374] dump_stack_lvl+0x95/0xd0 [ 109.762181][ T6374] dump_stack+0x15/0x1b [ 109.762284][ T6374] should_fail_ex+0x262/0x280 [ 109.762380][ T6374] should_fail+0xb/0x20 [ 109.762464][ T6374] should_fail_usercopy+0x1a/0x20 [ 109.762577][ T6374] _copy_from_iter+0xcc/0xe70 [ 109.762650][ T6374] ? __alloc_skb+0x516/0x6f0 [ 109.762789][ T6374] ? __alloc_skb+0x209/0x6f0 [ 109.762863][ T6374] netlink_sendmsg+0x4d6/0x740 [ 109.762948][ T6374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.763026][ T6374] ____sys_sendmsg+0x532/0x580 [ 109.763179][ T6374] ___sys_sendmsg+0x195/0x1e0 [ 109.763326][ T6374] __x64_sys_sendmsg+0xd4/0x160 [ 109.763452][ T6374] x64_sys_call+0x22ab/0x2550 [ 109.763537][ T6374] do_syscall_64+0x112/0x360 [ 109.763720][ T6374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.763792][ T6374] RIP: 0033:0x7feac591f559 [ 109.763837][ T6374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.763897][ T6374] RSP: 002b:00007feac436f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.764031][ T6374] RAX: ffffffffffffffda RBX: 00007feac5ba5fa0 RCX: 00007feac591f559 [ 109.764111][ T6374] RDX: 0000000024000840 RSI: 0000200000010a40 RDI: 0000000000000006 [ 109.764164][ T6374] RBP: 00007feac436f090 R08: 0000000000000000 R09: 0000000000000000 [ 109.764206][ T6374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.764246][ T6374] R13: 00007feac5ba6038 R14: 00007feac5ba5fa0 R15: 00007ffed052e4d8 [ 109.764308][ T6374] [ 109.988983][ T29] audit: type=1400 audit(1792580689.091:463): avc: denied { allowed } for pid=6377 comm="syz.1.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 110.014011][ T6380] netlink: 'syz.1.594': attribute type 1 has an invalid length. [ 110.041955][ T6380] bond1: entered promiscuous mode [ 110.042224][ T6380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.060547][ T6380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.061238][ T6380] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 110.061262][ T6380] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 110.070137][ T6380] bond1: (slave ip6gre1): making interface the new active one [ 110.070162][ T6380] ip6gre1: entered promiscuous mode [ 110.080520][ T6380] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 110.423149][ T6388] netlink: 'syz.3.598': attribute type 62 has an invalid length. [ 110.441638][ T29] audit: type=1400 audit(1792580689.541:464): avc: denied { sqpoll } for pid=6387 comm="syz.3.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 110.551566][ T29] audit: type=1400 audit(1792580689.651:465): avc: denied { create } for pid=6387 comm="syz.3.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.593265][ T29] audit: type=1400 audit(1792580689.681:466): avc: denied { watch watch_reads } for pid=6390 comm="syz.0.599" path="/139" dev="tmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 110.687601][ T6400] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 110.687634][ T6400] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 110.687750][ T6400] vhci_hcd vhci_hcd.0: Device attached [ 110.736050][ T6361] netlink: 36 bytes leftover after parsing attributes in process `syz.4.587'. [ 110.770857][ T6361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.587'. [ 110.812075][ T29] audit: type=1400 audit(1792580689.911:467): avc: denied { setopt } for pid=6358 comm="syz.4.587" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.864424][ T11] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 110.923949][ T11] usb 7-1: new full-speed USB device number 4 using vhci_hcd [ 110.976014][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 111.065731][ T6431] siw: device registration error -23 [ 111.069599][ T6431] loop2: detected capacity change from 0 to 512 [ 111.090159][ T6431] FAT-fs (loop2): bogus number of FAT sectors [ 111.090182][ T6431] FAT-fs (loop2): Can't find a valid FAT filesystem [ 111.108686][ T6417] vlan2: entered allmulticast mode [ 111.108976][ T6417] bridge_slave_0: entered allmulticast mode [ 111.129808][ T6417] bridge0: port 1(vlan2) entered blocking state [ 111.141019][ T6417] bridge0: port 1(vlan2) entered disabled state [ 111.155469][ T6417] vlan2: entered promiscuous mode [ 111.155493][ T6417] bridge_slave_0: entered promiscuous mode [ 113.423267][ T6401] vhci_hcd: connection reset by peer [ 113.424929][ T32] vhci_hcd vhci_hcd.3: stop threads [ 113.424954][ T32] vhci_hcd vhci_hcd.3: release socket [ 113.424982][ T32] vhci_hcd vhci_hcd.3: disconnect device [ 113.503889][ T6521] bond0: entered promiscuous mode [ 113.505169][ T6528] loop2: detected capacity change from 0 to 1024 [ 113.506554][ T6521] batadv0: entered promiscuous mode [ 113.525027][ T6521] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 113.525407][ T6521] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 113.548149][ T6521] bond0: left promiscuous mode [ 113.550360][ T6521] batadv0: left promiscuous mode [ 113.555947][ T6525] siw: device registration error -23 [ 113.557331][ T6525] siw: device registration error -23 [ 113.565829][ T6525] loop3: detected capacity change from 0 to 512 [ 113.573589][ T6525] FAT-fs (loop3): bogus number of FAT sectors [ 113.573663][ T6525] FAT-fs (loop3): Can't find a valid FAT filesystem [ 113.597329][ T6528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.615449][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 113.615464][ T29] audit: type=1400 audit(1792580692.721:471): avc: denied { read } for pid=6527 comm="syz.2.611" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 113.615499][ T29] audit: type=1400 audit(1792580692.721:472): avc: denied { open } for pid=6527 comm="syz.2.611" path="/106/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 113.662553][ T29] audit: type=1400 audit(1792580692.751:473): avc: denied { write } for pid=6527 comm="syz.2.611" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.662648][ T29] audit: type=1400 audit(1792580692.751:474): avc: denied { append } for pid=6527 comm="syz.2.611" path="/106/file1/devices.list" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 113.736230][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.857487][ T6540] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 113.869244][ T6545] siw: device registration error -23 [ 113.884903][ T6549] FAULT_INJECTION: forcing a failure. [ 113.884903][ T6549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.884931][ T6549] CPU: 1 UID: 0 PID: 6549 Comm: syz.1.619 Not tainted syzkaller #0 PREEMPT(lazy) [ 113.884973][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 113.885022][ T6549] Call Trace: [ 113.885042][ T6549] [ 113.885065][ T6549] __dump_stack+0x1d/0x30 [ 113.885221][ T6549] dump_stack_lvl+0x95/0xd0 [ 113.885293][ T6549] dump_stack+0x15/0x1b [ 113.885357][ T6549] should_fail_ex+0x262/0x280 [ 113.885450][ T6549] should_fail+0xb/0x20 [ 113.885580][ T6549] should_fail_usercopy+0x1a/0x20 [ 113.885677][ T6549] _copy_to_user+0x20/0xa0 [ 113.885828][ T6549] simple_read_from_buffer+0xb5/0x130 [ 113.885958][ T6549] proc_fail_nth_read+0x10e/0x150 [ 113.885993][ T6549] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.886021][ T6549] vfs_read+0x18e/0x7c0 [ 113.886118][ T6549] ? vt_ioctl+0x747/0x1910 [ 113.886155][ T6549] ? __rcu_read_unlock+0x4e/0x70 [ 113.886196][ T6549] ? __fget_files+0x184/0x1c0 [ 113.886323][ T6549] ? tty_jobctrl_ioctl+0x294/0x800 [ 113.886351][ T6549] ? mutex_lock+0x52/0x90 [ 113.886375][ T6549] ksys_read+0xdc/0x1a0 [ 113.886419][ T6549] __x64_sys_read+0x40/0x50 [ 113.886491][ T6549] x64_sys_call+0x2135/0x2550 [ 113.886705][ T6549] do_syscall_64+0x112/0x360 [ 113.886874][ T6549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.886948][ T6549] RIP: 0033:0x7f310d29fd8e [ 113.886989][ T6549] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 113.887045][ T6549] RSP: 002b:00007f310bd36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.887108][ T6549] RAX: ffffffffffffffda RBX: 00007f310bd376c0 RCX: 00007f310d29fd8e [ 113.887231][ T6549] RDX: 000000000000000f RSI: 00007f310bd370a0 RDI: 0000000000000014 [ 113.887265][ T6549] RBP: 00007f310bd37090 R08: 0000000000000000 R09: 0000000000000000 [ 113.887308][ T6549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.887349][ T6549] R13: 00007f310d566038 R14: 00007f310d565fa0 R15: 00007ffecf4772a8 [ 113.887453][ T6549] [ 113.887884][ T6545] loop2: detected capacity change from 0 to 512 [ 113.892184][ T6545] FAT-fs (loop2): bogus number of FAT sectors [ 113.892201][ T6545] FAT-fs (loop2): Can't find a valid FAT filesystem [ 114.146732][ T6554] netlink: 'syz.0.621': attribute type 62 has an invalid length. [ 114.347231][ T6581] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 114.347263][ T6581] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 114.347344][ T6581] vhci_hcd vhci_hcd.0: Device attached [ 114.463400][ T6564] netlink: 36 bytes leftover after parsing attributes in process `syz.4.625'. [ 114.524802][ T3395] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 114.552695][ T6577] loop2: detected capacity change from 0 to 1024 [ 114.561222][ T6577] EXT4-fs: Ignoring removed bh option [ 114.564518][ T6577] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 114.583260][ T3395] usb 1-1: new full-speed USB device number 4 using vhci_hcd [ 115.993271][ T11] usb 7-1: enqueue for inactive port 0 [ 115.993293][ T11] usb 7-1: enqueue for inactive port 0 [ 116.064481][ T11] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 117.018888][ T6582] vhci_hcd: connection reset by peer [ 117.020228][ T32] vhci_hcd vhci_hcd.0: stop threads [ 117.020250][ T32] vhci_hcd vhci_hcd.0: release socket [ 117.020277][ T32] vhci_hcd vhci_hcd.0: disconnect device [ 117.155983][ T6696] siw: device registration error -23 [ 117.156726][ T6696] siw: device registration error -23 [ 117.213222][ T6693] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 117.218424][ T6695] siw: device registration error -23 [ 117.228265][ T6695] loop3: detected capacity change from 0 to 512 [ 117.234458][ T6695] FAT-fs (loop3): bogus number of FAT sectors [ 117.234497][ T6695] FAT-fs (loop3): Can't find a valid FAT filesystem [ 117.480270][ T6691] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:0001 with DS=0x4f [ 117.482358][ T6709] loop1: detected capacity change from 0 to 512 [ 117.482890][ T6709] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.483503][ T6709] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 117.483519][ T6709] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 117.532819][ T6709] EXT4-fs (loop1): 1 truncate cleaned up [ 117.533310][ T6709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.671338][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.717553][ T6719] netlink: 'syz.0.643': attribute type 62 has an invalid length. [ 117.935443][ T6728] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 117.935508][ T6728] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 117.935541][ T6728] vhci_hcd vhci_hcd.0: Device attached [ 118.088404][ T6722] loop1: detected capacity change from 0 to 1024 [ 118.170515][ T6722] EXT4-fs: Ignoring removed bh option [ 118.214589][ T6722] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 118.368779][ T6705] netlink: 72 bytes leftover after parsing attributes in process `syz.4.637'. [ 120.680915][ T6746] vhci_hcd: connection reset by peer [ 120.681525][ T405] vhci_hcd vhci_hcd.0: stop threads [ 120.681595][ T405] vhci_hcd vhci_hcd.0: release socket [ 120.681681][ T405] vhci_hcd vhci_hcd.0: disconnect device [ 120.681749][ T3395] usb 1-1: enqueue for inactive port 0 [ 120.681775][ T3395] usb 1-1: enqueue for inactive port 0 [ 120.747080][ T6786] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 120.754003][ T3395] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 120.835332][ T6856] siw: device registration error -23 [ 120.839471][ T6856] loop1: detected capacity change from 0 to 512 [ 120.858148][ T6856] FAT-fs (loop1): bogus number of FAT sectors [ 120.858171][ T6856] FAT-fs (loop1): Can't find a valid FAT filesystem [ 120.962129][ T6868] loop0: detected capacity change from 0 to 256 [ 121.012325][ T6868] FAT-fs (loop0): codepage cp852 not found [ 121.096707][ T6866] loop3: detected capacity change from 0 to 512 [ 121.097023][ T6866] EXT4-fs: Ignoring removed nobh option [ 121.118984][ T6866] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 121.162540][ T6868] loop0: detected capacity change from 0 to 128 [ 121.171155][ T6868] FAT-fs (loop0): bogus number of FAT structure [ 121.171172][ T6868] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 121.171217][ T6868] FAT-fs (loop0): Can't find a valid FAT filesystem [ 121.215137][ T6870] netlink: 36 bytes leftover after parsing attributes in process `syz.2.655'. [ 121.256594][ T6866] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #3: comm syz.3.656: corrupted inode contents [ 121.260977][ T6866] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 121.262004][ T6866] EXT4-fs (loop3): Remounting filesystem read-only [ 121.263323][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 121.263563][ C0] EXT4-fs (loop3): initial error