last executing test programs: 10.921498307s ago: executing program 2 (id=2061): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1000400, &(0x7f00000000c0), 0x6, 0x588, &(0x7f0000000300)="$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") r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="1200000005000000080000000900000000000000", @ANYRES64=r2, @ANYBLOB="f304c1580de8c787f35f4f6688a95788f1a72219ec51ed0c8306005ed3edd6b8a98f5efd43b57615b65651f825d57aa457565bb37f6f50580731129df84769c75ac778081b40b3f44065eec87384fb6bd9482ab9fed010c647d76ef3b440fdd986fbafb7aacdc7985f2935961374a96fe79d5e5649e7cef376bc8755bc889cbb8ddebf027d8d48f22c4781f8ba", @ANYRESDEC=r1], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f00000009c0), &(0x7f00000009c0)=@buf="05101b2c8e07000000000000002ae4ee6e684917fb7308b052ccf59622d605820d35cdbecaf332ccf81d286a5ff998fd34fb6e490e75527045f5516728f4cea9681f438ebdc6c40a2b7f77c3c6fa7f6822af6ea893bd3900343d1527c2be3f1adf109fb078639771b5af2a2688ece3685269355675e5b846ae391076c74e262c4538c95c5e03d15386ede24d0bb238cf74975e17e4a69296dedd5791f9c7ae8891a7559a2e52f79486faf43706ace9671e"}, 0x20) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000000)=[{r4, 0x207}], 0x1, 0x0, 0x0, 0x0) 10.490892052s ago: executing program 2 (id=2068): write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) socketpair(0x27, 0x6, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@user_xattr}, {@minixdf}, {@mblk_io_submit}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) flistxattr(r0, 0x0, 0x0) (fail_nth: 1) 9.967126263s ago: executing program 2 (id=2077): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000006000000010001004900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) (rerun: 64) 9.771037385s ago: executing program 2 (id=2085): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 9.463795412s ago: executing program 2 (id=2091): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) pipe(&(0x7f0000000080)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xb}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x8, @loopback}}, 0x100, 0x0, 0x300, 0x0, 0x54}, 0x9c) mount(0x0, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000dc0)='./file1\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000e00)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d9c74f1287cdf8c5a9e6d02b5e609212ce08faff3b37c23485a609854d9848967d9de298bb2c772c55403b88c8bdcfd63b114f39d85cdc763bd533e8c5374f014fdab8abf555ff96e9d7713fb381b0ad85c1d4b503f412750d7ef5b1ddf354a8b58bb52f2c9ab3098be3693572d34e23a31bbb39b01dca5bcab9ac704f962ca981c6799fa2d0b72574f991341f63a2ec0c4710ad7da1941597905ad042775d42adea3c148005c5c0cd191126ad3e59dc518642a69fd86dd8ebd77777049d3ee0ddbe692dc58d799ff412a33afc0", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',']) mq_timedreceive(r1, &(0x7f0000000c80)=""/116, 0x74, 0x7, &(0x7f0000000d00)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000480)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES64=0x0], 0xfe, 0x19c, &(0x7f0000000200)="$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") r6 = openat(0xffffffffffffff9c, 0x0, 0x183042, 0x15) pwrite64(r6, &(0x7f0000000140)='K', 0x1, 0xe7c) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x20040800) 8.862818897s ago: executing program 2 (id=2101): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) (async) syz_emit_ethernet(0x62, &(0x7f0000000c40)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x2c, 0x2f, 0x0, @remote, @local, {[@dstopts={0x0, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x8001}, @jumbo={0xc2, 0x4, 0x4}]}], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\x103q}2\xa18/\xd5\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7R\x00\x00\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\xf2!\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\x02\xeaQy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xdaxO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xf0P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x3) ftruncate(r3, 0x80079a0) (async) unshare(0x2040400) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) open$dir(0x0, 0xb00, 0x142) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r4, 0xfffffffffffffffd, 0x58) (async) splice(r3, 0x0, r2, 0x0, 0x1002, 0x6) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r1, 0x0) (async) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = accept(r1, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000000)='\x00', 0x1, 0x44000850, 0x0, 0x0) 8.714606305s ago: executing program 32 (id=2101): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) (async) syz_emit_ethernet(0x62, &(0x7f0000000c40)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x2c, 0x2f, 0x0, @remote, @local, {[@dstopts={0x0, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x8001}, @jumbo={0xc2, 0x4, 0x4}]}], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\x103q}2\xa18/\xd5\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7R\x00\x00\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\xf2!\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\x02\xeaQy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xdaxO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xf0P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x3) ftruncate(r3, 0x80079a0) (async) unshare(0x2040400) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) open$dir(0x0, 0xb00, 0x142) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r4, 0xfffffffffffffffd, 0x58) (async) splice(r3, 0x0, r2, 0x0, 0x1002, 0x6) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r1, 0x0) (async) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = accept(r1, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000000)='\x00', 0x1, 0x44000850, 0x0, 0x0) 2.529651484s ago: executing program 0 (id=2178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410020001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2.126811737s ago: executing program 0 (id=2187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b80000000001050500000000003a00000a0000053c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040020010000000000000000000000000001080007400000000024000680140004"], 0xb8}}, 0x0) 2.038897552s ago: executing program 0 (id=2189): r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.948276087s ago: executing program 3 (id=2192): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYRES64=r0], 0x64}, 0x1, 0x0, 0x0, 0x48011}, 0x0) 1.808656685s ago: executing program 3 (id=2195): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000100)) syz_genetlink_get_family_id$team(&(0x7f0000000140), r1) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r4, 0x0, 0x1}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r7, 0x8954, &(0x7f0000000240)={{0x2, 0x4e24, @empty}, {0x1}, 0x0, {0x2, 0x4e22, @empty}, 'lo\x00'}) syz_usb_disconnect(0xffffffffffffffff) setpgid(r5, r5) setpgid(r5, 0x0) wait4(r5, 0x0, 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="0100253d7000fbdbdf25040000000800020005000023"], 0x1c}, 0x1, 0x0, 0x0, 0x40400c4}, 0x8842) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r9, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x40040c4}, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') preadv2(r10, &(0x7f0000000140)=[{0x0}], 0x1, 0xfffffff0, 0x7fffffff, 0x1c) syz_open_procfs$namespace(r5, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010000000904000001020a0000052406000105240000000d240f0100000000000000000006241a00000e090581031000000000090401", @ANYBLOB="8afa0a"], 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000)=0x8000000000000000, 0xc, 0x1) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000180)={0x4, 0x2}) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="98c37a38f1325a1f12c37e8a14da51ec953a73b721715b3f27c2871fd287f150"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x2008042) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000001000ffff2abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00040000230800005000128008000100677265004400028005000a000100000008000700ac1414bb05000900"], 0x70}}, 0x24008800) 1.797462596s ago: executing program 5 (id=2105): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f00)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1d}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0x2}, {0x0, 0x3c00000, 0x0, 0x0, 0x1, 0x0, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) symlink(0x0, &(0x7f0000000080)='./file0\x00') r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r5) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r7, 0x400, 0x1) r8 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r9 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYRES64=r0], 0x64}, 0x1, 0x0, 0x0, 0x48011}, 0x0) 1.085895798s ago: executing program 4 (id=2207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7ffb, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x80, 0x2}, 0x0, 0x8, 0x40008, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a3100a600000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.078655578s ago: executing program 1 (id=2208): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24f300ca2f8ef53773c5cbdf4a583f81fdc8719dbe967b0690a3ed3f314c3e2ceebb3e29d00c29b1ac1053d1e8b32d8a8be1bb9786746e0ee564306c80d7045747165005fa3528b5ac1e35e03b69cb54111dfcebc6d585aacdd57c351ef1aa8050274b122a21b47432f17a0cacfd9524d9cb09029e4daefaea47f8cd5a4f1dee71093ebc076363e14f78dd3b129b4b3ae5a7a085297416f05111e9cedf5e0f21f1a8aeefa517ed1705ec76469b8b469851cc56c6016d9067dac3de3818856014c98ce8f36dac4d8cdb1f25e3c5de754596e9a07c7718adf0cbdab78066d2418c12e0acde73c05fc80a0658c7fbc52812a8423323a80e8a968e0ace13290fe8f862c1e7233c26f73ca24e5e441dd406e136df3a3996865e069f42e87939d653b2c76eb3002d554d24190d68e57a1a67cecf713bfca56b970022e5b08413ead8d96c38ed7dd4ed1b3dd4b80134c99bd3d8c82b6641102cf7cf7b21069e4d2bdf2f7648ac6160029934e95b8243f2a0626c31653abd675", 0x24a}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae25625", 0x38}, {&(0x7f0000000a40)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb9556a649fb246dd788930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d5637f61d05401a64482860fc94a63110", 0xdc}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)}, {&(0x7f0000000380)="863df713b27092133340e45590eac45df1f0a54f338c8d702066c10522ae8700000000", 0x23}, {&(0x7f0000000900)="5e9a96da6c96c227926d725c264c8db1743e2a714194d97fd4a96b32f3a0cc57ff3d188ab8257403ab87aac73eb1db3cffb4c9b525154c45716736588985037d1390ae2dfd39d2cc24a7a4170eebea1d87b1321de2c2a96ffc62c34db799cceacbdd8b8d7b7dbb40061ce92ac58f2da5795981eb7d72373ffe50dec7aee739957223e4ff487e31", 0x87}, {&(0x7f0000000040)="1248643327b8165fe8c003d604f60c5ad0f500986e459a6abb3c5740ae291364c60795", 0x23}, {&(0x7f00000003c0)="5ab9b4bf0480b9dda5da329441446e8681694082cb2be95fc96c1fa9fc39a0202adf3bcc653efdecb23440b3c57587c88d87c8dab116131c66687410309e6e5d97a2c9230affefce706e1664b50d5d90b79777072ad3ed9d0f041ccd6a3a1594f404eb79653b38149cf74e2b8808400f06394569b640631607ce1c42a51c86be8f84c70a0ca8705cc2fa68a1b3b3a2", 0x8f}, {&(0x7f00000002c0)="dd8fc7e1c36402e5", 0x8}], 0x6}}], 0x3, 0x4004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.03534214s ago: executing program 1 (id=2209): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) read(r0, &(0x7f0000002340)=""/232, 0xe8) 985.937863ms ago: executing program 4 (id=2210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f0000002040)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d00200800e911ff20010000000000000000000000000000ff0200000000000000000000000000014f194e20"], 0x123) 929.376697ms ago: executing program 4 (id=2211): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000700000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 860.97455ms ago: executing program 4 (id=2212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000050000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000020000480"], 0xf4}}, 0x10) 813.859733ms ago: executing program 3 (id=2213): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="020409fcc9fb4802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 811.979653ms ago: executing program 5 (id=2214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0x6a3, 0x0, 0x0, 0xff, 0xc, 0x5a, 0x3, 0x6, 0x2, 0x9, 'syz0\x00'}) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a0101000000000000e54b0a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000000000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x14b042, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000000), 0x0, 0x0, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000100)=@routing={0xff, 0x0, 0x2, 0x7}, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0xa08033, &(0x7f0000000600)={[], [{@hash}]}, 0x7, 0x504, &(0x7f00000000c0)="$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") 794.603464ms ago: executing program 4 (id=2215): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) (async, rerun: 64) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x58ee, 0x800, 0x200, 0x13c}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) (rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000}) (async, rerun: 32) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) (async, rerun: 32) timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) (async) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async, rerun: 64) mprotect(&(0x7f000000a000/0xb000)=nil, 0xb000, 0x0) (async, rerun: 64) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') (async) r4 = socket(0x2000000015, 0x80005, 0x0) recvfrom$packet(r4, 0x0, 0x0, 0x40000022, 0x0, 0x0) 786.380125ms ago: executing program 3 (id=2216): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 585.947006ms ago: executing program 4 (id=2217): eventfd(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f00000014c0)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 136.299803ms ago: executing program 0 (id=2218): unshare(0x2a020400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x207}], 0x1, 0x0, 0x0, 0x0) 129.100723ms ago: executing program 5 (id=2219): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x24a}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae25625", 0x38}, {&(0x7f0000000a40)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb9556a649fb246dd788930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d5637f61d05401a64482860fc94a63110", 0xdc}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)}, {&(0x7f0000000380)="863df713b27092133340e45590eac45df1f0a54f338c8d702066c10522ae8700000000", 0x23}, {&(0x7f0000000900)="5e9a96da6c96c227926d725c264c8db1743e2a714194d97fd4a96b32f3a0cc57ff3d188ab8257403ab87aac73eb1db3cffb4c9b525154c45716736588985037d1390ae2dfd39d2cc24a7a4170eebea1d87b1321de2c2a96ffc62c34db799cceacbdd8b8d7b7dbb40061ce92ac58f2da5795981eb7d72373ffe50dec7aee739957223e4ff487e31", 0x87}, {&(0x7f0000000040)="1248643327b8165fe8c003d604f60c5ad0f500986e459a6abb3c5740ae291364c60795", 0x23}, {&(0x7f00000003c0)="5ab9b4bf0480b9dda5da329441446e8681694082cb2be95fc96c1fa9fc39a0202adf3bcc653efdecb23440b3c57587c88d87c8dab116131c66687410309e6e5d97a2c9230affefce706e1664b50d5d90b79777072ad3ed9d0f041ccd6a3a1594f404eb79653b38149cf74e2b8808400f06394569b640631607ce1c42a51c86be8f84c70a0ca8705cc2fa68a1b3b3a2", 0x8f}, {&(0x7f00000002c0)="dd8fc7e1c36402e5", 0x8}], 0x6}}], 0x3, 0x4004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 117.538314ms ago: executing program 1 (id=2220): syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x842, 0x0) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x404c844, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="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", 0x1ec}, {&(0x7f0000000740)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683f737eea59d4fa640cf2b684c8dd293961047", 0xab}, {&(0x7f00000015c0)="6b75b597d05d969a1910", 0xa}, {&(0x7f0000000e00)="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", 0x2f6}], 0x4, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @local}}}, @ip_retopts={{0x1c, 0x6000, 0x7, {[@noop, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x4, 0xf5, 0x1, 0x4}]}}}], 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 55.774337ms ago: executing program 0 (id=2221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f0000002040)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d00200800e911ff20010000000000000000000000000000ff0200000000000000000000000000014f194e20"], 