last executing test programs: 3.117688347s ago: executing program 1 (id=7554): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}}, 0x0) bind$inet(r1, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xb0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "ca89fd8291d38b273c94e7a78a042bba3e8dfef27879b88e5f0e0f1992a5a13e", "485cae99c647885a5e52e7735026177cdb68ac078993f4d500c891836a0de511bdeb48f6f7555855450a19462a84c4e9", "9c5f3c2a7416597798295d964150e170e675c410526c9d00", {"6c0c6b8a7d349bab401d6ad1c25accbe", "1d7df4fb617bc580f55419f4584d7c64"}}}}}, 0xbe) 2.977089269s ago: executing program 1 (id=7562): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@abort}, {@nodelalloc}]}, 0x1, 0x25f, &(0x7f0000000380)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) (async) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(0x3) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) (async) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r6 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0xdc}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x11, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8014}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26}, 0x28) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000680)={@empty, 0x65, r10}) 2.938272142s ago: executing program 1 (id=7564): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x30, 0x3a, 0x0, @local, @local, {[], @dest_unreach={0x1, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x8, 0x0, 0x0, @private1, @mcast2}}}}}}}, 0x0) (fail_nth: 1) 2.900038836s ago: executing program 1 (id=7566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x77) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x3, &(0x7f0000000100)={0x8, 0x8}) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) open(0x0, 0x0, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000002000000640000006400000006000000020000000000000f01000000420d0000000300000400000000000000000000000000000000000000000000000000000000060000000000000006000000000000000200400f0300000004000000070000e202000000020000000700000003000000980fe900615f5f2e00"], &(0x7f0000000600)=""/37, 0x82, 0x25, 0x1}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffec, 0x0, &(0x7f00000008c0)="89", 0x0, 0xf, 0x0, 0x2}, 0x32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0x1, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) setrlimit(0x5, &(0x7f0000000380)={0xfef3, 0x8103}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x0, 0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xa, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 2.899499116s ago: executing program 1 (id=7568): syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0xf4, 0x0, 0x1, [{0x37, &(0x7f0000000140)=@string={0x37, 0x3, "dcac542e3bfd6c38050c92d2a934e97e879aadbd514c5d54f0133cda9ef88eed62e526cf21a95fddd27e7cbde5a2c133fbc49f868e"}}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000040000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x41, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700400000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') getdents64(r6, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x702, 0xe, 0x0, &(0x7f0000000380)="e402004470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(r5, &(0x7f00000003c0)={0x2, 0x4621, @empty}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) r9 = open$dir(&(0x7f0000000140)='./file0\x00', 0x80000, 0xc0) fcntl$setlease(r9, 0x400, 0x0) r10 = open$dir(&(0x7f0000000140)='./file0\x00', 0x80000, 0xc0) fcntl$setlease(r10, 0x400, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x1) fcntl$getflags(r10, 0x401) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000300)={'filter\x00', 0x0, 0x0, 0x0, [0x424d98aa, 0x0, 0x0, 0x6b4, 0xef9b, 0x5], 0x0, 0x0}, 0x78) 1.981869496s ago: executing program 3 (id=7587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0x1, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x40, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xa, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 1.722311459s ago: executing program 3 (id=7590): r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r4 = gettid() setpgid(r4, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x81, 0x1}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r5 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCGKEY(r5, 0x80404518, 0x0) syz_read_part_table(0x104e, &(0x7f0000001080)="$eJzsz7EJAkEQBdB/eKyayJWgsVUIZheK/WgnJiZXgdW5onhqA4LCe8GyDJ8/TPgh7XT8HR9vc6211v7yTjRJuqQvSclwWK5Oi938o6HLuV3fQ5mNo01JSbJtXxWT57bsh29fBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/4BYAAP//Tq8L8Q==") ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000000200)=""/173) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa9630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0xffffffffffffffff}}, @TCA_CT_MARK={0x8, 0x10, 0x80000000}, @TCA_CT_LABELS={0x14, 0x7, "0118aae167fe4bb4d318e45cb16cfc7a"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) r8 = socket(0x1e, 0x4, 0x0) r9 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f0000000400)=ANY=[@ANYRES16=0x0, @ANYRES8=r0, @ANYRES16=r5, @ANYRES8, @ANYBLOB="60507fd6af8e48f5a4f3eadf8ed268f9ae354de489615bdd46802030c97b090f04359b5672b1056ac7233acbf1167a03804db45d26df153d2b388aa1c4fc02bd1602662d3ab8b6", @ANYRES8, @ANYRESHEX=r7, @ANYRES8=r8, @ANYBLOB="3566c0df2864f4c930658bca0f3dcea9d0b12fbf07091df128dc8f641ccd7fbba83eb1c9366ef2f3879f7eb3b836ad99c0e55763b5a8a854440f6f6f4f3b13f2046e7f4072b3e92b76b1523ac37bddf4710a2cfe4a8f3b540550e5998be28fbace1ead1570b0b8c8d9092cf4b0975b50baf4a399c0ff3e92009ab92e6b1014560d1e3c2a6132e1d03b9877a86f940e58b29b0af9f6263867cdc57169045b6b09906d1181ba82f4669340b42dc56d936bf467eef712dc09b36cf549465d849fb90e", @ANYRES16=r6], 0x1, 0x214, &(0x7f0000000840)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r9, 0x0) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xe, r3, &(0x7f0000000340), 0x0, 0xc}]) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r10, 0x29, 0x3c, &(0x7f0000000080)=0x1, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1.461969412s ago: executing program 0 (id=7594): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, 0x0}, 0x5) 1.357578521s ago: executing program 0 (id=7596): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x30, 0x3a, 0x0, @local, @local, {[], @dest_unreach={0x1, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x8, 0x0, 0x0, @private1, @mcast2}}}}}}}, 0x0) (fail_nth: 5) 1.357364301s ago: executing program 0 (id=7597): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x10, 0x4}, {}, {0x8, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 1.345758932s ago: executing program 0 (id=7598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000020900010073797a31000000006c000000030a010200000000000000000100ffff0900030073797a32000000001400048008000240000000000800014000000005380004800800024051fe576208000140000000040800024000185a281c0003006e696376663000000000000000000000080001400000000414000000050a4f01000000000000000001002000140000001100010000000000000000000000000a"], 0xc8}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000280)={0x7, r0, 'id1\x00'}) r1 = socket(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x13, @local, 0x2}, 0x1c) listen(r1, 0x7f) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @private=0xa010100}, 0x800000, 0x2, 0x2, 0x20000000}}, 0x2e) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffbff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@nombcache}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@data_err_ignore}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000001140)=ANY=[], 0x361, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="7589d70300", 0xfe07, 0xfffffffffffffffe) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000000)={0xd, 0x2, 0x8005, 0xc, 0x6, 0x44, 0x3b, 0x5}, &(0x7f0000000040)=0x20) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f00000000c0), &(0x7f0000000140)=0x8) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0b030000000000000000260000001f0001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="1ccfff391d1642180eae018f4a01de1f343d59fe1a3e93f7c541dd2da3b52bee7d00a7624208c129f3b92fade46fc6c3df0a7975fdaf07c580e9210c28a7655c068e237e05ab630b2ed8755bebf0cc4d4c855cee02f820e3adc1038c8d373b364f4a9ca8a4ccd17db10530e6f5a8f63555bfe9068d8bacc9af7b3770e9d71d3abe91809dc5c7264c68b75830c643621799d672606dc908", @ANYRES16=r3, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004090) 1.071918846s ago: executing program 0 (id=7600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x8, 0x0, 0x5, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0x6}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 931.148498ms ago: executing program 3 (id=7601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000040000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000), &(0x7f0000000200)={'L-', 0x7}, 0x16, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r9 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000180)={0x9}) r10 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f00000001c0)={0x40000000}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0xb4, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x84, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x2dad1387, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x2, 0x8, 0xf, 0xb, 0x2, 0xf, 0x9b19, 0x8000008, 0x5, 0x1f, 0x0, 0x2, 0x2, 0x9, 0x184d}}, @TCA_GRED_DPS={0x10, 0x3, {0x9, 0x6, 0x1, 0x3}}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x5) 762.757433ms ago: executing program 0 (id=7602): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x3}, 0xff}, 0x18) r4 = socket(0x3, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000200)=0xe9, 0x4) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r7, &(0x7f0000000180)={&(0x7f0000000000)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x11}, 0xffff8e3b}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@tclass={{0x14, 0x29, 0x43, 0x5}}, @tclass={{0x14, 0x29, 0x43, 0x10001}}], 0x30}, 0x408c0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000300, 0x200000000330, 0x200000000330], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0xfffff9, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 749.971924ms ago: executing program 3 (id=7603): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f00000068c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x9, @remote, 0xc}, 0x1c, 0x0}}], 0x1, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x503101, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) rename(0x0, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) sendmmsg$inet6(r1, &(0x7f00000068c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x9, @remote, 0xc}, 0x1c, 0x0}}], 0x1, 0x94) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x503101, 0x0) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x8) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) (async) rename(0x0, 0x0) (async) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) (async) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) (async) 678.75972ms ago: executing program 3 (id=7604): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000002e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp(0x2, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0), 0x50) socket$netlink(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$unix(0x1, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b7040000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000280), &(0x7f0000000000)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000740)={@local, @random="a6e286036e89", @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x1, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x9a5f}}}}}}, 0x0) 678.32188ms ago: executing program 3 (id=7606): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) memfd_create(0x0, 0x1) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r3, {0x0, 0x7}, {0xb, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r5}, 0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000b00)=[{&(0x7f00000006c0)="c3", 0x1}, {&(0x7f0000000b80)="b2", 0x1}, {&(0x7f0000000840)='^', 0x1}, {&(0x7f0000000880)="d8", 0x1}, {&(0x7f0000000940)='C', 0x1}], 0x5, 0xc) ioctl$sock_inet_sctp_SIOCINQ(r6, 0x541b, &(0x7f0000000180)) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 509.623835ms ago: executing program 2 (id=7609): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYRES16], &(0x7f0000000500)='GPL\x00', 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r3, 0x25, 0x2, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x7e528816}}, 0x30) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r7, &(0x7f0000000100), 0xfffffd79) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r8, &(0x7f0000000180)={&(0x7f0000000000)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x11}, 0xffff8e3b}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@tclass={{0x14, 0x29, 0x43, 0x5}}, @tclass={{0x14, 0x29, 0x43, 0x10001}}], 0x30}, 0x408c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x20, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff}, @generic={0x80, 0xd, 0x4, 0x9, 0xec2}, @ldst={0x3, 0x3, 0x3, 0x1, 0x2, 0xfffffffffffffff8, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x8, 0xc, &(0x7f00000001c0)=""/12, 0x41000, 0x10, '\x00', r3, 0x0, r7, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x7, 0xc59, 0x72}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000540)=[r1, r7, r4, r6], &(0x7f0000000640)=[{0x1, 0x3, 0x9, 0x1}, {0x2, 0x3, 0x9, 0x7}], 0x10, 0x2}, 0x94) r9 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r9, &(0x7f0000001a80)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r5, 0x4, r0}, 0x10) 461.626809ms ago: executing program 2 (id=7611): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000040)="259f8863a9a34400000200000002", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b"], 0x74}}, 0x0) 461.483509ms ago: executing program 2 (id=7612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x8, 0x0, 0x5, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0x6}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 220.624401ms ago: executing program 2 (id=7618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}], 0x1}, 0x5) 109.3835ms ago: executing program 4 (id=7623): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x1d, 0x2, 0x6) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x4, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) gettid() syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808403, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1000}}]}, 0x3, 0x505, &(0x7f00000007c0)="$eJzs3c1vG2kZAPBnJnFIdlOSBQ7LSuxGCNRdQZ1kw+5GHPZD4uO0ErDcQ0icKIoTR7HTNlGFUnFGSAgBggucuCDxByCh/gkIqRLcK4RAFbTlwKFgNPa4NamdpKodp87vJ72dd975eJ53Ko/9zkzsAC6smYh4PyJGIuKNiJjK29O8xGGzZOvdv3djJStJ1Osf/SOJJG9r7SvJpy/mm41HxLe+HvHdJGk2tKnuH2wul8ul3Xx+LLZ2Zqv7B1c2RvKWhfm3F99ZfGtxrmd9ffcrf/3JD3/9tXd//8Vrd5b+/vr3snwn82Xt/eil5jEpNI5F6xiMRsRuP4INwEjen8JpVk76nw8AAMfLPuN/IiI+GxEPfj7obAAAAIB+qL83GQ+TiDoAAAAwtNLGM7BJWsyfBZiMNC0Wm8/wfirei3KlWvvCWmVve7X5rOx0FNK1jXJpLn9WeDoKSTY/36g/nn/zyPxCRLwUET+emmjMF1cq5dVBX/wAAACACyIb50+mzXo2+ddUc/wPAAAADJnpQScAAAAA9J3xPwAAAAy/J8f/M81JMnr2yQAAAAC99o0PP8xKvfX716tX9/c2K1evrJaqm8WtvZXiSmV3p7heqaw3vrNv66T9lSuVnS/F9t712VqpWput7h8sbVX2tmtLG1vL66Wl0ql+JxoAAADoqZdeu/XnJCIOvzzRKJmxfJmxOgy39OlWT/qVB3D2RgadADAwHvCFi8vrHzhpYD9+RnkAAAD9c/nTj+7/T0Tb/f9Ld9z/h2H3lPf/gSHi/j9cXEfu//3yVBs9rPcnGeBMGeMDJ10H6Hr//w+9zwUAAOiPyUZJ0mI+BpiMNC0WIy41fhagkKxtlEtzEfHxiPjTVOFj2fz8oJMGAAAAAAAAAAAAAAAAAAAAAAAAgOdMvZ5EHQAAABhqEenfkohIYjxi6nOTR68PjCX/nmpMI+LaLz766fXlWm13Pmv/56P22s/y9jcHcQUDAAAAOKo1Tm+N4wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgl+7fu7HSKm3Nn+933LsfRMR0p/ijMd6YjkchIl54kMRo23ZJRIz0IP7hzYh4uVP8JEsrpvMsjsZPI2JiwPFf7EF8uMhufTAW8X6n118aM41p59ffaF6e1d2Zbue/9NH5b6TL+e/SCfsey6ev3P7t7BMLv5rHvxnxymjn808r/tgznn+/8+2Dg27L6r+KuNzx/Sf5v1izta2d2er+wZWNreX10nppe2Fh/u3FdxbfWpybXdsol/J/O8b40Wd+999u8bP+v9Al/nTe/+Ro/5NmTvV6532+1lbPjtF/bl+/98lOKyYRd3+Q1zv8/7/cLX6+3+zNOR1r5nI5f09IDpv1dq/+5o+vHtf/1S79Hz8mftb2eredHvHGN7//l2atcMotAIB+qu4fbC6Xy6Xd572SdeYcpNHDysz5SGPYK61R1HnJ57xUBnteAgAAeu/xh/5BZwIAAAAAAAAAAAAAAAAAAAAXV+vv/1vf5dyPrxNrjzfeqiTJmfcVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA4/wsAAP//CbfNQg==") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000900)={0x1d, r4, 0x1}, 0x18) r5 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x8) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000200), 0x4) sendmmsg$unix(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000001c0)="bb", 0x1}], 0x1, 0x0, 0x0, 0x48c4}}], 0x1, 0x1d3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$sndseq(r6, &(0x7f0000000440)=[{0xa, 0x9, 