at time 1792580700: ext4_do_update_inode:5801: inode 3 [ 121.263833][ C0] EXT4-fs (loop3): last error at time 1792580700: ext4_do_update_inode:5801: inode 3 [ 121.300294][ T6868] netlink: 156 bytes leftover after parsing attributes in process `syz.0.657'. [ 121.373405][ T6866] Quota error (device loop3): write_blk: dquota write failed [ 121.373445][ T6866] Quota error (device loop3): qtree_write_dquot: Error -30 occurred while creating quota [ 121.373699][ T6866] EXT4-fs (loop3): 1 truncate cleaned up [ 121.408204][ T6866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.408361][ T6866] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.440055][ T6859] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:0001 with DS=0x4f [ 121.477547][ T29] audit: type=1400 audit(1792580700.581:475): avc: denied { write } for pid=6865 comm="syz.3.656" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.670815][ T6886] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 121.701300][ T6888] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 121.749219][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.765623][ T6888] loop0: detected capacity change from 0 to 128 [ 121.829499][ T6888] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.832010][ T6888] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.840515][ T6896] netlink: 'syz.4.662': attribute type 62 has an invalid length. [ 121.954282][ T6902] xt_hashlimit: size too large, truncated to 1048576 [ 122.366297][ T6906] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 124.772828][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.865687][ T7024] siw: device registration error -23 [ 124.877353][ T7024] loop1: detected capacity change from 0 to 512 [ 124.882266][ T7024] FAT-fs (loop1): bogus number of FAT sectors [ 124.882287][ T7024] FAT-fs (loop1): Can't find a valid FAT filesystem [ 125.032595][ T7029] loop0: detected capacity change from 0 to 512 [ 125.159876][ T7035] loop2: detected capacity change from 0 to 128 [ 125.162503][ T7035] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 125.335291][ T29] audit: type=1400 audit(1792580704.441:476): avc: denied { connect } for pid=7039 comm="syz.2.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 125.399313][ T7029] netlink: 72 bytes leftover after parsing attributes in process `syz.0.670'. [ 125.431161][ T7031] loop1: detected capacity change from 0 to 1024 [ 125.458333][ T7031] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 125.531577][ T29] audit: type=1400 audit(1792580704.631:477): avc: denied { write } for pid=7030 comm="syz.1.674" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 125.558706][ T7031] random: crng reseeded on system resumption [ 125.559159][ T29] audit: type=1400 audit(1792580704.631:478): avc: denied { open } for pid=7030 comm="syz.1.674" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 125.968163][ T7054] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 125.974051][ T7062] netlink: 'syz.2.684': attribute type 62 has an invalid length. [ 126.011429][ T7062] netlink: 132 bytes leftover after parsing attributes in process `syz.2.684'. [ 126.095744][ T7067] loop0: detected capacity change from 0 to 512 [ 126.112470][ T7067] FAT-fs (loop0): bogus number of FAT sectors [ 126.112543][ T7067] FAT-fs (loop0): Can't find a valid FAT filesystem [ 126.206416][ T7076] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 126.206441][ T7076] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 126.206544][ T7076] vhci_hcd vhci_hcd.0: Device attached [ 126.395029][ T3395] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 126.454301][ T3395] usb 5-1: new full-speed USB device number 3 using vhci_hcd [ 126.766436][ T6899] kexec: Could not allocate control_code_buffer [ 126.863343][ T7131] loop3: detected capacity change from 0 to 512 [ 126.879967][ T7131] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.688: missing EA_INODE flag [ 126.880002][ T7131] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 126.880167][ T7131] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.688: error while reading EA inode 12 err=-117 [ 126.880314][ T7131] loop3: lost filesystem error report for type 5 error -117 [ 126.880414][ T7131] EXT4-fs (loop3): 1 orphan inode deleted [ 126.882295][ T7131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.479493][ T7190] loop0: detected capacity change from 0 to 256 [ 128.932809][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.946246][ T7080] vhci_hcd: connection reset by peer [ 128.952224][ T32] vhci_hcd vhci_hcd.2: stop threads [ 128.952270][ T32] vhci_hcd vhci_hcd.2: release socket [ 128.952288][ T32] vhci_hcd vhci_hcd.2: disconnect device [ 129.021511][ T7205] siw: device registration error -23 [ 129.021934][ T7205] siw: device registration error -23 [ 129.039089][ T7205] loop1: detected capacity change from 0 to 512 [ 129.047755][ T7205] FAT-fs (loop1): bogus number of FAT sectors [ 129.047775][ T7205] FAT-fs (loop1): Can't find a valid FAT filesystem [ 129.092549][ T7203] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 129.189018][ T7209] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 129.346914][ T7217] loop1: detected capacity change from 0 to 512 [ 129.460280][ T7227] siw: device registration error -23 [ 129.469812][ T7227] siw: device registration error -23 [ 129.488594][ T7227] loop2: detected capacity change from 0 to 512 [ 129.492795][ T7227] FAT-fs (loop2): bogus number of FAT sectors [ 129.492820][ T7227] FAT-fs (loop2): Can't find a valid FAT filesystem [ 129.630089][ T7234] netlink: 'syz.2.710': attribute type 62 has an invalid length. [ 129.632515][ T7234] netlink: 132 bytes leftover after parsing attributes in process `syz.2.710'. [ 129.829402][ T7264] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 129.829433][ T7264] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 129.829473][ T7264] vhci_hcd vhci_hcd.0: Device attached [ 132.647861][ T7265] vhci_hcd: connection reset by peer [ 132.648289][ T405] vhci_hcd vhci_hcd.2: stop threads [ 132.648309][ T405] vhci_hcd vhci_hcd.2: release socket [ 132.648350][ T405] vhci_hcd vhci_hcd.2: disconnect device [ 132.649670][ T3395] usb 5-1: enqueue for inactive port 0 [ 132.649689][ T3395] usb 5-1: enqueue for inactive port 0 [ 132.713378][ T3395] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 132.898385][ T29] audit: type=1400 audit(1792580712.001:479): avc: denied { setopt } for pid=7383 comm="syz.0.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.900337][ T7384] netlink: 32 bytes leftover after parsing attributes in process `syz.0.727'. [ 132.932712][ T7376] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 133.043789][ T29] audit: type=1400 audit(1792580712.101:480): avc: denied { execute } for pid=7379 comm="syz.4.723" dev="tmpfs" ino=1239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 133.124805][ T7258] kexec: Could not allocate control_code_buffer [ 133.352220][ T7391] FAULT_INJECTION: forcing a failure. [ 133.352220][ T7391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.352257][ T7391] CPU: 1 UID: 0 PID: 7391 Comm: syz.3.729 Not tainted syzkaller #0 PREEMPT(lazy) [ 133.352289][ T7391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 133.352306][ T7391] Call Trace: [ 133.352315][ T7391] [ 133.352324][ T7391] __dump_stack+0x1d/0x30 [ 133.352431][ T7391] dump_stack_lvl+0x95/0xd0 [ 133.352453][ T7391] dump_stack+0x15/0x1b [ 133.352473][ T7391] should_fail_ex+0x262/0x280 [ 133.352554][ T7391] should_fail+0xb/0x20 [ 133.352635][ T7391] should_fail_usercopy+0x1a/0x20 [ 133.352666][ T7391] _copy_from_iter+0xcc/0xe70 [ 133.352698][ T7391] ? __alloc_skb+0x516/0x6f0 [ 133.352809][ T7391] ? __alloc_skb+0x209/0x6f0 [ 133.352901][ T7391] netlink_sendmsg+0x4d6/0x740 [ 133.352933][ T7391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.352966][ T7391] ____sys_sendmsg+0x532/0x580 [ 133.353008][ T7391] ___sys_sendmsg+0x195/0x1e0 [ 133.353080][ T7391] __x64_sys_sendmsg+0xd4/0x160 [ 133.353120][ T7391] x64_sys_call+0x22ab/0x2550 [ 133.353170][ T7391] do_syscall_64+0x112/0x360 [ 133.353210][ T7391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.353239][ T7391] RIP: 0033:0x7f4de721f559 [ 133.353268][ T7391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.353313][ T7391] RSP: 002b:00007f4de5c6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.353376][ T7391] RAX: ffffffffffffffda RBX: 00007f4de74a5fa0 RCX: 00007f4de721f559 [ 133.353394][ T7391] RDX: 0000000000000080 RSI: 0000200000000940 RDI: 0000000000000003 [ 133.353413][ T7391] RBP: 00007f4de5c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 133.353430][ T7391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.353447][ T7391] R13: 00007f4de74a6038 R14: 00007f4de74a5fa0 R15: 00007ffdbf6b37f8 [ 133.353471][ T7391] [ 133.607995][ T7399] netlink: 'syz.1.734': attribute type 62 has an invalid length. [ 133.610240][ T7399] netlink: 132 bytes leftover after parsing attributes in process `syz.1.734'. [ 133.793275][ T7401] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 133.793306][ T7401] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 133.793371][ T7401] vhci_hcd vhci_hcd.0: Device attached [ 133.973401][ T3396] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 134.034330][ T3396] usb 3-1: new full-speed USB device number 4 using vhci_hcd [ 134.726830][ T7522] syz.3.741 (7522): /proc/7505/oom_adj is deprecated, please use /proc/7505/oom_score_adj instead. [ 136.611985][ T7427] vhci_hcd: connection reset by peer [ 136.613289][ T38] vhci_hcd vhci_hcd.1: stop threads [ 136.613318][ T38] vhci_hcd vhci_hcd.1: release socket [ 136.613343][ T38] vhci_hcd vhci_hcd.1: disconnect device [ 136.693983][ T7547] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 136.745505][ T7551] capability: warning: `syz.4.744' uses deprecated v2 capabilities in a way that may be insecure [ 136.803388][ T7552] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7552 comm=syz.4.744 [ 136.952006][ T29] audit: type=1400 audit(1792580716.051:481): avc: denied { create } for pid=7555 comm="syz.3.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 137.127480][ T7575] FAULT_INJECTION: forcing a failure. [ 137.127480][ T7575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.127513][ T7575] CPU: 1 UID: 0 PID: 7575 Comm: syz.2.752 Not tainted syzkaller #0 PREEMPT(lazy) [ 137.127612][ T7575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 137.127630][ T7575] Call Trace: [ 137.127638][ T7575] [ 137.127648][ T7575] __dump_stack+0x1d/0x30 [ 137.127679][ T7575] dump_stack_lvl+0x95/0xd0 [ 137.127701][ T7575] dump_stack+0x15/0x1b [ 137.127793][ T7575] should_fail_ex+0x262/0x280 [ 137.127831][ T7575] should_fail+0xb/0x20 [ 137.127867][ T7575] should_fail_usercopy+0x1a/0x20 [ 137.127928][ T7575] _copy_from_user+0x1c/0xb0 [ 137.127966][ T7575] __copy_msghdr+0x242/0x300 [ 137.128002][ T7575] ___sys_sendmsg+0x10c/0x1e0 [ 137.128082][ T7575] __sys_sendmmsg+0x1a0/0x310 [ 137.128194][ T7575] __x64_sys_sendmmsg+0x57/0x70 [ 137.128232][ T7575] x64_sys_call+0x1fb4/0x2550 [ 137.128281][ T7575] do_syscall_64+0x112/0x360 [ 137.128349][ T7575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.128380][ T7575] RIP: 0033:0x7feac591f559 [ 137.128412][ T7575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.128434][ T7575] RSP: 002b:00007feac436f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 137.128461][ T7575] RAX: ffffffffffffffda RBX: 00007feac5ba5fa0 RCX: 00007feac591f559 [ 137.128487][ T7575] RDX: 0000000000000001 RSI: 0000200000002d00 RDI: 0000000000000004 [ 137.128502][ T7575] RBP: 00007feac436f090 R08: 0000000000000000 R09: 0000000000000000 [ 137.128516][ T7575] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000001 [ 137.128530][ T7575] R13: 00007feac5ba6038 R14: 00007feac5ba5fa0 R15: 00007ffed052e4d8 [ 137.128557][ T7575] [ 137.347083][ T7579] FAULT_INJECTION: forcing a failure. [ 137.347083][ T7579] name failslab, interval 1, probability 0, space 0, times 0 [ 137.347307][ T7579] CPU: 1 UID: 0 PID: 7579 Comm: syz.3.753 Not tainted syzkaller #0 PREEMPT(lazy) [ 137.347397][ T7579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 137.347415][ T7579] Call Trace: [ 137.347423][ T7579] [ 137.347430][ T7579] __dump_stack+0x1d/0x30 [ 137.347456][ T7579] dump_stack_lvl+0x95/0xd0 [ 137.347540][ T7579] dump_stack+0x15/0x1b [ 137.347638][ T7579] should_fail_ex+0x262/0x280 [ 137.347675][ T7579] ? create_new_namespaces+0x38/0x420 [ 137.347734][ T7579] should_failslab+0x8c/0xb0 [ 137.347779][ T7579] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 137.347824][ T7579] ? create_new_namespaces+0x38/0x420 [ 137.347968][ T7579] create_new_namespaces+0x38/0x420 [ 137.348108][ T7579] unshare_nsproxy_namespaces+0x115/0x150 [ 137.348157][ T7579] ksys_unshare+0x3a3/0x690 [ 137.348198][ T7579] __x64_sys_unshare+0x1f/0x30 [ 137.348236][ T7579] x64_sys_call+0x1e33/0x2550 [ 137.348387][ T7579] do_syscall_64+0x112/0x360 [ 137.348425][ T7579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.348455][ T7579] RIP: 0033:0x7f4de721f559 [ 137.348515][ T7579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.348545][ T7579] RSP: 002b:00007f4de5c6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 137.348573][ T7579] RAX: ffffffffffffffda RBX: 00007f4de74a5fa0 RCX: 00007f4de721f559 [ 137.348592][ T7579] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 137.348610][ T7579] RBP: 00007f4de5c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 137.348646][ T7579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.348663][ T7579] R13: 00007f4de74a6038 R14: 00007f4de74a5fa0 R15: 00007ffdbf6b37f8 [ 137.348690][ T7579] [ 137.389023][ T7558] loop1: detected capacity change from 0 to 1024 [ 137.393531][ T7558] EXT4-fs: Ignoring removed i_version option [ 137.462100][ T7558] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 137.465267][ T7558] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 137.472334][ T7558] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 137.473825][ T7558] EXT4-fs (loop1): orphan cleanup on readonly fs [ 137.486281][ T7558] EXT4-fs error (device loop1): ext4_free_blocks:6719: comm syz.1.747: Freeing blocks not in datazone - block = 0, count = 4096 [ 137.486374][ T7558] loop1: lost filesystem error report for type 5 error -117 [ 137.490468][ T7558] EXT4-fs (loop1): Remounting filesystem read-only [ 137.490561][ T7558] EXT4-fs (loop1): 1 orphan inode deleted [ 137.494246][ T7558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.669329][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.704403][ T7589] loop2: detected capacity change from 0 to 136 [ 137.706427][ T7589] iso9660: Bad value for 'uid' [ 137.706442][ T7589] iso9660: Bad value for 'uid' [ 137.709589][ T7589] loop2: detected capacity change from 0 to 136 [ 137.712810][ T7589] iso9660: Bad value for 'uid' [ 137.742198][ T7589] iso9660: Bad value for 'uid' [ 137.755577][ T7586] netlink: 96 bytes leftover after parsing attributes in process `syz.2.755'. [ 137.772904][ T7589] loop2: detected capacity change from 0 to 136 [ 137.779600][ T7589] iso9660: Bad value for 'uid' [ 137.779621][ T7589] iso9660: Bad value for 'uid' [ 137.807663][ T7589] loop2: detected capacity change from 0 to 136 [ 137.807940][ T7589] iso9660: Bad value for 'uid' [ 137.807952][ T7589] iso9660: Bad value for 'uid' [ 137.833586][ T7589] loop2: detected capacity change from 0 to 136 [ 137.833841][ T7589] iso9660: Bad value for 'uid' [ 137.833900][ T7589] iso9660: Bad value for 'uid' [ 137.858682][ T7589] loop2: detected capacity change from 0 to 136 [ 137.858964][ T7589] iso9660: Bad value for 'uid' [ 137.859034][ T7589] iso9660: Bad value for 'uid' [ 137.923281][ T7589] loop2: detected capacity change from 0 to 136 [ 137.923696][ T7589] iso9660: Bad value for 'uid' [ 137.923711][ T7589] iso9660: Bad value for 'uid' [ 137.937533][ T7601] netlink: 'syz.1.758': attribute type 62 has an invalid length. [ 137.952121][ T29] audit: type=1400 audit(1792580717.051:482): avc: denied { read } for pid=7602 comm="syz.3.759" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 137.982115][ T7589] loop2: detected capacity change from 0 to 136 [ 137.982318][ T7589] iso9660: Bad value for 'uid' [ 137.982336][ T7589] iso9660: Bad value for 'uid' [ 137.991290][ T7601] netlink: 132 bytes leftover after parsing attributes in process `syz.1.758'. [ 137.997240][ T7603] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7603 comm=syz.3.759 [ 138.182365][ T7608] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 138.182396][ T7608] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 138.182441][ T7608] vhci_hcd vhci_hcd.0: Device attached [ 138.999486][ T7470] kexec: Could not allocate control_code_buffer [ 139.134785][ T7698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.763'. [ 140.927038][ T7621] vhci_hcd: connection reset by peer [ 140.928109][ T70] vhci_hcd vhci_hcd.1: stop threads [ 140.928126][ T70] vhci_hcd vhci_hcd.1: release socket [ 140.928205][ T70] vhci_hcd vhci_hcd.1: disconnect device [ 140.928289][ T3396] usb 3-1: enqueue for inactive port 0 [ 140.928316][ T3396] usb 3-1: enqueue for inactive port 0 [ 140.969363][ T29] audit: type=1400 audit(1792580720.061:483): avc: denied { firmware_load } for pid=7696 comm="syz.4.763" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 140.969422][ T7698] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 140.969464][ T7698] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 140.993535][ T3396] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 141.031980][ T29] audit: type=1400 audit(1792580720.131:484): avc: denied { map } for pid=7735 comm="syz.3.767" path="/proc/347/net/pfkey" dev="proc" ino=4026533050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 141.041767][ T7738] FAULT_INJECTION: forcing a failure. [ 141.041767][ T7738] name failslab, interval 1, probability 0, space 0, times 0 [ 141.041880][ T7738] CPU: 0 UID: 0 PID: 7738 Comm: syz.1.768 Not tainted syzkaller #0 PREEMPT(lazy) [ 141.042040][ T7738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 141.042082][ T7738] Call Trace: [ 141.042104][ T7738] [ 141.042133][ T7738] __dump_stack+0x1d/0x30 [ 141.042217][ T7738] dump_stack_lvl+0x95/0xd0 [ 141.042247][ T7738] dump_stack+0x15/0x1b [ 141.042364][ T7738] should_fail_ex+0x262/0x280 [ 141.042489][ T7738] ? skb_clone+0x151/0x1f0 [ 141.042645][ T7738] should_failslab+0x8c/0xb0 [ 141.042760][ T7738] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 141.042875][ T7738] ? skb_clone+0x151/0x1f0 [ 141.043000][ T7738] skb_clone+0x151/0x1f0 [ 141.043160][ T7738] __netlink_deliver_tap+0x2be/0x510 [ 141.043291][ T7738] netlink_unicast+0x712/0x740 [ 141.043386][ T7738] netlink_sendmsg+0x5ef/0x740 [ 141.043532][ T7738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.043623][ T7738] ____sys_sendmsg+0x532/0x580 [ 141.043728][ T7738] ___sys_sendmsg+0x195/0x1e0 [ 141.043867][ T7738] __x64_sys_sendmsg+0xd4/0x160 [ 141.043973][ T7738] x64_sys_call+0x22ab/0x2550 [ 141.044103][ T7738] do_syscall_64+0x112/0x360 [ 141.044204][ T7738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.044277][ T7738] RIP: 0033:0x7f310d2df559 [ 141.044342][ T7738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.044399][ T7738] RSP: 002b:00007f310bd37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.044551][ T7738] RAX: ffffffffffffffda RBX: 00007f310d565fa0 RCX: 00007f310d2df559 [ 141.044596][ T7738] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 141.044654][ T7738] RBP: 00007f310bd37090 R08: 0000000000000000 R09: 0000000000000000 [ 141.044705][ T7738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.044761][ T7738] R13: 00007f310d566038 R14: 00007f310d565fa0 R15: 00007ffecf4772a8 [ 141.044836][ T7738] [ 141.231134][ T29] audit: type=1400 audit(1792580720.331:485): avc: denied { bind } for pid=7744 comm="syz.4.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 141.237116][ T29] audit: type=1400 audit(1792580720.341:486): avc: denied { setopt } for pid=7744 comm="syz.4.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 141.261682][ T7746] tipc: Failed to remove unknown binding: 66,1,1/0:1429563499/1429563501 [ 141.318928][ T7742] siw: device registration error -23 [ 141.327859][ T7742] loop2: detected capacity change from 0 to 512 [ 141.336683][ T7742] FAT-fs (loop2): bogus number of FAT sectors [ 141.336703][ T7742] FAT-fs (loop2): Can't find a valid FAT filesystem [ 141.520550][ T7747] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.771: bad orphan inode 15 [ 141.520601][ T7747] loop3: lost filesystem error report for type 5 error -117 [ 141.522480][ T7747] ext4_test_bit(bit=14, block=5) = 0 [ 141.526517][ T7747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.548725][ T7747] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 141.548997][ T7747] EXT4-fs error (device loop3): ext4_free_inode:356: comm syz.3.771: bit already cleared for inode 13 [ 141.550757][ T29] audit: type=1400 audit(1792580720.651:487): avc: denied { write } for pid=7745 comm="syz.3.771" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.618151][ T7738] bond1: left promiscuous mode [ 141.618178][ T7738] ip6gre1: left promiscuous mode [ 141.642247][ T7757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.692522][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.709950][ T7768] 9p: Bad value for 'wfdno' [ 141.787272][ T7772] netlink: 'syz.2.779': attribute type 62 has an invalid length. [ 141.798472][ T7772] netlink: 132 bytes leftover after parsing attributes in process `syz.2.779'. [ 141.903015][ T29] audit: type=1400 audit(1792580721.001:488): avc: denied { map } for pid=7783 comm="syz.3.781" path="socket:[11865]" dev="sockfs" ino=11865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 141.903083][ T29] audit: type=1400 audit(1792580721.001:489): avc: denied { read } for pid=7783 comm="syz.3.781" path="socket:[11865]" dev="sockfs" ino=11865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 141.999417][ T7776] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 141.999449][ T7776] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 141.999487][ T7776] vhci_hcd vhci_hcd.0: Device attached [ 142.148196][ T29] audit: type=1400 audit(1792580721.251:490): avc: denied { write } for pid=7796 comm="syz.3.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 142.148649][ T29] audit: type=1400 audit(1792580721.251:491): avc: denied { listen } for pid=7796 comm="syz.3.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.174317][ T3396] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 142.233877][ T3396] usb 5-1: new full-speed USB device number 4 using vhci_hcd [ 144.758661][ T7788] vhci_hcd: connection reset by peer [ 144.759740][ T405] vhci_hcd vhci_hcd.2: stop threads [ 144.759761][ T405] vhci_hcd vhci_hcd.2: release socket [ 144.759788][ T405] vhci_hcd vhci_hcd.2: disconnect device [ 144.901250][ T7903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.936755][ T29] audit: type=1400 audit(1792580724.041:492): avc: denied { shutdown } for pid=7904 comm="syz.2.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 144.937990][ T29] audit: type=1326 audit(1792580724.041:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7904 comm="syz.2.789" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feac591f559 code=0x0 [ 144.942656][ T7907] FAULT_INJECTION: forcing a failure. [ 144.942656][ T7907] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 144.942693][ T7907] CPU: 1 UID: 0 PID: 7907 Comm: syz.3.790 Not tainted syzkaller #0 PREEMPT(lazy) [ 144.942725][ T7907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 144.942743][ T7907] Call Trace: [ 144.942751][ T7907] [ 144.942774][ T7907] __dump_stack+0x1d/0x30 [ 144.942876][ T7907] dump_stack_lvl+0x95/0xd0 [ 144.942906][ T7907] dump_stack+0x15/0x1b [ 144.942934][ T7907] should_fail_ex+0x262/0x280 [ 144.942974][ T7907] should_fail_alloc_page+0xf2/0x100 [ 144.943065][ T7907] __alloc_frozen_pages_noprof+0x132/0x3d0 [ 144.943151][ T7907] alloc_pages_mpol+0xaf/0x1d0 [ 144.943178][ T7907] alloc_pages_noprof+0x94/0x140 [ 144.943208][ T7907] __pmd_alloc+0x47/0x430 [ 144.943293][ T7907] handle_mm_fault+0x2b9f/0x3c60 [ 144.943363][ T7907] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 144.943472][ T7907] do_user_addr_fault+0xa71/0xde0 [ 144.943529][ T7907] exc_page_fault+0x62/0xa0 [ 144.943557][ T7907] asm_exc_page_fault+0x26/0x30 [ 144.943627][ T7907] RIP: 0010:strncpy_from_user+0xa4/0x250 [ 144.943672][ T7907] Code: f7 4b ff 49 83 ff 07 0f 86 85 00 00 00 48 c7 04 24 00 00 00 00 4c 89 64 24 10 48 8b 6c 24 08 4c 89 7c 24 18 4d 89 fd 4d 89 e6 <4d> 8b 24 24 48 b8 ff fe fe fe fe fe fe fe 4d 8d 3c 04 4c 89 e3 48 [ 144.943761][ T7907] RSP: 0018:ffffc90001357d98 EFLAGS: 00050202 [ 144.943823][ T7907] RAX: ffffffff820e266d RBX: ffff8881001b9f00 RCX: ffff888104434500 [ 144.943927][ T7907] RDX: 0000000000000000 RSI: 00000000000000a8 RDI: 0000000000000007 [ 144.943993][ T7907] RBP: ffff8881001b9f18 R08: 00018881001b9f07 R09: 0000000000000000 [ 144.944041][ T7907] R10: ffff8881001b9f00 R11: 0001c90001357e68 R12: 0000200000000040 [ 144.944092][ T7907] R13: 00000000000000a8 R14: 0000200000000040 R15: 00000000000000a8 [ 144.944157][ T7907] ? strncpy_from_user+0x7d/0x250 [ 144.944249][ T7907] ? strncpy_from_user+0x7d/0x250 [ 144.944335][ T7907] do_getname+0x59/0x1c0 [ 144.944416][ T7907] getname_uflags+0x23/0x30 [ 144.944490][ T7907] __se_sys_name_to_handle_at+0xef/0x660 [ 144.944566][ T7907] ? mutex_unlock+0x4e/0x90 [ 144.944679][ T7907] ? ksys_write+0x194/0x1a0 [ 144.944791][ T7907] __x64_sys_name_to_handle_at+0x67/0x80 [ 144.944955][ T7907] x64_sys_call+0x1d99/0x2550 [ 144.945039][ T7907] do_syscall_64+0x112/0x360 [ 144.945151][ T7907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.945306][ T7907] RIP: 0033:0x7f4de721f559 [ 144.945367][ T7907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.945384][ T7907] RSP: 002b:00007f4de5c6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 144.945433][ T7907] RAX: ffffffffffffffda RBX: 00007f4de74a5fa0 RCX: 00007f4de721f559 [ 144.945462][ T7907] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 0000000000000004 [ 144.945562][ T7907] RBP: 