0x123) 55.567447ms ago: executing program 1 (id=2222): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000700000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 54.702447ms ago: executing program 3 (id=2223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r1, 0x5707b563827c8365, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x74}, @val={0x8, 0x12a}, @void}}}, 0x24}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events.local\x00', 0x275a, 0x0) fadvise64(r2, 0x3, 0x1, 0x5) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)) (async) timerfd_settime(r2, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000040)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000d00)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) 54.521357ms ago: executing program 5 (id=2224): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x80805, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) sendmsg$NFT_BATCH(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000000c0), 0x0, 0x0) 778.65µs ago: executing program 1 (id=2225): socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000500)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (fail_nth: 4) 373.54µs ago: executing program 3 (id=2226): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x37, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_getres(0xfffffffffffffffb, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000240)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") io_setup(0xb, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000020000001d"], 0x202400) listen(r1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x1, 0x8, 0x5, 0x80000000, {{0x3e, 0x4, 0x3, 0x4, 0xf8, 0x67, 0x0, 0x1, 0x29, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0xcc, 0x1, 0x7, [{@remote, 0x30000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@multicast1, 0x7}]}, @lsrr={0x83, 0x7, 0xff, [@multicast2]}, @ssrr={0x89, 0x2b, 0x4d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @remote, @broadcast, @private=0xa010101, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1c}, @broadcast, @empty]}, @timestamp_prespec={0x44, 0xc, 0xee, 0x3, 0x9, [{@loopback, 0x5}]}, @noop, @cipso={0x86, 0x53, 0x1, [{0x2, 0x8, "8dc4bb45cd1b"}, {0x7, 0xd, "238e354ed78869a95f5156"}, {0x7, 0xa, "ca4b7add2dd3b730"}, {0x0, 0x9, "8d326dcc5d0c36"}, {0x0, 0x2}, {0x0, 0xf, "7dc85b42c7e00bf7eeb7200f1f"}, {0x2, 0x11, "82e47d27d5eb6d88b63be953394629"}, {0x6, 0x3, '*'}]}, @timestamp_prespec={0x44, 0x34, 0x84, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x69}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x91ab}, {@local, 0x5}, {@loopback, 0x90}, {@empty, 0xffffffff}, {@multicast2, 0x6}]}]}}}}}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', r2, 0x9}, 0x94) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r3, r5, 0x3, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r8, 0xff0a, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f000000172f71d34460bc24eab5560000000ebab8bebf9367140051f60a64c9f4d4778037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 0s ago: executing program 0 (id=2227): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x0, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x4c) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000110001010000000000fffd0000000000", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) kernel console output (not intermixed with test programs): s unknown, defaulting to 1000 [ 146.523886][ T29] audit: type=1326 audit(1769658760.360:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7523 comm="syz.3.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5583f8aeb9 code=0x7ffc0000 [ 146.553322][ T29] audit: type=1326 audit(1769658760.360:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7523 comm="syz.3.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5583f8aeb9 code=0x7ffc0000 [ 146.621524][ T7528] loop1: detected capacity change from 0 to 2048 [ 146.630728][ T7528] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.660331][ T7528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.683550][ T7528] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.708289][ T7513] lo speed is unknown, defaulting to 1000 [ 146.740523][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.779137][ T7513] lo speed is unknown, defaulting to 1000 [ 146.848007][ T7513] lo speed is unknown, defaulting to 1000 [ 146.931227][ T7513] lo speed is unknown, defaulting to 1000 [ 147.114306][ T29] audit: type=1326 audit(1769658761.120:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7563 comm="syz.1.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5312aeb9 code=0x7ffc0000 [ 147.138040][ T29] audit: type=1326 audit(1769658761.120:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7563 comm="syz.1.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5312aeb9 code=0x7ffc0000 [ 147.187667][ T7569] team0 (unregistering): Port device team_slave_0 removed [ 147.211985][ T7569] team0 (unregistering): Port device team_slave_1 removed [ 147.380875][ T7589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=7589 comm=syz.2.1552 [ 147.397274][ T7589] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1552'. [ 147.420352][ T7587] loop3: detected capacity change from 0 to 2048 [ 147.436581][ T7585] bridge_slave_0: left allmulticast mode [ 147.442312][ T7585] bridge_slave_0: left promiscuous mode [ 147.448059][ T7585] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.468804][ T7585] bridge_slave_1: left allmulticast mode [ 147.474672][ T7585] bridge_slave_1: left promiscuous mode [ 147.480607][ T7585] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.489265][ T7587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.501946][ T7585] bond0: (slave bond_slave_0): Releasing backup interface [ 147.512226][ T7585] bond0: (slave c@0Ù): Releasing backup interface [ 147.523158][ T7585] team_slave_0: left promiscuous mode [ 147.530875][ T7585] team0: Port device team_slave_0 removed [ 147.538489][ T7585] team_slave_1: left promiscuous mode [ 147.545992][ T7585] team0: Port device team_slave_1 removed [ 147.553701][ T7585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.561350][ T7585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.573500][ T7585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.581034][ T7585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.591083][ T7585] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 147.619067][ T7589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.630829][ T7589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.648747][ T7589] bond0 (unregistering): Released all slaves [ 147.684441][ T7600] netlink: 'syz.1.1556': attribute type 13 has an invalid length. [ 147.769462][ T7600] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 147.784774][ T7600] syzkaller0: entered promiscuous mode [ 147.790474][ T7600] syzkaller0: entered allmulticast mode [ 147.808833][ T7605] loop0: detected capacity change from 0 to 128 [ 147.816969][ T7600] tipc: Started in network mode [ 147.822382][ T7600] tipc: Node identity 769690da1aab, cluster identity 4711 [ 147.829740][ T7600] tipc: Enabled bearer , priority 0 [ 147.837816][ T7605] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.858547][ T7599] tipc: Resetting bearer [ 147.868642][ T7599] tipc: Disabling bearer [ 147.965599][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.037238][ T7621] FAULT_INJECTION: forcing a failure. [ 148.037238][ T7621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.050447][ T7621] CPU: 1 UID: 0 PID: 7621 Comm: syz.4.1565 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 148.050519][ T7621] Tainted: [W]=WARN [ 148.050528][ T7621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.050545][ T7621] Call Trace: [ 148.050553][ T7621] [ 148.050571][ T7621] __dump_stack+0x1d/0x30 [ 148.050602][ T7621] dump_stack_lvl+0x95/0xd0 [ 148.050626][ T7621] dump_stack+0x15/0x1b [ 148.050653][ T7621] should_fail_ex+0x263/0x280 [ 148.050695][ T7621] should_fail+0xb/0x20 [ 148.050762][ T7621] should_fail_usercopy+0x1a/0x20 [ 148.050869][ T7621] _copy_from_iter+0xcf/0xea0 [ 148.050907][ T7621] ? __alloc_skb+0x397/0x4b0 [ 148.050946][ T7621] ? __alloc_skb+0x219/0x4b0 [ 148.051026][ T7621] netlink_sendmsg+0x4ae/0x6f0 [ 148.051120][ T7621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.051154][ T7621] ____sys_sendmsg+0x5af/0x600 [ 148.051183][ T7621] ___sys_sendmsg+0x195/0x1e0 [ 148.051261][ T7621] __x64_sys_sendmsg+0xd4/0x160 [ 148.051287][ T7621] x64_sys_call+0x17ba/0x3000 [ 148.051321][ T7621] do_syscall_64+0xc0/0x2a0 [ 148.051389][ T7621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.051418][ T7621] RIP: 0033:0x7f2efc88aeb9 [ 148.051440][ T7621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.051466][ T7621] RSP: 002b:00007f2efb2e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.051490][ T7621] RAX: ffffffffffffffda RBX: 00007f2efcb05fa0 RCX: 00007f2efc88aeb9 [ 148.051556][ T7621] RDX: 0000000020008000 RSI: 0000200000000380 RDI: 0000000000000003 [ 148.051570][ T7621] RBP: 00007f2efb2e7090 R08: 0000000000000000 R09: 0000000000000000 [ 148.051584][ T7621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.051597][ T7621] R13: 00007f2efcb06038 R14: 00007f2efcb05fa0 R15: 00007ffec95afd48 [ 148.051644][ T7621] [ 148.271380][ T7619] bond2: Removing last arp target with arp_interval on [ 148.289175][ T7619] bond2: entered promiscuous mode [ 148.294562][ T7619] bond2: entered allmulticast mode [ 148.310104][ T7619] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.362293][ T7636] FAULT_INJECTION: forcing a failure. [ 148.362293][ T7636] name failslab, interval 1, probability 0, space 0, times 0 [ 148.375274][ T7636] CPU: 0 UID: 0 PID: 7636 Comm: syz.3.1571 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 148.375317][ T7636] Tainted: [W]=WARN [ 148.375326][ T7636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.375340][ T7636] Call Trace: [ 148.375347][ T7636] [ 148.375417][ T7636] __dump_stack+0x1d/0x30 [ 148.375443][ T7636] dump_stack_lvl+0x95/0xd0 [ 148.375509][ T7636] dump_stack+0x15/0x1b [ 148.375604][ T7636] should_fail_ex+0x263/0x280 [ 148.375642][ T7636] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 148.375675][ T7636] should_failslab+0x8c/0xb0 [ 148.375699][ T7636] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 148.375803][ T7636] ? shmem_alloc_inode+0x34/0x50 [ 148.375890][ T7636] ? kstrtouint_from_user+0xa8/0xf0 [ 148.375926][ T7636] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 148.375986][ T7636] shmem_alloc_inode+0x34/0x50 [ 148.376078][ T7636] alloc_inode+0x40/0x170 [ 148.376106][ T7636] new_inode+0x1d/0xe0 [ 148.376137][ T7636] shmem_get_inode+0x246/0x750 [ 148.376243][ T7636] __shmem_file_setup+0x112/0x210 [ 148.376273][ T7636] shmem_file_setup+0x3b/0x50 [ 148.376379][ T7636] __se_sys_memfd_create+0x2f6/0x6c0 [ 148.376499][ T7636] __x64_sys_memfd_create+0x31/0x40 [ 148.376630][ T7636] x64_sys_call+0x28cb/0x3000 [ 148.376665][ T7636] do_syscall_64+0xc0/0x2a0 [ 148.376701][ T7636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.376724][ T7636] RIP: 0033:0x7f5583f8aeb9 [ 148.376739][ T7636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.376818][ T7636] RSP: 002b:00007f55829e6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 148.376842][ T7636] RAX: ffffffffffffffda RBX: 00000000000004cf RCX: 00007f5583f8aeb9 [ 148.376861][ T7636] RDX: 00007f55829e6ee0 RSI: 0000000000000000 RDI: 00007f5583ff7333 [ 148.376878][ T7636] RBP: 0000200000000740 R08: 00000000ffffffff R09: 0000000000000000 [ 148.376943][ T7636] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000080 [ 148.377023][ T7636] R13: 00007f55829e6ee0 R14: 00007f55829e6ea0 R15: 00002000000005c0 [ 148.377045][ T7636] [ 148.706700][ T7642] loop3: detected capacity change from 0 to 2048 [ 148.770741][ T7642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.106756][ T7667] loop4: detected capacity change from 0 to 2048 [ 149.122672][ T7646] netlink: 'syz.0.1575': attribute type 3 has an invalid length. [ 149.131240][ T7646] netlink: 'syz.0.1575': attribute type 1 has an invalid length. [ 149.139153][ T7646] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1575'. [ 149.168192][ T7667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.210206][ T7675] FAULT_INJECTION: forcing a failure. [ 149.210206][ T7675] name failslab, interval 1, probability 0, space 0, times 0 [ 149.223314][ T7675] CPU: 0 UID: 0 PID: 7675 Comm: syz.0.1586 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 149.223438][ T7675] Tainted: [W]=WARN [ 149.223448][ T7675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.223466][ T7675] Call Trace: [ 149.223476][ T7675] [ 149.223487][ T7675] __dump_stack+0x1d/0x30 [ 149.223586][ T7675] dump_stack_lvl+0x95/0xd0 [ 149.223610][ T7675] dump_stack+0x15/0x1b [ 149.223631][ T7675] should_fail_ex+0x263/0x280 [ 149.223705][ T7675] should_failslab+0x8c/0xb0 [ 149.223737][ T7675] kmem_cache_alloc_noprof+0x68/0x490 [ 149.223772][ T7675] ? getname_flags+0x7f/0x3b0 [ 149.223918][ T7675] getname_flags+0x7f/0x3b0 [ 149.223946][ T7675] __x64_sys_symlink+0x40/0x60 [ 149.224026][ T7675] x64_sys_call+0x24a9/0x3000 [ 149.224064][ T7675] do_syscall_64+0xc0/0x2a0 [ 149.224109][ T7675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.224192][ T7675] RIP: 0033:0x7fbf72afaeb9 [ 149.224213][ T7675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.224238][ T7675] RSP: 002b:00007fbf71557028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 149.224268][ T7675] RAX: ffffffffffffffda RBX: 00007fbf72d75fa0 RCX: 00007fbf72afaeb9 [ 149.224315][ T7675] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000000 [ 149.224335][ T7675] RBP: 00007fbf71557090 R08: 0000000000000000 R09: 0000000000000000 [ 149.224353][ T7675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.224369][ T7675] R13: 00007fbf72d76038 R14: 00007fbf72d75fa0 R15: 00007ffee13a2c38 [ 149.224412][ T7675] [ 149.446615][ T7679] FAULT_INJECTION: forcing a failure. [ 149.446615][ T7679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.459997][ T7679] CPU: 0 UID: 0 PID: 7679 Comm: syz.0.1587 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 149.460035][ T7679] Tainted: [W]=WARN [ 149.460044][ T7679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.460129][ T7679] Call Trace: [ 149.460139][ T7679] [ 149.460150][ T7679] __dump_stack+0x1d/0x30 [ 149.460234][ T7679] dump_stack_lvl+0x95/0xd0 [ 149.460265][ T7679] dump_stack+0x15/0x1b [ 149.460291][ T7679] should_fail_ex+0x263/0x280 [ 149.460408][ T7679] should_fail+0xb/0x20 [ 149.460438][ T7679] should_fail_usercopy+0x1a/0x20 [ 149.460538][ T7679] _copy_from_iter+0xcf/0xea0 [ 149.460584][ T7679] ? alloc_pages_mpol+0x217/0x260 [ 149.460683][ T7679] copy_page_from_iter+0x178/0x2a0 [ 149.460712][ T7679] tun_get_user+0xbbd/0x27c0 [ 149.460751][ T7679] ? ref_tracker_alloc+0x1f2/0x2f0 [ 149.460865][ T7679] tun_chr_write_iter+0x15e/0x210 [ 149.460896][ T7679] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 149.460923][ T7679] vfs_write+0x5a6/0x9f0 [ 149.460951][ T7679] ksys_write+0xdc/0x1a0 [ 149.460982][ T7679] __x64_sys_write+0x40/0x50 [ 149.461014][ T7679] x64_sys_call+0x2847/0x3000 [ 149.461051][ T7679] do_syscall_64+0xc0/0x2a0 [ 149.461144][ T7679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.461217][ T7679] RIP: 0033:0x7fbf72abb78e [ 149.461234][ T7679] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 149.461257][ T7679] RSP: 002b:00007fbf71556fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 149.461285][ T7679] RAX: ffffffffffffffda RBX: 00007fbf715576c0 RCX: 00007fbf72abb78e [ 149.461352][ T7679] RDX: 000000000000005a RSI: 00002000000010c0 RDI: 00000000000000c8 [ 149.461446][ T7679] RBP: 00007fbf71557090 R08: 0000000000000000 R09: 0000000000000000 [ 149.461465][ T7679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.461521][ T7679] R13: 00007fbf72d76038 R14: 00007fbf72d75fa0 R15: 00007ffee13a2c38 [ 149.461549][ T7679] [ 149.737658][ T7667] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.789231][ T7689] loop0: detected capacity change from 0 to 512 [ 149.827174][ T7689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 149.842305][ T7689] ext4 filesystem being mounted at /334/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.896002][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1595'. [ 