0x8, 0x2, @time={0x6, 0x67a}, {0xc5, 0xe}, {0xfc, 0x8}, @raw8={"af7cf4b7cf9cacac80df982d"}}], 0x1c) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x1b, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @exit, @map_val, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x9, 0x3, 0xffff7fff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x1, 0x1], 0x0, 0x10, 0xf}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f0000000380)={{0x0, 0x36e8, 0xffff, 0x3, 0x9, 0x81, 0x9, 0x4, 0x7, 0x6, 0x3ff, 0x6, 0x9, 0x9, 0xf5}}) io_uring_setup(0x109, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c083, 0x400008, 0xd1}) listen(0xffffffffffffffff, 0x4) 108.86313ms ago: executing program 4 (id=7624): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc6c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000400003803c000080080003400000000230000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c000140000000000001000014000000110001"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) 78.701753ms ago: executing program 4 (id=7625): accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x800) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='timerslack_ns\x00') lseek(r0, 0x8, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") socket$nl_generic(0x10, 0x3, 0x10) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x100000002, 0xfffffffffffffffc, 0x1ff, 0x5, 0xfff, 0xffffffffffffffff, 0x6, 0x1, 0x9}) 78.059033ms ago: executing program 4 (id=7626): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@nodiscard}, {@noblock_validity}]}, 0x3, 0x45e, &(0x7f0000000a00)="$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") chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb01010000000000003a00fe8000000000000000000000000000aafe8000000000000000000000000000aa0101907800000000600000000008eef499baf02bc5890000000000ff0200000000fcffff00"], 0x0) 36.119347ms ago: executing program 2 (id=7627): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001980)="$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") r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\nr0, {0x7}}, './file0\x00'}) ioctl(r2, 0x3fc, &(0x7f00000002c0)="0716251f29a5cd6b726453733b4931da9daf115b7b6cb0fd6105a746ddf302ce886de6d47dbdede1eeaf1815186e0c635819fb9f5e54a627381f038ca6a0e097a9aacb2e9bffa9d7739968928fb20bea9855fe8a37b1596b3ef1fde89852a5616f6225409e5f100126d8") r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000a80)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x514}}, {@grpjquota}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@grpid}], [{@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x32, 0x34, 0x38, 0x3e, 0x61, 0x65, 0x6e], 0x2d, [0x62, 0x31, 0x37, 0x61], 0x2d, [0x65, 0x35, 0x66, 0x66], 0x2d, [0x33, 0x31, 0x66, 0x38], 0x2d, [0x6, 0x34, 0x63, 0x64, 0x62, 0x30, 0x65, 0x5f]}}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@appraise_type}]}, 0x80, 0x54f, &(0x7f0000000480)="$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") io_uring_enter(0xffffffffffffffff, 0x7120, 0xf527, 0x8, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000030a010200000000000007000100ffff88000000050a4f010000000000000000010020020c00024000000000000000016400088008000000000000000000cbf98eff024000000000000013e50c00014000000000000000ff0c00024080000000000000000c000240000000000000009a0c00014000000000000000030c0002400000000000fffffffffffffc040004801400000011000100000000002c0000000000000a"], 0xc4}, 0x1, 0x0, 0x0, 0x810}, 0x0) 35.634787ms ago: executing program 4 (id=7629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000000680)=@xdp={0x2c, 0x1, r6, 0x24}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000700)="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"/288, 0x120}, {&(0x7f0000000880)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000000940)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f646c2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d7887d00cb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093", 0xd0}], 0x3}, 0x0) 35.260007ms ago: executing program 2 (id=7630): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r2) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x64, 0x40, 0x0, 0x6, 0x0, 0x26dcfe7d, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f89, 0x0, @perf_config_ext={0xffffffffffffffff, 0x6}, 0x104030, 0x1, 0x7, 0x3, 0x101, 0x0, 0xf, 0x0, 0x8, 0x0, 0xe8eb}, r1, 0xd, r2, 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000240)=0x2, 0xffffff52) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e20, 0x4000081, @remote, 0x72e8}}, 0x0, 0x0, 0x4a, 0x0, "042f769c1583509786a1752ef58eefbbf87661ecaaf2bcc41cad50354af04429c8e421c366e225b6346991e3b85c4f4fea1cd596373d8cb075756e8516b1b8b5c7e698232f9b99fc3a8b2918d935a942"}, 0xd8) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280000002e00010a2abd7000070010000a00000014009a00fc020000000000000000000000000000603cd5982e409aa19fc68a510fff5670e11a7b66ba38e79751cd6794199c31f903851c66036a6070750f64110e63e3e69dc25b44024133faa041bd0d3539e510bcb052cb869fe3afb7617c9785c646406e6de5916db5bd50d51d43e82ac5a2948a86d21f9f2e674603f7ff7bc2ef62aaef2ced7109ed06c035316b702667"], 0x28}}, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0xff, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000200), 0x4}, 0x19200, 0x7e, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2a, 0x2, 0xffff8000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000004c0)=0x19) ioctl$FIONCLEX(r1, 0x5450) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000440)={0x1, &(0x7f0000000280)=[{0xc337, 0xf9, 0x34, 0x1}]}) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = getpgid(0x0) syz_pidfd_open(r9, 0x0) ioctl$SG_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000580)={'\x00', 0x40, 0x9, 0x9, 0x5e69, 0x1, r9}) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x400c005}, 0x0) 0s ago: executing program 1 (id=7631): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2) pwrite64(r1, &(0x7f0000000080)="cc", 0x1, 0x200980) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x20, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) (async) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x20, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0xf0d) (async) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0xf0d) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in6=@mcast2, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) socket(0xa, 0x3, 0xfc) (async) r5 = socket(0xa, 0x3, 0xfc) sendto$unix(r5, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) kernel console output (not intermixed with test programs): 000000000000 [ 278.108267][T22986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.108280][T22986] R13: 00007f6643396038 R14: 00007f6643395fa0 R15: 00007ffe9ad39088 [ 278.108380][T22986] [ 278.108397][T22986] netlink: 'syz.4.6988': attribute type 1 has an invalid length. [ 278.217038][T22991] FAULT_INJECTION: forcing a failure. [ 278.217038][T22991] name failslab, interval 1, probability 0, space 0, times 0 [ 278.316347][T22991] CPU: 1 UID: 0 PID: 22991 Comm: syz.1.6990 Not tainted syzkaller #0 PREEMPT(full) [ 278.316372][T22991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 278.316379][T22991] Call Trace: [ 278.316383][T22991] [ 278.316388][T22991] __dump_stack+0x1d/0x30 [ 278.316404][T22991] dump_stack_lvl+0x95/0xd0 [ 278.316421][T22991] dump_stack+0x15/0x1b [ 278.316458][T22991] should_fail_ex+0x263/0x280 [ 278.316471][T22991] ? __request_module+0x1c4/0x3f0 [ 278.316548][T22991] should_failslab+0x8c/0xb0 [ 278.316560][T22991] ? dev_load+0xa3/0xc0 [ 278.316575][T22991] __kmalloc_cache_noprof+0x5f/0x410 [ 278.316589][T22991] ? dev_load+0xa3/0xc0 [ 278.316625][T22991] __request_module+0x1c4/0x3f0 [ 278.316640][T22991] dev_load+0xa3/0xc0 [ 278.316730][T22991] dev_ioctl+0x6f3/0x960 [ 278.316745][T22991] sock_do_ioctl+0x1aa/0x230 [ 278.316804][T22991] sock_ioctl+0x41b/0x610 [ 278.316819][T22991] ? mutex_lock+0x57/0x90 [ 278.316834][T22991] ? __pfx_sock_ioctl+0x10/0x10 [ 278.316911][T22991] __se_sys_ioctl+0xce/0x140 [ 278.316929][T22991] __x64_sys_ioctl+0x43/0x50 [ 278.316964][T22991] x64_sys_call+0x1563/0x3020 [ 278.316979][T22991] do_syscall_64+0x12c/0x370 [ 278.317071][T22991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.317084][T22991] RIP: 0033:0x7f45c14ac629 [ 278.317094][T22991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.317136][T22991] RSP: 002b:00007f45bfee6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.317148][T22991] RAX: ffffffffffffffda RBX: 00007f45c1726090 RCX: 00007f45c14ac629 [ 278.317157][T22991] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000004 [ 278.317165][T22991] RBP: 00007f45bfee6090 R08: 0000000000000000 R09: 0000000000000000 [ 278.317301][T22991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.317374][T22991] R13: 00007f45c1726128 R14: 00007f45c1726090 R15: 00007ffd209d5e78 [ 278.317386][T22991] [ 278.334563][T22991] syzkaller0: entered promiscuous mode [ 278.526693][T22991] syzkaller0: entered allmulticast mode [ 278.559740][T22996] __nla_validate_parse: 4 callbacks suppressed [ 278.559756][T22996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6992'. [ 278.581172][T22996] 8021q: adding VLAN 0 to HW filter on device bond6 [ 278.594566][T22998] syzkaller0: entered promiscuous mode [ 278.609173][T22998] syzkaller0: entered allmulticast mode [ 278.687316][T23009] syzkaller0: entered promiscuous mode [ 278.692813][T23009] syzkaller0: entered allmulticast mode [ 278.722131][T23013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7000'. [ 278.731220][T23013] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7000'. [ 278.742988][T23013] geneve2: entered promiscuous mode [ 278.748256][T23013] geneve2: entered allmulticast mode [ 278.758080][T23015] syzkaller0: entered promiscuous mode [ 278.763598][T23015] syzkaller0: entered allmulticast mode [ 278.771461][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.780448][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.791791][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.800829][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.833450][T23019] syzkaller0: entered promiscuous mode [ 278.839252][T23019] syzkaller0: entered allmulticast mode [ 278.844952][T23017] 9p: Bad value for 'wfdno' [ 278.873951][T23021] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7004'. [ 278.917141][T23025] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7005'. [ 278.927132][T23021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7004'. [ 278.987225][T23031] FAULT_INJECTION: forcing a failure. [ 278.987225][T23031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.000688][T23031] CPU: 1 UID: 0 PID: 23031 Comm: syz.1.7009 Not tainted syzkaller #0 PREEMPT(full) [ 279.000748][T23031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 279.000761][T23031] Call Trace: [ 279.000768][T23031] [ 279.000776][T23031] __dump_stack+0x1d/0x30 [ 279.000802][T23031] dump_stack_lvl+0x95/0xd0 [ 279.000824][T23031] dump_stack+0x15/0x1b [ 279.000908][T23031] should_fail_ex+0x263/0x280 [ 279.000932][T23031] should_fail+0xb/0x20 [ 279.001008][T23031] should_fail_usercopy+0x1a/0x20 [ 279.001101][T23031] _copy_to_user+0x20/0xa0 [ 279.001133][T23031] bpf_verifier_vlog+0x36e/0x5a0 [ 279.001157][T23031] __btf_verifier_log+0x7f/0xb0 [ 279.001179][T23031] ? should_fail_ex+0xd9/0x280 [ 279.001222][T23031] ? btf_parse_hdr+0x1ca/0x3c0 [ 279.001255][T23031] btf_parse_hdr+0x1dd/0x3c0 [ 279.001281][T23031] btf_new_fd+0x25a/0x7d0 [ 279.001349][T23031] ? ns_capable+0x7c/0xb0 [ 279.001374][T23031] bpf_btf_load+0x112/0x130 [ 279.001396][T23031] __sys_bpf+0x3d8/0x7e0 [ 279.001417][T23031] __x64_sys_bpf+0x41/0x50 [ 279.001511][T23031] x64_sys_call+0x10cb/0x3020 [ 279.001533][T23031] do_syscall_64+0x12c/0x370 [ 279.001579][T23031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.001600][T23031] RIP: 0033:0x7f45c14ac629 [ 279.001614][T23031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.001677][T23031] RSP: 002b:00007f45bff07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 279.001696][T23031] RAX: ffffffffffffffda RBX: 00007f45c1725fa0 RCX: 00007f45c14ac629 [ 279.001709][T23031] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 279.001747][T23031] RBP: 00007f45bff07090 R08: 0000000000000000 R09: 0000000000000000 [ 279.001762][T23031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.001775][T23031] R13: 00007f45c1726038 R14: 00007f45c1725fa0 R15: 00007ffd209d5e78 [ 279.001793][T23031] [ 279.263541][T23017] loop0: detected capacity change from 0 to 1024 [ 279.303001][T23047] syzkaller0: entered promiscuous mode [ 279.308584][T23047] syzkaller0: entered allmulticast mode [ 279.325128][T23017] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 279.359002][T23048] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 279.360292][ T28] audit: type=1326 audit(1771761232.009:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23032 comm="syz.2.7011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a2dec629 code=0x7ffc0000 [ 279.478946][T23017] System zones: 0-1, 3-36 [ 279.484677][T23048] @0Ů: renamed from bond_slave_1 (while UP) [ 279.496949][T23017] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.7002: bad orphan inode 134217728 [ 279.509685][T23017] loop0: lost filesystem error report for type 5 error -117 [ 279.516860][T23017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.538373][ T28] audit: type=1326 audit(1771761232.009:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23032 comm="syz.2.7011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fa8a2dec629 code=0x7ffc0000 [ 279.623960][T23054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7013'. [ 279.641049][ T28] audit: type=1326 audit(2000000000.000:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23032 comm="syz.2.7011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a2dec629 code=0x7ffc0000 [ 279.665672][T23054] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7013'. [ 279.668645][ T28] audit: type=1326 audit(2000000000.000:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23032 comm="syz.2.7011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fa8a2dec629 code=0x7ffc0000 [ 279.701348][T23053] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.708559][T23053] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.715923][ T28] audit: type=1326 audit(2000000000.000:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23032 comm="syz.2.7011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a2dec629 code=0x7ffc0000 [ 279.739825][ T28] audit: type=1326 audit(2000000000.000:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23032 comm="syz.2.7011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa8a2dec629 code=0x7ffc0000 [ 279.765945][ T28] audit: type=1326 audit(2000000000.000:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23032 comm="syz.2.7011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a2dec629 code=0x7ffc0000 [ 279.801354][ T28] audit: type=1326 audit(2000000000.000:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23032 comm="syz.2.7011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa8a2dec629 code=0x7ffc0000 [ 279.825026][ T28] audit: type=1326 audit(2000000000.000:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23032 comm="syz.2.7011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a2dec629 code=0x7ffc0000 [ 279.872584][T23053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.890325][T23053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.956794][T23054] geneve2: entered promiscuous mode [ 279.963675][T23054] geneve2: entered allmulticast mode [ 279.986889][T23062] syzkaller0: entered promiscuous mode [ 279.992504][T23062] syzkaller0: entered allmulticast mode [ 280.027203][T18995] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.093392][T23078] netlink: 'syz.1.7018': attribute type 1 has an invalid length. [ 280.367767][T23106] syzkaller0: entered promiscuous mode [ 280.373330][T23106] syzkaller0: entered allmulticast mode [ 280.468415][T23108] FAULT_INJECTION: forcing a failure. [ 280.468415][T23108] name failslab, interval 1, probability 0, space 0, times 0 [ 280.481649][T23108] CPU: 1 UID: 0 PID: 23108 Comm: syz.0.7030 Not tainted syzkaller #0 PREEMPT(full) [ 280.481678][T23108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 280.481759][T23108] Call Trace: [ 280.481763][T23108] [ 280.481768][T23108] __dump_stack+0x1d/0x30 [ 280.481785][T23108] dump_stack_lvl+0x95/0xd0 [ 280.481798][T23108] dump_stack+0x15/0x1b [ 280.481810][T23108] should_fail_ex+0x263/0x280 [ 280.481843][T23108] ? nfnetlink_rcv+0xa66/0x1720 [ 280.481855][T23108] should_failslab+0x8c/0xb0 [ 280.481901][T23108] __kmalloc_cache_noprof+0x5f/0x410 [ 280.481916][T23108] nfnetlink_rcv+0xa66/0x1720 [ 280.481941][T23108] netlink_unicast+0x5c0/0x690 [ 280.481958][T23108] netlink_sendmsg+0x5c8/0x6f0 [ 280.481991][T23108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.482020][T23108] ____sys_sendmsg+0x5af/0x600 [ 280.482037][T23108] ___sys_sendmsg+0x195/0x1e0 [ 280.482102][T23108] __x64_sys_sendmsg+0xd4/0x160 [ 280.482177][T23108] x64_sys_call+0x194c/0x3020 [ 280.482232][T23108] do_syscall_64+0x12c/0x370 [ 280.482251][T23108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.482379][T23108] RIP: 0033:0x7fdfbeadc629 [ 280.482389][T23108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.482418][T23108] RSP: 002b:00007fdfbd52f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.482431][T23108] RAX: ffffffffffffffda RBX: 00007fdfbed55fa0 RCX: 00007fdfbeadc629 [ 280.482439][T23108] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 280.482448][T23108] RBP: 00007fdfbd52f090 R08: 0000000000000000 R09: 0000000000000000 [ 280.482455][T23108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.482463][T23108] R13: 00007fdfbed56038 R14: 00007fdfbed55fa0 R15: 00007ffe6c22f818 [ 280.482538][T23108] [ 280.704377][T23114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23114 comm=syz.0.7033 [ 280.819393][T23128] syzkaller0: entered promiscuous mode [ 280.825068][T23128] syzkaller0: entered allmulticast mode [ 280.843514][T23130] pimreg: tun_chr_ioctl cmd 1074025677 [ 280.854206][T23130] pimreg: linktype set to 0 [ 280.861980][T23130] loop2: detected capacity change from 0 to 512 [ 280.865254][T23132] usb usb7: usbfs: process 23132 (syz.4.7042) did not claim interface 0 before use [ 280.868984][T23130] EXT4-fs: quotafile must be on filesystem root [ 280.928661][T23135] syzkaller0: entered promiscuous mode [ 280.934362][T23135] syzkaller0: entered allmulticast mode [ 281.046993][T23154] syzkaller0: entered promiscuous mode [ 281.052838][T23154] syzkaller0: entered allmulticast mode [ 281.112374][T23158] FAULT_INJECTION: forcing a failure. [ 281.112374][T23158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.125480][T23158] CPU: 1 UID: 0 PID: 23158 Comm: syz.0.7054 Not tainted syzkaller #0 PREEMPT(full) [ 281.125566][T23158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 281.125574][T23158] Call Trace: [ 281.125579][T23158] [ 281.125585][T23158] __dump_stack+0x1d/0x30 [ 281.125601][T23158] dump_stack_lvl+0x95/0xd0 [ 281.125649][T23158] dump_stack+0x15/0x1b [ 281.125661][T23158] should_fail_ex+0x263/0x280 [ 281.125674][T23158] should_fail+0xb/0x20 [ 281.125685][T23158] should_fail_usercopy+0x1a/0x20 [ 281.125707][T23158] _copy_to_user+0x20/0xa0 [ 281.125722][T23158] simple_read_from_buffer+0xb5/0x130 [ 281.125734][T23158] proc_fail_nth_read+0x10e/0x150 [ 281.125750][T23158] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 281.125845][T23158] vfs_read+0x1ab/0x7f0 [ 281.125861][T23158] ? __rcu_read_unlock+0x4e/0x70 [ 281.125873][T23158] ? __fget_files+0x184/0x1c0 [ 281.125930][T23158] ? mutex_lock+0x57/0x90 [ 281.125945][T23158] ksys_read+0xdc/0x1a0 [ 281.125962][T23158] __x64_sys_read+0x40/0x50 [ 281.126055][T23158] x64_sys_call+0x2886/0x3020 [ 281.126070][T23158] do_syscall_64+0x12c/0x370 [ 281.126088][T23158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.126124][T23158] RIP: 0033:0x7fdfbea9cece [ 281.126134][T23158] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 281.126145][T23158] RSP: 002b:00007fdfbd52efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 281.126157][T23158] RAX: ffffffffffffffda RBX: 00007fdfbd52f6c0 RCX: 00007fdfbea9cece [ 281.126243][T23158] RDX: 000000000000000f RSI: 00007fdfbd52f0a0 RDI: 0000000000000009 [ 281.126250][T23158] RBP: 00007fdfbd52f090 R08: 0000000000000000 R09: 0000000000000000 [ 281.126259][T23158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.126266][T23158] R13: 00007fdfbed56038 R14: 00007fdfbed55fa0 R15: 00007ffe6c22f818 [ 281.126402][T23158] [ 281.374123][T23160] loop3: detected capacity change from 0 to 4096 [ 281.386932][T23160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.392586][T23163] syzkaller0: entered promiscuous mode [ 281.405118][T23163] syzkaller0: entered allmulticast mode [ 281.457243][T18050] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.589435][T23181] syzkaller0: entered promiscuous mode [ 281.595074][T23181] syzkaller0: entered allmulticast mode [ 281.701386][T23188] syzkaller0: entered promiscuous mode [ 281.710054][T23188] syzkaller0: entered allmulticast mode [ 281.744026][T23190] loop2: detected capacity change from 0 to 4096 [ 281.753279][T23190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.831430][T20335] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.943326][T23208] syzkaller0: entered promiscuous mode [ 281.957673][T23208] syzkaller0: entered allmulticast mode [ 281.987578][T23216] syzkaller0: entered promiscuous mode [ 281.993187][T23216] syzkaller0: entered allmulticast mode [ 282.008402][T23222] syzkaller0: entered promiscuous mode [ 282.013908][T23222] syzkaller0: entered allmulticast mode [ 282.074730][T23224] loop4: detected capacity change from 0 to 4096 [ 282.091670][T23224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.174962][T20549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.319325][T23247] syzkaller0: entered promiscuous mode [ 282.325031][T23247] syzkaller0: entered allmulticast mode [ 282.344084][T23249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7092'. [ 282.353443][T23249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7092'. [ 282.367206][T23249] loop0: detected capacity change from 0 to 1024 [ 282.380267][T23249] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 282.392362][T23249] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c841e018, mo2=0000] [ 282.410805][T23249] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 2: comm syz.0.7092: lblock 2 mapped to illegal pblock 2 (length 1) [ 282.425334][T23249] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 282.425517][T23249] __quota_error: 193 callbacks suppressed [ 282.425532][T23249] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 282.429248][T23252] loop3: detected capacity change from 0 to 4096 [ 282.434597][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 282.461125][ C0] EXT4-fs (loop0): initial error at time 2000000003: ext4_map_blocks:776: inode 3: block 2 [ 282.471142][ C0] EXT4-fs (loop0): last error at time 2000000003: ext4_map_blocks:776: inode 3: block 2 [ 282.485369][T23249] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 48: comm syz.0.7092: lblock 0 mapped to illegal pblock 48 (length 1) [ 282.504545][T23252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.521048][T23257] syzkaller0: entered promiscuous mode [ 282.523364][T23249] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 282.527054][T23257] syzkaller0: entered allmulticast mode [ 282.527324][T23249] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 282.550744][T23249] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.7092: Failed to acquire dquot type 0 [ 282.562103][ T28] audit: type=1326 audit(2000000003.348:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23251 comm="syz.3.7093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5062a7c629 code=0x7ffc0000 [ 282.567441][T23249] loop0: lost filesystem error report for type 5 error -117 [ 282.587025][ T28] audit: type=1326 audit(2000000003.348:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23251 comm="syz.3.7093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f5062a7c629 code=0x7ffc0000 [ 282.611739][T23249] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 282.617700][ T28] audit: type=1326 audit(2000000003.348:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23251 comm="syz.3.7093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5062a7c629 code=0x7ffc0000 [ 282.628268][T23249] loop0: lost filesystem error report for type 5 error -117 [ 282.650719][T23249] EXT4-fs error (device loop0): ext4_evict_inode:255: inode #11: comm syz.0.7092: mark_inode_dirty error [ 282.650776][ T28] audit: type=1326 audit(2000000003.348:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23251 comm="syz.3.7093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5062a7c629 code=0x7ffc0000 [ 282.658460][T23249] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 282.669868][ T28] audit: type=1326 audit(2000000003.348:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23251 comm="syz.3.7093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5062a7c629 code=0x7ffc0000 [ 282.693396][T23249] EXT4-fs warning (device loop0): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 282.702376][ T28] audit: type=1326 audit(2000000003.348:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23251 comm="syz.3.7093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5062a7c629 code=0x7ffc0000 [ 282.759440][ T28] audit: type=1326 audit(2000000003.348:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23251 comm="syz.3.7093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5062a7c629 code=0x7ffc0000 [ 282.783410][T23249] EXT4-fs (loop0): 1 orphan inode deleted [ 282.789923][T23249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.802077][ T50] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 282.803015][ T28] audit: type=1326 audit(2000000003.348:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23251 comm="syz.3.7093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5062a7c629 code=0x7ffc0000 [ 282.816560][ T50] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 282.862714][ T50] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:3: Failed to release dquot type 0 [ 282.885013][T18050] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.890740][T23249] raw_sendmsg: syz.0.7092 forgot to set AF_INET. Fix it! [ 282.943870][T23259] netlink: 'syz.3.7096': attribute type 1 has an invalid length. [ 282.992587][T18995] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.002579][ T56] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 283.018365][ T56] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 283.018525][ T56] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:4: Failed to release dquot type 0 [ 283.039195][ T56] loop0: lost filesystem error report for type 5 error -117 [ 283.039539][T18995] EXT4-fs error (device loop0): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 283.062168][T18995] loop0: lost filesystem error report for type 5 error -117 [ 283.062248][T18995] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 283.094276][T18995] loop0: lost filesystem error report for type 5 error -117 [ 283.097674][T23267] loop4: detected capacity change from 0 to 512 [ 283.112334][T18995] EXT4-fs error (device loop0): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 283.123848][T18995] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 283.132642][T23271] netlink: 'syz.2.7104': attribute type 1 has an invalid length. [ 283.151623][T23271] netlink: 'syz.2.7104': attribute type 1 has an invalid length. [ 283.159592][T23267] EXT4-fs: Ignoring removed i_version option [ 283.165941][T23267] EXT4-fs: Ignoring removed bh option [ 283.178564][T23273] loop1: detected capacity change from 0 to 1764 [ 283.186005][T23275] syzkaller0: entered promiscuous mode [ 283.191578][T23275] syzkaller0: entered allmulticast mode [ 283.192086][T23273] iso9660: Unknown parameter 'showassc' [ 283.201498][T23271] FAULT_INJECTION: forcing a failure. [ 283.201498][T23271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.220886][T23271] CPU: 0 UID: 0 PID: 23271 Comm: syz.2.7104 Not tainted syzkaller #0 PREEMPT(full) [ 283.220914][T23271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 283.220928][T23271] Call Trace: [ 283.220935][T23271] [ 283.220943][T23271] __dump_stack+0x1d/0x30 [ 283.220996][T23271] dump_stack_lvl+0x95/0xd0 [ 283.221016][T23271] dump_stack+0x15/0x1b [ 283.221036][T23271] should_fail_ex+0x263/0x280 [ 283.221101][T23271] should_fail+0xb/0x20 [ 283.221152][T23271] should_fail_usercopy+0x1a/0x20 [ 283.221176][T23271] _copy_to_user+0x20/0xa0 [ 283.221204][T23271] simple_read_from_buffer+0xb5/0x130 [ 283.221226][T23271] proc_fail_nth_read+0x10e/0x150 [ 283.221263][T23271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 283.221286][T23271] vfs_read+0x1ab/0x7f0 [ 283.221310][T23271] ? __rcu_read_unlock+0x4e/0x70 [ 283.221408][T23271] ? __fget_files+0x184/0x1c0 [ 283.221433][T23271] ? mutex_lock+0x57/0x90 [ 283.221462][T23271] ksys_read+0xdc/0x1a0 [ 283.221509][T23271] __x64_sys_read+0x40/0x50 [ 283.221537][T23271] x64_sys_call+0x2886/0x3020 [ 283.221559][T23271] do_syscall_64+0x12c/0x370 [ 283.221614][T23271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.221634][T23271] RIP: 0033:0x7fa8a2dacece [ 283.221648][T23271] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 283.221679][T23271] RSP: 002b:00007fa8a1846fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 283.221696][T23271] RAX: ffffffffffffffda RBX: 00007fa8a18476c0 RCX: 00007fa8a2dacece [ 283.221749][T23271] RDX: 000000000000000f RSI: 00007fa8a18470a0 RDI: 000000000000000b [ 283.221764][T23271] RBP: 00007fa8a1847090 R08: 0000000000000000 R09: 0000000000000000 [ 283.221779][T23271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.221834][T23271] R13: 00007fa8a3066038 R14: 00007fa8a3065fa0 R15: 00007ffdef8bdcc8 [ 283.221854][T23271] [ 283.440793][T23267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.446753][T23285] loop0: detected capacity change from 0 to 4096 [ 283.453598][T23267] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 283.471140][T23267] forcing mempool usage for bio_alloc_bioset+0x453/0x9a0 [ 283.479855][T23285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.502733][T20549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.605764][T23303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7114'. [ 283.629065][T23303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7114'. [ 283.635053][T23305] syzkaller0: entered promiscuous mode [ 283.639017][T23303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7114'. [ 283.653796][T23305] syzkaller0: entered allmulticast mode [ 283.687652][T23309] loop3: detected capacity change from 0 to 512 [ 283.714003][T23311] syzkaller0: entered promiscuous mode [ 283.722210][T23311] syzkaller0: entered allmulticast mode [ 283.731094][T23309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.731788][T18995] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.743702][T23309] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.773486][T18050] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.798116][T23319] FAULT_INJECTION: forcing a failure. [ 283.798116][T23319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.798995][T23317] netlink: 'syz.1.7119': attribute type 1 has an invalid length. [ 283.812034][T23319] CPU: 0 UID: 0 PID: 23319 Comm: syz.0.7118 Not tainted syzkaller #0 PREEMPT(full) [ 283.812062][T23319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 283.812075][T23319] Call Trace: [ 283.812081][T23319] [ 283.812089][T23319] __dump_stack+0x1d/0x30 [ 283.812146][T23319] dump_stack_lvl+0x95/0xd0 [ 283.812169][T23319] dump_stack+0x15/0x1b [ 283.812191][T23319] should_fail_ex+0x263/0x280 [ 283.812213][T23319] should_fail+0xb/0x20 [ 283.812283][T23319] should_fail_usercopy+0x1a/0x20 [ 283.812306][T23319] _copy_to_user+0x20/0xa0 [ 283.812374][T23319] bpf_test_finish+0x1a2/0x510 [ 283.812401][T23319] bpf_prog_test_run_skb+0xc51/0xef0 [ 283.812430][T23319] ? __fget_files+0x184/0x1c0 [ 283.812470][T23319] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 283.812495][T23319] bpf_prog_test_run+0x204/0x340 [ 283.812519][T23319] __sys_bpf+0x52e/0x7e0 [ 283.812615][T23319] __x64_sys_bpf+0x41/0x50 [ 283.812644][T23319] x64_sys_call+0x10cb/0x3020 [ 283.812698][T23319] do_syscall_64+0x12c/0x370 [ 283.812731][T23319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.812753][T23319] RIP: 0033:0x7fdfbeadc629 [ 283.812770][T23319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.812788][T23319] RSP: 002b:00007fdfbd52f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 283.812880][T23319] RAX: ffffffffffffffda RBX: 00007fdfbed55fa0 RCX: 00007fdfbeadc629 [ 283.812895][T23319] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 283.812909][T23319] RBP: 00007fdfbd52f090 R08: 0000000000000000 R09: 0000000000000000 [ 283.812952][T23319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.812966][T23319] R13: 00007fdfbed56038 R14: 00007fdfbed55fa0 R15: 00007ffe6c22f818 [ 283.812990][T23319] [ 283.928894][T23326] FAULT_INJECTION: forcing a failure. [ 283.928894][T23326] name failslab, interval 1, probability 0, space 0, times 0 [ 