last executing test programs: 4.127834847s ago: executing program 1 (id=1187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000380)={[{@data_err_abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) epoll_pwait(r1, 0x0, 0x0, 0x2d516fb6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x12, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0018001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3.939000598s ago: executing program 0 (id=1190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000002880)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000100)=[{&(0x7f00000004c0)="0321076d932c5bd6f548bdce1f5b584411db1903c1d2105fe34e700df7673496184f1c05f86cdc16f7b8360f7376e1fb254626ae7d8a9721f562d6033ca08a5551996875c9c9d24c8cd7dc3ef9836473bdaed4bae80068bae8bc63232a7e0f9a41d6f8941922508db4ae030a925491526626f56cebc31b45168accd018c4169092b15d2200e643cdb1a445b3b5e477ea1fa43b3e8a78cf4c7c6b90ce93f0d393289979da713f59", 0xa7}, {&(0x7f0000000780)="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", 0xfa}], 0x2, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}], 0x40, 0x20008844}}, {{&(0x7f0000000980)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002440)=[{&(0x7f0000000a00)="b0be9de8ecf46554a30224d72d74567bdca415e1da5a2fd42fe49f586c5d4c6817c5a5c2c2dd34c8670037f978285c36877d61334541420cebe4036827eb040140046dad9fa657e703841f219deadf9935b593b7a667bde78d486c6536fa44499423f3b7a37e3c47a45e28ff210a735f731499a2becfd7098594d8edc044b1a18a39f969243a9d13b7c3fb5b899918fbdfa80e39bc3cebb319ef378d84390bfe", 0xa0}, {&(0x7f0000000ac0)="cecda14f1e89a19399748b39f3d52aad41dc5f429326dc08178cd96ba69a54c226329d03560808858b4df3cbc769e317cbd071b4b4a4009313428d9ec9cea351bf9226a2a8b9f1f7bf5523ac9ead0d2663bdd0e9c71a507fe399a45c6e0670ef1b982e409a4cf4b410624099376ab7cd785836137b054e834b19bd29eb7a2c3d1b35d4f4641d1f7fa5d249026ba45208c73f3190d7788eff7aa60574ac79d68bfc19c470dbd92dfb238ee2257a034fefb473dc7836fe3a46b760f8932a245ba81e5fcd46", 0xc4}, {&(0x7f0000000bc0)="a76b82d778aea46b294326af8c1b23f6f0baeccd29895a02df570fead7e5b11c95bad81465f0d30db1c684bf5f9da24f961ac79f5c89445e627b1458515c3d75ba7681a3435a2f7c48f7a638c6dc28217572921baf5f0c3272", 0x59}, {&(0x7f0000000c40)="5a7c751fe73feff19770eb7c71c3495781715de7226f537eb03ca8de86a785548a4b0305b592d24dd0f2de45133c277db7b76b50599d96c4507bba412503a272b3295e99765573f2", 0x48}, {&(0x7f0000000cc0)="d1b56126412738c76fd5e8730773654810750089f2f326cb8f3786dbc0db3b2b56562d8462f766568526169c11e24813ea5a1b496e2812394f58976846aad02646666f8c09c29ecbceea6fa0bf83d639a038dca8d9311b382312732cb6736fcf393d82788ea275050eb214c8ce3f90734a2deb215b77f3", 0x77}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="805b8332d3d8353354cc8e495c62133ef71162e726ef12461eb15306af32fc6a5824df8cbb83d91a6435ac67a0aec004952c173f17d0ac6e85b5e08c15015686644bace032b4a8da1c208e67f8e9ea9a4b63a51c1a1fd6e735f436528d29d792dd4e6343b3ab", 0x66}, {&(0x7f0000002280)="1063afdc4c626c6dab72e2d787aeafca9bce842a2b5a96dcae9a38f5bb9c60556fa04867835e7e469d7c3e8e834bc3228714c20f085c015455bb564ba227416fc9605f816d388f5de6ced9af4ea01bda185e48ea189f4c804a746142b15ea637f4a51b541eefdf5093aef1c05627893fae9a881c009652452ae15bc1f3b95a1b26c4a96361e7b875029482e4f44e8f5854575307c3aa92ced047b9072f6e5e462d67cc5c9de7613837e2f3bc3efe46a2d92d73b738fc1958f3973018d33121fc3f2f6d79ab21d041", 0xc8}, {&(0x7f00000006c0)="2248bd2a9d55ab5156b8c78490d61c7dd6b8dd6f6461e568528e0e37652a235b726ad2185186a1ba63999432", 0x2c}, {&(0x7f0000002380)="ac9b25d7e08ae56f65a5b77bb7fb7fcef7c15294fb26114562c0458ee48db6357971fdb4abea04816fa80ea8ceee3184eae59f3aa07c23dce8faa972adc25b355edffa46b52b8a6f74c0eaa17c73dca7632b65e210cb3154f0ca4ca4de27ed2e131074acbb40478f8085d7de49f6bfcc95103e4c30a5ee1a4f0a7eba435f887be9225753a0b213b7e7db9fdc5be1ca47df", 0x91}], 0xa, &(0x7f0000000d40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, r2, r3]}}], 0x20, 0x4000880}}, {{&(0x7f0000002500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002840)=[{&(0x7f0000002580)="cb29e795f1846dcfc033f83c069b9ace1afc62d471123011928a75a0cafa95957dd3deb71d816d7f87809037197d1af0e633387cf48f92e95cf734a89d26e5e0d0fe1c76d78b44c706", 