149.904846][ T7689] tipc: Enabling of bearer rejected, failed to enable media [ 149.964235][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.010521][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 150.041163][ T7710] loop1: detected capacity change from 0 to 256 [ 150.203335][ T7728] netlink: 'syz.3.1605': attribute type 10 has an invalid length. [ 150.245561][ T7730] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1606'. [ 150.256149][ T7730] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1606'. [ 150.299971][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1608'. [ 150.309413][ T7734] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1608'. [ 150.395128][ T7740] FAULT_INJECTION: forcing a failure. [ 150.395128][ T7740] name failslab, interval 1, probability 0, space 0, times 0 [ 150.408127][ T7740] CPU: 0 UID: 0 PID: 7740 Comm: syz.3.1611 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 150.408165][ T7740] Tainted: [W]=WARN [ 150.408187][ T7740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.408214][ T7740] Call Trace: [ 150.408223][ T7740] [ 150.408235][ T7740] __dump_stack+0x1d/0x30 [ 150.408269][ T7740] dump_stack_lvl+0x95/0xd0 [ 150.408300][ T7740] dump_stack+0x15/0x1b [ 150.408407][ T7740] should_fail_ex+0x263/0x280 [ 150.408503][ T7740] should_failslab+0x8c/0xb0 [ 150.408535][ T7740] __kmalloc_cache_node_noprof+0x69/0x4a0 [ 150.408569][ T7740] ? __get_vm_area_node+0x106/0x1d0 [ 150.408603][ T7740] __get_vm_area_node+0x106/0x1d0 [ 150.408696][ T7740] __vmalloc_node_range_noprof+0x291/0x12b0 [ 150.408862][ T7740] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 150.408913][ T7740] ? __rcu_read_unlock+0x4e/0x70 [ 150.408954][ T7740] ? avc_has_perm_noaudit+0xab/0x130 [ 150.408993][ T7740] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 150.409121][ T7740] __vmalloc_noprof+0xa4/0xf0 [ 150.409160][ T7740] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 150.409216][ T7740] bpf_prog_alloc_no_stats+0x47/0x380 [ 150.409249][ T7740] ? bpf_prog_alloc+0x2a/0x150 [ 150.409282][ T7740] bpf_prog_alloc+0x3c/0x150 [ 150.409359][ T7740] bpf_prog_load+0x506/0x1140 [ 150.409435][ T7740] ? security_bpf+0x2b/0x90 [ 150.409468][ T7740] __sys_bpf+0x469/0x7b0 [ 150.409576][ T7740] __x64_sys_bpf+0x41/0x50 [ 150.409603][ T7740] x64_sys_call+0x28e1/0x3000 [ 150.409709][ T7740] do_syscall_64+0xc0/0x2a0 [ 150.409801][ T7740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.409828][ T7740] RIP: 0033:0x7f5583f8aeb9 [ 150.409850][ T7740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.409947][ T7740] RSP: 002b:00007f55829e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 150.409977][ T7740] RAX: ffffffffffffffda RBX: 00007f5584205fa0 RCX: 00007f5583f8aeb9 [ 150.409992][ T7740] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 150.410006][ T7740] RBP: 00007f55829e7090 R08: 0000000000000000 R09: 0000000000000000 [ 150.410019][ T7740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.410045][ T7740] R13: 00007f5584206038 R14: 00007f5584205fa0 R15: 00007ffc445b6918 [ 150.410218][ T7740] [ 150.410232][ T7740] syz.3.1611: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 150.671427][ T7740] CPU: 0 UID: 0 PID: 7740 Comm: syz.3.1611 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 150.671539][ T7740] Tainted: [W]=WARN [ 150.671587][ T7740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.671671][ T7740] Call Trace: [ 150.671680][ T7740] [ 150.671689][ T7740] __dump_stack+0x1d/0x30 [ 150.671824][ T7740] dump_stack_lvl+0x95/0xd0 [ 150.671858][ T7740] dump_stack+0x15/0x1b [ 150.671884][ T7740] warn_alloc+0x145/0x1c0 [ 150.671929][ T7740] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 150.672009][ T7740] ? __rcu_read_unlock+0x4e/0x70 [ 150.672096][ T7740] ? avc_has_perm_noaudit+0xab/0x130 [ 150.672136][ T7740] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 150.672278][ T7740] __vmalloc_noprof+0xa4/0xf0 [ 150.672307][ T7740] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 150.672341][ T7740] bpf_prog_alloc_no_stats+0x47/0x380 [ 150.672426][ T7740] ? bpf_prog_alloc+0x2a/0x150 [ 150.672460][ T7740] bpf_prog_alloc+0x3c/0x150 [ 150.672494][ T7740] bpf_prog_load+0x506/0x1140 [ 150.672538][ T7740] ? security_bpf+0x2b/0x90 [ 150.672624][ T7740] __sys_bpf+0x469/0x7b0 [ 150.672729][ T7740] __x64_sys_bpf+0x41/0x50 [ 150.672760][ T7740] x64_sys_call+0x28e1/0x3000 [ 150.672844][ T7740] do_syscall_64+0xc0/0x2a0 [ 150.672942][ T7740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.672972][ T7740] RIP: 0033:0x7f5583f8aeb9 [ 150.672990][ T7740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.673027][ T7740] RSP: 002b:00007f55829e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 150.673056][ T7740] RAX: ffffffffffffffda RBX: 00007f5584205fa0 RCX: 00007f5583f8aeb9 [ 150.673071][ T7740] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 150.673132][ T7740] RBP: 00007f55829e7090 R08: 0000000000000000 R09: 0000000000000000 [ 150.673221][ T7740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.673271][ T7740] R13: 00007f5584206038 R14: 00007f5584205fa0 R15: 00007ffc445b6918 [ 150.673295][ T7740] [ 150.673302][ T7740] Mem-Info: [ 150.897832][ T7740] active_anon:10257 inactive_anon:7 isolated_anon:0 [ 150.897832][ T7740] active_file:24988 inactive_file:2342 isolated_file:0 [ 150.897832][ T7740] unevictable:0 dirty:194 writeback:6 [ 150.897832][ T7740] slab_reclaimable:3281 slab_unreclaimable:55565 [ 150.897832][ T7740] mapped:31076 shmem:1956 pagetables:1182 [ 150.897832][ T7740] sec_pagetables:0 bounce:0 [ 150.897832][ T7740] kernel_misc_reclaimable:0 [ 150.897832][ T7740] free:1836770 free_pcp:11833 free_cma:0 [ 150.945995][ T7740] Node 0 active_anon:41956kB inactive_anon:28kB active_file:99952kB inactive_file:9368kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124420kB dirty:776kB writeback:24kB shmem:8404kB kernel_stack:3696kB pagetables:4728kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 150.976453][ T7740] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 151.010581][ T7740] lowmem_reserve[]: 0 2879 7858 7858 [ 151.013559][ T7743] loop1: detected capacity change from 0 to 1764 [ 151.016946][ T7740] Node 0 DMA32 free:2944856kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948384kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 151.036256][ T7743] iso9660: Bad value for 'map' [ 151.060491][ T7740] lowmem_reserve[]: 0 0 4978 4978 [ 151.071921][ T7740] Node 0 Normal free:4386864kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42652kB inactive_anon:28kB active_file:99952kB inactive_file:9368kB unevictable:0kB writepending:800kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:42260kB local_pcp:9260kB free_cma:0kB [ 151.109008][ T7740] lowmem_reserve[]: 0 0 0 0 [ 151.113961][ T7740] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 151.127581][ T7740] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 4*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944856kB [ 151.144112][ T7740] Node 0 Normal: 813*4kB (UME) 501*8kB (UM) 180*16kB (M) 102*32kB (UME) 153*64kB (UM) 107*128kB (ME) 70*256kB (UM) 31*512kB (UM) 15*1024kB (UM) 12*2048kB (UME) 1044*4096kB (UM) = 4386844kB [ 151.164847][ T7740] Node 0 hugepages_total=4 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 151.174588][ T7740] 29655 total pagecache pages [ 151.179376][ T7740] 30 pages in swap cache [ 151.183739][ T7740] Free swap = 124876kB [ 151.188157][ T7740] Total swap = 124996kB [ 151.192457][ T7740] 2097051 pages RAM [ 151.196618][ T7740] 0 pages HighMem/MovableOnly [ 151.202002][ T7740] 81555 pages reserved [ 151.402471][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 151.402490][ T29] audit: type=1400 audit(1769658765.410:1038): avc: denied { execute } for pid=7751 comm="syz.0.1616" path="/338/bus" dev="tmpfs" ino=1751 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 151.938619][ T29] audit: type=1400 audit(1769658765.590:1039): avc: denied { write } for pid=7754 comm="syz.0.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 151.974859][ T7763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1619'. [ 152.020757][ T7766] loop0: detected capacity change from 0 to 2048 [ 152.033172][ T7766] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.053720][ T7768] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1621'. [ 152.063135][ T7768] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1621'. [ 152.096220][ T7768] ip6gretap0: entered promiscuous mode [ 152.114163][ T7768] syz_tun: entered promiscuous mode [ 152.121636][ T7766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.143644][ T7766] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.292447][ T7775] bond1 (unregistering): Released all slaves [ 152.308992][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.345771][ T29] audit: type=1326 audit(1769658766.350:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7774 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5583f8aeb9 code=0x7ffc0000 [ 152.373242][ T29] audit: type=1326 audit(1769658766.360:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7774 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5583f8aeb9 code=0x7ffc0000 [ 152.397817][ T29] audit: type=1326 audit(1769658766.360:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7774 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5583f8aeb9 code=0x7ffc0000 [ 152.421563][ T29] audit: type=1326 audit(1769658766.360:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7774 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5583f8aeb9 code=0x7ffc0000 [ 152.628632][ T29] audit: type=1326 audit(1769658766.460:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7774 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5583f8c747 code=0x7ffc0000 [ 152.654122][ T29] audit: type=1326 audit(1769658766.460:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7774 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5583f4b78e code=0x7ffc0000 [ 152.679437][ T29] audit: type=1326 audit(1769658766.460:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7774 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5583f4b78e code=0x7ffc0000 [ 152.703930][ T29] audit: type=1326 audit(1769658766.460:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7774 comm="syz.3.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5583f4b78e code=0x7ffc0000 [ 152.870439][ T7795] syzkaller0: entered promiscuous mode [ 152.876103][ T7795] syzkaller0: entered allmulticast mode [ 153.234796][ T7807] __nla_validate_parse: 1 callbacks suppressed [ 153.234816][ T7807] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1635'. [ 153.432748][ T7789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7789 comm=syz.4.1628 [ 153.938778][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1628'. [ 153.953250][ T7789] hsr_slave_1 (unregistering): left promiscuous mode [ 154.141465][ T7840] loop4: detected capacity change from 0 to 2048 [ 154.155093][ T7840] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.177280][ T7840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.212554][ T7840] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.288117][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.300569][ T7779] syz.2.1623 (7779) used greatest stack depth: 6400 bytes left [ 154.377412][ T7850] ip6tnl0: Caught tx_queue_len zero misconfig [ 154.398814][ T7857] loop4: detected capacity change from 0 to 128 [ 154.577990][ T7871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.607940][ T7873] loop0: detected capacity change from 0 to 1024 [ 154.616896][ T7873] EXT4-fs: Ignoring removed orlov option [ 154.622637][ T7873] EXT4-fs: inline encryption not supported [ 154.629583][ T7871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.641365][ T7873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.710571][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.797005][ T7883] loop3: detected capacity change from 0 to 1764 [ 154.814947][ T7883] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 154.843191][ T7883] isofs_fill_super: get root inode failed [ 154.851658][ T7889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1666'. [ 154.950452][ T7897] IPv6: Can't replace route, no match found [ 154.969221][ T7897] loop3: detected capacity change from 0 to 512 [ 154.976285][ T7897] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 154.986488][ T7897] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 154.997558][ T7897] EXT4-fs (loop3): group descriptors corrupted! [ 155.055949][ T7889] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.065602][ T7902] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1671'. [ 155.074804][ T7902] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1671'. [ 155.110434][ T7905] loop0: detected capacity change from 0 to 512 [ 155.135489][ T7905] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 155.196551][ T3315] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 155.221134][ T7913] loop0: detected capacity change from 0 to 1024 [ 155.228700][ T7913] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 155.244771][ T7913] JBD2: no valid journal superblock found [ 155.250870][ T7913] EXT4-fs (loop0): Could not load journal inode [ 155.387343][ T7917] loop0: detected capacity change from 0 to 512 [ 155.541307][ T7928] loop4: detected capacity change from 0 to 1024 [ 155.554342][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1682'. [ 155.576873][ T7928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.748955][ T7949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.759188][ T7949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.032241][ T7953] loop3: detected capacity change from 0 to 764 [ 156.053761][ T7953] Symlink component flag not implemented [ 156.060634][ T7953] Symlink component flag not implemented (101) [ 156.067944][ T7953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1689'. [ 156.077466][ T7953] veth0_vlan: left promiscuous mode [ 156.156105][ T7955] FAULT_INJECTION: forcing a failure. [ 156.156105][ T7955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.169458][ T7955] CPU: 1 UID: 0 PID: 7955 Comm: syz.3.1690 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 156.169506][ T7955] Tainted: [W]=WARN [ 156.169515][ T7955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.169597][ T7955] Call Trace: [ 156.169607][ T7955] [ 156.169617][ T7955] __dump_stack+0x1d/0x30 [ 156.169647][ T7955] dump_stack_lvl+0x95/0xd0 [ 156.169669][ T7955] dump_stack+0x15/0x1b [ 156.169689][ T7955] should_fail_ex+0x263/0x280 [ 156.169789][ T7955] should_fail+0xb/0x20 [ 156.169898][ T7955] should_fail_usercopy+0x1a/0x20 [ 156.169937][ T7955] _copy_to_user+0x20/0xa0 [ 156.169966][ T7955] simple_read_from_buffer+0xb5/0x130 [ 156.170040][ T7955] proc_fail_nth_read+0x10e/0x150 [ 156.170076][ T7955] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.170113][ T7955] vfs_read+0x1ab/0x7f0 [ 156.170158][ T7955] ? __rcu_read_unlock+0x4e/0x70 [ 156.170198][ T7955] ? __fget_files+0x184/0x1c0 [ 156.170228][ T7955] ? mutex_lock+0x57/0x90 [ 156.170267][ T7955] ksys_read+0xdc/0x1a0 [ 156.170292][ T7955] __x64_sys_read+0x40/0x50 [ 156.170316][ T7955] x64_sys_call+0x2889/0x3000 [ 156.170350][ T7955] do_syscall_64+0xc0/0x2a0 [ 156.170393][ T7955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.170473][ T7955] RIP: 0033:0x7f5583f4b78e [ 156.170506][ T7955] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 156.170531][ T7955] RSP: 002b:00007f55829e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.170557][ T7955] RAX: ffffffffffffffda RBX: 00007f55829e76c0 RCX: 00007f5583f4b78e [ 156.170641][ T7955] RDX: 000000000000000f RSI: 00007f55829e70a0 RDI: 0000000000000005 [ 156.170656][ T7955] RBP: 00007f55829e7090 R08: 0000000000000000 R09: 0000000000000000 [ 156.170670][ T7955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.170683][ T7955] R13: 00007f5584206038 R14: 00007f5584205fa0 R15: 00007ffc445b6918 [ 156.170721][ T7955] [ 156.444882][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.489023][ T7962] loop4: detected capacity change from 0 to 1024 [ 156.501411][ T7959] IPv6: NLM_F_CREATE should be specified when creating new route [ 156.514434][ T7959] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.521804][ T7959] IPv6: NLM_F_CREATE should be set when creating new route [ 156.537524][ T7962] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1693: bad orphan inode 134217728 [ 156.562259][ T7962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.562426][ T7966] loop0: detected capacity change from 0 to 1024 [ 156.599652][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 156.599669][ T29] audit: type=1400 audit(1769658770.610:1136): avc: denied { mounton } for pid=7960 comm="syz.4.1693" path="/310/bus/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 156.633834][ T7966] EXT4-fs: test_dummy_encryption option not supported [ 156.706034][ T7966] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1695'. [ 156.845496][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.942552][ T29] audit: type=1326 audit(1769658770.950:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7994 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5312aeb9 code=0x7ffc0000 [ 156.966645][ T29] audit: type=1326 audit(1769658770.950:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7994 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5312aeb9 code=0x7ffc0000 [ 156.990662][ T29] audit: type=1326 audit(1769658770.960:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7994 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f9e5312aeb9 code=0x7ffc0000 [ 157.014687][ T29] audit: type=1326 audit(1769658770.960:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7994 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5312aeb9 code=0x7ffc0000 [ 157.038349][ T29] audit: type=1326 audit(1769658770.960:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7994 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5312aeb9 code=0x7ffc0000 [ 157.298076][ T8005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.307137][ T8005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.705161][ T8009] netlink: 'syz.0.1707': attribute type 4 has an invalid length. [ 157.735396][ T29] audit: type=1326 audit(1769658771.750:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.4.