284.014408][T23326] CPU: 0 UID: 0 PID: 23326 Comm: syz.1.7119 Not tainted syzkaller #0 PREEMPT(full) [ 284.014435][T23326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 284.014525][T23326] Call Trace: [ 284.014532][T23326] [ 284.014539][T23326] __dump_stack+0x1d/0x30 [ 284.014567][T23326] dump_stack_lvl+0x95/0xd0 [ 284.014594][T23326] dump_stack+0x15/0x1b [ 284.014687][T23326] should_fail_ex+0x263/0x280 [ 284.014710][T23326] should_failslab+0x8c/0xb0 [ 284.014794][T23326] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 284.014820][T23326] ? __alloc_skb+0x2d6/0x690 [ 284.014842][T23326] __alloc_skb+0x2d6/0x690 [ 284.014860][T23326] ? __alloc_skb+0x200/0x690 [ 284.014900][T23326] netlink_alloc_large_skb+0xbf/0xf0 [ 284.014923][T23326] netlink_sendmsg+0x40c/0x6f0 [ 284.014995][T23326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.015011][T23329] syzkaller0: entered promiscuous mode [ 284.015040][T23326] ____sys_sendmsg+0x5af/0x600 [ 284.015068][T23326] ___sys_sendmsg+0x195/0x1e0 [ 284.015105][T23326] __x64_sys_sendmsg+0xd4/0x160 [ 284.015135][T23326] x64_sys_call+0x194c/0x3020 [ 284.015194][T23326] do_syscall_64+0x12c/0x370 [ 284.015227][T23326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.015312][T23326] RIP: 0033:0x7f45c14ac629 [ 284.015328][T23326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.015347][T23326] RSP: 002b:00007f45bfec5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.015368][T23326] RAX: ffffffffffffffda RBX: 00007f45c1726180 RCX: 00007f45c14ac629 [ 284.015383][T23326] RDX: 0000000004000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 284.015397][T23326] RBP: 00007f45bfec5090 R08: 0000000000000000 R09: 0000000000000000 [ 284.015415][T23326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.015428][T23326] R13: 00007f45c1726218 R14: 00007f45c1726180 R15: 00007ffd209d5e78 [ 284.015449][T23326] [ 284.208201][T23329] syzkaller0: entered allmulticast mode [ 284.338335][T23341] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 284.348061][T23341] FAT-fs (loop1): Filesystem has been set read-only [ 284.378237][T23347] FAULT_INJECTION: forcing a failure. [ 284.378237][T23347] name failslab, interval 1, probability 0, space 0, times 0 [ 284.403435][T23347] CPU: 1 UID: 0 PID: 23347 Comm: syz.3.7127 Not tainted syzkaller #0 PREEMPT(full) [ 284.403519][T23347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 284.403530][T23347] Call Trace: [ 284.403537][T23347] [ 284.403544][T23347] __dump_stack+0x1d/0x30 [ 284.403568][T23347] dump_stack_lvl+0x95/0xd0 [ 284.403596][T23347] dump_stack+0x15/0x1b [ 284.403655][T23347] should_fail_ex+0x263/0x280 [ 284.403674][T23347] should_failslab+0x8c/0xb0 [ 284.403691][T23347] __kmalloc_node_noprof+0xc8/0x560 [ 284.403752][T23347] ? qdisc_alloc+0x65/0x410 [ 284.403839][T23347] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 284.403958][T23347] qdisc_alloc+0x65/0x410 [ 284.403983][T23347] qdisc_create_dflt+0x7f/0x2e0 [ 284.404004][T23347] taprio_init+0x286/0x5f0 [ 284.404032][T23347] ? __pfx_taprio_init+0x10/0x10 [ 284.404083][T23347] qdisc_create+0x582/0x9d0 [ 284.404114][T23347] tc_modify_qdisc+0xffc/0x14f0 [ 284.404149][T23347] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 284.404203][T23347] rtnetlink_rcv_msg+0x6a7/0x720 [ 284.404251][T23347] ? avc_has_perm_noaudit+0xab/0x130 [ 284.404349][T23347] netlink_rcv_skb+0x123/0x220 [ 284.404375][T23347] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 284.404455][T23347] rtnetlink_rcv+0x1c/0x30 [ 284.404590][T23347] netlink_unicast+0x5c0/0x690 [ 284.404617][T23347] netlink_sendmsg+0x5c8/0x6f0 [ 284.404645][T23347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.404667][T23347] ____sys_sendmsg+0x5af/0x600 [ 284.404734][T23347] ___sys_sendmsg+0x195/0x1e0 [ 284.404773][T23347] __x64_sys_sendmsg+0xd4/0x160 [ 284.404803][T23347] x64_sys_call+0x194c/0x3020 [ 284.404895][T23347] do_syscall_64+0x12c/0x370 [ 284.404949][T23347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.404970][T23347] RIP: 0033:0x7f5062a7c629 [ 284.404984][T23347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.405000][T23347] RSP: 002b:00007f50614cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.405017][T23347] RAX: ffffffffffffffda RBX: 00007f5062cf5fa0 RCX: 00007f5062a7c629 [ 284.405035][T23347] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000007 [ 284.405049][T23347] RBP: 00007f50614cf090 R08: 0000000000000000 R09: 0000000000000000 [ 284.405063][T23347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.405075][T23347] R13: 00007f5062cf6038 R14: 00007f5062cf5fa0 R15: 00007fff05b69418 [ 284.405096][T23347] [ 284.672503][T23350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.718866][T23365] netlink: 'syz.3.7131': attribute type 1 has an invalid length. [ 284.755364][T23365] 8021q: adding VLAN 0 to HW filter on device bond4 [ 284.770153][T23368] syzkaller0: entered promiscuous mode [ 284.771238][T23370] netlink: 260 bytes leftover after parsing attributes in process `syz.0.7132'. [ 284.775708][T23368] syzkaller0: entered allmulticast mode [ 284.782270][T23368] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 284.791437][T23365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7131'. [ 284.798940][T23368] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 284.811770][T23370] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7132'. [ 284.818253][T23368] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 284.828967][T23365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7131'. [ 284.838781][T23370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7132'. [ 284.850841][T23368] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 284.863412][T23365] macsec2: entered promiscuous mode [ 284.870028][T23365] bond4: entered promiscuous mode [ 284.871302][T23368] EXT4-fs error (device loop1): ext4_get_journal_inode:5863: inode #17: comm syz.1.7133: iget: bad i_size value: 4398046511204 [ 284.875101][T23365] macsec2: entered allmulticast mode [ 284.875116][T23365] bond4: entered allmulticast mode [ 284.891544][T23368] loop1: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 284.902502][T23368] EXT4-fs (loop1): no journal found [ 284.911759][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 284.911779][ C1] EXT4-fs (loop1): initial error at time 2000000005: ext4_get_journal_inode:5863: inode 17 [ 284.911828][ C1] EXT4-fs (loop1): last error at time 2000000005: ext4_get_journal_inode:5863: inode 17 [ 285.058433][T23390] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 285.070850][T23390] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 285.145285][T23400] netlink: 'syz.3.7142': attribute type 1 has an invalid length. [ 285.285052][T23408] syzkaller0: entered promiscuous mode [ 285.291287][T23408] syzkaller0: entered allmulticast mode [ 285.462429][T23419] bond7: entered allmulticast mode [ 285.524111][T23423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7151'. [ 285.536022][T23423] bridge0: port 3(batadv1) entered blocking state [ 285.542489][T23423] bridge0: port 3(batadv1) entered disabled state [ 285.549079][T23423] batadv1: entered allmulticast mode [ 285.554907][T23423] batadv1: entered promiscuous mode [ 285.566624][T23423] ipvlan1: entered promiscuous mode [ 285.571878][T23423] ipvlan1: entered allmulticast mode [ 285.577216][T23423] veth0_vlan: entered allmulticast mode [ 285.850440][T23426] FAULT_INJECTION: forcing a failure. [ 285.850440][T23426] name failslab, interval 1, probability 0, space 0, times 0 [ 285.863279][T23426] CPU: 0 UID: 0 PID: 23426 Comm: syz.1.7152 Not tainted syzkaller #0 PREEMPT(full) [ 285.863305][T23426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 285.863317][T23426] Call Trace: [ 285.863323][T23426] [ 285.863331][T23426] __dump_stack+0x1d/0x30 [ 285.863437][T23426] dump_stack_lvl+0x95/0xd0 [ 285.863451][T23426] dump_stack+0x15/0x1b [ 285.863463][T23426] should_fail_ex+0x263/0x280 [ 285.863476][T23426] should_failslab+0x8c/0xb0 [ 285.863585][T23426] __kvmalloc_node_noprof+0x155/0x650 [ 285.863600][T23426] ? nf_hook_entries_grow+0x1cb/0x460 [ 285.863617][T23426] nf_hook_entries_grow+0x1cb/0x460 [ 285.863636][T23426] __nf_register_net_hook+0x18e/0x480 [ 285.863651][T23426] ? __account_obj_stock+0x211/0x350 [ 285.863669][T23426] nf_register_net_hook+0x88/0x130 [ 285.863724][T23426] nf_register_net_hooks+0x44/0x150 [ 285.863739][T23426] nf_defrag_ipv6_enable+0x6e/0xc0 [ 285.863756][T23426] nf_ct_netns_do_get+0x161/0x3a0 [ 285.863848][T23426] ? __bitmap_set+0xe2/0x100 [ 285.863917][T23426] nf_ct_netns_get+0xf1/0x2c0 [ 285.863932][T23426] nft_redir_init+0x130/0x150 [ 285.864007][T23426] nf_tables_newrule+0xedf/0x16e0 [ 285.864026][T23426] nfnetlink_rcv+0xc1e/0x1720 [ 285.864049][T23426] netlink_unicast+0x5c0/0x690 [ 285.864069][T23426] netlink_sendmsg+0x5c8/0x6f0 [ 285.864085][T23426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.864099][T23426] ____sys_sendmsg+0x5af/0x600 [ 285.864176][T23426] ___sys_sendmsg+0x195/0x1e0 [ 285.864245][T23426] __x64_sys_sendmsg+0xd4/0x160 [ 285.864261][T23426] x64_sys_call+0x194c/0x3020 [ 285.864276][T23426] do_syscall_64+0x12c/0x370 [ 285.864295][T23426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.864347][T23426] RIP: 0033:0x7f45c14ac629 [ 285.864357][T23426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.864368][T23426] RSP: 002b:00007f45bff07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.864381][T23426] RAX: ffffffffffffffda RBX: 00007f45c1725fa0 RCX: 00007f45c14ac629 [ 285.864450][T23426] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 285.864458][T23426] RBP: 00007f45bff07090 R08: 0000000000000000 R09: 0000000000000000 [ 285.864466][T23426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.864474][T23426] R13: 00007f45c1726038 R14: 00007f45c1725fa0 R15: 00007ffd209d5e78 [ 285.864484][T23426] [ 286.108033][T10688] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 286.117386][T10688] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 287.001518][T23333] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.063559][T23436] set_capacity_and_notify: 6 callbacks suppressed [ 287.063668][T23436] loop1: detected capacity change from 0 to 128 [ 287.094887][T20335] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.174794][T23443] loop0: detected capacity change from 0 to 128 [ 287.233145][T23450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7158'. [ 287.243108][T23450] FAULT_INJECTION: forcing a failure. [ 287.243108][T23450] name failslab, interval 1, probability 0, space 0, times 0 [ 287.256468][T23450] CPU: 1 UID: 0 PID: 23450 Comm: syz.2.7158 Not tainted syzkaller #0 PREEMPT(full) [ 287.256497][T23450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 287.256511][T23450] Call Trace: [ 287.256519][T23450] [ 287.256527][T23450] __dump_stack+0x1d/0x30 [ 287.256630][T23450] dump_stack_lvl+0x95/0xd0 [ 287.256655][T23450] dump_stack+0x15/0x1b [ 287.256678][T23450] should_fail_ex+0x263/0x280 [ 287.256751][T23450] should_failslab+0x8c/0xb0 [ 287.256812][T23450] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 287.256866][T23450] ? __alloc_skb+0x2d6/0x690 [ 287.256890][T23450] __alloc_skb+0x2d6/0x690 [ 287.256939][T23450] ? __alloc_skb+0x200/0x690 [ 287.256962][T23450] netlink_ack+0xfd/0x500 [ 287.257023][T23450] netlink_rcv_skb+0x192/0x220 [ 287.257049][T23450] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 287.257076][T23450] nfnetlink_rcv+0x167/0x1720 [ 287.257122][T23450] ? __kfree_skb+0x109/0x150 [ 287.257146][T23450] ? nlmon_xmit+0x4f/0x60 [ 287.257174][T23450] ? consume_skb+0x4b/0x160 [ 287.257198][T23450] ? nlmon_xmit+0x4f/0x60 [ 287.257302][T23450] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 287.257369][T23450] ? __dev_queue_xmit+0x1393/0x1f40 [ 287.257397][T23450] ? __dev_queue_xmit+0x148/0x1f40 [ 287.257425][T23450] ? ref_tracker_free+0x37d/0x3e0 [ 287.257474][T23450] ? __netlink_deliver_tap+0x4dc/0x500 [ 287.257506][T23450] netlink_unicast+0x5c0/0x690 [ 287.257547][T23450] netlink_sendmsg+0x5c8/0x6f0 [ 287.257612][T23450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.257640][T23450] ____sys_sendmsg+0x5af/0x600 [ 287.257734][T23450] ___sys_sendmsg+0x195/0x1e0 [ 287.257820][T23450] __x64_sys_sendmsg+0xd4/0x160 [ 287.257909][T23450] x64_sys_call+0x194c/0x3020 [ 287.257996][T23450] do_syscall_64+0x12c/0x370 [ 287.258029][T23450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.258051][T23450] RIP: 0033:0x7fa8a2dec629 [ 287.258091][T23450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.258109][T23450] RSP: 002b:00007fa8a1847028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.258130][T23450] RAX: ffffffffffffffda RBX: 00007fa8a3065fa0 RCX: 00007fa8a2dec629 [ 287.258146][T23450] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 287.258191][T23450] RBP: 00007fa8a1847090 R08: 0000000000000000 R09: 0000000000000000 [ 287.258206][T23450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.258220][T23450] R13: 00007fa8a3066038 R14: 00007fa8a3065fa0 R15: 00007ffdef8bdcc8 [ 287.258242][T23450] [ 287.559465][T23462] loop1: detected capacity change from 0 to 512 [ 287.568374][T23462] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 287.587146][T23462] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.7166: invalid indirect mapped block 4294967295 (level 0) [ 287.588292][T23457] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.605927][T23462] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 287.608248][T23462] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.7166: invalid indirect mapped block 4294967295 (level 1) [ 287.608356][T23457] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.617403][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 287.617425][ C1] EXT4-fs (loop1): initial error at time 2000000008: ext4_free_branches:1023: inode 16 [ 287.617450][ C1] EXT4-fs (loop1): last error at time 2000000008: ext4_free_branches:1023 [ 287.632367][T10688] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 287.638420][ C1] : inode 16 [ 287.638920][T23462] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 287.672802][T23462] EXT4-fs (loop1): 1 orphan inode deleted [ 287.687890][T23462] EXT4-fs (loop1): 1 truncate cleaned up [ 287.693942][T23462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.707196][T23462] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.7166: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 287.741789][T21669] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.746826][T23457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.774364][T23457] batadv_slave_1: left promiscuous mode [ 287.779944][T23457] batadv_slave_1: left allmulticast mode [ 287.806508][T23457] geneve2: left promiscuous mode [ 287.811609][T23457] geneve2: left allmulticast mode [ 287.817309][T23457] bond1: left allmulticast mode [ 287.824948][ T50] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.835500][ T50] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.844718][ T50] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.860286][ T50] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.886194][T23473] loop1: detected capacity change from 0 to 4096 [ 287.898728][T23473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.916837][ T28] kauditd_printk_skb: 133 callbacks suppressed [ 287.916851][ T28] audit: type=1326 audit(2000000008.975:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23472 comm="syz.1.7168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c14ac629 code=0x7ffc0000 [ 287.950600][ T28] audit: type=1326 audit(2000000009.007:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23472 comm="syz.1.7168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f45c14ac629 code=0x7ffc0000 [ 287.974600][ T28] audit: type=1326 audit(2000000009.007:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23472 comm="syz.1.7168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c14ac629 code=0x7ffc0000 [ 288.008568][ T28] audit: type=1326 audit(2000000009.007:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23472 comm="syz.1.7168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f45c14ac629 code=0x7ffc0000 [ 288.032344][ T28] audit: type=1326 audit(2000000009.007:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23472 comm="syz.1.7168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c14ac629 code=0x7ffc0000 [ 288.067910][ T28] audit: type=1326 audit(2000000009.007:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23472 comm="syz.1.7168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f45c14ac629 code=0x7ffc0000 [ 288.091673][ T28] audit: type=1326 audit(2000000009.007:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23472 comm="syz.1.7168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c14ac629 