0x49}, {&(0x7f0000002600)="6bf592deec1f98a121d3dbdb0c8a7a9a6cf830d279e51181492410a5f54c491d6c3a60ca919671ff940c1a9b11b79e8d7956c10a8ad4d2e544be1167774f7db6e17ba961ddfd9d977d7ecbd71f5a0feadbab212fe1313d2db8118a99d0059abf2476560ecbb9abdf6dbbf791f8c150ad9ea19f453781d268fd00e1dcc60a6c6d1b7627c7d6c7ef37a131b19d2192811712d559972e16b0ec2a5786b3bc6cb66a95182e3ece88b8aff75575b4162e", 0xae}, {&(0x7f00000026c0)="8feadb863c9ec4e1868ac189769892a221d8a4d1e72a7de837af4e2b8126b29621c15f787d5e498de714c493767ec42f224eece984968949eb51b5398fafff9560aa81bd42d020de2dc675dc183532ee400013548836198f307fdcf81e8bcccf6834c24b65cbb97162ec0c072fd337c50a4edb24cf9ed906dafa2c22cb05278dd09b4533e3258036fa363df7832271a6cbdd63c5ee6e6617aadda214137455976c61", 0xa2}, {&(0x7f0000002780)="b4194f78fe99cee0ada3e501bd6692a276cc1145c7c01241034f6a0e7bd77e73c754ae5cec7c7cdd608b4d1bc57b2e312b4516bf5c163aa604b3234700973b97b190b4150d59014cf86428de06ae87f96254cb5144b5c6cce16226d55fbdbf545f97f8ee154149266c7f45477d052a91ba5807400e06aaaccdeb335435908bad8707", 0x82}], 0x4, 0x0, 0x0, 0x800}}], 0x3, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0xb, 0x0) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000280)=0x8001) close(r7) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, 0x0) r8 = io_uring_setup(0x2f00, &(0x7f0000000700)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1) r9 = io_uring_setup(0x3bb3, &(0x7f0000000600)={0x0, 0x653f, 0x80, 0x0, 0x28e}) io_uring_register$IORING_REGISTER_FILES(r9, 0x1e, &(0x7f0000000000)=[r8], 0x1) syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@data_err_abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000d80)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 3.821970055s ago: executing program 1 (id=1191): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) poll(&(0x7f0000000080)=[{r0, 0x4}], 0x1, 0x35aa) 3.73228644s ago: executing program 1 (id=1192): r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000000000000000050000000000000000000a2df3239112f0912a5675f5f52aa7ca37626278bfa36849dd22abf0f1ea8c03b316e675244e25d7fb1fe7277360c75d866a57eb7b9f98ade11592750c4efb690fff1efde373651bf1a3dbba7839a052ac9ca6a2a8d24d170ee083354767c9376680b4b200b8616192fa6d6aae794348ca7cfedfcae6dcee38537659d068e547297dd1ca6c19c53d84e0"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x44000004) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = fcntl$dupfd(r2, 0x406, r2) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b80)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x24040841}, 0x40008) socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) faccessat(r3, &(0x7f00000001c0)='./file0\x00', 0xd2) recvmsg(0xffffffffffffffff, 0x0, 0x40000100) write$binfmt_elf64(r3, &(0x7f0000000f80)=ANY=[], 0x540) shutdown(r2, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0x3f, &(0x7f0000000140)=ANY=[], 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="20000000f6c435d4df100013a9119e000000000000000000007bdf8b8b647b8656edc19d71fe2e66b9bdc53980cf9a25a67f52aaa0db5fd3174904dfb4", @ANYRES32=0x0, @ANYBLOB="0300000000000000"], 0x20}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') close_range(r6, 0xffffffffffffffff, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x698, 0x138, 0x138, 0x138, 0x208, 0x138, 0x5c8, 0x5c8, 0x5c8, 0x5c8, 0x5c8, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"fbdb"}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xb, 0x0, "875a32d23c5bf9cb20a5b2e3e8a5d71eeeed82537e53d79a38f829551c9b"}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @loopback, [0xffffff00, 0x0, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffff], 'veth0_to_bond\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x1, 0x9, 0x5, 0x4}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@frag={{0x30}, {[0x7fffffff, 0xa], 0x2ae1, 0x10}}, @common=@srh1={{0x90}, {0x2b, 0x92, 0x2, 0x4e, 0x9, @dev={0xfe, 0x80, '\x00', 0x10}, @private1, @ipv4={'\x00', '\xff\xff', @local}, [0xffffff00, 0xff, 0xff, 0xffffff00], [0x0, 0xffffff, 0x0, 0xffffff00], [0xffffff, 0xff, 0x0, 0x6ecbe2a26008a93c], 0x40, 0x4}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@local, 0x3e, 0x38, 0x7}}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @remote}, [0xff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff000000, 0xffffffff, 0xff000000], 'gretap0\x00', 'veth0_vlan\x00', {}, {}, 0x4, 0x2, 0x7, 0x40}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}, {0x2, 0x20, 