00007f4de5c6f090 R08: 0000000000001600 R09: 0000000000000000 [ 144.945604][ T7907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.945645][ T7907] R13: 00007f4de74a6038 R14: 00007f4de74a5fa0 R15: 00007ffdbf6b37f8 [ 144.945709][ T7907] [ 145.089408][ T29] audit: type=1326 audit(1792580724.191:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7912 comm="syz.0.793" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ecb54f559 code=0x7ffc0000 [ 145.089452][ T29] audit: type=1326 audit(1792580724.191:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7912 comm="syz.0.793" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ecb54f559 code=0x7ffc0000 [ 145.104713][ T29] audit: type=1326 audit(1792580724.201:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7912 comm="syz.0.793" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ecb54f559 code=0x7ffc0000 [ 145.104868][ T29] audit: type=1326 audit(1792580724.201:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7912 comm="syz.0.793" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ecb54f559 code=0x7ffc0000 [ 145.104952][ T29] audit: type=1326 audit(1792580724.201:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7912 comm="syz.0.793" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0ecb54f559 code=0x7ffc0000 [ 145.131152][ T29] audit: type=1326 audit(1792580724.211:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7912 comm="syz.0.793" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ecb54f559 code=0x7ffc0000 [ 145.131295][ T29] audit: type=1326 audit(1792580724.211:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7912 comm="syz.0.793" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ecb54f559 code=0x7ffc0000 [ 145.131335][ T29] audit: type=1326 audit(1792580724.211:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7912 comm="syz.0.793" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ecb54f559 code=0x7ffc0000 [ 145.826869][ T7925] veth1_to_team: entered promiscuous mode [ 145.838418][ T7925] gretap0: entered promiscuous mode [ 145.885953][ T7925] hsr1: entered promiscuous mode [ 146.152226][ T7929] ip6tnl0: left promiscuous mode [ 146.301048][ T7936] netlink: 108 bytes leftover after parsing attributes in process `syz.2.798'. [ 146.453800][ T7935] set_capacity_and_notify: 1 callbacks suppressed [ 146.453822][ T7935] loop1: detected capacity change from 0 to 512 [ 146.500562][ T7934] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 146.501049][ T7935] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 146.569152][ T7935] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 146.593649][ T7935] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.799: bg 0: block 248: padding at end of block bitmap is not set [ 146.593952][ T7935] loop1: lost filesystem error report for type 5 error -117 [ 146.601975][ T7935] EXT4-fs error (device loop1): ext4_acquire_dquot:7079: comm syz.1.799: Failed to acquire dquot type 1 [ 146.602013][ T7935] loop1: lost filesystem error report for type 5 error -28 [ 146.617214][ T7935] EXT4-fs (loop1): 1 truncate cleaned up [ 146.618014][ T7935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 146.696071][ T7948] netlink: 'syz.4.803': attribute type 3 has an invalid length. [ 146.832402][ T7935] syz.1.799 (7935) used greatest stack depth: 8520 bytes left [ 146.842507][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 147.273891][ T3396] usb 5-1: enqueue for inactive port 0 [ 147.273986][ T3396] usb 5-1: enqueue for inactive port 0 [ 147.345728][ T3396] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 147.578197][ T7974] ip6tnl0: left promiscuous mode [ 147.668469][ T7974] hsr1: left promiscuous mode [ 148.058480][ T7977] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 148.100959][ T7981] veth1_to_team: entered promiscuous mode [ 148.102231][ T7981] gretap0: entered promiscuous mode [ 148.103129][ T7981] debugfs: 'hsr1' already exists in 'hsr' [ 148.103149][ T7981] Cannot create hsr debugfs directory [ 148.126544][ T7981] hsr1: entered promiscuous mode [ 148.218150][ T7986] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 148.303981][ T7990] loop3: detected capacity change from 0 to 512 [ 148.316765][ T7990] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 148.323684][ T7990] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 148.323938][ T7990] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.816: bg 0: block 248: padding at end of block bitmap is not set [ 148.324025][ T7990] loop3: lost filesystem error report for type 5 error -117 [ 148.324263][ T7990] EXT4-fs error (device loop3): ext4_acquire_dquot:7079: comm syz.3.816: Failed to acquire dquot type 1 [ 148.324293][ T7990] loop3: lost filesystem error report for type 5 error -28 [ 148.331813][ T7990] EXT4-fs (loop3): 1 truncate cleaned up [ 148.333005][ T7990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 148.540839][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 148.663747][ T7992] netlink: 108 bytes leftover after parsing attributes in process `syz.1.818'. [ 148.948983][ T8023] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 149.025510][ T8030] netlink: 'syz.1.832': attribute type 62 has an invalid length. [ 149.030979][ T8030] netlink: 132 bytes leftover after parsing attributes in process `syz.1.832'. [ 149.085501][ T8034] siw: device registration error -23 [ 149.140093][ T8044] netlink: 'syz.4.834': attribute type 1 has an invalid length. [ 149.214068][ T8046] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 149.214127][ T8046] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 149.214234][ T8046] vhci_hcd vhci_hcd.0: Device attached [ 149.301098][ T8053] netlink: 'syz.4.836': attribute type 1 has an invalid length. [ 149.393285][ T4251] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 149.463592][ T4251] usb 3-1: new full-speed USB device number 5 using vhci_hcd [ 149.497880][ T8053] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.702742][ T8064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.910810][ T8053] bond1: (slave geneve2): making interface the new active one [ 149.928741][ T8053] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 150.270929][ T8120] FAULT_INJECTION: forcing a failure. [ 150.270929][ T8120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.270964][ T8120] CPU: 1 UID: 0 PID: 8120 Comm: syz.2.844 Not tainted syzkaller #0 PREEMPT(lazy) [ 150.270988][ T8120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 150.271039][ T8120] Call Trace: [ 150.271100][ T8120] [ 150.271168][ T8120] __dump_stack+0x1d/0x30 [ 150.271200][ T8120] dump_stack_lvl+0x95/0xd0 [ 150.271222][ T8120] dump_stack+0x15/0x1b [ 150.271308][ T8120] should_fail_ex+0x262/0x280 [ 150.271349][ T8120] should_fail+0xb/0x20 [ 150.271389][ T8120] should_fail_usercopy+0x1a/0x20 [ 150.271428][ T8120] _copy_to_user+0x20/0xa0 [ 150.271525][ T8120] simple_read_from_buffer+0xb5/0x130 [ 150.271557][ T8120] proc_fail_nth_read+0x10e/0x150 [ 150.271587][ T8120] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.271681][ T8120] vfs_read+0x18e/0x7c0 [ 150.271714][ T8120] ? __rcu_read_unlock+0x4e/0x70 [ 150.271750][ T8120] ? __fget_files+0x184/0x1c0 [ 150.271785][ T8120] ? mutex_lock+0x52/0x90 [ 150.271813][ T8120] ksys_read+0xdc/0x1a0 [ 150.271894][ T8120] __x64_sys_read+0x40/0x50 [ 150.271961][ T8120] x64_sys_call+0x2135/0x2550 [ 150.271997][ T8120] do_syscall_64+0x112/0x360 [ 150.272032][ T8120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.272054][ T8120] RIP: 0033:0x7feac58dfd8e [ 150.272070][ T8120] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 150.272145][ T8120] RSP: 002b:00007feac434dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.272172][ T8120] RAX: ffffffffffffffda RBX: 00007feac434e6c0 RCX: 00007feac58dfd8e [ 150.272191][ T8120] RDX: 000000000000000f RSI: 00007feac434e0a0 RDI: 0000000000000005 [ 150.272209][ T8120] RBP: 00007feac434e090 R08: 0000000000000000 R09: 0000000000000000 [ 150.272227][ T8120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.272244][ T8120] R13: 00007feac5ba6128 R14: 00007feac5ba6090 R15: 00007ffed052e4d8 [ 150.272339][ T8120] [ 150.490802][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'. [ 150.552931][ T8131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60656 sclass=netlink_route_socket pid=8131 comm=syz.2.848 [ 150.553177][ T8131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60656 sclass=netlink_route_socket pid=8131 comm=syz.2.848 [ 150.593861][ T29] kauditd_printk_skb: 776 callbacks suppressed [ 150.593878][ T29] audit: type=1400 audit(1792580729.701:1274): avc: denied { read } for pid=3298 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 150.593910][ T29] audit: type=1400 audit(1792580729.701:1275): avc: denied { open } for pid=3298 comm="syz-executor" path="/153/tracefs_dir" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 150.594009][ T29] audit: type=1400 audit(1792580729.701:1276): avc: denied { read } for pid=3298 comm="syz-executor" name="instances" dev="tracefs" ino=2175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 150.594395][ T29] audit: type=1400 audit(1792580729.701:1277): avc: denied { write } for pid=3298 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 150.594505][ T29] audit: type=1400 audit(1792580729.701:1278): avc: denied { read } for pid=3298 comm="syz-executor" name="instances" dev="tracefs" ino=2175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 150.594560][ T29] audit: type=1400 audit(1792580729.701:1279): avc: denied { setattr } for pid=3298 comm="syz-executor" path="/153/tracefs_dir/instances" dev="tracefs" ino=2175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 150.594594][ T29] audit: type=1400 audit(1792580729.701:1280): avc: denied { write } for pid=3298 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 150.594677][ T29] audit: type=1400 audit(1792580729.701:1281): avc: denied { read } for pid=3298 comm="syz-executor" name="instances" dev="tracefs" ino=2175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 150.594754][ T29] audit: type=1400 audit(1792580729.701:1282): avc: denied { write } for pid=3298 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 150.594864][ T29] audit: type=1400 audit(1792580729.701:1283): avc: denied { read } for pid=3298 comm="syz-executor" name="instances" dev="tracefs" ino=2175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 152.225526][ T8047] vhci_hcd: connection reset by peer [ 152.225766][ T70] vhci_hcd vhci_hcd.1: stop threads [ 152.225813][ T70] vhci_hcd vhci_hcd.1: release socket [ 152.225832][ T70] vhci_hcd vhci_hcd.1: disconnect device [ 152.372351][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'. [ 152.807921][ T8211] rxe_eth0 speed is unknown, defaulting to 1000 [ 152.891818][ T8211] lo speed is unknown, defaulting to 1000 [ 153.098028][ T8211] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.098071][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.098221][ T8211] bridge_slave_0: entered allmulticast mode [ 153.098881][ T8211] bridge_slave_0: entered promiscuous mode [ 153.100617][ T8211] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.100764][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.101022][ T8211] bridge_slave_1: entered allmulticast mode [ 153.102276][ T8211] bridge_slave_1: entered promiscuous mode [ 153.126394][ T8211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.128324][ T8211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.149427][ T8211] team0: Port device team_slave_0 added [ 153.151231][ T8211] team0: Port device team_slave_1 added [ 153.166822][ T8234] netlink: 'syz.0.862': attribute type 62 has an invalid length. [ 153.172226][ T8234] netlink: 132 bytes leftover after parsing attributes in process `syz.0.862'. [ 153.227726][ T8211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.227745][ T8211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.227780][ T8211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.228481][ T8211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.228492][ T8211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.228520][ T8211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.358136][ T8211] hsr_slave_0: entered promiscuous mode [ 153.359350][ T8211] hsr_slave_1: entered promiscuous mode [ 153.359604][ T8211] debugfs: 'hsr0' already exists in 'hsr' [ 153.359622][ T8211] Cannot create hsr debugfs directory [ 153.450657][ T8262] siw: device registration error -23 [ 153.452676][ T8262] siw: device registration error -23 [ 153.466977][ T8262] loop1: detected capacity change from 0 to 512 [ 153.486798][ T8262] FAT-fs (loop1): bogus number of FAT sectors [ 153.486821][ T8262] FAT-fs (loop1): Can't find a valid FAT filesystem [ 154.473290][ T4251] usb 3-1: enqueue for inactive port 0 [ 154.473314][ T4251] usb 3-1: enqueue for inactive port 0 [ 154.543263][ T4251] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 156.134303][ T8365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.872'. [ 156.140898][ T8366] netlink: 'syz.0.872': attribute type 10 has an invalid length. [ 156.140915][ T8366] netlink: 55 bytes leftover after parsing attributes in process `syz.0.872'. [ 156.200019][ T8374] loop1: detected capacity change from 0 to 512 [ 156.220646][ T8374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.277936][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 156.277968][ T29] audit: type=1400 audit(1792580735.381:1508): avc: denied { getopt } for pid=8372 comm="syz.1.