code=0x7ffc0000 [ 288.124558][ T28] audit: type=1326 audit(2000000009.007:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23472 comm="syz.1.7168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f45c14ac629 code=0x7ffc0000 [ 288.148740][ T28] audit: type=1326 audit(2000000009.007:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23472 comm="syz.1.7168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45c14ac629 code=0x7ffc0000 [ 288.180777][T23483] loop2: detected capacity change from 0 to 128 [ 288.190830][ T28] audit: type=1326 audit(2000000009.007:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23472 comm="syz.1.7168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f45c14ac629 code=0x7ffc0000 [ 288.616893][T23492] geneve3: entered promiscuous mode [ 288.622934][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 288.631971][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 288.641056][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 288.649065][T23492] __nla_validate_parse: 1 callbacks suppressed [ 288.649080][T23492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7173'. [ 288.650134][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 288.737862][T23500] syzkaller0: entered promiscuous mode [ 288.743520][T23500] syzkaller0: entered allmulticast mode [ 288.854570][T23502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7176'. [ 288.880238][T23504] syzkaller0: entered promiscuous mode [ 288.885797][T23504] syzkaller0: entered allmulticast mode [ 289.909588][T23528] FAULT_INJECTION: forcing a failure. [ 289.909588][T23528] name failslab, interval 1, probability 0, space 0, times 0 [ 289.912039][T23526] loop3: detected capacity change from 0 to 1024 [ 289.922603][T23528] CPU: 0 UID: 0 PID: 23528 Comm: syz.2.7185 Not tainted syzkaller #0 PREEMPT(full) [ 289.922630][T23528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 289.922644][T23528] Call Trace: [ 289.922651][T23528] [ 289.922660][T23528] __dump_stack+0x1d/0x30 [ 289.922687][T23528] dump_stack_lvl+0x95/0xd0 [ 289.922738][T23528] dump_stack+0x15/0x1b [ 289.922759][T23528] should_fail_ex+0x263/0x280 [ 289.922782][T23528] ? nf_tables_newtable+0x375/0xea0 [ 289.922810][T23528] should_failslab+0x8c/0xb0 [ 289.922896][T23528] __kmalloc_cache_noprof+0x5f/0x410 [ 289.922990][T23528] ? __nla_validate_parse+0x1650/0x1cf0 [ 289.923017][T23528] nf_tables_newtable+0x375/0xea0 [ 289.923048][T23528] nfnetlink_rcv+0xc1e/0x1720 [ 289.923093][T23528] netlink_unicast+0x5c0/0x690 [ 289.923164][T23528] netlink_sendmsg+0x5c8/0x6f0 [ 289.923193][T23528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.923220][T23528] ____sys_sendmsg+0x5af/0x600 [ 289.923301][T23528] ___sys_sendmsg+0x195/0x1e0 [ 289.923338][T23528] __x64_sys_sendmsg+0xd4/0x160 [ 289.923442][T23528] x64_sys_call+0x194c/0x3020 [ 289.923469][T23528] do_syscall_64+0x12c/0x370 [ 289.923502][T23528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.923572][T23528] RIP: 0033:0x7fa8a2dec629 [ 289.923589][T23528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.923607][T23528] RSP: 002b:00007fa8a1847028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.923697][T23528] RAX: ffffffffffffffda RBX: 00007fa8a3065fa0 RCX: 00007fa8a2dec629 [ 289.923713][T23528] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 289.923727][T23528] RBP: 00007fa8a1847090 R08: 0000000000000000 R09: 0000000000000000 [ 289.923752][T23528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.923766][T23528] R13: 00007fa8a3066038 R14: 00007fa8a3065fa0 R15: 00007ffdef8bdcc8 [ 289.923785][T23528] [ 290.127853][T23526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.158899][T23531] syzkaller0: entered promiscuous mode [ 290.164545][T23531] syzkaller0: entered allmulticast mode [ 290.268384][T23533] loop2: detected capacity change from 0 to 512 [ 290.275105][T23533] EXT4-fs: Ignoring removed oldalloc option [ 290.284405][T23533] EXT4-fs (loop2): 1 truncate cleaned up [ 290.290742][T23533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.305406][T23533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7187'. [ 290.365160][T20335] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.395163][T23456] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.432485][T21669] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.446167][T23539] syzkaller0: entered promiscuous mode [ 290.453503][T23539] syzkaller0: entered allmulticast mode [ 290.459878][T18050] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.589565][T23559] syzkaller0: entered promiscuous mode [ 290.595120][T23559] syzkaller0: entered allmulticast mode [ 290.627494][T23543] x_tables: duplicate underflow at hook 2 [ 290.685275][T23561] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7198'. [ 290.716417][T23563] geneve2: left promiscuous mode [ 290.721534][T23563] geneve2: left allmulticast mode [ 290.772280][T23567] loop4: detected capacity change from 0 to 4096 [ 290.786018][T23567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.835029][T23563] syzkaller0: left promiscuous mode [ 290.840306][T23563] syzkaller0: left allmulticast mode [ 290.846838][ T56] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.847781][T20549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.859535][ T56] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.887678][T23565] syzkaller0: entered promiscuous mode [ 290.904127][T23565] syzkaller0: entered allmulticast mode [ 290.919393][ T56] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.942992][ T56] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.006527][T23574] loop1: detected capacity change from 0 to 8192 [ 291.016033][T23574] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7203'. [ 291.076536][T23582] x_tables: unsorted underflow at hook 2 [ 291.134973][T23587] syzkaller0: entered promiscuous mode [ 291.140571][T23587] syzkaller0: entered allmulticast mode [ 291.403758][T23603] syzkaller0: entered promiscuous mode [ 291.403840][T23602] loop2: detected capacity change from 0 to 512 [ 291.410353][T23602] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 291.417161][T23603] syzkaller0: entered allmulticast mode [ 291.430672][T23602] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 291.439559][T23602] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 291.447753][T23602] System zones: 0-2, 18-18, 34-35 [ 291.453406][T23602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 291.516871][T23606] syzkaller0: entered promiscuous mode [ 291.522435][T23606] syzkaller0: entered allmulticast mode [ 291.557689][T23607] netlink: 9 bytes leftover after parsing attributes in process `syz.2.7212'. [ 291.680742][T23607] gretap0: entered promiscuous mode [ 291.743875][T23612] FAULT_INJECTION: forcing a failure. [ 291.743875][T23612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.757044][T23612] CPU: 1 UID: 0 PID: 23612 Comm: syz.3.7215 Not tainted syzkaller #0 PREEMPT(full) [ 291.757086][T23612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 291.757098][T23612] Call Trace: [ 291.757105][T23612] [ 291.757112][T23612] __dump_stack+0x1d/0x30 [ 291.757176][T23612] dump_stack_lvl+0x95/0xd0 [ 291.757198][T23612] dump_stack+0x15/0x1b [ 291.757217][T23612] should_fail_ex+0x263/0x280 [ 291.757277][T23612] should_fail+0xb/0x20 [ 291.757294][T23612] should_fail_usercopy+0x1a/0x20 [ 291.757336][T23612] _copy_from_iter+0xcf/0xea0 [ 291.757358][T23612] ? __alloc_skb+0x4f6/0x690 [ 291.757377][T23612] ? __alloc_skb+0x200/0x690 [ 291.757446][T23612] netlink_sendmsg+0x4ae/0x6f0 [ 291.757505][T23612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.757758][T23612] ____sys_sendmsg+0x5af/0x600 [ 291.757785][T23612] ___sys_sendmsg+0x195/0x1e0 [ 291.757874][T23612] __x64_sys_sendmsg+0xd4/0x160 [ 291.757907][T23612] x64_sys_call+0x194c/0x3020 [ 291.757930][T23612] do_syscall_64+0x12c/0x370 [ 291.758029][T23612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.758058][T23612] RIP: 0033:0x7f5062a7c629 [ 291.758074][T23612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.758090][T23612] RSP: 002b:00007f50614cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.758109][T23612] RAX: ffffffffffffffda RBX: 00007f5062cf5fa0 RCX: 00007f5062a7c629 [ 291.758158][T23612] RDX: 0000000020000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 291.758171][T23612] RBP: 00007f50614cf090 R08: 0000000000000000 R09: 0000000000000000 [ 291.758264][T23612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.758275][T23612] R13: 00007f5062cf6038 R14: 00007f5062cf5fa0 R15: 00007fff05b69418 [ 291.758294][T23612] [ 291.997099][T23616] syzkaller0: entered promiscuous mode [ 292.002713][T23616] syzkaller0: entered allmulticast mode [ 293.786653][T23630] syzkaller0: entered promiscuous mode [ 293.792179][T23630] syzkaller0: entered allmulticast mode [ 293.794226][T23576] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 293.838845][T20335] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.880480][T23639] netlink: 'syz.1.7225': attribute type 1 has an invalid length. [ 293.888753][T23637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7226'. [ 293.984021][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 293.984042][ T28] audit: type=1326 audit(2000000015.348:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23641 comm="syz.3.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5062a7c629 code=0x7ffc0000 [ 293.986895][T23645] FAULT_INJECTION: forcing a failure. [ 293.986895][T23645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.994341][ T28] audit: type=1326 audit(2000000015.348:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23641 comm="syz.3.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5062a7c629 code=0x7ffc0000 [ 294.014240][T23645] CPU: 0 UID: 0 PID: 23645 Comm: syz.2.7229 Not tainted syzkaller #0 PREEMPT(full) [ 294.014348][T23645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 294.014361][T23645] Call Trace: [ 294.014369][T23645] [ 294.014378][T23645] __dump_stack+0x1d/0x30 [ 294.014473][T23645] dump_stack_lvl+0x95/0xd0 [ 294.014496][T23645] dump_stack+0x15/0x1b [ 294.014529][T23645] should_fail_ex+0x263/0x280 [ 294.014552][T23645] should_fail+0xb/0x20 [ 294.014570][T23645] should_fail_usercopy+0x1a/0x20 [ 294.014594][T23645] _copy_to_user+0x20/0xa0 [ 294.014653][T23645] bpf_verifier_vlog+0x36e/0x5a0 [ 294.014679][T23645] __btf_verifier_log+0x7f/0xb0 [ 294.014703][T23645] ? should_fail_ex+0xd9/0x280 [ 294.014762][T23645] ? btf_parse_hdr+0x21d/0x3c0 [ 294.014794][T23645] btf_parse_hdr+0x22f/0x3c0 [ 294.014824][T23645] btf_new_fd+0x25a/0x7d0 [ 294.014889][T23645] ? ns_capable+0x7c/0xb0 [ 294.014909][T23645] bpf_btf_load+0x112/0x130 [ 294.015043][T23645] __sys_bpf+0x3d8/0x7e0 [ 294.015131][T23645] __x64_sys_bpf+0x41/0x50 [ 294.015162][T23645] x64_sys_call+0x10cb/0x3020 [ 294.015188][T23645] do_syscall_64+0x12c/0x370 [ 294.015259][T23645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.015289][T23645] RIP: 0033:0x7fa8a2dec629 [ 294.015306][T23645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.015324][T23645] RSP: 002b:00007fa8a1847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 294.015346][T23645] RAX: ffffffffffffffda RBX: 00007fa8a3065fa0 RCX: 00007fa8a2dec629 [ 294.015388][T23645] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 294.015403][T23645] RBP: 00007fa8a1847090 R08: 0000000000000000 R09: 0000000000000000 [ 294.015416][T23645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 294.015430][T23645] R13: 00007fa8a3066038 R14: 00007fa8a3065fa0 R15: 00007ffdef8bdcc8 [ 294.015450][T23645] [ 294.116453][T23654] loop2: detected capacity change from 0 to 512 [ 294.158311][ T28] audit: type=1326 audit(2000000015.421:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23641 comm="syz.3.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f5062a7c629 code=0x7ffc0000 [ 294.172532][T23654] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 294.217210][ T28] audit: type=1326 audit(2000000015.421:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23641 comm="syz.3.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5062a7c629 code=0x7ffc0000 [ 294.308827][T23654] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.7233: bad orphan inode 131083 [ 294.312105][ T28] audit: type=1326 audit(2000000015.421:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23641 comm="syz.3.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5062a7c629 code=0x7ffc0000 [ 294.323360][T23654] loop2: lost filesystem error report for type 5 error -117 [ 294.343756][T23654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.426812][T23666] syzkaller0: entered promiscuous mode [ 294.441668][ T28] audit: type=1326 audit(2000000015.421:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23641 comm="syz.3.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f5062a7c629 code=0x7ffc0000 [ 294.465277][T23666] syzkaller0: entered allmulticast mode [ 294.472008][ T28] audit: type=1400 audit(2000000015.442:1423): avc: denied { mount } for pid=23641 comm="syz.3.7228" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 294.495198][ T28] audit: type=1326 audit(2000000015.442:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23641 comm="syz.3.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5062a7c629 code=0x7ffc0000 [ 294.533466][T20335] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.554765][T23669] syzkaller0: entered promiscuous mode [ 294.560310][T23669] syzkaller0: entered allmulticast mode [ 294.568370][T23669] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 294.575963][T23669] SELinux: failed to load policy [ 294.581944][ T28] audit: type=1326 audit(2000000015.442:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23641 comm="syz.3.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f5062a7c629 code=0x7ffc0000 [ 294.605853][ T28] audit: type=1326 audit(2000000015.442:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23641 comm="syz.3.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5062a7c629 code=0x7ffc0000 [ 294.711802][T23673] tipc: Enabled bearer , priority 0 [ 294.745912][T23671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7241'. [ 294.797611][T23676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7241'. [ 294.859821][T23680] loop4: detected capacity change from 0 to 764 [ 294.924614][T23671] macvlan2: entered promiscuous mode [ 294.934358][T23671] macvlan2: entered allmulticast mode [ 294.942015][T23671] veth0_virt_wifi: entered allmulticast mode [ 295.018933][T23687] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 295.144297][T23703] syzkaller0: entered promiscuous mode [ 295.145223][T23706] loop1: detected capacity change from 0 to 512 [ 295.149996][T23703] syzkaller0: entered allmulticast mode [ 295.192330][T23706] EXT4-fs error (device loop1): __ext4_fill_super:5563: inode #2: comm syz.1.7256: iget: checksum invalid [ 295.233059][T23706] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 295.233269][T23706] EXT4-fs (loop1): get root inode failed [ 295.242294][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 295.242324][ C0] EXT4-fs (loop1): initial error at time 2000000016: __ext4_fill_super:5563: inode 2 [ 295.242355][ C0] EXT4-fs (loop1): last error at time 2000000016: __ext4_fill_super:5563: inode 2 [ 295.278020][T23706] EXT4-fs (loop1): mount failed [ 295.354678][T23724] FAULT_INJECTION: forcing a failure. [ 295.354678][T23724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.368082][T23724] CPU: 0 UID: 0 PID: 23724 Comm: syz.1.7262 Not tainted syzkaller #0 PREEMPT(full) [ 295.368107][T23724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 295.368137][T23724] Call Trace: [ 295.368143][T23724] [ 295.368150][T23724] __dump_stack+0x1d/0x30 [ 295.368237][T23724] dump_stack_lvl+0x95/0xd0 [ 295.368250][T23724] dump_stack+0x15/0x1b [ 295.368263][T23724] should_fail_ex+0x263/0x280 [ 295.368275][T23724] should_fail+0xb/0x20 [ 295.368300][T23724] should_fail_usercopy+0x1a/0x20 [ 295.368313][T23724] _copy_from_user+0x1c/0xb0 [ 295.368327][T23724] ___sys_sendmsg+0xc1/0x1e0 [ 295.368350][T23724] __x64_sys_sendmsg+0xd4/0x160 [ 295.368380][T23724] x64_sys_call+0x194c/0x3020 [ 295.368394][T23724] do_syscall_64+0x12c/0x370 [ 295.368413][T23724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.368501][T23724] RIP: 0033:0x7f45c14ac629 [ 295.368511][T23724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.368521][T23724] RSP: 002b:00007f45bff07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.368534][T23724] RAX: ffffffffffffffda RBX: 00007f45c1725fa0 RCX: 00007f45c14ac629 [ 295.368615][T23724] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000003 [ 295.368661][T23724] RBP: 00007f45bff07090 