0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@local, 0x1f, 0x28, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f8) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)=0x1) 3.657756395s ago: executing program 3 (id=1193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={'ipvlan0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x35, 0x0, 0x2}, {0x5}, {0x2}, {0x6, 0x0, 0x0, 0x400}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x20}, [@IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)) recvmmsg(0xffffffffffffffff, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {&(0x7f00000004c0)=""/4, 0x4}], 0x2}}], 0x1, 0x40000041, 0x0) r8 = socket$key(0xf, 0x3, 0x2) readv(r4, &(0x7f0000000840)=[{&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/169, 0xa9}, {&(0x7f0000000700)=""/74, 0x4a}, {&(0x7f0000000780)=""/156, 0x9c}], 0x5) recvmmsg(r8, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x3c7a997d82a3969f, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {0x0, 0x2}, {0x2, 0x10}}}, 0x24}}, 0x40004) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) 2.667289703s ago: executing program 1 (id=1197): r0 = gettid() r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, r1, 0x0, 0x4, &(0x7f0000000000)='GPL\x00'}, 0x30) keyctl$set_reqkey_keyring(0xe, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r6, &(0x7f00000008c0)={&(0x7f0000000600)=@name={0x1e, 0x2, 0x0, {{0x0, 0x101d0}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) getsockopt(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x74, 0x30, 0x1, 0x8000000, 0x3, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0x69, 0x6, 0x1, 0xd817}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x74}}, 0x0) request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket(0x1e, 0x4, 0x0) sendmmsg(r7, 0x0, 0x0, 0x9200000000000000) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) request_key(0x0, &(0x7f0000000780)={'syz', 0x0}, &(0x7f0000000740)='lon\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003100)={0x11, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="cf82ffff4c84af4416a96e5c172fddc5898aa9990b5480b74a7e0631f29f727bd8d25c4d82239a05f6"], &(0x7f0000002fc0)='GPL\x00', 0xf, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd5}, 0x94) 2.600400317s ago: executing program 0 (id=1199): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0314644f00021202004788aa96a13bb1000011", 0x14, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 2.599581707s ago: executing program 3 (id=1200): socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x1, 0x0, 0x7, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") r0 = add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r0, r1) r2 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x22) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x8}, 0x0, 0x3c, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="8cff7cf908"], 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21891d, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e8, &(0x7f0000000f40)="$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") r5 = syz_io_uring_setup(0xec2, &(0x7f00000003c0)={0x0, 0x0, 0x100, 0x7}, &(0x7f0000000580)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x95d, 0xfa39, 0xe1, 0x0, 0x0) io_uring_enter(r5, 0xedd, 0x8acb, 0x41, 0x0, 0x0) 2.519641952s ago: executing program 0 (id=1202): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2000, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @multicast1}, @info_request={0xf, 0x0, 0x0, 0x401}}}}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0xf8) syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), r2) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44840}, 0x1) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x7}}, {{0xa, 0x2002, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}}}, 0x108) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) r3 = getpid() syz_pidfd_open(r3, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000100)={0x2, 0x1, 0x19ad, 0x9, r3}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x2, @mcast2, 0x9}}}, 0x30) syz_emit_ethernet(0x4c, &(0x7f0000000180)={@multicast, @broadcast, @void, {@generic={0x88a2, "f7c13e1024e56ecb42d79518d88f460fddbc7ae6c1b4ae85ba288b507e845837e7604609ccf2bfcf0808fa3c86d3bd19c5a4f2eff87a1d0a0e2c872c0a90"}}}, &(0x7f0000000040)={0x1, 