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efc88aeb9 code=0x7ffc0000 [ 157.759036][ T29] audit: type=1326 audit(1769658771.750:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.4.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efc88aeb9 code=0x7ffc0000 [ 157.782546][ T29] audit: type=1326 audit(1769658771.750:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.4.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2efc84b78e code=0x7ffc0000 [ 157.806023][ T29] audit: type=1326 audit(1769658771.750:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.4.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efc88aeb9 code=0x7ffc0000 [ 157.948805][ T8024] loop0: detected capacity change from 0 to 512 [ 157.957842][ T8024] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 157.967335][ T8024] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 157.987666][ T8028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1714'. [ 157.997225][ T8028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1714'. [ 158.120604][ T8040] tipc: Started in network mode [ 158.125700][ T8040] tipc: Node identity ac1414aa, cluster identity 4711 [ 158.133422][ T8040] tipc: Enabling of bearer rejected, failed to enable media [ 158.166225][ T8043] wg0: entered allmulticast mode [ 158.428093][ T8053] IPv6: Can't replace route, no match found [ 158.502133][ T8055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=8055 comm=syz.2.1725 [ 158.519713][ T8055] __nla_validate_parse: 1 callbacks suppressed [ 158.519742][ T8055] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1725'. [ 158.547582][ T8057] netlink: 'syz.0.1726': attribute type 13 has an invalid length. [ 158.605004][ T8057] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 158.613294][ T8057] syzkaller0: entered promiscuous mode [ 158.618961][ T8057] syzkaller0: entered allmulticast mode [ 158.628458][ T8057] tipc: Enabled bearer , priority 0 [ 158.636120][ T8056] tipc: Resetting bearer [ 158.645004][ T8056] tipc: Disabling bearer [ 158.662530][ T8059] EXT4-fs (loop2): orphan cleanup on readonly fs [ 158.669422][ T8059] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #11: block 1: comm syz.2.1727: lblock 0 mapped to illegal pblock 1 (length 1) [ 158.684558][ T8059] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 158.698211][ T8059] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.1727: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 158.715032][ T8059] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.2.1727: ea_inode dec ref err=-117 [ 158.728926][ T8059] EXT4-fs (loop2): 1 orphan inode deleted [ 158.736051][ T8059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 158.760726][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.783837][ T8064] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 158.841433][ T8070] Failed to initialize the IGMP autojoin socket (err -2) [ 158.870381][ T8074] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1734'. [ 158.900281][ T8076] FAULT_INJECTION: forcing a failure. [ 158.900281][ T8076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.914314][ T8076] CPU: 1 UID: 0 PID: 8076 Comm: syz.0.1735 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 158.914357][ T8076] Tainted: [W]=WARN [ 158.914367][ T8076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.914439][ T8076] Call Trace: [ 158.914448][ T8076] [ 158.914459][ T8076] __dump_stack+0x1d/0x30 [ 158.914491][ T8076] dump_stack_lvl+0x95/0xd0 [ 158.914563][ T8076] dump_stack+0x15/0x1b [ 158.914593][ T8076] should_fail_ex+0x263/0x280 [ 158.914631][ T8076] should_fail+0xb/0x20 [ 158.914704][ T8076] should_fail_usercopy+0x1a/0x20 [ 158.914810][ T8076] _copy_from_iter+0xcf/0xea0 [ 158.914859][ T8076] ? __alloc_skb+0x397/0x4b0 [ 158.914981][ T8076] ? __alloc_skb+0x219/0x4b0 [ 158.915023][ T8076] netlink_sendmsg+0x4ae/0x6f0 [ 158.915063][ T8076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.915118][ T8076] ____sys_sendmsg+0x5af/0x600 [ 158.915147][ T8076] ___sys_sendmsg+0x195/0x1e0 [ 158.915189][ T8076] __x64_sys_sendmsg+0xd4/0x160 [ 158.915215][ T8076] x64_sys_call+0x17ba/0x3000 [ 158.915273][ T8076] do_syscall_64+0xc0/0x2a0 [ 158.915398][ T8076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.915468][ T8076] RIP: 0033:0x7fbf72afaeb9 [ 158.915490][ T8076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.915516][ T8076] RSP: 002b:00007fbf71557028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.915544][ T8076] RAX: ffffffffffffffda RBX: 00007fbf72d75fa0 RCX: 00007fbf72afaeb9 [ 158.915564][ T8076] RDX: 0000000020008000 RSI: 0000200000000380 RDI: 0000000000000003 [ 158.915625][ T8076] RBP: 00007fbf71557090 R08: 0000000000000000 R09: 0000000000000000 [ 158.915658][ T8076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.915675][ T8076] R13: 00007fbf72d76038 R14: 00007fbf72d75fa0 R15: 00007ffee13a2c38 [ 158.915703][ T8076] [ 159.141675][ T8079] EXT4-fs: dax option not supported [ 159.152165][ T8079] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1737'. [ 159.186236][ T8084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1739'. [ 159.197917][ T8082] IPv6: Can't replace route, no match found [ 159.204820][ T8081] EXT4-fs: Ignoring removed i_version option [ 159.210940][ T8081] EXT4-fs: Ignoring removed bh option [ 159.240062][ T8084] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.252333][ T8081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.280450][ T8084] bond1: (slave ip6tnl1): refused to change device type [ 159.294736][ T8081] ext4 filesystem being mounted at /313/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.365207][ T8097] FAULT_INJECTION: forcing a failure. [ 159.365207][ T8097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.379326][ T8097] CPU: 0 UID: 0 PID: 8097 Comm: syz.2.1742 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 159.379436][ T8097] Tainted: [W]=WARN [ 159.379452][ T8097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.379471][ T8097] Call Trace: [ 159.379480][ T8097] [ 159.379490][ T8097] __dump_stack+0x1d/0x30 [ 159.379520][ T8097] dump_stack_lvl+0x95/0xd0 [ 159.379543][ T8097] dump_stack+0x15/0x1b [ 159.379568][ T8097] should_fail_ex+0x263/0x280 [ 159.379657][ T8097] should_fail+0xb/0x20 [ 159.379763][ T8097] should_fail_usercopy+0x1a/0x20 [ 159.379883][ T8097] _copy_from_user+0x1c/0xb0 [ 159.379913][ T8097] ___sys_sendmsg+0xc1/0x1e0 [ 159.379961][ T8097] __x64_sys_sendmsg+0xd4/0x160 [ 159.379995][ T8097] x64_sys_call+0x17ba/0x3000 [ 159.380102][ T8097] do_syscall_64+0xc0/0x2a0 [ 159.380147][ T8097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.380186][ T8097] RIP: 0033:0x7f00a123aeb9 [ 159.380213][ T8097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.380236][ T8097] RSP: 002b:00007f009fc97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.380264][ T8097] RAX: ffffffffffffffda RBX: 00007f00a14b5fa0 RCX: 00007f00a123aeb9 [ 159.380353][ T8097] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 159.380369][ T8097] RBP: 00007f009fc97090 R08: 0000000000000000 R09: 0000000000000000 [ 159.380384][ T8097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.380453][ T8097] R13: 00007f00a14b6038 R14: 00007f00a14b5fa0 R15: 00007ffd5fd17448 [ 159.380482][ T8097] [ 159.579795][ T8101] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1738'. [ 159.644650][ T8108] bridge0: entered promiscuous mode [ 159.706543][ T8115] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.727675][ T8115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.740679][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.750673][ T8115] ext4 filesystem being mounted at /388/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.823974][ T8122] random: crng reseeded on system resumption [ 159.842040][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.875710][ T8122] set_capacity_and_notify: 6 callbacks suppressed [ 159.875729][ T8122] loop4: detected capacity change from 0 to 512 [ 159.927979][ T8124] loop0: detected capacity change from 0 to 1024 [ 159.937723][ T8122] EXT4-fs: inline encryption not supported [ 159.954871][ T8124] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1751: Failed to acquire dquot type 0 [ 159.967242][ T8124] EXT4-fs (loop0): 1 truncate cleaned up [ 159.973737][ T8124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.988298][ T8124] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.998014][ T8125] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1746'. [ 160.060713][ T8122] EXT4-fs (loop4): 1 orphan inode deleted [ 160.067708][ T8122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.089215][ T52] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 1 [ 160.105120][ T8135] syzkaller0: entered promiscuous mode [ 160.110780][ T8135] syzkaller0: entered allmulticast mode [ 160.120326][ T8139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.130996][ T8122] ext4 filesystem being mounted at /314/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.145968][ T8139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.198131][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.252055][ T8143] process 'syz.1.1756' launched './file1' with NULL argv: empty string added [ 160.528418][ T8157] loop3: detected capacity change from 0 to 2048 [ 160.545226][ T8157] EXT4-fs: Ignoring removed mblk_io_submit option [ 160.575759][ T8157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.604512][ T8157] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.680937][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.891562][ T8172] SELinux: policydb magic number 0x64697262 does not match expected magic number 0xf97cff8c [ 160.929421][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1769'. [ 160.932829][ T8172] SELinux: failed to load policy [ 160.949043][ T8175] loop3: detected capacity change from 0 to 1024 [ 160.975557][ T8175] EXT4-fs: Ignoring removed orlov option [ 161.017830][ T8175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.163628][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.321569][ T8198] loop3: detected capacity change from 0 to 2048 [ 161.344860][ T8198] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.386081][ T8198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.409196][ T8198] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.496984][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.502576][ T8206] loop2: detected capacity change from 0 to 512 [ 161.554041][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1765'. [ 161.563034][ T8168] openvswitch: netlink: Flow key attr not present in new flow. [ 161.574751][ T8206] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 161.604109][ T8211] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1780'. [ 161.613769][ T8211] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 161.635352][ T8206] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 161.652700][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 161.652720][ T29] audit: type=1326 audit(1769658775.660:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8202 comm="syz.0.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf72afaeb9 code=0x7ffc0000 [ 161.714298][ T29] audit: type=1326 audit(1769658775.660:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8202 comm="syz.0.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf72afaeb9 code=0x7ffc0000 [ 161.738028][ T29] audit: type=1326 audit(1769658775.660:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8202 comm="syz.0.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf72afaeb9 code=0x7ffc0000 [ 161.773406][ T8206] System zones: 0-2, 18-18, 34-35 [ 161.791897][ T8220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1782'. [ 161.799779][ T8206] EXT4-fs (loop2): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.896535][ T8230] netlink: 'syz.0.1787': attribute type 30 has an invalid length. [ 161.976734][ T8241] netlink: 'syz.0.1791': attribute type 10 has an invalid length. [ 162.060030][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 162.127190][ T8242] loop4: detected capacity change from 0 to 8192 [ 162.217993][ T8257] netlink: 'syz.2.1793': attribute type 10 has an invalid length. [ 162.226463][ T8257] ipvlan0: entered allmulticast mode [ 162.231871][ T8257] veth0_vlan: entered allmulticast mode [ 162.239479][ T8257] team0: Device ipvlan0 failed to register rx_handler [ 162.323887][ T8262] FAULT_INJECTION: forcing a failure. [ 162.323887][ T8262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.337249][ T8262] CPU: 0 UID: 0 PID: 8262 Comm: syz.2.1800 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 162.337286][ T8262] Tainted: [W]=WARN [ 162.337293][ T8262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.337306][ T8262] Call Trace: [ 162.337313][ T8262] [ 162.337324][ T8262] __dump_stack+0x1d/0x30 [ 162.337430][ T8262] dump_stack_lvl+0x95/0xd0 [ 162.337527][ T8262] dump_stack+0x15/0x1b [ 162.337549][ T8262] should_fail_ex+0x263/0x280 [ 162.337622][ T8262] should_fail+0xb/0x20 [ 162.337660][ T8262] should_fail_usercopy+0x1a/0x20 [ 162.337700][ T8262] _copy_to_user+0x20/0xa0 [ 162.337795][ T8262] simple_read_from_buffer+0xb5/0x130 [ 162.337905][ T8262] proc_fail_nth_read+0x10e/0x150 [ 162.337943][ T8262] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.338006][ T8262] vfs_read+0x1ab/0x7f0 [ 162.338078][ T8262] ? __rcu_read_unlock+0x4e/0x70 [ 162.338172][ T8262] ? __fget_files+0x184/0x1c0 [ 162.338204][ T8262] ? mutex_lock+0x57/0x90 [ 162.338230][ T8262] ksys_read+0xdc/0x1a0 [ 162.338251][ T8262] __x64_sys_read+0x40/0x50 [ 162.338345][ T8262] x64_sys_call+0x2889/0x3000 [ 162.338444][ T8262] do_syscall_64+0xc0/0x2a0 [ 162.338479][ T8262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.338585][ T8262] RIP: 0033:0x7f00a11fb78e [ 162.338606][ T8262] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 162.338633][ T8262] RSP: 002b:00007f009fc96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 162.338676][ T8262] RAX: ffffffffffffffda RBX: 00007f009fc976c0 RCX: 00007f00a11fb78e [ 162.338692][ T8262] RDX: 000000000000000f RSI: 00007f009fc970a0 RDI: 0000000000000004 [ 162.338754][ T8262] RBP: 00007f009fc97090 R08: 0000000000000000 R09: 0000000000000000 [ 162.338773][ T8262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.338791][ T8262] R13: 00007f00a14b6038 R14: 00007f00a14b5fa0 