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 156.346727][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.374654][ T8366] netlink: 'syz.0.872': attribute type 10 has an invalid length. [ 156.374677][ T8366] netlink: 55 bytes leftover after parsing attributes in process `syz.0.872'. [ 156.375908][ T8393] netlink: 'syz.3.881': attribute type 62 has an invalid length. [ 156.378086][ T8393] netlink: 132 bytes leftover after parsing attributes in process `syz.3.881'. [ 156.424529][ T8366] netlink: 'syz.0.872': attribute type 10 has an invalid length. [ 156.424555][ T8366] netlink: 55 bytes leftover after parsing attributes in process `syz.0.872'. [ 156.424610][ T8366] netlink: 'syz.0.872': attribute type 10 has an invalid length. [ 156.424672][ T8366] netlink: 55 bytes leftover after parsing attributes in process `syz.0.872'. [ 156.424724][ T8366] netlink: 'syz.0.872': attribute type 10 has an invalid length. [ 156.424759][ T8366] netlink: 55 bytes leftover after parsing attributes in process `syz.0.872'. [ 156.424810][ T8366] netlink: 'syz.0.872': attribute type 10 has an invalid length. [ 156.424826][ T8366] netlink: 55 bytes leftover after parsing attributes in process `syz.0.872'. [ 156.424947][ T8366] netlink: 'syz.0.872': attribute type 10 has an invalid length. [ 156.425069][ T8366] netlink: 'syz.0.872': attribute type 10 has an invalid length. [ 156.425121][ T8366] netlink: 'syz.0.872': attribute type 10 has an invalid length. [ 156.426109][ T29] audit: type=1400 audit(1792580735.511:1509): avc: denied { create } for pid=8389 comm="syz.4.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 156.430872][ T8396] ipvlan2: entered promiscuous mode [ 156.431491][ T8396] bridge0: port 2(ipvlan2) entered blocking state [ 156.431526][ T8396] bridge0: port 2(ipvlan2) entered disabled state [ 156.431603][ T8396] ipvlan2: entered allmulticast mode [ 156.431619][ T8396] bridge0: entered allmulticast mode [ 156.432169][ T8396] ipvlan2: left allmulticast mode [ 156.432234][ T8396] bridge0: left allmulticast mode [ 156.445388][ T29] audit: type=1400 audit(1792580735.551:1510): avc: denied { bind } for pid=8389 comm="syz.4.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 156.652914][ T8405] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 156.690174][ T8211] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 156.738426][ T8399] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 156.738507][ T8399] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 156.738552][ T8399] vhci_hcd vhci_hcd.0: Device attached [ 156.815826][ T8427] syz.1.885 uses obsolete (PF_INET,SOCK_PACKET) [ 156.879430][ T8436] loop1: detected capacity change from 0 to 512 [ 156.900198][ T8436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.900360][ T8436] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.914562][ T126] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 156.930005][ T8436] netlink: zone id is out of range [ 156.930044][ T8436] netlink: zone id is out of range [ 156.930086][ T8436] netlink: zone id is out of range [ 156.930240][ T8436] netlink: zone id is out of range [ 156.930385][ T8436] netlink: zone id is out of range [ 156.930426][ T8436] netlink: zone id is out of range [ 156.930559][ T8436] netlink: zone id is out of range [ 156.930653][ T8436] netlink: zone id is out of range [ 156.930674][ T8436] netlink: zone id is out of range [ 156.969123][ T29] audit: type=1400 audit(1792580736.071:1511): avc: denied { watch } for pid=8413 comm="syz.1.885" path="/163/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.973493][ T126] usb 7-1: new full-speed USB device number 5 using vhci_hcd [ 157.087044][ T8419] capability: warning: `syz.0.883' uses 32-bit capabilities (legacy support in use) [ 159.381016][ T8211] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 159.390127][ T8211] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 159.390423][ T8415] vhci_hcd: connection reset by peer [ 159.390662][ T405] vhci_hcd vhci_hcd.3: stop threads [ 159.390678][ T405] vhci_hcd vhci_hcd.3: release socket [ 159.390793][ T405] vhci_hcd vhci_hcd.3: disconnect device [ 159.421629][ T8211] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 159.448849][ T3405] lo speed is unknown, defaulting to 1000 [ 159.450168][ T8211] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 159.467786][ T8211] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 159.468534][ T8211] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 159.490254][ T8211] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 159.490689][ T3346] lo speed is unknown, defaulting to 1000 [ 159.524063][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.562678][ T8211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.581888][ T8211] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.590018][ T29] audit: type=1400 audit(1792580738.691:1512): avc: denied { setopt } for pid=8553 comm="syz.0.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 159.613016][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.613054][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.630204][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.630297][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.874666][ T29] audit: type=1400 audit(1792580738.981:1513): avc: denied { mount } for pid=8588 comm="syz.0.905" name="/" dev="autofs" ino=13729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 159.886140][ T8211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.964644][ T29] audit: type=1400 audit(1792580739.071:1514): avc: denied { ioctl } for pid=8595 comm="syz.1.906" path="socket:[13745]" dev="sockfs" ino=13745 ioctlcmd=0x583f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 160.012312][ T8577] loop3: detected capacity change from 0 to 512 [ 160.197795][ T8620] FAULT_INJECTION: forcing a failure. [ 160.197795][ T8620] name failslab, interval 1, probability 0, space 0, times 0 [ 160.197833][ T8620] CPU: 0 UID: 0 PID: 8620 Comm: syz.3.909 Not tainted syzkaller #0 PREEMPT(lazy) [ 160.197873][ T8620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 160.197965][ T8620] Call Trace: [ 160.197974][ T8620] [ 160.197985][ T8620] __dump_stack+0x1d/0x30 [ 160.198021][ T8620] dump_stack_lvl+0x95/0xd0 [ 160.198052][ T8620] dump_stack+0x15/0x1b [ 160.198103][ T8620] should_fail_ex+0x262/0x280 [ 160.198145][ T8620] ? skb_clone+0x151/0x1f0 [ 160.198182][ T8620] should_failslab+0x8c/0xb0 [ 160.198275][ T8620] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 160.198321][ T8620] ? skb_clone+0x151/0x1f0 [ 160.198411][ T8620] skb_clone+0x151/0x1f0 [ 160.198448][ T8620] __netlink_deliver_tap+0x2be/0x510 [ 160.198485][ T8620] netlink_unicast+0x712/0x740 [ 160.198513][ T8620] netlink_sendmsg+0x5ef/0x740 [ 160.198694][ T8620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.198727][ T8620] ____sys_sendmsg+0x532/0x580 [ 160.198811][ T8620] ___sys_sendmsg+0x195/0x1e0 [ 160.198875][ T8620] __x64_sys_sendmsg+0xd4/0x160 [ 160.198953][ T8620] x64_sys_call+0x22ab/0x2550 [ 160.198993][ T8620] do_syscall_64+0x112/0x360 [ 160.199058][ T8620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.199150][ T8620] RIP: 0033:0x7f4de721f559 [ 160.199172][ T8620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.199234][ T8620] RSP: 002b:00007f4de5c6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.199261][ T8620] RAX: ffffffffffffffda RBX: 00007f4de74a5fa0 RCX: 00007f4de721f559 [ 160.199281][ T8620] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 160.199295][ T8620] RBP: 00007f4de5c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 160.199313][ T8620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.199330][ T8620] R13: 00007f4de74a6038 R14: 00007f4de74a5fa0 R15: 00007ffdbf6b37f8 [ 160.199367][ T8620] [ 160.235445][ T8615] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 160.235545][ T8615] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 160.235634][ T8615] vhci_hcd vhci_hcd.0: Device attached [ 160.268503][ T8620] __nla_validate_parse: 59 callbacks suppressed [ 160.268555][ T8620] netlink: 280 bytes leftover after parsing attributes in process `syz.3.909'. [ 160.434266][ T4251] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 160.488660][ T8211] veth0_vlan: entered promiscuous mode [ 160.491714][ T8211] veth1_vlan: entered promiscuous mode [ 160.518815][ T8211] veth0_macvtap: entered promiscuous mode [ 160.520922][ T8211] veth1_macvtap: entered promiscuous mode [ 160.539000][ T8211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.552989][ T8211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.584075][ T4251] usb 3-1: new full-speed USB device number 6 using vhci_hcd [ 160.702159][ T170] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.702981][ T170] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.703294][ T170] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.703573][ T170] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.723444][ T29] audit: type=1400 audit(1792580739.801:1515): avc: denied { execute } for pid=8630 comm="syz.3.910" dev="tmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 161.283291][ T29] audit: type=1400 audit(1792580740.381:1516): avc: denied { mount } for pid=8663 comm="syz.5.913" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 161.287237][ T8672] hub 1-0:1.0: USB hub found [ 161.287368][ T8672] hub 1-0:1.0: 8 ports detected [ 161.422753][ T8681] netlink: 277 bytes leftover after parsing attributes in process `syz.3.915'. [ 161.993268][ T126] usb 7-1: enqueue for inactive port 0 [ 161.993388][ T126] usb 7-1: enqueue for inactive port 0 [ 162.063249][ T126] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 163.029996][ T8624] vhci_hcd: connection reset by peer [ 163.040788][ T38] vhci_hcd vhci_hcd.1: stop threads [ 163.040811][ T38] vhci_hcd vhci_hcd.1: release socket [ 163.040830][ T38] vhci_hcd vhci_hcd.1: disconnect device [ 163.071784][ T29] audit: type=1400 audit(1792580742.171:1517): avc: denied { unmount } for pid=8211 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 163.118392][ T8756] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 163.297614][ T29] audit: type=1400 audit(1792580742.311:1518): avc: denied { bind } for pid=8762 comm="syz.5.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 163.475486][ T8777] loop1: detected capacity change from 0 to 512 [ 163.509877][ T8777] ext4: Unknown parameter 'fowner<00000000000000000000' [ 163.631719][ T8777] net_ratelimit: 128 callbacks suppressed [ 163.632093][ T8777] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 163.745347][ T8784] loop1: detected capacity change from 0 to 1024 [ 163.752681][ T8784] EXT4-fs: Ignoring removed bh option [ 163.804436][ T8784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.856203][ T405] IPVS: starting estimator thread 0... [ 163.858907][ T8784] IPVS: ip_vs_add_dest(): server weight less than zero [ 163.881339][ T29] audit: type=1400 audit(1792580742.941:1519): avc: denied { write } for pid=8776 comm="syz.1.926" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.927827][ T8772] loop5: detected capacity change from 0 to 512 [ 163.953530][ T8788] IPVS: using max 1872 ests per chain, 93600 per kthread [ 163.994943][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.022282][ T8801] validate_nla: 59 callbacks suppressed [ 164.022303][ T8801] netlink: 'syz.4.931': attribute type 62 has an invalid length. [ 164.164379][ T8826] FAULT_INJECTION: forcing a failure. [ 164.164379][ T8826] name failslab, interval 1, probability 0, space 0, times 0 [ 164.164440][ T8826] CPU: 0 UID: 0 PID: 8826 Comm: syz.3.935 Not tainted syzkaller #0 PREEMPT(lazy) [ 164.164468][ T8826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 164.164485][ T8826] Call Trace: [ 164.164494][ T8826] [ 164.164505][ T8826] __dump_stack+0x1d/0x30 [ 164.164544][ T8826] dump_stack_lvl+0x95/0xd0 [ 164.164575][ T8826] dump_stack+0x15/0x1b [ 164.164604][ T8826] should_fail_ex+0x262/0x280 [ 164.164664][ T8826] ? __io_uring_add_tctx_node+0xea/0x3b0 [ 164.164742][ T8826] should_failslab+0x8c/0xb0 [ 164.164788][ T8826] __kmalloc_cache_noprof+0x5d/0x3e0 [ 164.164815][ T8826] ? __io_uring_add_tctx_node+0xea/0x3b0 [ 164.164881][ T8826] __io_uring_add_tctx_node+0xea/0x3b0 [ 164.164927][ T8826] io_ringfd_register+0x77/0x390 [ 164.164973][ T8826] __se_sys_io_uring_register+0x6fa/0x1340 [ 164.165015][ T8826] ? restore_fpregs_from_fpstate+0x61/0x110 [ 164.165110][ T8826] __x64_sys_io_uring_register+0x55/0x70 [ 164.165149][ T8826] x64_sys_call+0x1ff6/0x2550 [ 164.165180][ T8826] do_syscall_64+0x112/0x360 [ 164.165284][ T8826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.165315][ T8826] RIP: 0033:0x7f4de721f559 [ 164.165336][ T8826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.165430][ T8826] RSP: 002b:00007f4de5c4e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 164.165525][ T8826] RAX: ffffffffffffffda RBX: 00007f4de74a6090 RCX: 00007f4de721f559 [ 164.165545][ T8826] RDX: 0000200000001180 RSI: 0000000000000014 RDI: 0000000000000003 [ 164.165563][ T8826] RBP: 00007f4de5c4e090 R08: 0000000000000000 R09: 0000000000000000 [ 164.165584][ T8826] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 164.165601][ T8826] R13: 00007f4de74a6128 R14: 00007f4de74a6090 R15: 00007ffdbf6b37f8 [ 164.165653][ T8826] [ 164.165900][ T8772] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.165982][ T8772] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.220406][ T8772] ip_tables: iptables: counters copy to user failed while replacing table [ 165.073397][ T29] audit: type=1400 audit(1792580744.171:1520): avc: denied { getopt } for pid=8922 comm="syz.3.