0x3, [0x2aa, 0xcd8, 0x56f, 0x1c3]}) close_range(r1, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0xfffffffe}]}}, @TCA_RATE={0x6, 0x5, {0xcf, 0x11}}]}, 0x44}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) 2.318306184s ago: executing program 0 (id=1204): prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000040)='\x00^', 0x2}], 0x1) syz_io_uring_setup(0xda, &(0x7f0000000480)={0x0, 0x183, 0x8, 0x1, 0x15}, &(0x7f0000000000)=0x0, &(0x7f0000000640)) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffd, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="100000000314000026bd7000ffdbdf25e0dacc724d7beaaab94d4e620912b9b0f9c892a138790bf1b5cf092cb08351593ad763e80040a0f9df43e4c8fb7f1153e1cf3a3df706e35a06fc62"], 0x10}, 0x1, 0x0, 0x0, 0x20004054}, 0x40) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x48) unshare(0x20040600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x1, 0x538, &(0x7f0000003480)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000009, 0x4082172, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 2.237560808s ago: executing program 1 (id=1207): prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) set_tid_address(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x17, 0x0, 0x9, 0x8000, 0x104}, 0x50) (fail_nth: 2) 2.236712119s ago: executing program 2 (id=1208): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0xfffe, 0x5, {}, 0x2000000000001005, 0x19dff, 0x8001}}}, 0x90) fchmod(r0, 0x4) 2.172036452s ago: executing program 1 (id=1209): prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000040)='\x00^', 0x2}], 0x1) syz_io_uring_setup(0xda, &(0x7f0000000480)={0x0, 0x183, 0x8, 0x1, 0x15}, &(0x7f0000000000)=0x0, &(0x7f0000000640)) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffd, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="100000000314000026bd7000ffdbdf25e0dacc724d7beaaab94d4e620912b9b0f9c892a138790bf1b5cf092cb08351593ad763e80040a0f9df43e4c8fb7f1153e1cf3a3df706e35a06fc62"], 0x10}, 0x1, 0x0, 0x0, 0x20004054}, 0x40) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x48) unshare(0x20040600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="7ddb889a", 0xfffffcda}], 0x1}}], 0x1, 0x20000054) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2.115213156s ago: executing program 2 (id=1211): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000000)=@l2tp6={0x2a, 0x0, 0xc58, @private2, 0x8, 0x3}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x38}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000003010102000000000000000002000009100001800c00028005000100060000000c0019800800010008ff"], 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x20004c00) 1.626811994s ago: executing program 4 (id=1214): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x100000004, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x8}}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001433af1e930001006d61637666616e000404028008000500", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x1d, r8}, 0x10, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="07000000000000000e00000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r9, @ANYRES64=r10/1000+10000, @ANYBLOB="0100002001000045050000a03b020000b0c1ea5f2b364a4ad5800831f5fb01005346f2ea000000000000009b76aeb133aa2de38eed1428f000cbdc738e832c7cbe2b3aa06e79e7b70c3ecebc523e5b77a50481ef891280a35fbffa66ab28e7e88b462ac4e168be6fcca3b71d9915"], 0x80}, 0x1, 0x0, 0x0, 0x4000001}, 0x20044000) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x6, 0x440e, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x8, 0x9}, 0x1c110, 0x7, 0x8, 0x0, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) fsmount(r11, 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8d) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r12, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0xfffffffc, @mcast1, 0x6}, {0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa078}, r13, 0x2000000}}, 0x48) 1.472049594s ago: executing program 4 (id=1215): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2000, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @multicast1}, @info_request={0xf, 0x0, 0x0, 