R08: 0000000000000000 R09: 0000000000000000 [ 295.368669][T23724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.368676][T23724] R13: 00007f45c1726038 R14: 00007f45c1725fa0 R15: 00007ffd209d5e78 [ 295.368687][T23724] [ 295.576755][T23732] FAULT_INJECTION: forcing a failure. [ 295.576755][T23732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.587787][T23733] FAULT_INJECTION: forcing a failure. [ 295.587787][T23733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.596243][T23735] loop2: detected capacity change from 0 to 1024 [ 295.603146][T23733] CPU: 1 UID: 0 PID: 23733 Comm: syz.3.7266 Not tainted syzkaller #0 PREEMPT(full) [ 295.603224][T23733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 295.603237][T23733] Call Trace: [ 295.603244][T23733] [ 295.603253][T23733] __dump_stack+0x1d/0x30 [ 295.603322][T23733] dump_stack_lvl+0x95/0xd0 [ 295.603377][T23733] dump_stack+0x15/0x1b [ 295.603398][T23733] should_fail_ex+0x263/0x280 [ 295.603421][T23733] should_fail+0xb/0x20 [ 295.603477][T23733] should_fail_usercopy+0x1a/0x20 [ 295.603500][T23733] _copy_from_user+0x1c/0xb0 [ 295.603526][T23733] bpf_test_init+0xb9/0x130 [ 295.603645][T23733] bpf_prog_test_run_xdp+0x306/0xa10 [ 295.603672][T23733] ? __rcu_read_unlock+0x4e/0x70 [ 295.603768][T23733] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 295.603794][T23733] bpf_prog_test_run+0x204/0x340 [ 295.603831][T23733] __sys_bpf+0x52e/0x7e0 [ 295.603858][T23733] __x64_sys_bpf+0x41/0x50 [ 295.603887][T23733] x64_sys_call+0x10cb/0x3020 [ 295.603986][T23733] do_syscall_64+0x12c/0x370 [ 295.604077][T23733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.604131][T23733] RIP: 0033:0x7f5062a7c629 [ 295.604148][T23733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.604219][T23733] RSP: 002b:00007f50614cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 295.604252][T23733] RAX: ffffffffffffffda RBX: 00007f5062cf5fa0 RCX: 00007f5062a7c629 [ 295.604267][T23733] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 295.604282][T23733] RBP: 00007f50614cf090 R08: 0000000000000000 R09: 0000000000000000 [ 295.604296][T23733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.604309][T23733] R13: 00007f5062cf6038 R14: 00007f5062cf5fa0 R15: 00007fff05b69418 [ 295.604330][T23733] [ 295.621715][T23732] CPU: 1 UID: 0 PID: 23732 Comm: syz.1.7264 Not tainted syzkaller #0 PREEMPT(full) [ 295.621743][T23732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 295.621820][T23732] Call Trace: [ 295.621827][T23732] [ 295.621836][T23732] __dump_stack+0x1d/0x30 [ 295.621862][T23732] dump_stack_lvl+0x95/0xd0 [ 295.621890][T23732] dump_stack+0x15/0x1b [ 295.621918][T23732] should_fail_ex+0x263/0x280 [ 295.621942][T23732] should_fail+0xb/0x20 [ 295.621961][T23732] should_fail_usercopy+0x1a/0x20 [ 295.622011][T23732] _copy_from_user+0x1c/0xb0 [ 295.622070][T23732] __copy_msghdr+0x244/0x300 [ 295.622097][T23732] ___sys_sendmsg+0x10c/0x1e0 [ 295.622159][T23732] __x64_sys_sendmsg+0xd4/0x160 [ 295.622188][T23732] x64_sys_call+0x194c/0x3020 [ 295.622228][T23732] do_syscall_64+0x12c/0x370 [ 295.622261][T23732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.622283][T23732] RIP: 0033:0x7f45c14ac629 [ 295.622301][T23732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.622355][T23732] RSP: 002b:00007f45bff07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.622375][T23732] RAX: ffffffffffffffda RBX: 00007f45c1725fa0 RCX: 00007f45c14ac629 [ 295.622391][T23732] RDX: 0000000000000005 RSI: 0000200000000280 RDI: 0000000000000005 [ 295.622462][T23732] RBP: 00007f45bff07090 R08: 0000000000000000 R09: 0000000000000000 [ 295.622561][T23732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.622574][T23732] R13: 00007f45c1726038 R14: 00007f45c1725fa0 R15: 00007ffd209d5e78 [ 295.622638][T23732] [ 295.774072][ T3418] tipc: Node number set to 1514956318 [ 295.782210][T23735] EXT4-fs: Ignoring removed orlov option [ 295.966282][T23743] loop4: detected capacity change from 0 to 1024 [ 295.974499][T23743] EXT4-fs: Ignoring removed orlov option [ 295.980153][T23743] EXT4-fs: inline encryption not supported [ 295.990681][T23735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.003222][T23743] EXT4-fs (loop4): bad geometry: block count 3585 exceeds size of device (512 blocks) [ 296.057700][T23743] netlink: 'syz.4.7269': attribute type 2 has an invalid length. [ 296.088969][T23743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18522 sclass=netlink_route_socket pid=23743 comm=syz.4.7269 [ 296.102265][T23748] loop1: detected capacity change from 0 to 512 [ 296.113689][T23748] EXT4-fs: Ignoring removed orlov option [ 296.137602][T20335] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.178490][T23759] program syz.0.7275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 296.203723][T23748] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=204dc018, mo2=0002] [ 296.205393][T23762] loop3: detected capacity change from 0 to 512 [ 296.211807][T23748] System zones: 0-2, 18-18, 34-35 [ 296.228335][T23762] EXT4-fs: Ignoring removed i_version option [ 296.242713][T23764] loop2: detected capacity change from 0 to 512 [ 296.249125][T23762] EXT4-fs: Ignoring removed bh option [ 296.261199][T23766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7276'. [ 296.284771][T23748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.315692][T23762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.340287][T23748] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.361740][T23764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.374356][T23762] ext4 filesystem being mounted at /387/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 296.386595][T23764] ext4 filesystem being mounted at /231/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 296.416147][T23764] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.7272: corrupted inode contents [ 296.451534][T21669] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.461534][T18050] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.485577][T23764] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #2: comm syz.2.7272: mark_inode_dirty error [ 296.504009][T23764] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.7272: corrupted inode contents [ 296.516304][T23764] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.7272: mark_inode_dirty error [ 296.585307][T23780] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #2: comm syz.2.7272: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 296.585307][T23780] [ 296.643103][T23798] netlink: 'syz.0.7283': attribute type 19 has an invalid length. [ 296.660497][T23798] netlink: 172 bytes leftover after parsing attributes in process `syz.0.7283'. [ 296.753961][T23803] loop0: detected capacity change from 0 to 512 [ 296.770843][T23803] EXT4-fs: Ignoring removed oldalloc option [ 296.803170][T23803] EXT4-fs (loop0): 1 truncate cleaned up [ 296.818583][T23803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.833666][T20335] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.855286][T23810] syzkaller0: entered promiscuous mode [ 296.860870][T23810] syzkaller0: entered allmulticast mode [ 296.979302][T23813] loop2: detected capacity change from 0 to 2048 [ 296.995214][T23813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.007393][T23813] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.397994][T23823] netlink: 'syz.3.7290': attribute type 1 has an invalid length. [ 297.464906][T18995] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.515189][T23825] syzkaller0: entered promiscuous mode [ 297.520786][T23825] syzkaller0: entered allmulticast mode [ 297.648405][T23835] FAULT_INJECTION: forcing a failure. [ 297.648405][T23835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.661612][T23835] CPU: 1 UID: 0 PID: 23835 Comm: syz.4.7296 Not tainted syzkaller #0 PREEMPT(full) [ 297.661641][T23835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 297.661655][T23835] Call Trace: [ 297.661716][T23835] [ 297.661726][T23835] __dump_stack+0x1d/0x30 [ 297.661778][T23835] dump_stack_lvl+0x95/0xd0 [ 297.661898][T23835] dump_stack+0x15/0x1b [ 297.661921][T23835] should_fail_ex+0x263/0x280 [ 297.661941][T23835] should_fail+0xb/0x20 [ 297.661962][T23835] should_fail_usercopy+0x1a/0x20 [ 297.662015][T23835] _copy_to_iter+0xd2/0xea0 [ 297.662051][T23835] ? __skb_try_recv_from_queue+0x3d6/0x440 [ 297.662124][T23835] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 297.662192][T23835] __skb_datagram_iter+0xc6/0x680 [ 297.662221][T23835] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 297.662256][T23835] skb_copy_datagram_iter+0x3f/0x120 [ 297.662286][T23835] netlink_recvmsg+0x1a8/0x550 [ 297.662352][T23835] ? __pfx_netlink_recvmsg+0x10/0x10 [ 297.662395][T23835] sock_recvmsg+0x139/0x160 [ 297.662462][T23835] __sys_recvfrom+0x122/0x200 [ 297.662496][T23835] __x64_sys_recvfrom+0x76/0x90 [ 297.662520][T23835] x64_sys_call+0x2c0c/0x3020 [ 297.662547][T23835] do_syscall_64+0x12c/0x370 [ 297.662658][T23835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.662724][T23835] RIP: 0033:0x7f66430dcece [ 297.662742][T23835] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 297.662759][T23835] RSP: 002b:00007f6641b75e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 297.662794][T23835] RAX: ffffffffffffffda RBX: 00007f6641b776c0 RCX: 00007f66430dcece [ 297.662810][T23835] RDX: 0000000000001000 RSI: 00007f6641b76000 RDI: 0000000000000006 [ 297.662824][T23835] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 297.662838][T23835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 297.662852][T23835] R13: 00007f6641b75f58 R14: 00007f6641b76000 R15: 0000000000000000 [ 297.662873][T23835] [ 297.947020][T23839] ipvlan1: left promiscuous mode [ 297.954318][T23839] ipvlan1: left allmulticast mode [ 297.959619][T23839] veth0_vlan: left allmulticast mode [ 297.976308][T23839] bond3: left allmulticast mode [ 297.984369][T23844] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7297'. [ 298.002261][T23839] bond4: left allmulticast mode [ 298.009971][T23839] bond4: left promiscuous mode [ 298.014924][T23839] macsec2: left promiscuous mode [ 298.019994][T23839] macsec2: left allmulticast mode [ 298.030416][T23839] geneve3: left promiscuous mode [ 298.045441][ T57] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20002 - 0 [ 298.064375][ T57] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20002 - 0 [ 298.079555][T23841] syzkaller0: entered promiscuous mode [ 298.085522][T23841] syzkaller0: entered allmulticast mode [ 298.099975][ T57] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20002 - 0 [ 298.113298][ T57] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20002 - 0 [ 298.199149][T23854] syzkaller0: entered promiscuous mode [ 298.204673][T23854] syzkaller0: entered allmulticast mode [ 298.323661][T23862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.426664][T23865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.439778][T20549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.620144][ T50] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 298.635148][ T50] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1294 with error 28 [ 298.647750][ T50] EXT4-fs (loop3): This should not happen!! Data will be lost [ 298.647750][ T50] [ 298.657649][ T50] EXT4-fs (loop3): Total free blocks count 0 [ 298.663857][ T50] EXT4-fs (loop3): Free/Dirty block details [ 298.670494][ T50] EXT4-fs (loop3): free_blocks=2415919504 [ 298.676317][ T50] EXT4-fs (loop3): dirty_blocks=1296 [ 298.681733][ T50] EXT4-fs (loop3): Block reservation details [ 298.688035][ T50] EXT4-fs (loop3): i_reserved_data_blocks=81 [ 298.705610][T18050] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.908072][T23886] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7314'. [ 298.917898][T23886] syzkaller1: entered promiscuous mode [ 298.977792][T23887] set_capacity_and_notify: 2 callbacks suppressed [ 298.977879][T23887] loop3: detected capacity change from 0 to 256 [ 299.022758][T23886] syzkaller1: entered allmulticast mode [ 299.120189][T23887] FAT-fs (loop3): Directory bread(block 64) failed [ 299.126939][T23887] FAT-fs (loop3): Directory bread(block 65) failed [ 299.133753][T23887] FAT-fs (loop3): Directory bread(block 66) failed [ 299.140488][T23887] FAT-fs (loop3): Directory bread(block 67) failed [ 299.147120][T23887] FAT-fs (loop3): Directory bread(block 68) failed [ 299.153715][T23887] FAT-fs (loop3): Directory bread(block 69) failed [ 299.160607][T23887] FAT-fs (loop3): Directory bread(block 70) failed [ 299.167278][T23887] FAT-fs (loop3): Directory bread(block 71) failed [ 299.173988][T23887] FAT-fs (loop3): Directory bread(block 72) failed [ 299.180560][T23887] FAT-fs (loop3): Directory bread(block 73) failed [ 299.644880][T23896] syzkaller0: entered promiscuous mode [ 299.670475][T23896] syzkaller0: entered allmulticast mode [ 299.723544][T23898] loop0: detected capacity change from 0 to 4096 [ 299.741144][T23901] loop1: detected capacity change from 0 to 128 [ 299.770736][T23898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.798211][T23901] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 299.867611][T23901] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 299.899878][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 299.899892][ T28] audit: type=1326 audit(2000000021.520:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23897 comm="syz.0.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbeadc629 code=0x7ffc0000 [ 300.014437][T18995] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.023621][ T28] audit: type=1326 audit(2000000021.520:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23897 comm="syz.0.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbeadc629 code=0x7ffc0000 [ 300.070778][T23901] EXT4-fs error (device loop1): dx_make_map:1296: inode #2: block 20: comm syz.1.7320: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=0 [ 300.124491][ T28] audit: type=1326 audit(2000000021.520:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23897 comm="syz.0.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fdfbeadc629 code=0x7ffc0000 [ 300.158602][T23901] EXT4-fs error (device loop1) in do_split:2027: Corrupt filesystem [ 300.241650][ T28] audit: type=1326 audit(2000000021.520:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23897 comm="syz.0.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbeadc629 code=0x7ffc0000 [ 300.288834][T21669] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 300.325690][T23911] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7325'. [ 300.338271][ T28] audit: type=1326 audit(2000000021.520:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23897 comm="syz.0.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdfbeadc629 code=0x7ffc0000 [ 300.372399][T23911] syzkaller1: entered promiscuous mode [ 300.381777][T23911] syzkaller1: entered allmulticast mode [ 300.401691][ T28] audit: type=1326 audit(2000000021.520:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23897 comm="syz.0.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbeadc629 code=0x7ffc0000 [ 300.451460][ T28] audit: type=1326 audit(2000000021.520:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23897 comm="syz.0.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdfbeadc629 code=0x7ffc0000 [ 300.517818][T23913] netlink: 'syz.4.7326': attribute type 1 has an invalid length. [ 300.527172][ T28] audit: type=1326 audit(2000000021.520:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23897 comm="syz.0.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbeadc629 code=0x7ffc0000 [ 300.550943][ T28] audit: type=1326 audit(2000000021.594:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23897 comm="syz.0.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdfbeadc629 code=0x7ffc0000 [ 300.575656][ T28] audit: type=1326 audit(2000000021.594:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23897 comm="syz.0.