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 165.075648][ T29] audit: type=1400 audit(1792580744.181:1521): avc: denied { bind } for pid=8922 comm="syz.3.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 165.076232][ T29] audit: type=1400 audit(1792580744.181:1522): avc: denied { listen } for pid=8922 comm="syz.3.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 165.083992][ T29] audit: type=1400 audit(1792580744.181:1523): avc: denied { write } for pid=8922 comm="syz.3.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 165.593314][ T4251] usb 3-1: enqueue for inactive port 0 [ 165.593343][ T4251] usb 3-1: enqueue for inactive port 0 [ 165.663284][ T4251] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 167.016126][ T8211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.021218][ T29] audit: type=1400 audit(1792580746.121:1524): avc: denied { create } for pid=8941 comm="syz.1.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 167.024053][ T29] audit: type=1400 audit(1792580746.131:1525): avc: denied { write } for pid=8941 comm="syz.1.942" path="socket:[14451]" dev="sockfs" ino=14451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 167.112405][ T8946] loop1: detected capacity change from 0 to 2048 [ 167.201043][ T29] audit: type=1400 audit(1792580746.231:1526): avc: denied { shutdown } for pid=8948 comm="syz.3.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 167.256854][ T8952] loop5: detected capacity change from 0 to 512 [ 167.260579][ T8952] EXT4-fs: Ignoring removed i_version option [ 167.451890][ T8957] pim6reg: entered allmulticast mode [ 167.492415][ T29] audit: type=1400 audit(1792580746.461:1527): avc: denied { getopt } for pid=8943 comm="syz.0.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 167.519766][ T8946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.326249][ T8952] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.347149][ T29] audit: type=1400 audit(1792580747.451:1528): avc: denied { write } for pid=8944 comm="syz.1.945" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.347188][ T29] audit: type=1400 audit(1792580747.451:1529): avc: denied { write } for pid=8944 comm="syz.1.945" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 168.360254][ T8952] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.360483][ T8952] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.375000][ T29] audit: type=1400 audit(1792580747.461:1530): avc: denied { map } for pid=8944 comm="syz.1.945" path="/173/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 168.395491][ T8946] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 168.395705][ T8946] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 168.395788][ T8946] EXT4-fs (loop1): This should not happen!! Data will be lost [ 168.395788][ T8946] [ 168.395800][ T8946] EXT4-fs (loop1): Total free blocks count 0 [ 168.395888][ T8946] EXT4-fs (loop1): Free/Dirty block details [ 168.395924][ T8946] EXT4-fs (loop1): free_blocks=4096 [ 168.395966][ T8946] EXT4-fs (loop1): dirty_blocks=64 [ 168.396021][ T8946] EXT4-fs (loop1): Block reservation details [ 168.396061][ T8946] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 168.398351][ T29] audit: type=1400 audit(1792580747.481:1531): avc: denied { setattr } for pid=8950 comm="syz.5.943" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 168.402591][ T8944] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 168.579704][ T8966] loop3: detected capacity change from 0 to 2048 [ 168.595674][ T8964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.948'. [ 168.611091][ T8211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.640659][ T8964] netlink: 'syz.0.948': attribute type 5 has an invalid length. [ 168.652740][ T8966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.668166][ T29] audit: type=1400 audit(1792580747.771:1532): avc: denied { write } for pid=8965 comm="syz.3.949" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.715263][ T8966] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 168.715362][ T8966] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 168.715388][ T8966] EXT4-fs (loop3): This should not happen!! Data will be lost [ 168.715388][ T8966] [ 168.715401][ T8966] EXT4-fs (loop3): Total free blocks count 0 [ 168.715417][ T8966] EXT4-fs (loop3): Free/Dirty block details [ 168.715434][ T8966] EXT4-fs (loop3): free_blocks=4096 [ 168.715453][ T8966] EXT4-fs (loop3): dirty_blocks=64 [ 168.715470][ T8966] EXT4-fs (loop3): Block reservation details [ 168.715550][ T8966] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 168.718430][ T8965] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 168.863479][ T8976] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 168.921283][ T8984] netlink: 'syz.0.956': attribute type 62 has an invalid length. [ 168.921977][ T8981] loop3: detected capacity change from 0 to 2048 [ 168.956202][ T8981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.956658][ T29] audit: type=1400 audit(1792580748.061:1533): avc: denied { write } for pid=8980 comm="syz.3.955" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.979823][ T8981] FAULT_INJECTION: forcing a failure. [ 168.979823][ T8981] name failslab, interval 1, probability 0, space 0, times 0 [ 168.979927][ T8981] CPU: 1 UID: 0 PID: 8981 Comm: syz.3.955 Not tainted syzkaller #0 PREEMPT(lazy) [ 168.979996][ T8981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 168.980086][ T8981] Call Trace: [ 168.980108][ T8981] [ 168.980138][ T8981] __dump_stack+0x1d/0x30 [ 168.980216][ T8981] dump_stack_lvl+0x95/0xd0 [ 168.980290][ T8981] dump_stack+0x15/0x1b [ 168.980370][ T8981] should_fail_ex+0x262/0x280 [ 168.980465][ T8981] ? __ext4_journal_start_sb+0x167/0x390 [ 168.980535][ T8981] should_failslab+0x8c/0xb0 [ 168.980642][ T8981] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 168.980786][ T8981] ? __ext4_journal_start_sb+0x167/0x390 [ 168.980855][ T8981] __ext4_journal_start_sb+0x167/0x390 [ 168.980933][ T8981] ext4_do_writepages+0x267/0x2870 [ 168.981046][ T8981] ? __css_rstat_updated+0xbb/0x280 [ 168.981131][ T8981] ? __mod_memcg_lruvec_state+0x1b5/0x2a0 [ 168.981207][ T8981] ? __rcu_read_unlock+0x33/0x70 [ 168.981335][ T8981] ? __css_rstat_updated+0xbb/0x280 [ 168.981429][ T8981] ? __list_del_entry_valid_or_report+0x65/0x130 [ 168.981521][ T8981] ? mas_wr_store_entry+0x1e94/0x5ac0 [ 168.981670][ T8981] ? __list_del_entry_valid_or_report+0x65/0x130 [ 168.981746][ T8981] ? __rmqueue_pcplist+0x964/0xb30 [ 168.981831][ T8981] ext4_writepages+0x18c/0x300 [ 168.981901][ T8981] ? __pfx_ext4_writepages+0x10/0x10 [ 168.982004][ T8981] do_writepages+0x1b9/0x300 [ 168.982124][ T8981] ? from_kprojid+0x171/0x3a0 [ 168.982227][ T8981] ? mark_buffer_dirty+0xfa/0x1f0 [ 168.982326][ T8981] ? inode_to_bdi+0x47/0xa0 [ 168.982421][ T8981] ? _raw_spin_unlock+0x9/0x30 [ 168.982569][ T8981] ? wbc_attach_and_unlock_inode+0x91/0x2b0 [ 168.982676][ T8981] filemap_flush+0xee/0x130 [ 168.982791][ T8981] ext4_convert_inline_data+0xcb/0x360 [ 168.982881][ T8981] ? file_update_time_flags+0x2ab/0x2d0 [ 168.983038][ T8981] ext4_page_mkwrite+0x170/0xa90 [ 168.983112][ T8981] do_wp_page+0xb8a/0x1ea0 [ 168.983206][ T8981] ? avc_has_perm+0x101/0x190 [ 168.983300][ T8981] ? __rcu_read_lock+0x36/0x50 [ 168.983476][ T8981] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 168.983498][ T8981] handle_mm_fault+0xe29/0x3c60 [ 168.983585][ T8981] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 168.983659][ T8981] do_user_addr_fault+0xa71/0xde0 [ 168.983794][ T8981] exc_page_fault+0x62/0xa0 [ 168.983854][ T8981] asm_exc_page_fault+0x26/0x30 [ 168.983926][ T8981] RIP: 0010:__put_user_4+0xd/0x30 [ 168.984064][ T8981] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 168.984126][ T8981] RSP: 0018:ffffc90001d27e60 EFLAGS: 00050206 [ 168.984180][ T8981] RAX: 0000000000000007 RBX: 0000000000000000 RCX: 0000200000000000 [ 168.984222][ T8981] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 168.984263][ T8981] RBP: 0000000000000007 R08: 00018881185fa247 R09: 0000000000000000 [ 168.984305][ T8981] R10: 00018881185fa240 R11: 00018881185fa247 R12: 0000000000000000 [ 168.984366][ T8981] R13: 0000200000000000 R14: 0000000000000001 R15: 0000000000000005 [ 168.984422][ T8981] __sys_socketpair+0xa6/0x430 [ 168.984494][ T8981] ? ksys_write+0x194/0x1a0 [ 168.984645][ T8981] __x64_sys_socketpair+0x52/0x60 [ 168.984739][ T8981] x64_sys_call+0x1bf7/0x2550 [ 168.984825][ T8981] do_syscall_64+0x112/0x360 [ 168.984970][ T8981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.985058][ T8981] RIP: 0033:0x7f4de721f559 [ 168.985164][ T8981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.985287][ T8981] RSP: 002b:00007f4de5c6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 168.985360][ T8981] RAX: ffffffffffffffda RBX: 00007f4de74a5fa0 RCX: 00007f4de721f559 [ 168.985451][ T8981] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 168.985486][ T8981] RBP: 00007f4de5c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 168.985528][ T8981] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.985707][ T8981] R13: 00007f4de74a6038 R14: 00007f4de74a5fa0 R15: 00007ffdbf6b37f8 [ 168.985768][ T8981] [ 169.000935][ T8980] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 169.001005][ T8980] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 169.001086][ T8980] EXT4-fs (loop3): This should not happen!! Data will be lost [ 169.001086][ T8980] [ 169.001098][ T8980] EXT4-fs (loop3): Total free blocks count 0 [ 169.001110][ T8980] EXT4-fs (loop3): Free/Dirty block details [ 169.001199][ T8980] EXT4-fs (loop3): free_blocks=4096 [ 169.001215][ T8980] EXT4-fs (loop3): dirty_blocks=64 [ 169.001230][ T8980] EXT4-fs (loop3): Block reservation details [ 169.001309][ T8980] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 169.116306][ T8995] siw: device registration error -23 [ 169.117954][ T8995] siw: device registration error -23 [ 169.161132][ T8995] loop1: detected capacity change from 0 to 512 [ 169.171836][ T8995] FAT-fs (loop1): bogus number of FAT sectors [ 169.171882][ T8995] FAT-fs (loop1): Can't find a valid FAT filesystem [ 171.898940][ T38] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 171.951708][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.959'. [ 172.079816][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 172.079835][ T29] audit: type=1400 audit(1792580751.181:1535): avc: denied { create } for pid=9109 comm="syz.3.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 172.112203][ T29] audit: type=1400 audit(1792580751.211:1536): avc: denied { connect } for pid=9109 comm="syz.3.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 172.115643][ T29] audit: type=1400 audit(1792580751.221:1537): avc: denied { connect } for pid=9109 comm="syz.3.