0x401}}}}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0xf8) syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), r2) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44840}, 0x1) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x7}}, {{0xa, 0x2002, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}}}, 0x108) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) r3 = getpid() syz_pidfd_open(r3, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000100)={0x2, 0x1, 0x19ad, 0x9, r3}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x2, @mcast2, 0x9}}}, 0x30) syz_emit_ethernet(0x4c, &(0x7f0000000180)={@multicast, @broadcast, @void, {@generic={0x88a2, "f7c13e1024e56ecb42d79518d88f460fddbc7ae6c1b4ae85ba288b507e845837e7604609ccf2bfcf0808fa3c86d3bd19c5a4f2eff87a1d0a0e2c872c0a90"}}}, &(0x7f0000000040)={0x1, 0x3, [0x2aa, 0xcd8, 0x56f, 0x1c3]}) close_range(r1, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0xfffffffe}]}}, @TCA_RATE={0x6, 0x5, {0xcf, 0x11}}]}, 0x44}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) 1.416865607s ago: executing program 4 (id=1216): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0xeb51a8ffd4e6d429, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb4926923763960100180000000000000076cf7f5d1900000004000000020000000100000f010000000300000001010000000000004800000000003000"], 0x0, 0x38, 0x0, 0x1}, 0x28) syz_clone(0x20021000, &(0x7f0000001180), 0x0, &(0x7f0000000240), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) chroot(&(0x7f0000000140)='./file0\x00') r7 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r7, 0x2) shutdown(r7, 0x2) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r8 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x28903) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000040)=0x85) ioctl$SG_GET_NUM_WAITING(r8, 0x227d, &(0x7f0000000000)) 1.18040818s ago: executing program 2 (id=1217): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (fail_nth: 9) 767.876985ms ago: executing program 2 (id=1218): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1018, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x40000008, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@data_err_ignore}, {@errors_remount}, {@bsdgroups}], [{@obj_role={'obj_role', 0x3d, '\xe7\xde\xb6\xd5Rv\xc5\xe0\x93\x88u\xecE\x19Zr\xc0\x8a\xc6\x9b_\xfaLGz\x1aS\xe6\xe2t\xe1\xab\xc6\xfb\x9a@3\xfc\xd5>\x983\x91\x0fgx\xfb\xaa\xa5\xa9=\x1b\xc0.\x1fpt\xa5\xca\xde\x0e\x9b\xdc4\xfd/\x80n\x1b\xfeaY\xb7\xda\a\xe2F2\x98\x93\xba\xfb\x83\xe8\x1aV2\x954R\xe9,\x8cn\x9b\xf2\xc4~\xf5\xf3\xcc\x05K\a|\x8e\xa5\xaa\xb8\x88\xffLD\x0fJ~,\x03\xf7\x8b\r\x00'/134}}]}, 0x1, 0x788, &(0x7f00000004c0)="$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") r2 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000007c0)='\xd5@=\b\a:\x993\x00', &(0x7f0000000600)='dU|\xcbM\xe6\x91q\b', 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0xef, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44f81}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) 674.980051ms ago: executing program 0 (id=1219): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0xc0042, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x3e}, 0x4502, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x7000000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000010026bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="814f0500402c00002000128008000100687372001400028008000200", @ANYRES32=r1, @ANYBLOB="f405038e", @ANYRES32=r1, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000100)) 653.180512ms ago: executing program 3 (id=1220): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newsa={0x13c, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@empty, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x21}, {@in=@multicast2, 0x0, 0x32}, @in=@multicast1, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8, 0x80000, 0x81}, {0x3, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80020}, 0x0, 0x0, 0x2, 0x4, 0x81, 0x68}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) 618.887373ms ago: executing program 3 (id=1221): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$tmpfs(0x0, &(0x7f0000000380)='./file0/../file0\x00', 0x302a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) chroot(0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) pivot_root(0x0, 