R15: 00007ffd5fd17448 [ 162.338832][ T8262] [ 162.723769][ T8255] loop0: detected capacity change from 0 to 1024 [ 162.756141][ T8255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.816877][ T8272] loop3: detected capacity change from 0 to 512 [ 162.824223][ T8272] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 162.827083][ T8255] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 162.866135][ T8274] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 162.881751][ T29] audit: type=1326 audit(1769658776.890:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efc88aeb9 code=0x7ffc0000 [ 162.905954][ T29] audit: type=1326 audit(1769658776.890:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efc88aeb9 code=0x7ffc0000 [ 162.929643][ T29] audit: type=1326 audit(1769658776.890:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efc88aeb9 code=0x7ffc0000 [ 162.931237][ T8255] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 163.005853][ T29] audit: type=1326 audit(1769658776.970:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f2efc88aeb9 code=0x7ffc0000 [ 163.017563][ T8255] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28 [ 163.029597][ T29] audit: type=1326 audit(1769658776.970:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efc88aeb9 code=0x7ffc0000 [ 163.042190][ T8255] EXT4-fs (loop0): This should not happen!! Data will be lost [ 163.042190][ T8255] [ 163.042218][ T8255] EXT4-fs (loop0): Total free blocks count 0 [ 163.042235][ T8255] EXT4-fs (loop0): Free/Dirty block details [ 163.042337][ T8255] EXT4-fs (loop0): free_blocks=20480 [ 163.066151][ T29] audit: type=1326 audit(1769658776.970:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efc88aeb9 code=0x7ffc0000 [ 163.075902][ T8255] EXT4-fs (loop0): dirty_blocks=32 [ 163.075922][ T8255] EXT4-fs (loop0): Block reservation details [ 163.075937][ T8255] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 163.134414][ T29] audit: type=1326 audit(1769658776.970:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2efc88aeb9 code=0x7ffc0000 [ 163.192484][ T1913] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 163.216264][ T8287] SELinux: syz.3.1809 (8287) set checkreqprot to 1. This is no longer supported. [ 163.295995][ T8293] loop0: detected capacity change from 0 to 512 [ 163.306737][ T8293] EXT4-fs: Ignoring removed i_version option [ 163.312939][ T8293] EXT4-fs: Ignoring removed bh option [ 163.360019][ T8293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.402452][ T8293] ext4 filesystem being mounted at /395/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.454579][ T8311] batadv1: entered promiscuous mode [ 163.483124][ T8315] FAULT_INJECTION: forcing a failure. [ 163.483124][ T8315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.496601][ T8315] CPU: 1 UID: 0 PID: 8315 Comm: syz.1.1820 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 163.496662][ T8315] Tainted: [W]=WARN [ 163.496669][ T8315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.496681][ T8315] Call Trace: [ 163.496688][ T8315] [ 163.496696][ T8315] __dump_stack+0x1d/0x30 [ 163.496720][ T8315] dump_stack_lvl+0x95/0xd0 [ 163.496741][ T8315] dump_stack+0x15/0x1b [ 163.496812][ T8315] should_fail_ex+0x263/0x280 [ 163.496845][ T8315] should_fail+0xb/0x20 [ 163.496938][ T8315] should_fail_usercopy+0x1a/0x20 [ 163.496970][ T8315] _copy_from_iter+0xcf/0xea0 [ 163.497104][ T8315] ? __alloc_skb+0x397/0x4b0 [ 163.497150][ T8315] ? __alloc_skb+0x219/0x4b0 [ 163.497256][ T8315] netlink_sendmsg+0x4ae/0x6f0 [ 163.497284][ T8315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.497302][ T8315] ____sys_sendmsg+0x5af/0x600 [ 163.497400][ T8315] ___sys_sendmsg+0x195/0x1e0 [ 163.497498][ T8315] __x64_sys_sendmsg+0xd4/0x160 [ 163.497520][ T8315] x64_sys_call+0x17ba/0x3000 [ 163.497619][ T8315] do_syscall_64+0xc0/0x2a0 [ 163.497651][ T8315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.497673][ T8315] RIP: 0033:0x7f9e5312aeb9 [ 163.497688][ T8315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.497770][ T8315] RSP: 002b:00007f9e51b87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.497791][ T8315] RAX: ffffffffffffffda RBX: 00007f9e533a5fa0 RCX: 00007f9e5312aeb9 [ 163.497805][ T8315] RDX: 00000000000040c0 RSI: 0000200000000040 RDI: 0000000000000003 [ 163.497817][ T8315] RBP: 00007f9e51b87090 R08: 0000000000000000 R09: 0000000000000000 [ 163.497888][ T8315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.497904][ T8315] R13: 00007f9e533a6038 R14: 00007f9e533a5fa0 R15: 00007ffd0bbbf538 [ 163.497932][ T8315] [ 163.766850][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.802131][ T8318] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.812578][ T8318] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.893140][ T8324] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 163.913948][ T8318] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.924539][ T8318] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.936729][ T8324] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 163.947027][ T8324] System zones: 0-2, 18-18, 34-35 [ 163.953560][ T8324] EXT4-fs (loop1): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.017958][ T8318] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.028391][ T8318] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.042102][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 164.111732][ T8318] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.122227][ T8318] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.211786][ T8336] Failed to initialize the IGMP autojoin socket (err -2) [ 164.220850][ T8339] __nla_validate_parse: 8 callbacks suppressed [ 164.220870][ T8339] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1826'. [ 164.270926][ T8342] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.4.1828: corrupted xattr block 95: invalid header [ 164.292417][ T52] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.300806][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.310362][ T8342] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1828: bg 0: block 7: invalid block bitmap [ 164.323142][ T8342] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 164.332627][ T8342] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #11: comm syz.4.1828: corrupted xattr block 95: invalid header [ 164.352067][ T8342] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 164.361383][ T8342] EXT4-fs (loop4): 1 orphan inode deleted [ 164.367802][ T8342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.381413][ T3470] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.389849][ T3470] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.412681][ T3470] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.421075][ T3470] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.433912][ T3470] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.442288][ T3470] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.487676][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.668926][ T8371] netlink: 'syz.0.1833': attribute type 4 has an invalid length. [ 165.128079][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1847'. [ 165.148435][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1847'. [ 165.196322][ T8396] Failed to initialize the IGMP autojoin socket (err -2) [ 165.402021][ T8395] netlink: 'syz.4.1848': attribute type 8 has an invalid length. [ 165.432537][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1853'. [ 165.465633][ T8411] chnl_net:caif_netlink_parms(): no params data found [ 165.504839][ T8415] set_capacity_and_notify: 2 callbacks suppressed [ 165.504853][ T8415] loop1: detected capacity change from 0 to 2048 [ 165.549606][ T8415] EXT4-fs: Ignoring removed mblk_io_submit option [ 165.599042][ T8415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.654145][ T8415] ext4 filesystem being mounted at /422/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.713154][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.727272][ T8428] tmpfs: Unexpected value for 'inode32' [ 165.733947][ T8428] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1861'. [ 165.735384][ T8430] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1860'. [ 165.754780][ T8428] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1861'. [ 166.009553][ T8451] netlink: 'syz.1.1863': attribute type 4 has an invalid length. [ 166.723645][ T8469] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1875'. [ 166.795132][ T8476] loop4: detected capacity change from 0 to 512 [ 166.812611][ T8476] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 166.837289][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 166.837308][ T29] audit: type=1326 audit(1769658780.850:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8449 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5583f8aeb9 code=0x7fc00000 [ 166.897082][ T8476] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 166.909997][ T8482] FAULT_INJECTION: forcing a failure. [ 166.909997][ T8482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.924895][ T8482] CPU: 0 UID: 0 PID: 8482 Comm: syz.2.1879 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 166.924937][ T8482] Tainted: [W]=WARN [ 166.924947][ T8482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.924965][ T8482] Call Trace: [ 166.924994][ T8482] [ 166.925005][ T8482] __dump_stack+0x1d/0x30 [ 166.925040][ T8482] dump_stack_lvl+0x95/0xd0 [ 166.925068][ T8482] dump_stack+0x15/0x1b [ 166.925157][ T8482] should_fail_ex+0x263/0x280 [ 166.925196][ T8482] should_fail+0xb/0x20 [ 166.925235][ T8482] should_fail_usercopy+0x1a/0x20 [ 166.925277][ T8482] _copy_to_user+0x20/0xa0 [ 166.925362][ T8482] simple_read_from_buffer+0xb5/0x130 [ 166.925412][ T8482] proc_fail_nth_read+0x10e/0x150 [ 166.925452][ T8482] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 166.925499][ T8482] vfs_read+0x1ab/0x7f0 [ 166.925581][ T8482] ? __rcu_read_unlock+0x4e/0x70 [ 166.925624][ T8482] ? __fget_files+0x184/0x1c0 [ 166.925678][ T8482] ? mutex_lock+0x57/0x90 [ 166.925709][ T8482] ksys_read+0xdc/0x1a0 [ 166.925737][ T8482] __x64_sys_read+0x40/0x50 [ 166.925772][ T8482] x64_sys_call+0x2889/0x3000 [ 166.925803][ T8482] do_syscall_64+0xc0/0x2a0 [ 166.925851][ T8482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.925882][ T8482] RIP: 0033:0x7f00a11fb78e [ 166.925900][ T8482] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 166.925970][ T8482] RSP: 002b:00007f009fc96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 166.925995][ T8482] RAX: ffffffffffffffda RBX: 00007f009fc976c0 RCX: 00007f00a11fb78e [ 166.926014][ T8482] RDX: 000000000000000f RSI: 00007f009fc970a0 RDI: 0000000000000003 [ 166.926033][ T8482] RBP: 00007f009fc97090 R08: 0000000000000000 R09: 0000000000000000 [ 166.926051][ T8482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.926083][ T8482] R13: 00007f00a14b6038 R14: 00007f00a14b5fa0 R15: 00007ffd5fd17448 [ 166.926105][ T8482] [ 166.930451][ T8476] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1877: bg 0: block 248: padding at end of block bitmap is not set [ 167.145781][ T8476] Quota error (device loop4): write_blk: dquota write failed [ 167.153226][ T8476] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 167.163236][ T8476] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1877: Failed to acquire dquot type 1 [ 167.180875][ T8476] EXT4-fs (loop4): 1 truncate cleaned up [ 167.187464][ T8476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 167.328990][ T8485] loop3: detected capacity change from 0 to 8192 [ 167.345847][ T8485] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.365362][ T8485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1880'. [ 167.442496][ T8508] netlink: 'syz.1.1883': attribute type 4 has an invalid length. [ 167.549039][ T8512] bond2: peer notification delay (315) is not a multiple of miimon (100), value rounded to 300 ms [ 167.670024][ T8518] IPv6: NLM_F_CREATE should be specified when creating new route [ 167.686455][ T8518] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.693804][ T8518] IPv6: NLM_F_CREATE should be set when creating new route [ 167.719326][ T8518] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.726843][ T8518] IPv6: NLM_F_CREATE should be set when creating new route [ 167.916608][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 168.117648][ T8535] loop3: detected capacity change from 0 to 512 [ 168.134594][ T8535] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.141472][ T8535] EXT4-fs: Ignoring removed bh option [ 168.203978][ T8550] ip6tnl0: Caught tx_queue_len zero misconfig [ 168.210246][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1905'. [ 168.225675][ T8535] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 168.247083][ T29] audit: type=1400 audit(1769658782.260:1446): avc: denied { setopt } for pid=8543 comm="syz.2.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 168.267206][ T8535] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #11: comm syz.3.1902: corrupted inode contents [ 168.282594][ T8551] loop2: detected capacity change from 0 to 512 [ 168.304035][ T8552] Failed to initialize the IGMP autojoin socket (err -2) [ 168.314793][ T8535] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #11: comm syz.3.1902: mark_inode_dirty error [ 168.332089][ T8556] loop4: detected capacity change from 0 to 512 [ 168.336853][ T8535] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1902: invalid indirect mapped block 1 (level 1) [ 168.358217][ T8556] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 168.380660][ T8535] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #11: comm syz.3.1902: corrupted inode contents [ 168.408961][ T8535] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 168.419409][ T3307] udevd[3307]: incorrect ext4 checksum on /dev/loop4 [ 168.445030][ T8535] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #11: comm syz.3.1902: corrupted inode contents [ 168.464230][ T8535] EXT4-fs error (device loop3): ext4_truncate:4635: inode #11: comm syz.3.1902: mark_inode_dirty error [ 168.476794][ T8535] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 168.479096][ T8551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.498800][ T8535] EXT4-fs (loop3): 1 truncate cleaned up [ 168.507595][ T8535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.542560][ T8551] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.576634][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.611873][ T29] audit: type=1400 audit(1769658782.620:1447): avc: denied { sqpoll } for pid=8569 comm="syz.1.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 168.644714][ T29] audit: type=1326 audit(1769658782.630:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8569 comm="syz.1.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5312aeb9 code=0x7ffc0000 [ 168.668516][ T29] audit: type=1326 audit(1769658782.630:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8569 comm="syz.1.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e5312aeb9 code=0x7ffc0000 [ 168.692223][ T29] audit: type=1326 audit(1769658782.630:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8569 comm="syz.1.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5312aeb9 code=0x7ffc0000 [ 168.715995][ T29] audit: type=1326 audit(1769658782.630:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8569 comm="syz.1.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5312aeb9 code=0x7ffc0000 [ 168.739721][ T29] audit: type=1326 audit(1769658782.630:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8569 comm="syz.1.