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 172.268489][ T9121] FAULT_INJECTION: forcing a failure. [ 172.268489][ T9121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.268820][ T9121] CPU: 1 UID: 0 PID: 9121 Comm: syz.1.966 Not tainted syzkaller #0 PREEMPT(lazy) [ 172.268897][ T9121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 172.268916][ T9121] Call Trace: [ 172.268925][ T9121] [ 172.268933][ T9121] __dump_stack+0x1d/0x30 [ 172.268959][ T9121] dump_stack_lvl+0x95/0xd0 [ 172.268982][ T9121] dump_stack+0x15/0x1b [ 172.269080][ T9121] should_fail_ex+0x262/0x280 [ 172.269127][ T9121] should_fail+0xb/0x20 [ 172.269235][ T9121] should_fail_usercopy+0x1a/0x20 [ 172.269267][ T9121] _copy_to_user+0x20/0xa0 [ 172.269307][ T9121] simple_read_from_buffer+0xb5/0x130 [ 172.269407][ T9121] proc_fail_nth_read+0x10e/0x150 [ 172.269443][ T9121] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.269519][ T9121] vfs_read+0x18e/0x7c0 [ 172.269574][ T9121] ? irqentry_exit_to_kernel_mode_preempt+0x63/0x80 [ 172.269646][ T9121] ? __rcu_read_unlock+0x4e/0x70 [ 172.269693][ T9121] ? __fget_files+0x184/0x1c0 [ 172.269731][ T9121] ? mutex_lock+0x52/0x90 [ 172.269807][ T9121] ksys_read+0xdc/0x1a0 [ 172.269875][ T9121] __x64_sys_read+0x40/0x50 [ 172.269915][ T9121] x64_sys_call+0x2135/0x2550 [ 172.269952][ T9121] do_syscall_64+0x112/0x360 [ 172.270020][ T9121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.270043][ T9121] RIP: 0033:0x7f310d2df559 [ 172.270127][ T9121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.270146][ T9121] RSP: 002b:00007f310bd16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 172.270168][ T9121] RAX: ffffffffffffffda RBX: 00007f310d566090 RCX: 00007f310d2df559 [ 172.270197][ T9121] RDX: 00000000000000eb RSI: 00002000000003c0 RDI: 0000000000000006 [ 172.270211][ T9121] RBP: 00007f310d376b20 R08: 0000000000000000 R09: 0000000000000000 [ 172.270224][ T9121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.270236][ T9121] R13: 00007f310d566128 R14: 00007f310d566090 R15: 00007ffecf4772a8 [ 172.270338][ T9121] [ 172.595966][ T9121] syzkaller0: entered promiscuous mode [ 172.596516][ T9121] syzkaller0: entered allmulticast mode [ 172.827197][ T9128] FAULT_INJECTION: forcing a failure. [ 172.827197][ T9128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.827233][ T9128] CPU: 1 UID: 0 PID: 9128 Comm: syz.3.969 Not tainted syzkaller #0 PREEMPT(lazy) [ 172.827326][ T9128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 172.827342][ T9128] Call Trace: [ 172.827349][ T9128] [ 172.827358][ T9128] __dump_stack+0x1d/0x30 [ 172.827388][ T9128] dump_stack_lvl+0x95/0xd0 [ 172.827416][ T9128] dump_stack+0x15/0x1b [ 172.827442][ T9128] should_fail_ex+0x262/0x280 [ 172.827501][ T9128] should_fail+0xb/0x20 [ 172.827534][ T9128] should_fail_usercopy+0x1a/0x20 [ 172.827571][ T9128] _copy_from_user+0x1c/0xb0 [ 172.827677][ T9128] __copy_msghdr+0x242/0x300 [ 172.827710][ T9128] ___sys_sendmsg+0x10c/0x1e0 [ 172.827763][ T9128] __sys_sendmmsg+0x1a0/0x310 [ 172.827890][ T9128] __x64_sys_sendmmsg+0x57/0x70 [ 172.827963][ T9128] x64_sys_call+0x1fb4/0x2550 [ 172.827994][ T9128] do_syscall_64+0x112/0x360 [ 172.828176][ T9128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.828199][ T9128] RIP: 0033:0x7f4de721f559 [ 172.828215][ T9128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.828235][ T9128] RSP: 002b:00007f4de5c6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 172.828257][ T9128] RAX: ffffffffffffffda RBX: 00007f4de74a5fa0 RCX: 00007f4de721f559 [ 172.828295][ T9128] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: 0000000000000003 [ 172.828308][ T9128] RBP: 00007f4de5c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 172.828322][ T9128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.828335][ T9128] R13: 00007f4de74a6038 R14: 00007f4de74a5fa0 R15: 00007ffdbf6b37f8 [ 172.828355][ T9128] [ 172.999191][ T29] audit: type=1400 audit(1792580752.101:1538): avc: denied { connect } for pid=9129 comm="syz.5.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 173.007291][ T29] audit: type=1400 audit(1792580752.101:1539): avc: denied { read } for pid=9129 comm="syz.5.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 173.071313][ T9135] netlink: 40 bytes leftover after parsing attributes in process `syz.4.972'. [ 173.090038][ T9139] netlink: 'syz.1.973': attribute type 62 has an invalid length. [ 173.284701][ T9158] netlink: 68 bytes leftover after parsing attributes in process `syz.5.971'. [ 173.290718][ T9158] loop5: detected capacity change from 0 to 512 [ 173.309290][ T9158] EXT4-fs error (device loop5): ext4_xattr_inode_iget:473: comm syz.5.971: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 173.309323][ T9158] loop5: lost filesystem error report for type 5 error -117 [ 173.309496][ T9158] EXT4-fs (loop5): 1 orphan inode deleted [ 173.309964][ T9158] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.311771][ T9145] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 173.311853][ T9145] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 173.311893][ T9145] vhci_hcd vhci_hcd.0: Device attached [ 173.493469][ T126] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 173.605077][ T126] usb 3-1: new full-speed USB device number 7 using vhci_hcd [ 174.597721][ T29] audit: type=1400 audit(1792580753.701:1540): avc: denied { bind } for pid=9212 comm="syz.4.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 175.616811][ T9259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.988'. [ 175.682076][ T9262] netlink: 143932 bytes leftover after parsing attributes in process `syz.0.988'. [ 175.682140][ T9262] netlink: zone id is out of range [ 175.682187][ T9262] netlink: zone id is out of range [ 175.682194][ T9262] netlink: zone id is out of range [ 175.682206][ T9262] netlink: zone id is out of range [ 175.682212][ T9262] netlink: zone id is out of range [ 175.682219][ T9262] netlink: zone id is out of range [ 175.682317][ T9262] netlink: zone id is out of range [ 175.682326][ T9262] netlink: zone id is out of range [ 175.682398][ T9262] netlink: zone id is out of range [ 175.682457][ T9262] netlink: zone id is out of range [ 175.947436][ T8211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.115038][ T9161] vhci_hcd: connection reset by peer [ 176.116335][ T416] vhci_hcd vhci_hcd.1: stop threads [ 176.116360][ T416] vhci_hcd vhci_hcd.1: release socket [ 176.116387][ T416] vhci_hcd vhci_hcd.1: disconnect device [ 176.433448][ T9313] bridge_slave_0: left allmulticast mode [ 176.433494][ T9313] bridge_slave_0: left promiscuous mode [ 176.433765][ T9313] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.470076][ T9313] bridge_slave_1: left allmulticast mode [ 176.470115][ T9313] bridge_slave_1: left promiscuous mode [ 176.470350][ T9313] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.512325][ T9313] bond0: (slave bond_slave_0): Releasing backup interface [ 176.553428][ T9312] netlink: 'syz.3.993': attribute type 4 has an invalid length. [ 176.554667][ T9319] FAULT_INJECTION: forcing a failure. [ 176.554667][ T9319] name failslab, interval 1, probability 0, space 0, times 0 [ 176.554711][ T9319] CPU: 0 UID: 0 PID: 9319 Comm: syz.1.995 Not tainted syzkaller #0 PREEMPT(lazy) [ 176.554737][ T9319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 176.554749][ T9319] Call Trace: [ 176.554755][ T9319] [ 176.554763][ T9319] __dump_stack+0x1d/0x30 [ 176.554787][ T9319] dump_stack_lvl+0x95/0xd0 [ 176.554817][ T9319] dump_stack+0x15/0x1b [ 176.554844][ T9319] should_fail_ex+0x262/0x280 [ 176.554878][ T9319] ? vm_area_dup+0x33/0x300 [ 176.554912][ T9319] should_failslab+0x8c/0xb0 [ 176.554955][ T9319] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 176.554996][ T9319] ? vm_area_dup+0x33/0x300 [ 176.555032][ T9319] vm_area_dup+0x33/0x300 [ 176.555068][ T9319] __split_vma+0xe4/0x720 [ 176.555099][ T9319] ? _raw_spin_unlock+0x9/0x30 [ 176.555131][ T9319] ? queue_folios_hugetlb+0x410/0x7a0 [ 176.555161][ T9319] ? hugetlb_vma_unlock_read+0x82/0xa0 [ 176.555189][ T9319] vma_modify+0xc98/0xd50 [ 176.555227][ T9319] vma_modify_policy+0x1b3/0x1f0 [ 176.555270][ T9319] mbind_range+0x1bb/0x430 [ 176.555301][ T9319] __se_sys_mbind+0x8b5/0xdd0 [ 176.555332][ T9319] __x64_sys_mbind+0x78/0x90 [ 176.555356][ T9319] x64_sys_call+0x1d78/0x2550 [ 176.555390][ T9319] do_syscall_64+0x112/0x360 [ 176.555423][ T9319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.555447][ T9319] RIP: 0033:0x7f310d2df559 [ 176.555466][ T9319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.555491][ T9319] RSP: 002b:00007f310bcf5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 176.555520][ T9319] RAX: ffffffffffffffda RBX: 00007f310d566180 RCX: 00007f310d2df559 [ 176.555537][ T9319] RDX: 0000000000000001 RSI: 0000000000600000 RDI: 0000200000000000 [ 176.555555][ T9319] RBP: 00007f310bcf5090 R08: 0000000000000000 R09: 0000000000000002 [ 176.555572][ T9319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.555589][ T9319] R13: 00007f310d566218 R14: 00007f310d566180 R15: 00007ffecf4772a8 [ 176.555624][ T9319] [ 176.556545][ T9313] bond0: (slave bond_slave_1): Releasing backup interface [ 176.647710][ T9318] siw: device registration error -23 [ 176.651852][ T9318] siw: device registration error -23 [ 176.663636][ T9313] team0: Port device team_slave_0 removed [ 176.681475][ T9312] loop3: detected capacity change from 0 to 512 [ 176.690408][ T9312] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 176.690481][ T9312] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 176.765166][ T9312] EXT4-fs (loop3): 1 truncate cleaned up [ 176.766069][ T9312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.826180][ T29] audit: type=1400 audit(1792580755.931:1541): avc: denied { write } for pid=9303 comm="syz.3.993" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 176.972406][ T9313] team0: Port device team_slave_1 removed [ 176.992334][ T9313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.992820][ T9313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.021747][ T9313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.021824][ T9313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.102332][ T9331] FAULT_INJECTION: forcing a failure. [ 177.102332][ T9331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.102406][ T9331] CPU: 0 UID: 0 PID: 9331 Comm: syz.5.1000 Not tainted syzkaller #0 PREEMPT(lazy) [ 177.102440][ T9331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 177.102457][ T9331] Call Trace: [ 177.102540][ T9331] [ 177.102549][ T9331] __dump_stack+0x1d/0x30 [ 177.102579][ T9331] dump_stack_lvl+0x95/0xd0 [ 177.102621][ T9331] dump_stack+0x15/0x1b [ 177.102641][ T9331] should_fail_ex+0x262/0x280 [ 177.102676][ T9331] should_fail+0xb/0x20 [ 177.102709][ T9331] should_fail_usercopy+0x1a/0x20 [ 177.102789][ T9331] _copy_from_user+0x1c/0xb0 [ 177.102838][ T9331] dev_ethtool+0x55/0x2120 [ 177.102918][ T9331] ? full_name_hash+0x92/0xe0 [ 177.102950][ T9331] ? strcmp+0x22/0x50 [ 177.103010][ T9331] ? __rcu_read_unlock+0x4e/0x70 [ 177.103055][ T9331] dev_ioctl+0x2e0/0x960 [ 177.103089][ T9331] sock_do_ioctl+0x1aa/0x230 [ 177.103149][ T9331] sock_ioctl+0x439/0x610 [ 177.103219][ T9331] ? mutex_lock+0x52/0x90 [ 177.103243][ T9331] ? __pfx_sock_ioctl+0x10/0x10 [ 177.103284][ T9331] __se_sys_ioctl+0xce/0x140 [ 177.103498][ T9331] __x64_sys_ioctl+0x43/0x50 [ 177.103532][ T9331] x64_sys_call+0x239d/0x2550 [ 177.103558][ T9331] do_syscall_64+0x112/0x360 [ 177.103669][ T9331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.103692][ T9331] RIP: 0033:0x7f45d111f559 [ 177.103711][ T9331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.103799][ T9331] RSP: 002b:00007f45cfb6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.103822][ T9331] RAX: ffffffffffffffda RBX: 00007f45d13a5fa0 RCX: 00007f45d111f559 [ 177.103842][ T9331] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 177.103932][ T9331] RBP: 00007f45cfb6f090 R08: 0000000000000000 R09: 0000000000000000 [ 177.103950][ T9331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.103967][ T9331] R13: 00007f45d13a6038 R14: 00007f45d13a5fa0 R15: 00007ffd1f1cc168 [ 177.103994][ T9331] [ 177.333049][ T9336] netlink: 'syz.1.1001': attribute type 62 has an invalid length. [ 177.345883][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.398283][ T29] audit: type=1400 audit(1792580756.501:1542): avc: denied { read write } for pid=9345 comm="syz.3.1004" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 177.398324][ T29] audit: type=1400 audit(1792580756.501:1543): avc: denied { open } for pid=9345 comm="syz.3.1004" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 177.400364][ T29] audit: type=1400 audit(1792580756.501:1544): avc: denied { ioctl } for pid=9345 comm="syz.3.1004" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 177.432154][ T9347] loop3: detected capacity change from 0 to 512 [ 177.460883][ T9347] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 177.460946][ T9347] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 177.481963][ T9347] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 177.482120][ T9347] System zones: 1-12 [ 177.489604][ T9347] EXT4-fs (loop3): 1 truncate cleaned up [ 177.490496][ T9347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.633686][ T9351] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 177.633756][ T9351] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 177.633844][ T9351] vhci_hcd vhci_hcd.0: Device attached [ 177.725335][ T29] audit: type=1400 audit(1792580756.831:1545): avc: denied { write } for pid=9345 comm="syz.3.1004" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.853758][ T9384] FAULT_INJECTION: forcing a failure. [ 177.853758][ T9384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.853796][ T9384] CPU: 1 UID: 0 PID: 9384 Comm: syz.5.1010 Not tainted syzkaller #0 PREEMPT(lazy) [ 177.853829][ T9384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 177.853847][ T9384] Call Trace: [ 177.853917][ T9384] [ 177.853928][ T9384] __dump_stack+0x1d/0x30 [ 177.853960][ T9384] dump_stack_lvl+0x95/0xd0 [ 177.853987][ T9384] dump_stack+0x15/0x1b [ 177.854083][ T9384] should_fail_ex+0x262/0x280 [ 177.854124][ T9384] should_fail+0xb/0x20 [ 177.854194][ T9384] should_fail_usercopy+0x1a/0x20 [ 177.854263][ T9384] _copy_to_user+0x20/0xa0 [ 177.854302][ T9384] simple_read_from_buffer+0xb5/0x130 [ 177.854338][ T9384] proc_fail_nth_read+0x10e/0x150 [ 177.854374][ T9384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.854436][ T9384] vfs_read+0x18e/0x7c0 [ 177.854477][ T9384] ? __rcu_read_unlock+0x4e/0x70 [ 177.854516][ T9384] ? __fget_files+0x184/0x1c0 [ 177.854569][ T9384] ? mutex_lock+0x52/0x90 [ 177.854597][ T9384] ksys_read+0xdc/0x1a0 [ 177.854683][ T9384] __x64_sys_read+0x40/0x50 [ 177.854726][ T9384] x64_sys_call+0x2135/0x2550 [ 177.854761][ T9384] do_syscall_64+0x112/0x360 [ 177.854836][ T9384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.854888][ T9384] RIP: 0033:0x7f45d10dfd8e [ 177.854909][ T9384] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 177.854930][ T9384] RSP: 002b:00007f45cfb6efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 177.855008][ T9384] RAX: ffffffffffffffda RBX: 00007f45cfb6f6c0 RCX: 00007f45d10dfd8e [ 177.855027][ T9384] RDX: 000000000000000f RSI: 00007f45cfb6f0a0 RDI: 0000000000000006 [ 177.855045][ T9384] RBP: 00007f45cfb6f090 R08: 0000000000000000 R09: 0000000000000000 [ 177.855063][ T9384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.855127][ T9384] R13: 00007f45d13a6038 R14: 00007f45d13a5fa0 R15: 00007ffd1f1cc168 [ 177.855155][ T9384] [ 178.216070][ T9402] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 178.237112][ T9402] netlink: 'syz.5.1012': attribute type 4 has an invalid length. [ 178.237698][ T29] audit: type=1400 audit(1792580757.341:1546): avc: denied { relabelfrom } for pid=9401 comm="syz.5.