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbeadc629 code=0x7ffc0000 [ 300.757384][T23933] tipc: Enabled bearer , priority 0 [ 300.764481][T23937] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23937 comm=syz.1.7336 [ 300.764635][T23933] syzkaller0: entered promiscuous mode [ 300.785194][T23933] syzkaller0: entered allmulticast mode [ 300.795209][T23937] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23937 comm=syz.1.7336 [ 300.812376][T23933] tipc: Resetting bearer [ 300.819178][T23932] tipc: Resetting bearer [ 300.825859][T23932] tipc: Disabling bearer [ 300.888134][T23942] loop1: detected capacity change from 0 to 512 [ 300.907938][T23942] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e018, mo2=0002] [ 300.979339][T23942] System zones: 1-12 [ 300.984074][T23942] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.7337: missing EA_INODE flag [ 301.020427][T23942] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 301.022724][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 301.038368][ C0] EXT4-fs (loop1): initial error at time 2000000022: ext4_xattr_inode_iget:441: inode 12 [ 301.042141][T23942] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.7337: error while reading EA inode 12 err=-117 [ 301.048369][ C0] EXT4-fs (loop1): last error at time 2000000022: ext4_xattr_inode_iget:441: inode 12 [ 301.071928][T23942] loop1: lost filesystem error report for type 5 error -117 [ 301.090455][T23942] EXT4-fs (loop1): 1 orphan inode deleted [ 301.123136][T23942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.175867][T23954] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7341'. [ 301.227820][T23954] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7341'. [ 301.259132][T21669] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.368379][T23956] macvtap1: entered promiscuous mode [ 301.374090][T23956] bridge0: entered promiscuous mode [ 301.386921][T23956] macvtap1: entered allmulticast mode [ 301.387414][T20335] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.404905][T23956] bridge0: entered allmulticast mode [ 301.425712][T23956] bridge0: port 3(macvtap1) entered blocking state [ 301.433769][T23956] bridge0: port 3(macvtap1) entered disabled state [ 301.449759][T23979] loop2: detected capacity change from 0 to 2048 [ 301.460411][T23956] bridge0: left allmulticast mode [ 301.467586][T23956] bridge0: left promiscuous mode [ 301.482395][T23979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.508401][T23972] 8021q: VLANs not supported on gre0 [ 301.533602][T20335] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.626298][T23969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.651656][T23969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.669293][T24004] loop0: detected capacity change from 0 to 1024 [ 301.718721][T23969] loop1: detected capacity change from 0 to 128 [ 301.728854][T24004] EXT4-fs: Ignoring removed orlov option [ 301.797141][T24004] EXT4-fs: Ignoring removed nobh option [ 301.797901][T23969] FAT-fs (loop1): Directory bread(block 32) failed [ 301.810612][T23969] FAT-fs (loop1): Directory bread(block 33) failed [ 301.820846][T23969] FAT-fs (loop1): Directory bread(block 34) failed [ 301.828936][T23969] FAT-fs (loop1): Directory bread(block 35) failed [ 301.838014][T24015] loop3: detected capacity change from 0 to 256 [ 301.845315][T23969] FAT-fs (loop1): Directory bread(block 36) failed [ 301.845357][T24016] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7359'. [ 301.867590][T24004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.881209][T23969] FAT-fs (loop1): Directory bread(block 37) failed [ 301.889691][T23969] FAT-fs (loop1): Directory bread(block 38) failed [ 301.896876][T23969] FAT-fs (loop1): Directory bread(block 39) failed [ 301.905062][T23969] FAT-fs (loop1): Directory bread(block 40) failed [ 301.912238][T23969] FAT-fs (loop1): Directory bread(block 41) failed [ 301.953848][T18995] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.971573][T24015] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7358'. [ 302.307936][T23969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7347'. [ 302.571497][T24035] loop0: detected capacity change from 0 to 4096 [ 302.614320][T24035] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.737821][T18995] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.845101][T24050] loop3: detected capacity change from 0 to 512 [ 302.874474][T24050] EXT4-fs: Ignoring removed bh option [ 302.929424][T24050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.952878][T24050] ext4 filesystem being mounted at /407/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 302.981244][T18050] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.084146][T24072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.163386][T18050] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.173190][T24082] tipc: Enabled bearer , priority 10 [ 303.224985][T24086] syzkaller0: entered promiscuous mode [ 303.233025][T24086] syzkaller0: entered allmulticast mode [ 303.311476][T24094] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7389'. [ 303.321146][T24094] syzkaller1: entered promiscuous mode [ 303.326691][T24094] syzkaller1: entered allmulticast mode [ 303.359768][T24098] netlink: 'syz.3.7391': attribute type 1 has an invalid length. [ 303.412821][T24100] sctp: [Deprecated]: syz.0.7392 (pid 24100) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.412821][T24100] Use struct sctp_sack_info instead [ 303.456799][T24102] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 303.490549][T24106] EXT4-fs: Ignoring removed i_version option [ 303.496849][T24105] syzkaller0: entered promiscuous mode [ 303.509333][T24105] syzkaller0: entered allmulticast mode [ 303.521908][T24106] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.700205][T24121] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 303.728413][T24121] FAT-fs (loop4): Filesystem has been set read-only [ 303.738658][T24121] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 303.739629][T24126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=24126 comm=syz.3.7401 [ 303.765972][T24121] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 303.780626][T24121] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 303.781612][T24126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24126 comm=syz.3.7401 [ 303.791146][T24119] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 303.813887][T24121] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 303.852088][T24121] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 303.859493][T24132] netlink: 88 bytes leftover after parsing attributes in process `syz.3.7402'. [ 303.862774][T24119] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 303.881736][T24121] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 303.892170][T24121] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 303.905840][T24127] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 303.920940][T24132] syzkaller1: entered promiscuous mode [ 303.926395][T24132] syzkaller1: entered allmulticast mode [ 303.948982][T24127] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 303.961998][T24127] EXT4-fs (loop1): This should not happen!! Data will be lost [ 303.961998][T24127] [ 303.972038][T24127] EXT4-fs (loop1): Total free blocks count 0 [ 303.978110][T24127] EXT4-fs (loop1): Free/Dirty block details [ 303.984118][T24127] EXT4-fs (loop1): free_blocks=2415919504 [ 303.989932][T24127] EXT4-fs (loop1): dirty_blocks=2896 [ 303.995346][T24127] EXT4-fs (loop1): Block reservation details [ 304.001352][T24127] EXT4-fs (loop1): i_reserved_data_blocks=181 [ 304.053949][ T50] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 832 with error 28 [ 304.124502][T24139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7405'. [ 304.180566][T24145] set_capacity_and_notify: 4 callbacks suppressed [ 304.180584][T24145] loop1: detected capacity change from 0 to 512 [ 304.233371][T24145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 304.259558][T24139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7405'. [ 304.368303][T24159] loop0: detected capacity change from 0 to 512 [ 304.375272][T24159] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 304.390992][T24159] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 304.418421][T24159] EXT4-fs (loop0): 1 truncate cleaned up [ 304.425749][T24159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.486430][T18995] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.498119][T24172] loop3: detected capacity change from 0 to 512 [ 304.510277][T24172] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 304.513005][T24174] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 304.526648][T24174] SELinux: failed to load policy [ 304.533904][T24172] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 304.541990][T24172] System zones: 1-2, 4-12, 8-8 [ 304.547215][T24172] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.7413: iget: bad i_size value: 38620345925642 [ 304.560016][T24172] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 304.562755][T24172] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.7413: couldn't read orphan inode 15 (err -117) [ 304.571913][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 304.571950][ C1] EXT4-fs (loop3): initial error at time 2000000026: ext4_orphan_get:1391: inode 15 [ 304.571981][ C1] EXT4-fs (loop3): last error at time 2000000026: ext4_orphan_get:1391: inode 15 [ 304.577856][T24174] loop0: detected capacity change from 0 to 256 [ 304.593922][T24172] loop3: lost filesystem error report for type 5 error -117 [ 304.600480][T24177] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7415'. [ 304.632567][T24172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.637777][T24177] syzkaller1: entered promiscuous mode [ 304.650621][T24177] syzkaller1: entered allmulticast mode [ 304.715714][T24178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.738198][T24178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.755633][T24180] loop4: detected capacity change from 0 to 4096 [ 304.814889][T24180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.849848][T20549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.941110][T24186] loop0: detected capacity change from 0 to 4096 [ 304.980213][T24186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.996577][ T30] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:1: bg 0: block 5: invalid block bitmap [ 305.009367][ T30] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 305.022043][ T30] EXT4-fs (loop3): This should not happen!! Data will be lost [ 305.022043][ T30] [ 305.022561][T21669] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.031709][ T30] EXT4-fs (loop3): Total free blocks count 0 [ 305.057259][ T30] EXT4-fs (loop3): Free/Dirty block details [ 305.063219][ T30] EXT4-fs (loop3): free_blocks=0 [ 305.068186][ T30] EXT4-fs (loop3): dirty_blocks=16000 [ 305.074112][T18995] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.074866][ T30] EXT4-fs (loop3): Block reservation details [ 305.089343][ T30] EXT4-fs (loop3): i_reserved_data_blocks=16000 [ 305.167322][T24201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37754 sclass=netlink_route_socket pid=24201 comm=syz.0.7421 [ 305.212799][T24206] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7426'. [ 305.258562][T24210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7427'. [ 305.270152][T24208] geneve2: left promiscuous mode [ 305.275406][T24208] geneve2: left allmulticast mode [ 305.281437][T24208] bond1: left allmulticast mode [ 305.287352][T24210] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7427'. [ 305.296745][T24208] bond2: left allmulticast mode [ 305.311884][T24208] bond4: left allmulticast mode [ 305.332859][T24208] bond5: left allmulticast mode [ 305.355292][T24208] tipc: Resetting bearer [ 305.378293][T24208] syzkaller0: left promiscuous mode [ 305.394268][T24208] syzkaller0: left allmulticast mode [ 305.407821][T24208] bond7: left allmulticast mode [ 305.412807][ T30] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.421842][ T30] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.431202][T24211] syzkaller1: entered promiscuous mode [ 305.436979][T24211] syzkaller1: entered allmulticast mode [ 305.443829][ T30] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.462142][ T30] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.551601][T24229] loop4: detected capacity change from 0 to 1024 [ 305.558416][T24229] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 305.570381][T24229] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 305.607182][T24229] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 305.618575][T24229] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 305.622809][T10690] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 305.641981][T24229] EXT4-fs error (device loop4): ext4_get_journal_inode:5863: inode #17: comm syz.4.7434: iget: bad i_size value: 4398046511204 [ 305.660524][T24233] syzkaller0: entered promiscuous mode [ 305.666129][T24233] syzkaller0: entered allmulticast mode [ 305.668630][T24229] loop4: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 305.677554][T24229] EXT4-fs (loop4): no journal found [ 305.686725][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 305.686743][ C1] EXT4-fs (loop4): initial error at time 2000000027: ext4_get_journal_inode:5863: inode 17 [ 305.686788][ C1] EXT4-fs (loop4): last error at time 2000000027: ext4_get_journal_inode:5863: inode 17 [ 306.045913][ T28] kauditd_printk_skb: 172 callbacks suppressed [ 306.045929][ T28] audit: type=1400 audit(2000000028.008:1684): avc: denied { ioctl } for pid=24257 comm="syz.4.7444" path="socket:[86416]" dev="sockfs" ino=86416 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 306.079533][T24259] loop4: detected capacity change from 0 to 512 [ 306.090832][T24259] EXT4-fs: dax option not supported [ 306.129998][T24259] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 306.157733][ T28] audit: type=1400 audit(2000000028.103:1685): avc: denied { mount } for pid=24257 comm="syz.4.7444" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 306.201240][T24261] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7444'. [ 306.219454][T24261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7444'. [ 306.430114][T24276] tipc: Enabling of bearer rejected, failed to enable media [ 306.438856][T24276] syzkaller0: entered promiscuous mode [ 306.465007][T24278] tmpfs: Bad value for 'mpol' [ 306.471946][T24276] syzkaller0: entered allmulticast mode [ 306.589209][ T28] audit: type=1400 audit(2000000028.575:1686): avc: denied { getopt } for pid=24287 comm="syz.0.7458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 306.861204][T24303] FAULT_INJECTION: forcing a failure. [ 306.861204][T24303] name failslab, interval 1, probability 0, space 0, times 0 [ 306.897306][T24303] CPU: 0 UID: 0 PID: 24303 Comm: syz.0.7462 Not tainted syzkaller #0 PREEMPT(full) [ 306.897346][T24303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 306.897358][T24303] Call Trace: [ 306.897364][T24303] [ 306.897372][T24303] __dump_stack+0x1d/0x30 [ 306.897396][T24303] dump_stack_lvl+0x95/0xd0 [ 306.897454][T24303] dump_stack+0x15/0x1b [ 306.897476][T24303] should_fail_ex+0x263/0x280 [ 306.897498][T24303] should_failslab+0x8c/0xb0 [ 306.897516][T24303] __kvmalloc_node_noprof+0x155/0x650 [ 306.897597][T24303] ? nf_hook_entries_grow+0x1cb/0x460 [ 306.897628][T24303] nf_hook_entries_grow+0x1cb/0x460 [ 306.897706][T24303] __nf_register_net_hook+0x18e/0x480 [ 306.897735][T24303] nf_register_net_hook+0x88/0x130 [ 306.897767][T24303] nf_register_net_hooks+0x44/0x150 [ 306.897792][T24303] nf_ct_netns_do_get+0x188/0x3a0 [ 306.897826][T24303] ? __bitmap_set+0xe2/0x100 [ 306.897854][T24303] nf_ct_netns_get+0xf1/0x2c0 [ 306.897876][T24303] nft_redir_init+0x130/0x150 [ 306.897948][T24303] nf_tables_newrule+0xedf/0x16e0 [ 306.897990][T24303] nfnetlink_rcv+0xc1e/0x1720 [ 306.898032][T24303] netlink_unicast+0x5c0/0x690 [ 306.898143][T24303] netlink_sendmsg+0x5c8/0x6f0 [ 306.898174][T24303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.898198][T24303] ____sys_sendmsg+0x5af/0x600 [ 306.898223][T24303] ___sys_sendmsg+0x195/0x1e0 [ 306.898294][T24303] __x64_sys_sendmsg+0xd4/0x160 [ 306.898326][T24303] x64_sys_call+0x194c/0x3020 [ 306.898410][T24303] do_syscall_64+0x12c/0x370 [ 306.898445][T24303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.898467][T24303] RIP: 0033:0x7fdfbeadc629 [ 306.898482][T24303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.898577][T24303] RSP: 002b:00007fdfbd52f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.898617][T24303] RAX: ffffffffffffffda RBX: 00007fdfbed55fa0 RCX: 00007fdfbeadc629 [ 306.898633][T24303] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 306.898648][T24303] RBP: 00007fdfbd52f090 R08: 0000000000000000 R09: 0000000000000000 [ 306.898721][T24303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 306.898734][T24303] R13: 00007fdfbed56038 R14: 00007fdfbed55fa0 R15: 00007ffe6c22f818 [ 306.898757][T24303] [ 307.304143][ T28] audit: type=1400 audit(2000000029.331:1687): avc: denied { write } for pid=24312 comm="syz.0.7468" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 307.339501][T24310] bond5: entered allmulticast mode [ 307.346092][T24258] syz.4.7444 (24258) used greatest stack depth: 6072 bytes left [ 