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e5312aeb9 code=0x7ffc0000 [ 168.766888][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.844184][ T8580] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.859733][ T8577] loop1: detected capacity change from 0 to 1764 [ 168.933514][ T8582] loop3: detected capacity change from 0 to 512 [ 168.946728][ T8582] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 168.946900][ T8582] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 168.947005][ T8582] System zones: 0-2, 18-18, 34-35 [ 168.947866][ T8582] EXT4-fs (loop3): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.053991][ T8586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=8586 comm=syz.0.1920 [ 169.073230][ T8586] loop0: detected capacity change from 0 to 512 [ 169.095040][ T8586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.095172][ T8586] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.170095][ T8592] syzkaller0: entered promiscuous mode [ 169.175885][ T8592] syzkaller0: entered allmulticast mode [ 169.199446][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.294947][ T8605] loop1: detected capacity change from 0 to 512 [ 169.302955][ T8605] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 169.319702][ T8605] EXT4-fs (loop1): orphan cleanup on readonly fs [ 169.328556][ T8605] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.1928: Allocating blocks 41-42 which overlap fs metadata [ 169.352331][ T8605] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.1928: Allocating blocks 41-42 which overlap fs metadata [ 169.370161][ T8605] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1928: Failed to acquire dquot type 1 [ 169.382647][ T8605] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 169.397807][ T8605] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.1928: corrupted inode contents [ 169.400170][ T8609] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1929: bad orphan inode 134217728 [ 169.430450][ T8605] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.1928: mark_inode_dirty error [ 169.442166][ T8605] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.1928: corrupted inode contents [ 169.448496][ T8612] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 169.463738][ T8609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.466636][ T8602] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 169.485352][ T8605] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.1928: mark_inode_dirty error [ 169.485637][ T8605] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.1928: corrupted inode contents [ 169.485825][ T8605] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 169.486011][ T8605] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.1928: corrupted inode contents [ 169.498494][ T8602] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 169.509314][ T8549] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 224: padding at end of block bitmap is not set [ 169.557960][ T8605] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.1928: mark_inode_dirty error [ 169.594375][ T8605] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 169.609589][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.625353][ T8605] EXT4-fs (loop1): 1 truncate cleaned up [ 169.631441][ T8602] FAT-fs (loop4): bogus number of reserved sectors [ 169.640207][ T8602] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 169.646055][ T8605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 169.650756][ T8602] FAT-fs (loop4): Can't find a valid FAT filesystem [ 169.671553][ T8605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.765805][ T8623] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.789875][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 169.829413][ T8623] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.840634][ T3728] loop2: p3 p4 < > [ 169.844596][ T3728] loop2: p3 size 861184 extends beyond EOD, truncated [ 169.870236][ T8617] loop2: p3 p4 < > [ 169.882897][ T8623] bond0: (slave netdevsim1): Releasing backup interface [ 169.892328][ T8623] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.904510][ T8617] loop2: p3 size 861184 extends beyond EOD, truncated [ 169.912188][ T8633] __nla_validate_parse: 4 callbacks suppressed [ 169.912207][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1937'. [ 169.927444][ T8633] netlink: 'syz.3.1937': attribute type 8 has an invalid length. [ 169.961327][ T8623] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.022539][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.037054][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.065719][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.076671][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.133826][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 170.152433][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 170.261796][ T8658] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 170.280539][ T8658] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 170.289471][ T8658] System zones: 0-2, 18-18, 34-35 [ 170.295400][ T8658] EXT4-fs (loop1): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.409813][ T8673] EXT4-fs: Ignoring removed orlov option [ 170.415700][ T8673] EXT4-fs: inline encryption not supported [ 170.433145][ T8673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.546741][ T8683] set_capacity_and_notify: 5 callbacks suppressed [ 170.546763][ T8683] loop0: detected capacity change from 0 to 512 [ 170.564142][ T8683] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 170.594858][ T8683] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 170.603796][ T8683] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.1956'. [ 170.613496][ T8683] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.1956'. [ 170.687233][ T8694] loop4: detected capacity change from 0 to 128 [ 170.695659][ T8692] loop0: detected capacity change from 0 to 512 [ 170.703768][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1954'. [ 170.713045][ T8684] openvswitch: netlink: Flow key attr not present in new flow. [ 170.738390][ T8692] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 170.746807][ T8692] System zones: 1-12 [ 170.754638][ T8692] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 33619980: comm syz.0.1957: invalid block [ 170.780821][ T8692] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1957: invalid indirect mapped block 1819239214 (level 1) [ 170.821318][ T8707] FAULT_INJECTION: forcing a failure. [ 170.821318][ T8707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.834608][ T8707] CPU: 0 UID: 0 PID: 8707 Comm: syz.4.1959 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 170.834650][ T8707] Tainted: [W]=WARN [ 170.834659][ T8707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.834672][ T8707] Call Trace: [ 170.834680][ T8707] [ 170.834690][ T8707] __dump_stack+0x1d/0x30 [ 170.834720][ T8707] dump_stack_lvl+0x95/0xd0 [ 170.834745][ T8707] dump_stack+0x15/0x1b [ 170.834817][ T8707] should_fail_ex+0x263/0x280 [ 170.834860][ T8707] should_fail+0xb/0x20 [ 170.834963][ T8707] should_fail_usercopy+0x1a/0x20 [ 170.835063][ T8707] _copy_from_user+0x1c/0xb0 [ 170.835093][ T8707] kstrtouint_from_user+0x69/0xf0 [ 170.835140][ T8707] proc_fail_nth_write+0x50/0x160 [ 170.835200][ T8707] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 170.835236][ T8707] vfs_write+0x269/0x9f0 [ 170.835262][ T8707] ? __rcu_read_unlock+0x4e/0x70 [ 170.835331][ T8707] ? __fget_files+0x184/0x1c0 [ 170.835364][ T8707] ? mutex_lock+0x57/0x90 [ 170.835395][ T8707] ksys_write+0xdc/0x1a0 [ 170.835483][ T8707] __x64_sys_write+0x40/0x50 [ 170.835581][ T8707] x64_sys_call+0x2847/0x3000 [ 170.835618][ T8707] do_syscall_64+0xc0/0x2a0 [ 170.835656][ T8707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.835751][ T8707] RIP: 0033:0x7f2efc84b78e [ 170.835775][ T8707] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 170.835802][ T8707] RSP: 002b:00007f2efb2e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 170.835886][ T8707] RAX: ffffffffffffffda RBX: 00007f2efb2e76c0 RCX: 00007f2efc84b78e [ 170.835906][ T8707] RDX: 0000000000000001 RSI: 00007f2efb2e70a0 RDI: 0000000000000003 [ 170.835924][ T8707] RBP: 00007f2efb2e7090 R08: 0000000000000000 R09: 0000000000000000 [ 170.835949][ T8707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.835968][ T8707] R13: 00007f2efcb06038 R14: 00007f2efcb05fa0 R15: 00007ffec95afd48 [ 170.836014][ T8707] [ 171.054876][ T8692] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1957: bg 0: block 361: padding at end of block bitmap is not set [ 171.084764][ T8692] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 171.094395][ T8692] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.1957: attempt to clear invalid blocks 33619980 len 1 [ 171.108373][ T8692] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1957: invalid indirect mapped block 1819239214 (level 0) [ 171.123077][ T8692] EXT4-fs (loop0): 1 truncate cleaned up [ 171.144395][ T8692] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1957'. [ 171.678137][ T8743] loop0: detected capacity change from 0 to 512 [ 171.717096][ T8743] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 171.745515][ T8743] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 171.763989][ T8743] System zones: 0-2, 18-18, 34-35 [ 171.850579][ T8750] loop3: detected capacity change from 0 to 512 [ 171.863752][ T8750] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 171.913969][ T8750] EXT4-fs (loop3): 1 truncate cleaned up [ 171.920878][ T8755] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1978'. [ 171.930054][ T8755] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 172.038758][ T8761] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1981'. [ 172.093570][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 172.093587][ T29] audit: type=1326 audit(1769659048.220:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8762 comm="syz.4.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efc88aeb9 code=0x7ffc0000 [ 172.123776][ T29] audit: type=1326 audit(1769659048.220:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8762 comm="syz.4.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efc88aeb9 code=0x7ffc0000 [ 172.165105][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1983'. [ 172.174145][ T8765] netlink: 'syz.3.1983': attribute type 30 has an invalid length. [ 172.182142][ T8765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1983'. [ 172.189275][ T7238] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 172.201319][ T8770] netlink: 'syz.4.1984': attribute type 10 has an invalid length. [ 172.210502][ T29] audit: type=1326 audit(1769659048.262:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8762 comm="syz.4.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efc88aeb9 code=0x7ffc0000 [ 172.219780][ T7238] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 172.234436][ T29] audit: type=1326 audit(1769659048.262:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8762 comm="syz.4.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efc88aeb9 code=0x7ffc0000 [ 172.234478][ T29] audit: type=1326 audit(1769659048.262:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8762 comm="syz.4.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f2efc88aeb9 code=0x7ffc0000 [ 172.234515][ T29] audit: type=1326 audit(1769659048.262:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8762 comm="syz.4.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efc88aeb9 code=0x7ffc0000 [ 172.316655][ T29] audit: type=1326 audit(1769659048.262:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8762 comm="syz.4.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2efc88aeb9 code=0x7ffc0000 [ 172.340543][ T29] audit: type=1326 audit(1769659048.262:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8762 comm="syz.4.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2efc88aeb9 code=0x7ffc0000 [ 172.364069][ T29] audit: type=1326 audit(1769659048.262:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8762 comm="syz.4.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2efc88aeb9 code=0x7ffc0000 [ 172.387602][ T8770] vlan0: left promiscuous mode [ 172.500735][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1986'. [ 172.617554][ T29] audit: type=1400 audit(1769659048.756:1542): avc: denied { cpu } for pid=8790 comm="syz.3.1991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 172.649225][ T8721] FAULT_INJECTION: forcing a failure. [ 172.649225][ T8721] name fail_futex, interval 1, probability 0, space 0, times 1 [ 172.662411][ T8721] CPU: 1 UID: 0 PID: 8721 Comm: syz.2.1964 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 172.662459][ T8721] Tainted: [W]=WARN [ 172.662469][ T8721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.662489][ T8721] Call Trace: [ 172.662499][ T8721] [ 172.662547][ T8721] __dump_stack+0x1d/0x30 [ 172.662584][ T8721] dump_stack_lvl+0x95/0xd0 [ 172.662617][ T8721] dump_stack+0x15/0x1b [ 172.662646][ T8721] should_fail_ex+0x263/0x280 [ 172.662736][ T8721] should_fail+0xb/0x20 [ 172.662775][ T8721] get_futex_key+0x12f/0xbe0 [ 172.662803][ T8721] ? __rcu_read_unlock+0x4e/0x70 [ 172.662847][ T8721] futex_wake+0x84/0x380 [ 172.662928][ T8721] ? perf_lock_task_context+0x260/0x2d0 [ 172.662968][ T8721] do_futex+0x323/0x380 [ 172.662994][ T8721] mm_release+0xa1/0x190 [ 172.663051][ T8721] exit_mm_release+0x25/0x30 [ 172.663169][ T8721] exit_mm+0x37/0x180 [ 172.663198][ T8721] do_exit+0x3fa/0x1590 [ 172.663295][ T8721] do_group_exit+0xfe/0x140 [ 172.663333][ T8721] ? get_signal+0xe47/0xf60 [ 172.663363][ T8721] get_signal+0xe4f/0xf60 [ 172.663428][ T8721] arch_do_signal_or_restart+0x96/0x450 [ 172.663528][ T8721] exit_to_user_mode_loop+0x6a/0x6f0 [ 172.663566][ T8721] do_syscall_64+0x1d3/0x2a0 [ 172.663601][ T8721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.663669][ T8721] RIP: 0033:0x7f00a123aeb9 [ 172.663692][ T8721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.663717][ T8721] RSP: 002b:00007f009fc97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 172.663786][ T8721] RAX: fffffffffffffe00 RBX: 00007f00a14b5fa0 RCX: 00007f00a123aeb9 [ 172.663806][ T8721] RDX: 00000000000000e8 RSI: 0000200000002340 RDI: 0000000000000003 [ 172.663889][ T8721] RBP: 00007f009fc97090 R08: 0000000000000000 R09: 0000000000000000 [ 172.663904][ T8721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.664001][ T8721] R13: 00007f00a14b6038 R14: 00007f00a14b5fa0 R15: 00007ffd5fd17448 [ 172.664030][ T8721] [ 172.940364][ T8797] netlink: 'syz.0.1993': attribute type 1 has an invalid length. [ 172.956271][ T8797] bond4: entered promiscuous mode [ 172.961381][ T8797] bond4: entered allmulticast mode [ 172.974016][ T8797] 8021q: adding VLAN 0 to HW filter on device bond4 [ 173.076386][ T8812] loop1: detected capacity change from 0 to 512 [ 173.106586][ T8812] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 173.157932][ T8812] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 173.174021][ T8812] System zones: 0-2, 18-18, 34-35 [ 173.258640][ T8823] 9p: Bad value for 'wfdno' [ 173.265114][ T8815] netlink: zone id is out of range [ 173.270407][ T8815] netlink: get zone limit has 4 unknown bytes [ 173.496298][ T8836] loop2: detected capacity change from 0 to 1024 [ 173.532811][ T8837] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.583705][ T8845] loop0: detected capacity change from 0 to 512 [ 173.620346][ T8845] EXT4-fs error (device loop0): __ext4_fill_super:5553: inode #2: comm syz.0.2010: iget: bad extra_isize 15 (inode size 256) [ 173.644019][ T8849] loop3: detected capacity change from 0 to 512 [ 173.651334][ T8849] EXT4-fs: Ignoring removed i_version option [ 173.657881][ T8849] EXT4-fs: Ignoring removed bh option [ 173.671390][ T8845] EXT4-fs (loop0): get root inode failed [ 173.677225][ T8845] EXT4-fs (loop0): mount failed [ 173.712750][ T8849] ext4 filesystem being mounted at /388/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.774140][ T8854] loop0: detected capacity change from 0 to 512 [ 173.789586][ T8854] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 173.830613][ T8854] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 173.878620][ T8854] System zones: 0-2, 18-18, 34-35 [ 173.914675][ T8859] EXT4-fs: Ignoring removed i_version option [ 173.921315][ T8859] EXT4-fs: Ignoring removed bh option [ 173.976636][ T8859] ext4 filesystem being mounted at /390/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.039587][ T8868] batadv0: entered promiscuous mode [ 174.139845][ T8876] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 174.174732][ T8878] bridge1: entered promiscuous mode [ 174.178319][ T8880] binfmt_misc: register: failed to install interpreter file ./file0 [ 174.212599][ T8881] EXT4-fs: Ignoring removed bh option [ 174.266939][ T8889] binfmt_misc: register: failed to install interpreter file ./file0 [ 174.340802][ T8890] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.2021: Allocating blocks 449-513 which overlap fs metadata [ 174.405273][ T8898] 9p: Bad