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 178.237791][ T29] audit: type=1400 audit(1792580757.341:1547): avc: denied { relabelto } for pid=9401 comm="syz.5.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 180.291542][ T9366] vhci_hcd: connection reset by peer [ 180.291840][ T38] vhci_hcd vhci_hcd.1: stop threads [ 180.291889][ T38] vhci_hcd vhci_hcd.1: release socket [ 180.291934][ T38] vhci_hcd vhci_hcd.1: disconnect device [ 180.291964][ T126] usb 3-1: enqueue for inactive port 0 [ 180.292026][ T126] usb 3-1: enqueue for inactive port 0 [ 180.330660][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.351641][ T9476] netlink: 'syz.4.1013': attribute type 12 has an invalid length. [ 180.354383][ T126] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 180.378833][ T29] audit: type=1400 audit(1792580759.481:1548): avc: denied { unmount } for pid=8211 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 180.462363][ T9488] sctp: [Deprecated]: syz.0.1015 (pid 9488) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.462363][ T9488] Use struct sctp_sack_info instead [ 180.481475][ T9490] siw: device registration error -23 [ 180.481987][ T9490] siw: device registration error -23 [ 180.500607][ T9490] loop5: detected capacity change from 0 to 512 [ 180.501941][ T9489] loop1: detected capacity change from 0 to 512 [ 180.510120][ T9490] FAT-fs (loop5): bogus number of FAT sectors [ 180.510183][ T9490] FAT-fs (loop5): Can't find a valid FAT filesystem [ 180.516269][ T9489] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 180.516313][ T9489] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 180.522024][ T9489] EXT4-fs (loop1): 1 truncate cleaned up [ 180.540773][ T9489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.556812][ T29] audit: type=1400 audit(1792580759.661:1549): avc: denied { write } for pid=9482 comm="syz.1.1016" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.682293][ T9495] netlink: 'syz.0.1018': attribute type 2 has an invalid length. [ 180.814038][ T9503] FAULT_INJECTION: forcing a failure. [ 180.814038][ T9503] name failslab, interval 1, probability 0, space 0, times 0 [ 180.814072][ T9503] CPU: 0 UID: 0 PID: 9503 Comm: syz.3.1021 Not tainted syzkaller #0 PREEMPT(lazy) [ 180.814134][ T9503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 180.814148][ T9503] Call Trace: [ 180.814156][ T9503] [ 180.814164][ T9503] __dump_stack+0x1d/0x30 [ 180.814241][ T9503] dump_stack_lvl+0x95/0xd0 [ 180.814267][ T9503] dump_stack+0x15/0x1b [ 180.814289][ T9503] should_fail_ex+0x262/0x280 [ 180.814320][ T9503] ? __alloc_skb+0x2e0/0x6f0 [ 180.814391][ T9503] should_failslab+0x8c/0xb0 [ 180.814429][ T9503] kmem_cache_alloc_node_noprof+0x60/0x3e0 [ 180.814465][ T9503] ? netlink_insert+0x7d5/0x950 [ 180.814564][ T9503] ? __alloc_skb+0x2e0/0x6f0 [ 180.814590][ T9503] __alloc_skb+0x2e0/0x6f0 [ 180.814623][ T9503] ? __alloc_skb+0x209/0x6f0 [ 180.814647][ T9503] netlink_alloc_large_skb+0xbf/0xf0 [ 180.814709][ T9503] netlink_sendmsg+0x434/0x740 [ 180.814737][ T9503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.814763][ T9503] ____sys_sendmsg+0x532/0x580 [ 180.814905][ T9503] ___sys_sendmsg+0x195/0x1e0 [ 180.814948][ T9503] __x64_sys_sendmsg+0xd4/0x160 [ 180.814982][ T9503] x64_sys_call+0x22ab/0x2550 [ 180.815059][ T9503] do_syscall_64+0x112/0x360 [ 180.815090][ T9503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.815115][ T9503] RIP: 0033:0x7f4de721f559 [ 180.815133][ T9503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.815154][ T9503] RSP: 002b:00007f4de5c6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.815256][ T9503] RAX: ffffffffffffffda RBX: 00007f4de74a5fa0 RCX: 00007f4de721f559 [ 180.815272][ T9503] RDX: 0000000004004040 RSI: 00002000000007c0 RDI: 0000000000000003 [ 180.815347][ T9503] RBP: 00007f4de5c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 180.815362][ T9503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.815376][ T9503] R13: 00007f4de74a6038 R14: 00007f4de74a5fa0 R15: 00007ffdbf6b37f8 [ 180.815399][ T9503] [ 181.087252][ T9509] net_ratelimit: 3553 callbacks suppressed [ 181.087276][ T9509] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 181.091724][ T9511] loop3: detected capacity change from 0 to 512 [ 181.130253][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.158508][ T9517] netlink: 'syz.0.1027': attribute type 62 has an invalid length. [ 181.163139][ T9512] ip_tables: iptables: counters copy to user failed while replacing table [ 181.664020][ T9569] netdevsim netdevsim5: Direct firmware load for ÿ failed with error -2 [ 184.157977][ T4251] ================================================================== [ 184.158015][ T4251] BUG: KCSAN: data-race in kick_pool_pick / wq_worker_running [ 184.158051][ T4251] [ 184.158058][ T4251] read-write to 0xffff888237c2b3a4 of 4 bytes by task 126 on cpu 0: [ 184.158076][ T4251] wq_worker_running+0x9c/0x120 [ 184.158096][ T4251] schedule_preempt_disabled+0x11/0x20 [ 184.158132][ T4251] __mutex_lock+0x527/0xf60 [ 184.158151][ T4251] __mutex_lock_slowpath+0xa/0x10 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 184.158171][ T4251] mutex_lock+0x83/0x90 [ 184.158188][ T4251] synchronize_rcu_expedited+0x185/0x760 [ 184.158226][ T4251] synchronize_rcu+0x30/0x2d0 [ 184.158254][ T4251] free_ipc+0x82/0x1f0 [ 184.158285][ T4251] process_scheduled_works+0x53f/0xa10 [ 184.158318][ T4251] worker_thread+0x569/0x750 [ 184.158351][ T4251] kthread+0x223/0x270 [ 184.158374][ T4251] ret_from_fork+0x146/0x330 [ 184.158404][ T4251] ret_from_fork_asm+0x1a/0x30 [ 184.158431][ T4251] [ 184.158437][ T4251] read to 0xffff888237c2b3a4 of 4 bytes by task 4251 on cpu 1: [ 184.158454][ T4251] kick_pool_pick+0x5f/0x310 [ 184.158484][ T4251] __queue_work+0x913/0xbd0 [ 184.158503][ T4251] queue_work_on+0xa9/0x140 [ 184.158523][ T4251] process_srcu+0xa39/0xd90 [ 184.158546][ T4251] process_scheduled_works+0x53f/0xa10 [ 184.158577][ T4251] worker_thread+0x569/0x750 [ 184.158610][ T4251] kthread+0x223/0x270 [ 184.158631][ T4251] ret_from_fork+0x146/0x330 [ 184.158661][ T4251] ret_from_fork_asm+0x1a/0x30 [ 184.158685][ T4251] [ 184.158689][ T4251] value changed: 0x00000000 -> 0x00000001 [ 184.158699][ T4251] [ 184.158702][ T4251] Reported by Kernel Concurrency Sanitizer on: [ 184.158713][ T4251] CPU: 1 UID: 0 PID: 4251 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(lazy) [ 184.158741][ T4251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 184.158757][ T4251] Workqueue: rcu_gp process_srcu [ 184.158783][ T4251] ================================================================== [ 184.654164][ T51] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.717941][ T51] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.786243][ T51] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.827150][ T51] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.888027][ T29] audit: type=1400 audit(1792580763.991:1550): avc: denied { read } for pid=3023 comm="dhcpcd" name="n26" dev="tmpfs" ino=2648 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 184.888154][ T29] audit: type=1400 audit(1792580763.991:1551): avc: denied { open } for pid=3023 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=2648 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 184.888252][ T29] audit: type=1400 audit(1792580763.991:1552): avc: denied { getattr } for pid=3023 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=2648 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 185.009061][ T51] bond0 (unregistering): Released all slaves [ 185.019893][ T29] audit: type=1400 audit(1792580764.121:1553): avc: denied { write } for pid=9652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.019939][ T29] audit: type=1400 audit(1792580764.121:1554): avc: denied { create } for pid=9652 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 185.020129][ T29] audit: type=1400 audit(1792580764.121:1555): avc: denied { write } for pid=9652 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=2652 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 185.020374][ T29] audit: type=1400 audit(1792580764.121:1556): avc: denied { append } for pid=9652 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=2652 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 185.093318][ T29] audit: type=1400 audit(1792580764.191:1557): avc: denied { write } for pid=9663 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.093484][ T29] audit: type=1400 audit(1792580764.191:1558): avc: denied { unlink } for pid=9663 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2652 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 185.135448][ T3023] 8021q: adding VLAN 0 to HW filter on device eth1 [ 185.192800][ T51] hsr_slave_0: left promiscuous mode [ 185.198615][ T51] hsr_slave_1: left promiscuous mode [ 185.201502][ T51] veth1_macvtap: left promiscuous mode [ 185.201538][ T51] veth0_macvtap: left promiscuous mode [ 185.201620][ T51] veth1_vlan: left promiscuous mode [ 185.201681][ T51] veth0_vlan: left promiscuous mode [ 185.283325][ T29] audit: type=1400 audit(1792580764.381:1559): avc: denied { write } for pid=9666 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.342772][ T3023] 8021q: adding VLAN 0 to HW filter on device eth2 [ 185.454301][ T3023] 8021q: adding VLAN 0 to HW filter on device eth3 [ 185.577232][ T3023] 8021q: adding VLAN 0 to HW filter on device eth4 [ 185.618220][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.656529][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.695909][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.736095][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.793457][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.846643][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.887583][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.919642][ T3023] 8021q: adding VLAN 0 to HW filter on device eth5 [ 185.937385][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.008575][ T51] vlan2: left promiscuous mode [ 186.008599][ T51] bridge_slave_0: left promiscuous mode [ 186.008815][ T51] bridge0: port 1(vlan2) entered disabled state [ 186.092218][ T51] bond0 (unregistering): Released all slaves [ 186.099687][ T51] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 186.123807][ T51] bond0 (unregistering): Released all slaves [ 186.125675][ T51] bond1 (unregistering): Released all slaves [ 186.128242][ T3023] 8021q: adding VLAN 0 to HW filter on device eth6 [ 186.231920][ T51] hsr_slave_0: left promiscuous mode [ 186.232269][ T51] hsr_slave_1: left promiscuous mode [ 186.245952][ T51] hsr_slave_0: left promiscuous mode [ 186.246297][ T51] hsr_slave_1: left promiscuous mode [ 186.250627][ T51] veth1_macvtap: left promiscuous mode [ 186.250671][ T51] veth0_macvtap: left promiscuous mode [ 186.250798][ T51] veth1_vlan: left promiscuous mode [ 186.250893][ T51] veth0_vlan: left promiscuous mode [ 186.251429][ T51] veth1_macvtap: left promiscuous mode [ 186.251456][ T51] veth0_macvtap: left promiscuous mode [ 186.251521][ T51] veth1_vlan: left promiscuous mode [ 186.251561][ T51] veth0_vlan: left promiscuous mode [ 186.462520][ T3023] 8021q: adding VLAN 0 to HW filter on device eth7 [ 186.584150][ T3023] 8021q: adding VLAN 0 to HW filter on device eth8 [ 186.695593][ T3023] 8021q: adding VLAN 0 to HW filter on device eth9 [ 186.806127][ T3023] 8021q: adding VLAN 0 to HW filter on device eth10 [ 186.839374][ T51] IPVS: stop unused estimator thread 0... [ 186.924666][ T3023] 8021q: adding VLAN 0 to HW filter on device eth11 [ 187.031377][ T3023] 8021q: adding VLAN 0 to HW filter on device eth12