307.392024][ T28] audit: type=1400 audit(2000000029.352:1688): avc: denied { create } for pid=24312 comm="syz.0.7468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 307.406601][T24321] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7471'. [ 307.457104][T24321] bond1 (unregistering): Released all slaves [ 307.461304][T24334] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24334 comm=syz.1.7471 [ 307.476839][T24318] syzkaller0: entered promiscuous mode [ 307.482435][T24318] syzkaller0: entered allmulticast mode [ 307.493649][T24318] 0: reclassify loop, rule prio 0, protocol 800 [ 307.503815][T24333] loop3: detected capacity change from 0 to 1024 [ 307.505525][T24330] syzkaller0: entered promiscuous mode [ 307.519624][ T28] audit: type=1400 audit(2000000029.551:1689): avc: denied { ioctl } for pid=24317 comm="syz.2.7469" path="socket:[87110]" dev="sockfs" ino=87110 ioctlcmd=0x1279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 307.534616][T24330] syzkaller0: entered allmulticast mode [ 307.566023][T24333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.625097][T24346] loop1: detected capacity change from 0 to 1024 [ 307.638020][T18050] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.647494][T24346] EXT4-fs: inline encryption not supported [ 307.675746][T24346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.710587][T24357] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 307.723994][T24346] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4223: comm syz.1.7476: Allocating blocks 497-513 which overlap fs metadata [ 307.738659][T24357] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 307.738785][T24357] EXT4-fs: failed to create workqueue [ 307.754049][T24357] EXT4-fs (loop2): mount failed [ 307.757512][T24346] EXT4-fs (loop1): Remounting filesystem read-only [ 307.805254][T21669] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.808117][T24364] bond2: entered allmulticast mode [ 307.820476][T24367] tipc: Enabling of bearer rejected, failed to enable media [ 307.856367][T24369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=24369 comm=syz.1.7484 [ 307.882980][ T28] audit: type=1400 audit(2000000029.940:1690): avc: denied { ioctl } for pid=24372 comm="syz.3.7486" path="socket:[86638]" dev="sockfs" ino=86638 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 307.979701][ T28] audit: type=1400 audit(2000000030.034:1691): avc: denied { execute_no_trans } for pid=24380 comm="syz.1.7489" path=2F6D656D66643A5B0BDB58AE5B1AADD16D64C8854858A9250C1A2CE29CB4D7BCF1B386E22F4F70D0A2821E623B28B5E16AC80CE58917EE7C4A903D35EDCFD3AED20711A9A55EFFF595D271258ADA05202864656C6574656429 dev="tmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 308.101742][T24403] tipc: Enabling of bearer rejected, failed to enable media [ 308.145950][T24407] bond8: entered allmulticast mode [ 308.223523][ T28] audit: type=1404 audit(2000000030.286:1692): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 308.254100][ T28] audit: type=1400 audit(2000000030.318:1693): avc: denied { ioctl } for pid=24413 comm="syz.2.7500" path="/dev/input/event2" dev="devtmpfs" ino=244 ioctlcmd=0x2408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 308.880956][T24441] __nla_validate_parse: 5 callbacks suppressed [ 308.880973][T24441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7512'. [ 308.927004][T24447] 8021q: adding VLAN 0 to HW filter on device bond1 [ 308.962075][T24454] IPv6: sit1: Disabled Multicast RS [ 309.310715][T24509] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7540'. [ 309.320012][T24509] netem: unknown loss type 13 [ 309.324780][T24509] netem: change failed [ 309.730118][T24520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7547'. [ 309.739230][T24520] netlink: 'syz.2.7547': attribute type 7 has an invalid length. [ 309.747209][T24520] netlink: 'syz.2.7547': attribute type 8 has an invalid length. [ 309.755177][T24520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7547'. [ 309.946135][T24533] FAULT_INJECTION: forcing a failure. [ 309.946135][T24533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.959373][T24533] CPU: 0 UID: 0 PID: 24533 Comm: syz.2.7553 Not tainted syzkaller #0 PREEMPT(full) [ 309.959398][T24533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 309.959410][T24533] Call Trace: [ 309.959475][T24533] [ 309.959482][T24533] __dump_stack+0x1d/0x30 [ 309.959579][T24533] dump_stack_lvl+0x95/0xd0 [ 309.959603][T24533] dump_stack+0x15/0x1b [ 309.959624][T24533] should_fail_ex+0x263/0x280 [ 309.959652][T24533] should_fail+0xb/0x20 [ 309.959672][T24533] should_fail_usercopy+0x1a/0x20 [ 309.959696][T24533] strncpy_from_user+0x27/0x250 [ 309.959726][T24533] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 309.959793][T24533] do_getname+0x59/0x1c0 [ 309.959818][T24533] getname_flags+0x1d/0x30 [ 309.959840][T24533] do_sys_openat2+0x60/0x130 [ 309.959902][T24533] __x64_sys_openat+0xf2/0x120 [ 309.959930][T24533] x64_sys_call+0x1e39/0x3020 [ 309.959964][T24533] do_syscall_64+0x12c/0x370 [ 309.960042][T24533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.960126][T24533] RIP: 0033:0x7fa8a2dacece [ 309.960140][T24533] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 309.960160][T24533] RSP: 002b:00007fa8a1846b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 309.960208][T24533] RAX: ffffffffffffffda RBX: 00007fa8a18476c0 RCX: 00007fa8a2dacece [ 309.960222][T24533] RDX: 0000000000080100 RSI: 00007fa8a1846c00 RDI: ffffffffffffff9c [ 309.960235][T24533] RBP: 00007fa8a1846c00 R08: 0000000000000000 R09: 0000000000000000 [ 309.960247][T24533] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 309.960286][T24533] R13: 00007fa8a3066038 R14: 00007fa8a3065fa0 R15: 00007ffdef8bdcc8 [ 309.960307][T24533] [ 310.042313][T24535] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7554'. [ 310.090165][T24539] syzkaller0: entered promiscuous mode [ 310.156130][T24539] syzkaller0: entered allmulticast mode [ 310.203575][T24551] syzkaller0: entered promiscuous mode [ 310.219524][T24551] syzkaller0: entered allmulticast mode [ 310.262237][T24565] netlink: 'syz.1.7566': attribute type 1 has an invalid length. [ 310.270968][T24565] netlink: 'syz.1.7566': attribute type 1 has an invalid length. [ 310.325883][T24575] syzkaller0: entered promiscuous mode [ 310.331451][T24575] syzkaller0: entered allmulticast mode [ 310.389372][T24578] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.7571'. [ 310.398543][T24578] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 310.422316][T24580] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7572'. [ 310.812944][T24589] syzkaller0: Caught tx_queue_len zero misconfig [ 310.819642][T24589] netlink: 'syz.3.7576': attribute type 1 has an invalid length. [ 310.839315][ T28] kauditd_printk_skb: 472 callbacks suppressed [ 310.839329][ T28] audit: type=1400 audit(2000000289.036:2166): avc: denied { read write } for pid=18050 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 310.888971][ T28] audit: type=1400 audit(2000000289.078:2167): avc: denied { create } for pid=24590 comm="syz.3.7577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 310.910696][ T28] audit: type=1400 audit(2000000289.089:2168): avc: denied { read write } for pid=18050 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 310.948456][ T28] audit: type=1400 audit(2000000289.089:2169): avc: denied { create } for pid=24592 comm="syz.3.7578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 310.970168][ T28] audit: type=1400 audit(2000000289.089:2170): avc: denied { read write } for pid=20335 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 311.010129][ T28] audit: type=1400 audit(2000000289.183:2171): avc: denied { read write } for pid=18050 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 311.035002][ T28] audit: type=1400 audit(2000000289.183:2172): avc: denied { create } for pid=24594 comm="syz.2.7579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 311.054888][ T28] audit: type=1400 audit(2000000289.204:2173): avc: denied { create } for pid=24596 comm="syz.3.7580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 311.074716][ T28] audit: type=1400 audit(2000000289.204:2174): avc: denied { prog_load } for pid=24596 comm="syz.3.7580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 311.094921][ T28] audit: type=1400 audit(2000000289.204:2175): avc: denied { create } for pid=24596 comm="syz.3.7580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 311.139303][T24604] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7583'. [ 311.214427][T24614] FAULT_INJECTION: forcing a failure. [ 311.214427][T24614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.227936][T24614] CPU: 0 UID: 0 PID: 24614 Comm: syz.0.7586 Not tainted syzkaller #0 PREEMPT(full) [ 311.228036][T24614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 311.228050][T24614] Call Trace: [ 311.228058][T24614] [ 311.228065][T24614] __dump_stack+0x1d/0x30 [ 311.228094][T24614] dump_stack_lvl+0x95/0xd0 [ 311.228120][T24614] dump_stack+0x15/0x1b [ 311.228217][T24614] should_fail_ex+0x263/0x280 [ 311.228242][T24614] should_fail+0xb/0x20 [ 311.228325][T24614] should_fail_usercopy+0x1a/0x20 [ 311.228350][T24614] _copy_from_iter+0xcf/0xea0 [ 311.228376][T24614] ? __alloc_skb+0x4f6/0x690 [ 311.228407][T24614] ? __alloc_skb+0x200/0x690 [ 311.228502][T24614] netlink_sendmsg+0x4ae/0x6f0 [ 311.228535][T24614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.228560][T24614] ____sys_sendmsg+0x5af/0x600 [ 311.228663][T24614] ___sys_sendmsg+0x195/0x1e0 [ 311.228705][T24614] __x64_sys_sendmsg+0xd4/0x160 [ 311.228769][T24614] x64_sys_call+0x194c/0x3020 [ 311.228796][T24614] do_syscall_64+0x12c/0x370 [ 311.228825][T24614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.228850][T24614] RIP: 0033:0x7fdfbeadc629 [ 311.228868][T24614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.228894][T24614] RSP: 002b:00007fdfbd52f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.228978][T24614] RAX: ffffffffffffffda RBX: 00007fdfbed55fa0 RCX: 00007fdfbeadc629 [ 311.228995][T24614] RDX: 0000000000040014 RSI: 0000200000000140 RDI: 0000000000000004 [ 311.229012][T24614] RBP: 00007fdfbd52f090 R08: 0000000000000000 R09: 0000000000000000 [ 311.229095][T24614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.229111][T24614] R13: 00007fdfbed56038 R14: 00007fdfbed55fa0 R15: 00007ffe6c22f818 [ 311.229134][T24614] [ 311.229737][T24614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7586'. [ 311.420332][T24614] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7586'. [ 311.429780][T24615] syzkaller0: Caught tx_queue_len zero misconfig [ 311.430542][T24617] netlink: 'syz.3.7587': attribute type 1 has an invalid length. [ 311.456305][T24619] IPv6: NLM_F_CREATE should be specified when creating new route [ 311.472716][T24626] FAULT_INJECTION: forcing a failure. [ 311.472716][T24626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.510418][T24626] CPU: 1 UID: 0 PID: 24626 Comm: syz.2.7589 Not tainted syzkaller #0 PREEMPT(full) [ 311.510444][T24626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 311.510462][T24626] Call Trace: [ 311.510469][T24626] [ 311.510477][T24626] __dump_stack+0x1d/0x30 [ 311.510523][T24626] dump_stack_lvl+0x95/0xd0 [ 311.510551][T24626] dump_stack+0x15/0x1b [ 311.510615][T24626] should_fail_ex+0x263/0x280 [ 311.510639][T24626] should_fail+0xb/0x20 [ 311.510659][T24626] should_fail_usercopy+0x1a/0x20 [ 311.510683][T24626] _copy_to_user+0x20/0xa0 [ 311.510761][T24626] bpf_verifier_vlog+0x36e/0x5a0 [ 311.510823][T24626] __btf_verifier_log+0x7f/0xb0 [ 311.510843][T24626] ? should_fail_ex+0xd9/0x280 [ 311.510892][T24626] ? btf_parse_hdr+0x21d/0x3c0 [ 311.510995][T24626] btf_parse_hdr+0x22f/0x3c0 [ 311.511048][T24626] btf_new_fd+0x25a/0x7d0 [ 311.511066][T24626] ? ns_capable+0x7c/0xb0 [ 311.511085][T24626] bpf_btf_load+0x112/0x130 [ 311.511110][T24626] __sys_bpf+0x3d8/0x7e0 [ 311.511137][T24626] __x64_sys_bpf+0x41/0x50 [ 311.511242][T24626] x64_sys_call+0x10cb/0x3020 [ 311.511339][T24626] do_syscall_64+0x12c/0x370 [ 311.511457][T24626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.511479][T24626] RIP: 0033:0x7fa8a2dec629 [ 311.511554][T24626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.511570][T24626] RSP: 002b:00007fa8a1847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 311.511596][T24626] RAX: ffffffffffffffda RBX: 00007fa8a3065fa0 RCX: 00007fa8a2dec629 [ 311.511609][T24626] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 311.511623][T24626] RBP: 00007fa8a1847090 R08: 0000000000000000 R09: 0000000000000000 [ 311.511643][T24626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 311.511722][T24626] R13: 00007fa8a3066038 R14: 00007fa8a3065fa0 R15: 00007ffdef8bdcc8 [ 311.511784][T24626] [ 311.917254][T24647] Invalid option length (1810) for dns_resolver key [ 312.527321][T24672] syzkaller0: entered promiscuous mode [ 312.533041][T24672] syzkaller0: entered allmulticast mode [ 312.688913][T24679] FAULT_INJECTION: forcing a failure. [ 312.688913][T24679] name failslab, interval 1, probability 0, space 0, times 0 [ 312.701789][T24679] CPU: 1 UID: 0 PID: 24679 Comm: syz.4.7610 Not tainted syzkaller #0 PREEMPT(full) [ 312.701903][T24679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 312.701917][T24679] Call Trace: [ 312.701925][T24679] [ 312.701933][T24679] __dump_stack+0x1d/0x30 [ 312.701957][T24679] dump_stack_lvl+0x95/0xd0 [ 312.702026][T24679] dump_stack+0x15/0x1b [ 312.702049][T24679] should_fail_ex+0x263/0x280 [ 312.702080][T24679] should_failslab+0x8c/0xb0 [ 312.702099][T24679] kmem_cache_alloc_noprof+0x66/0x400 [ 312.702122][T24679] ? alloc_empty_file+0x76/0x200 [ 312.702196][T24679] alloc_empty_file+0x76/0x200 [ 312.702218][T24679] path_openat+0x65/0x2050 [ 312.702253][T24679] ? _parse_integer_limit+0x170/0x190 [ 312.702291][T24679] ? _parse_integer+0x27/0x40 [ 312.702321][T24679] ? kstrtoull+0x111/0x140 [ 312.702394][T24679] ? kstrtouint+0x76/0xc0 [ 312.702428][T24679] do_file_open+0x16c/0x290 [ 312.702512][T24679] do_sys_openat2+0x94/0x130 [ 312.702541][T24679] __x64_sys_openat+0xf2/0x120 [ 312.702575][T24679] x64_sys_call+0x1e39/0x3020 [ 312.702621][T24679] do_syscall_64+0x12c/0x370 [ 312.702650][T24679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.702717][T24679] RIP: 0033:0x7f66430dcece [ 312.702731][T24679] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 312.702769][T24679] RSP: 002b:00007f6641b76b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 312.702791][T24679] RAX: ffffffffffffffda RBX: 00007f6641b776c0 RCX: 00007f66430dcece [ 312.702808][T24679] RDX: 0000000000080100 RSI: 00007f6641b76c00 RDI: ffffffffffffff9c [ 312.702824][T24679] RBP: 00007f6641b76c00 R08: 0000000000000000 R09: 0000000000000000 [ 312.702839][T24679] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 312.702853][T24679] R13: 00007f6643396038 R14: 00007f6643395fa0 R15: 00007ffe9ad39088 [ 312.702947][T24679] [ 312.975329][T24695] syzkaller0: entered promiscuous mode [ 312.980896][T24695] syzkaller0: entered allmulticast mode [ 313.219540][T24722] ================================================================== [ 313.227981][T24722] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter [ 313.235339][T24722] [ 313.237656][T24722] write to 0xffff888152cd6000 of 4096 bytes by task 24721 on cpu 1: [ 313.245619][T24722] _copy_from_iter+0x258/0xea0 [ 313.250374][T24722] copy_page_from_iter+0x178/0x2a0 [ 313.255483][T24722] process_vm_rw+0x6ad/0x9c0 [ 313.260066][T24722] __x64_sys_process_vm_writev+0x78/0x90 [ 313.265692][T24722] x64_sys_call+0x1592/0x3020 [ 313.270357][T24722] do_syscall_64+0x12c/0x370 [ 313.274938][T24722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.280819][T24722] [ 313.283129][T24722] write to 0xffff888152cd6000 of 4096 bytes by task 24722 on cpu 0: [ 313.291085][T24722] _copy_from_iter+0x258/0xea0 [ 313.295837][T24722] copy_page_from_iter+0x178/0x2a0 [ 313.300937][T24722] process_vm_rw+0x6ad/0x9c0 [ 313.305515][T24722] __x64_sys_process_vm_writev+0x78/0x90 [ 313.311139][T24722] x64_sys_call+0x1592/0x3020 [ 313.315808][T24722] do_syscall_64+0x12c/0x370 [ 313.320390][T24722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.326269][T24722] [ 313.328573][T24722] Reported by Kernel Concurrency Sanitizer on: [ 313.334705][T24722] CPU: 0 UID: 0 PID: 24722 Comm: syz.1.7631 Not tainted syzkaller #0 PREEMPT(full) [ 313.344060][T24722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 313.354096][T24722] ================================================================== [ 313.379626][T24721] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 315.130218][ T10] page_pool_release_retry() stalled pool shutdown: id 207, 51 inflight 60 sec