value for 'source' [ 174.413467][ T8897] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 174.424852][ T8897] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 174.439213][ T8897] System zones: 0-2, 18-18, 34-35 [ 174.570258][ T8907] FAULT_INJECTION: forcing a failure. [ 174.570258][ T8907] name failslab, interval 1, probability 0, space 0, times 0 [ 174.583312][ T8907] CPU: 1 UID: 0 PID: 8907 Comm: syz.2.2031 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 174.583440][ T8907] Tainted: [W]=WARN [ 174.583450][ T8907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.583468][ T8907] Call Trace: [ 174.583478][ T8907] [ 174.583488][ T8907] __dump_stack+0x1d/0x30 [ 174.583532][ T8907] dump_stack_lvl+0x95/0xd0 [ 174.583558][ T8907] dump_stack+0x15/0x1b [ 174.583657][ T8907] should_fail_ex+0x263/0x280 [ 174.583695][ T8907] should_failslab+0x8c/0xb0 [ 174.584012][ T8907] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 174.584054][ T8907] ? preload_this_cpu_lock+0x5b/0xd0 [ 174.584103][ T8907] preload_this_cpu_lock+0x5b/0xd0 [ 174.584149][ T8907] alloc_vmap_area+0x338/0xe50 [ 174.584187][ T8907] ? should_fail_ex+0xd9/0x280 [ 174.584225][ T8907] ? __kmalloc_cache_node_noprof+0x2a2/0x4a0 [ 174.584385][ T8907] __get_vm_area_node+0x173/0x1d0 [ 174.584417][ T8907] __vmalloc_node_range_noprof+0x291/0x12b0 [ 174.584481][ T8907] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 174.584603][ T8907] ? __rcu_read_unlock+0x4e/0x70 [ 174.584677][ T8907] ? avc_has_perm_noaudit+0xab/0x130 [ 174.584731][ T8907] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 174.584823][ T8907] __vmalloc_noprof+0xa4/0xf0 [ 174.584856][ T8907] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 174.584908][ T8907] bpf_prog_alloc_no_stats+0x47/0x380 [ 174.584955][ T8907] ? bpf_prog_alloc+0x2a/0x150 [ 174.585066][ T8907] bpf_prog_alloc+0x3c/0x150 [ 174.585204][ T8907] bpf_prog_load+0x506/0x1140 [ 174.585256][ T8907] ? security_bpf+0x2b/0x90 [ 174.585289][ T8907] __sys_bpf+0x469/0x7b0 [ 174.585415][ T8907] __x64_sys_bpf+0x41/0x50 [ 174.585449][ T8907] x64_sys_call+0x28e1/0x3000 [ 174.585484][ T8907] do_syscall_64+0xc0/0x2a0 [ 174.585525][ T8907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.585558][ T8907] RIP: 0033:0x7f00a123aeb9 [ 174.585580][ T8907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.585604][ T8907] RSP: 002b:00007f009fc97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 174.585642][ T8907] RAX: ffffffffffffffda RBX: 00007f00a14b5fa0 RCX: 00007f00a123aeb9 [ 174.585680][ T8907] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 174.585699][ T8907] RBP: 00007f009fc97090 R08: 0000000000000000 R09: 0000000000000000 [ 174.585716][ T8907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.585730][ T8907] R13: 00007f00a14b6038 R14: 00007f00a14b5fa0 R15: 00007ffd5fd17448 [ 174.585763][ T8907] [ 174.910909][ T8919] binfmt_misc: register: failed to install interpreter file ./file0 [ 174.933406][ T8875] EXT4-fs (loop4): pa ffff888107a318c0: logic 48, phys. 177, len 21 [ 174.942246][ T8875] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 4 [ 175.014134][ T8934] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 175.082353][ T8930] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 175.113800][ T8930] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 175.122108][ T8930] System zones: 0-2, 18-18, 34-35 [ 175.152851][ T8936] SELinux: failed to load policy [ 175.235817][ T8953] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 175.282145][ T8953] EXT4-fs (loop0): couldn't read superblock of external journal [ 175.307210][ T8957] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.2052: Failed to acquire dquot type 0 [ 175.319819][ T8957] EXT4-fs (loop1): 1 truncate cleaned up [ 175.380196][ T8960] FAULT_INJECTION: forcing a failure. [ 175.380196][ T8960] name failslab, interval 1, probability 0, space 0, times 0 [ 175.392979][ T8960] CPU: 1 UID: 0 PID: 8960 Comm: syz.2.2050 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 175.393013][ T8960] Tainted: [W]=WARN [ 175.393032][ T8960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.393054][ T8960] Call Trace: [ 175.393064][ T8960] [ 175.393074][ T8960] __dump_stack+0x1d/0x30 [ 175.393103][ T8960] dump_stack_lvl+0x95/0xd0 [ 175.393202][ T8960] dump_stack+0x15/0x1b [ 175.393230][ T8960] should_fail_ex+0x263/0x280 [ 175.393272][ T8960] should_failslab+0x8c/0xb0 [ 175.393313][ T8960] __kmalloc_cache_noprof+0x64/0x4a0 [ 175.393343][ T8960] ? inet6_dump_fib+0x19d/0x6f0 [ 175.393381][ T8960] inet6_dump_fib+0x19d/0x6f0 [ 175.393465][ T8960] ? __pfx_inet6_dump_fib+0x10/0x10 [ 175.393491][ T8960] rtnl_dumpit+0x9a/0x140 [ 175.393516][ T8960] netlink_dump+0x455/0x8a0 [ 175.393635][ T8960] __netlink_dump_start+0x43e/0x520 [ 175.393680][ T8960] ? __pfx_inet6_dump_fib+0x10/0x10 [ 175.393715][ T8960] rtnetlink_rcv_msg+0x59f/0x720 [ 175.393795][ T8960] ? __pfx_inet6_dump_fib+0x10/0x10 [ 175.393828][ T8960] ? __pfx_rtnl_dumpit+0x10/0x10 [ 175.393886][ T8960] ? __pfx_inet6_dump_fib+0x10/0x10 [ 175.393923][ T8960] netlink_rcv_skb+0x123/0x220 [ 175.393965][ T8960] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 175.394000][ T8960] rtnetlink_rcv+0x1c/0x30 [ 175.394052][ T8960] netlink_unicast+0x5c0/0x690 [ 175.394097][ T8960] netlink_sendmsg+0x5c8/0x6f0 [ 175.394200][ T8960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.394220][ T8960] sock_write_iter+0x32a/0x360 [ 175.394251][ T8960] ? __pfx_sock_write_iter+0x10/0x10 [ 175.394282][ T8960] vfs_write+0x5a6/0x9f0 [ 175.394315][ T8960] ksys_write+0xdc/0x1a0 [ 175.394389][ T8960] __x64_sys_write+0x40/0x50 [ 175.394410][ T8960] x64_sys_call+0x2847/0x3000 [ 175.394441][ T8960] do_syscall_64+0xc0/0x2a0 [ 175.394502][ T8960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.394531][ T8960] RIP: 0033:0x7f00a123aeb9 [ 175.394577][ T8960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.394604][ T8960] RSP: 002b:00007f009fc97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 175.394631][ T8960] RAX: ffffffffffffffda RBX: 00007f00a14b5fa0 RCX: 00007f00a123aeb9 [ 175.394671][ T8960] RDX: 0000000000000085 RSI: 0000200000000000 RDI: 0000000000000003 [ 175.394689][ T8960] RBP: 00007f009fc97090 R08: 0000000000000000 R09: 0000000000000000 [ 175.394708][ T8960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.394726][ T8960] R13: 00007f00a14b6038 R14: 00007f00a14b5fa0 R15: 00007ffd5fd17448 [ 175.394772][ T8960] [ 175.719439][ T8968] netlink: 'syz.1.2055': attribute type 1 has an invalid length. [ 175.767602][ T8971] tmpfs: Unknown parameter '18446744073709551615' [ 175.770369][ T8968] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.918380][ T8983] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 175.925180][ T8983] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 175.933057][ T8983] vhci_hcd vhci_hcd.0: Device attached [ 175.944559][ T8976] vlan2: entered allmulticast mode [ 175.951101][ T8976] veth0_to_bond: entered allmulticast mode [ 175.979519][ T8976] bond3: (slave vlan2): Enslaving as an active interface with a down link [ 175.988333][ T8985] vhci_hcd: connection closed [ 175.988728][ T12] vhci_hcd vhci_hcd.3: stop threads [ 175.999169][ T12] vhci_hcd vhci_hcd.3: release socket [ 176.004716][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 176.030543][ T8981] set_capacity_and_notify: 7 callbacks suppressed [ 176.030639][ T8981] loop2: detected capacity change from 0 to 512 [ 176.077985][ T8981] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 176.087988][ T8981] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 176.096826][ T8981] System zones: 0-2, 18-18, 34-35 [ 176.228239][ T9003] loop1: detected capacity change from 0 to 2048 [ 176.239932][ T9003] EXT4-fs: Ignoring removed mblk_io_submit option [ 176.262092][ T9003] ext4 filesystem being mounted at /467/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.401638][ T9012] loop4: detected capacity change from 0 to 512 [ 176.459916][ T9017] loop2: detected capacity change from 0 to 2048 [ 176.465476][ T9018] binfmt_misc: register: failed to install interpreter file ./file0 [ 176.486259][ T9015] loop1: detected capacity change from 0 to 2048 [ 176.505049][ T9017] EXT4-fs: Ignoring removed mblk_io_submit option [ 176.548662][ T9017] ext4 filesystem being mounted at /377/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.560626][ T9017] FAULT_INJECTION: forcing a failure. [ 176.560626][ T9017] name failslab, interval 1, probability 0, space 0, times 0 [ 176.573882][ T9017] CPU: 0 UID: 0 PID: 9017 Comm: syz.2.2068 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 176.573924][ T9017] Tainted: [W]=WARN [ 176.573934][ T9017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.574025][ T9017] Call Trace: [ 176.574034][ T9017] [ 176.574044][ T9017] __dump_stack+0x1d/0x30 [ 176.574077][ T9017] dump_stack_lvl+0x95/0xd0 [ 176.574101][ T9017] dump_stack+0x15/0x1b [ 176.574151][ T9017] should_fail_ex+0x263/0x280 [ 176.574193][ T9017] should_failslab+0x8c/0xb0 [ 176.574226][ T9017] kmem_cache_alloc_noprof+0x68/0x490 [ 176.574300][ T9017] ? mb_cache_entry_create+0xf0/0x540 [ 176.574343][ T9017] mb_cache_entry_create+0xf0/0x540 [ 176.574386][ T9017] ext4_listxattr+0x32f/0x3d0 [ 176.574458][ T9017] ? __pfx_ext4_listxattr+0x10/0x10 [ 176.574573][ T9017] listxattr+0xd6/0x260 [ 176.574601][ T9017] __x64_sys_flistxattr+0xc7/0x120 [ 176.574629][ T9017] x64_sys_call+0x2a78/0x3000 [ 176.574661][ T9017] do_syscall_64+0xc0/0x2a0 [ 176.574794][ T9017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.574823][ T9017] RIP: 0033:0x7f00a123aeb9 [ 176.574840][ T9017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.574859][ T9017] RSP: 002b:00007f009fc97028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c4 [ 176.574911][ T9017] RAX: ffffffffffffffda RBX: 00007f00a14b5fa0 RCX: 00007f00a123aeb9 [ 176.574930][ T9017] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 176.574947][ T9017] RBP: 00007f009fc97090 R08: 0000000000000000 R09: 0000000000000000 [ 176.574963][ T9017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.574980][ T9017] R13: 00007f00a14b6038 R14: 00007f00a14b5fa0 R15: 00007ffd5fd17448 [ 176.575046][ T9017] [ 176.813515][ T9029] loop3: detected capacity change from 0 to 512 [ 176.860775][ T9029] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 176.882346][ T9029] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 176.900248][ T9029] System zones: 0-2, 18-18, 34-35 [ 177.085704][ T9052] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 177.092579][ T9052] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 177.100766][ T9052] vhci_hcd vhci_hcd.0: Device attached [ 177.126669][ T9055] vhci_hcd: cannot find the pending unlink 0 [ 177.258652][ T9055] vhci_hcd: connection closed [ 177.262690][ T52] vhci_hcd vhci_hcd.1: stop threads [ 177.273215][ T52] vhci_hcd vhci_hcd.1: release socket [ 177.279362][ T52] vhci_hcd vhci_hcd.1: disconnect device [ 177.670313][ T5458] syz_tun (unregistering): left allmulticast mode [ 177.755350][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 177.755376][ T29] audit: type=1400 audit(1769659310.156:1603): avc: denied { append } for pid=9077 comm="syz.0.2096" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 177.867619][ T9088] __nla_validate_parse: 7 callbacks suppressed [ 177.867643][ T9088] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2100'. [ 177.893500][ T1913] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.982412][ T9092] loop1: detected capacity change from 0 to 1024 [ 177.999169][ T1913] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.029543][ T9092] EXT4-fs mount: 34 callbacks suppressed [ 178.029567][ T9092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.082981][ T1913] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.120501][ T9092] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.2102: Allocating blocks 497-513 which overlap fs metadata [ 178.168371][ T9092] EXT4-fs (loop1): Remounting filesystem read-only [ 178.196911][ T1913] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.308401][ T29] audit: type=1400 audit(1769659310.744:1604): avc: denied { read } for pid=3041 comm="dhcpcd" name="n25" dev="tmpfs" ino=10717 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 178.330601][ T29] audit: type=1400 audit(1769659310.744:1605): avc: denied { open } for pid=3041 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=10717 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 178.358777][ T29] audit: type=1400 audit(1769659310.744:1606): avc: denied { getattr } for pid=3041 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=10717 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 178.413705][ T1913] bridge_slave_1: left allmulticast mode [ 178.419490][ T1913] bridge_slave_1: left promiscuous mode [ 178.425514][ T1913] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.461607][ T1913] bridge_slave_0: left allmulticast mode [ 178.467868][ T1913] bridge_slave_0: left promiscuous mode [ 178.474264][ T1913] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.485341][ T9095] 9p: Bad value for 'wfdno' [ 178.502372][ T29] audit: type=1400 audit(1769659310.954:1607): avc: denied { read open } for pid=9116 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.556942][ T29] audit: type=1400 audit(1769659310.954:1608): avc: denied { getattr } for pid=9116 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.639133][ T29] audit: type=1400 audit(1769659311.080:1609): avc: denied { open } for pid=9119 comm="syz.4.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 178.659080][ T29] audit: type=1400 audit(1769659311.080:1610): avc: denied { kernel } for pid=9119 comm="syz.4.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 178.688236][ T29] audit: type=1400 audit(1769659311.101:1611): avc: denied { write } for pid=9119 comm="syz.4.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 178.689515][ T9120] netlink: 'syz.4.2107': attribute type 6 has an invalid length. [ 178.725397][ T29] audit: type=1400 audit(1769659311.185:1612): avc: denied { mounton } for pid=9091 comm="syz.1.2102" path="/476/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 178.776637][ T1913] tipc: Left network mode [ 178.862579][ T1913] hsr_slave_0: left promiscuous mode [ 178.879985][ T9131] netlink: 'syz.0.2109': attribute type 6 has an invalid length. [ 178.887942][ T1913] hsr_slave_1: left promiscuous mode [ 178.896612][ T1913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.904311][ T1913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.940355][ T1913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.948260][ T1913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.978802][ T1913] veth0_macvtap: left promiscuous mode [ 178.985062][ T1913] veth1_vlan: left promiscuous mode [ 178.990599][ T1913] veth0_vlan: left promiscuous mode [ 179.096653][ T1913] team0 (unregistering): Port device team_slave_1 removed [ 179.109279][ T1913] team0 (unregistering): Port device team_slave_0 removed [ 179.154281][ T9104] Failed to initialize the IGMP autojoin socket (err -2) [ 179.375916][ T9156] 8021q: VLANs not supported on caif0 [ 179.435435][ T9104] chnl_net:caif_netlink_parms(): no params data found [ 179.657205][ T9163] syzkaller0: entered promiscuous mode [ 179.662926][ T9163] syzkaller0: entered allmulticast mode [ 179.840472][ T9104] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.847802][ T9104] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.931194][ T9177] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2118'. [ 179.947005][ T9104] bridge_slave_0: entered allmulticast mode [ 179.954406][ T9104] bridge_slave_0: entered promiscuous mode [ 179.961880][ T9104] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.969078][ T9104] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.976689][ T9104] bridge_slave_1: entered allmulticast mode [ 179.983394][ T9104] bridge_slave_1: entered promiscuous mode [ 180.049938][ T9104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.077483][ T9092] EXT4-fs (loop1): pa ffff88810799d310: logic 256, phys. 369, len 9 [ 180.090799][ T9104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.194532][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.218042][ T9104] team0: Port device team_slave_0 added [ 180.272025][ T9104] team0: Port device team_slave_1 added [ 180.854924][ T9104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.862169][ T9104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.888867][ T9104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.901535][ T9202] syzkaller0: entered promiscuous mode [ 180.907079][ T9202] syzkaller0: entered allmulticast mode [ 180.916136][ T9104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.923331][ T9104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.950727][ T9104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.051886][ T9104] hsr_slave_0: entered promiscuous mode [ 181.099576][ T9104] hsr_slave_1: entered promiscuous mode [ 181.110812][ T9220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9220 comm=syz.1.2129 [ 181.121341][ T9221] binfmt_misc: register: failed to install interpreter file ./file0 [ 181.197180][ T9234] loop3: detected capacity change from 0 to 512 [ 181.245469][ T9234] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 181.303748][ T9237] syzkaller0: entered promiscuous mode [ 181.309515][ T9237] syzkaller0: entered allmulticast mode [ 181.316035][ T9234] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 181.361801][ T9234] System zones: 0-2, 18-18, 34-35 [ 181.407948][ T9234] EXT4-fs (loop3): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.423596][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2139'. [ 181.492621][ T9248] binfmt_misc: register: failed to install interpreter file ./file0 [ 181.533448][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 181.559766][ T9250] binfmt_misc: register: failed to install interpreter file ./file0 [ 181.596073][ T9104] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 181.639227][ T9104] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 181.663010][ T9257] bridge_slave_0: left allmulticast mode [ 181.669082][ T9257] bridge_slave_0: left promiscuous mode [ 181.676009][ T9257] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.684055][ T9260] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9260 comm=syz.3.2141 [ 181.700224][ T9257] bridge_slave_1: left allmulticast mode [ 181.706023][ T9257] bridge_slave_1: left promiscuous mode [ 181.712510][ T9257] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.734751][ T9257] bond0: (slave bond_slave_0): Releasing backup interface [ 181.738300][ T9263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2146'. [ 181.755055][ T9257] bond0: (slave bond_slave_1): Releasing backup interface [ 181.764505][ T9257] team0: Port device team_slave_0 removed [ 181.771263][ T9257] team0: Port device team_slave_1 removed [ 181.777694][ T9257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.785724][ T9257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.793436][ T9257] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 181.816867][ T9104] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 181.830298][ T9259] Failed to initialize the IGMP autojoin socket (err -2) [ 181.834354][ T9263] vlan3: entered promiscuous mode [ 181.842520][ T9263] gretap0: entered promiscuous mode [ 181.890033][ T9104] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 181.954412][ T9275] loop4: detected capacity change from 0 to 512 [ 182.004560][ T9275] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 182.015303][ T9275] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 182.036425][ T9275] System zones: 0-2, 18-18, 34-35 [ 182.098728][ T9288] netlink: 'syz.1.2148': attribute type 4 has an invalid length. [ 182.377062][ T9104] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.462949][ T9295] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2155'. [ 182.481830][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.489254][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.540985][ T9275] EXT4-fs (loop4): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.609870][ T1913] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.617467][ T1913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.632190][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 182.800504][ T9306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2160'. [ 182.948337][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 182.948359][ T29] audit: type=1326 audit(1769659315.625:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5312aeb9 code=0x7ffc0000 [ 182.978448][ T29] audit: type=1326 audit(1769659315.625:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5312aeb9 code=0x7ffc0000 [ 183.040486][ T9104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.070996][ T29] audit: type=1326 audit(1769659315.678:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e5312aeb9 code=0x7ffc0000 [ 183.073338][ T9319] 9p: Bad value for 'wfdno' [ 183.096242][ T29] audit: type=1326 audit(1769659315.678:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5312aeb9 code=0x7ffc0000 [ 183.126193][ T29] audit: type=1326 audit(1769659315.678:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e5312aeb9 code=0x7ffc0000 [ 183.149722][ T29] audit: type=1326 audit(1769659315.678:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5312aeb9 code=0x7ffc0000 [ 183.173812][ T29] audit: type=1326 audit(1769659315.678:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9e5312aeb9 code=0x7ffc0000 [ 183.197229][ T29] audit: type=1326 audit(1769659315.678:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5312aeb9 code=0x7ffc0000 [ 183.221909][ T29] audit: type=1326 audit(1769659315.678:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f9e5312aeb9 code=0x7ffc0000 [ 183.245700][ T29] audit: type=1326 audit(1769659315.678:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.1.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5312aeb9 code=0x7ffc0000 [ 183.294495][ T9322] vlan3: entered promiscuous mode [ 183.299614][ T9322] veth0: entered promiscuous mode [ 183.354474][ T9334] loop3: detected capacity change from 0 to 512 [ 183.381497][ T9334] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 183.424944][ T9334] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.2165: corrupted in-inode xattr: overlapping e_value [ 183.458642][ T9334] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2165: couldn't read orphan inode 15 (err -117) [ 183.488078][ T9334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.517738][ T9334] Failed to initialize the IGMP autojoin socket (err -2) [ 183.585860][ T9340] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 472: padding at end of block bitmap is not set [ 183.607340][ T9350] loop4: detected capacity change from 0 to 512 [ 183.618312][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.642993][ T9353] 9p: Bad value for 'wfdno' [ 183.662778][ T9350] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.2169: invalid block [ 183.735480][ T9350] EXT4-fs (loop4): Remounting filesystem read-only [ 183.767002][ T9350] EXT4-fs (loop4): 2 truncates cleaned up [ 183.776523][ T9350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.842128][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.861992][ T9104] veth0_vlan: entered promiscuous mode [ 183.877400][ T9104] veth1_vlan: entered promiscuous mode [ 183.904434][ T9373] FAULT_INJECTION: forcing a failure. [ 183.904434][ T9373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.917745][ T9373] CPU: 1 UID: 0 PID: 9373 Comm: syz.4.2175 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 183.917782][ T9373] Tainted: [W]=WARN [ 183.917789][ T9373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 183.917809][ T9373] Call Trace: [ 183.917874][ T9373] [ 183.917891][ T9373] __dump_stack+0x1d/0x30 [ 183.917924][ T9373] dump_stack_lvl+0x95/0xd0 [ 183.917952][ T9373] dump_stack+0x15/0x1b [ 183.917993][ T9373] should_fail_ex+0x263/0x280 [ 183.918030][ T9373] should_fail+0xb/0x20 [ 183.918060][ T9373] should_fail_usercopy+0x1a/0x20 [ 183.918129][ T9373] _copy_from_user+0x1c/0xb0 [ 183.918155][ T9373] __sys_bind+0x106/0x290 [ 183.918202][ T9373] __x64_sys_bind+0x3f/0x50 [ 183.918230][ T9373] x64_sys_call+0x2ceb/0x3000 [ 183.918348][ T9373] do_syscall_64+0xc0/0x2a0 [ 183.918397][ T9373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.918427][ T9373] RIP: 0033:0x7f2efc88aeb9 [ 183.918466][ T9373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.918522][ T9373] RSP: 002b:00007f2efb2e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 183.918624][ T9373] RAX: ffffffffffffffda RBX: 00007f2efcb05fa0 RCX: 00007f2efc88aeb9 [ 183.918639][ T9373] RDX: 000000000000006e RSI: 0000200000003000 RDI: 0000000000000004 [ 183.918653][ T9373] RBP: 00007f2efb2e7090 R08: 0000000000000000 R09: 0000000000000000 [ 183.918678][ T9373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.918694][ T9373] R13: 00007f2efcb06038 R14: 00007f2efcb05fa0 R15: 00007ffec95afd48 [ 183.918782][ T9373] [ 184.055005][ T9104] veth0_macvtap: entered promiscuous mode [ 184.147610][ T9377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2177'. [ 184.171630][ T9104] veth1_macvtap: entered promiscuous mode [ 184.223784][ T9381] netlink: 'syz.0.2178': attribute type 13 has an invalid length. [ 184.225244][ T9377] vlan2: entered promiscuous mode [ 184.236810][ T9377] erspan0: entered promiscuous mode [ 184.338305][ T9402] 9p: Bad value for 'wfdno' [ 184.446313][ T9393] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2181'. [ 184.455795][ T9399] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 184.471267][ T9399] syzkaller0: entered promiscuous mode [ 184.476900][ T9399] syzkaller0: entered allmulticast mode [ 184.495420][ T9406] tipc: Enabled bearer , priority 0 [ 184.518418][ T9380] tipc: Resetting bearer [ 184.530295][ T9380] tipc: Disabling bearer [ 184.562667][ T9104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.583691][ T9104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.629135][ T9429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2187'. [ 184.650013][ T9104] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 184.675025][ T9104] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 184.700654][ T9431] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2188'. [ 184.725018][ T9104] wireguard: wg0: Could not create IPv4 socket [ 184.790786][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2192'. [ 184.820962][ T9449] vlan3: entered promiscuous mode [ 184.826143][ T9449] erspan0: entered promiscuous mode [ 184.858468][ T9104] wireguard: wg1: Could not create IPv4 socket [ 184.886143][ T9104] wireguard: wg2: Could not create IPv4 socket [ 185.058357][ T9473] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2197'. [ 185.158021][ T9478] loop1: detected capacity change from 0 to 512 [ 185.182332][ T9478] EXT4-fs: test_dummy_encryption option not supported [ 185.197972][ T9461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.245407][ T9461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.301588][ T9461] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2195'. [ 185.435324][ T9497] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2203'. [ 185.444573][ T9497] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 185.521815][ T9503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2205'. [ 185.571329][ T9503] vlan3: entered promiscuous mode [ 185.577133][ T9503] erspan0: entered promiscuous mode [ 185.988774][ T9535] loop5: detected capacity change from 0 to 512 [ 186.388401][ T9558] netlink: 'syz.3.2216': attribute type 30 has an invalid length. [ 186.702089][ T9588] netlink: 'syz.3.2223': attribute type 298 has an invalid length. [ 186.752843][ T9166] ================================================================== [ 186.761535][ T9166] BUG: KCSAN: data-race in fill_mg_cmtime / simple_unlink [ 186.768780][ T9166] [ 186.771178][ T9166] write to 0xffff88810515fdfc of 4 bytes by task 3307 on cpu 0: [ 186.778942][ T9166] simple_unlink+0x54/0x80 [ 186.783431][ T9166] shmem_unlink+0x12d/0x140 [ 186.788192][ T9166] vfs_unlink+0x28b/0x440 [ 186.792874][ T9166] do_unlinkat+0x1e2/0x4b0 [ 186.797507][ T9166] __x64_sys_unlink+0x2e/0x40 [ 186.802325][ T9166] x64_sys_call+0x2f48/0x3000 [ 186.807079][ T9166] do_syscall_64+0xc0/0x2a0 [ 186.807676][ T9600] FAULT_INJECTION: forcing a failure. [ 186.807676][ T9600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.811665][ T9166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.811699][ T9166] [ 186.811708][ T9166] read to 0xffff88810515fdfc of 4 bytes by task 9166 on cpu 1: [ 186.826330][ T9600] CPU: 0 UID: 0 PID: 9600 Comm: syz.1.2225 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 186.826510][ T9600] Tainted: [W]=WARN [ 186.826542][ T9600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.826793][ T9600] Call Trace: [ 186.826817][ T9600] [ 186.826850][ T9600] __dump_stack+0x1d/0x30 [ 186.826939][ T9600] dump_stack_lvl+0x95/0xd0 [ 186.827056][ T9600] dump_stack+0x15/0x1b [ 186.827134][ T9600] should_fail_ex+0x263/0x280 [ 186.827244][ T9600] should_fail+0xb/0x20 [ 186.827389][ T9600] should_fail_usercopy+0x1a/0x20 [ 186.827548][ T9600] _copy_to_user+0x20/0xa0 [ 186.827706][ T9600] simple_read_from_buffer+0xb5/0x130 [ 186.827899][ T9600] proc_fail_nth_read+0x10e/0x150 [ 186.828007][ T9600] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.828186][ T9600] vfs_read+0x1ab/0x7f0 [ 186.828328][ T9600] ? __rcu_read_unlock+0x4e/0x70 [ 186.828463][ T9600] ? __fget_files+0x184/0x1c0 [ 186.828544][ T9600] ? mutex_lock+0x57/0x90 [ 186.828639][ T9600] ksys_read+0xdc/0x1a0 [ 186.828710][ T9600] __x64_sys_read+0x40/0x50 [ 186.828874][ T9600] x64_sys_call+0x2889/0x3000 [ 186.829115][ T9600] do_syscall_64+0xc0/0x2a0 [ 186.829214][ T9600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.829337][ T9600] RIP: 0033:0x7f9e530eb78e [ 186.829401][ T9600] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.829473][ T9600] RSP: 002b:00007f9e51b65fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 186.829535][ T9600] RAX: ffffffffffffffda RBX: 00007f9e51b666c0 RCX: 00007f9e530eb78e [ 186.829637][ T9600] RDX: 000000000000000f RSI: 00007f9e51b660a0 RDI: 0000000000000006 [ 186.829685][ T9600] RBP: 00007f9e51b66090 R08: 0000000000000000 R09: 0000000000000000 [ 186.829804][ T9600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.829835][ T9600] R13: 00007f9e533a6128 R14: 00007f9e533a6090 R15: 00007ffd0bbbf538 [ 186.829909][ T9600] [ 187.044825][ T9166] fill_mg_cmtime+0x5b/0x260 [ 187.049558][ T9166] generic_fillattr+0x24a/0x340 [ 187.054642][ T9166] shmem_getattr+0x181/0x200 [ 187.059393][ T9166] vfs_getattr_nosec+0x146/0x1e0 [ 187.064584][ T9166] vfs_getattr+0x48/0x60 [ 187.069045][ T9166] vfs_statx_path+0x28/0x140 [ 187.073713][ T9166] vfs_statx+0xc4/0x170 [ 187.078010][ T9166] vfs_fstatat+0x115/0x170 [ 187.082834][ T9166] __se_sys_newfstatat+0x55/0x3e0 [ 187.088173][ T9166] __x64_sys_newfstatat+0x55/0x70 [ 187.093687][ T9166] x64_sys_call+0x111f/0x3000 [ 187.099059][ T9166] do_syscall_64+0xc0/0x2a0 [ 187.103756][ T9166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.110132][ T9166] [ 187.112508][ T9166] value changed: 0x2406acc6 -> 0x25018d3e [ 187.118640][ T9166] [ 187.121513][ T9166] Reported by Kernel Concurrency Sanitizer on: [ 187.128055][ T9166] CPU: 1 UID: 0 PID: 9166 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 187.139478][ T9166] Tainted: [W]=WARN [ 187.143411][ T9166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.153771][ T9166] ================================================================== [ 187.238613][ T9603] team0 (unregistering): left promiscuous mode [ 187.245028][ T9603] team_slave_0: left promiscuous mode [ 187.250731][ T9603] team_slave_1: left promiscuous mode [ 187.291741][ T9603] team0 (unregistering): Failed to send options change via netlink (err -105) [ 187.311522][ T9603] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 187.340023][ T9603] team0 (unregistering): Port device team_slave_0 removed [ 187.360567][ T9603] team0 (unregistering): Failed to send options change via netlink (err -105) [ 187.381963][ T9603] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 187.401134][ T9603] team0 (unregistering): Port device team_slave_1 removed [ 192.506899][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 192.506918][ T29] audit: type=1400 audit(1769659325.651:1779): avc: denied { recv } for pid=10239 comm="dhcpcd" src=68 daddr=255.255.255.255 dest=67 netif=veth1_to_bond scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1