0x0) syz_io_uring_setup(0xd85, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000"], 0x50) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xd5d1, 0x103a83) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10) syz_open_dev$evdev(0x0, 0x800002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xfffffffffffffd7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x5, r5, &(0x7f0000000240), 0x101) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000, 0x1, {0x0, r3}}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x1, 0xcbe, 0x0, 0x0, 0x2, 0x1, {0x2, r3}}) ptrace(0x11, r0) 556.135767ms ago: executing program 2 (id=1222): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x101, 0xd8c9ae33088fbdd2) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0], 0x2, 0x101}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6002173600442b00fc020600"], 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007"], 0x38}}, 0x40004010) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 480.861871ms ago: executing program 3 (id=1223): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) stat(0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) write$eventfd(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000300000e000a000f00000002800000", 0x2c}], 0x1}, 0x4008084) 387.159687ms ago: executing program 4 (id=1224): socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x22040, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000440)=0xa) (fail_nth: 1) sendmsg$nl_route(r0, 0x0, 0xc000) 124.000643ms ago: executing program 0 (id=1225): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x100000004, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x8}}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001433af1e930001006d61637666616e000404028008000500", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x1d, r8}, 0x10, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="07000000000000000e00000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r9, @ANYRES64=r10/1000+10000, @ANYBLOB="0100002001000045050000a03b020000b0c1ea5f2b364a4ad5800831f5fb01005346f2ea000000000000009b76aeb133aa2de38eed1428f000cbdc738e832c7cbe2b3aa06e79e7b70c3ecebc523e5b77a50481ef891280a35fbffa66ab28e7e88b462ac4e168be6fcca3b71d9915"], 0x80}, 0x1, 0x0, 0x0, 0x4000001}, 0x20044000) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x6, 0x440e, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x8, 0x9}, 0x1c110, 0x7, 0x8, 0x0, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) fsmount(r11, 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8d) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r12, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0xfffffffc, @mcast1, 0x6}, {0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa078}, r13, 0x2000000}}, 0x48) 123.503563ms ago: executing program 4 (id=1226): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2000, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @multicast1}, @info_request={0xf, 0x0, 0x0, 0x401}}}}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0xf8) syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), r2) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44840}, 0x1) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x7}}, {{0xa, 0x2002, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}}}, 0x108) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) r3 = getpid() syz_pidfd_open(r3, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000100)={0x2, 0x1, 0x19ad, 0x9, r3}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x2, @mcast2, 0x9}}}, 0x30) syz_emit_ethernet(0x4c, &(0x7f0000000180)={@multicast, @broadcast, @void, {@generic={0x88a2, "f7c13e1024e56ecb42d79518d88f460fddbc7ae6c1b4ae85ba288b507e845837e7604609ccf2bfcf0808fa3c86d3bd19c5a4f2eff87a1d0a0e2c872c0a90"}}}, &(0x7f0000000040)={0x1, 0x3, [0x2aa, 0xcd8, 0x56f, 0x1c3]}) close_range(r1, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0xfffffffe}]}}, @TCA_RATE={0x6, 0x5, {0xcf, 0x11}}]}, 0x44}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) 98.368364ms ago: executing program 3 (id=1227): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r1, 0x0, 0x0, 0x22, 0x0, 0x0) gettid() (async) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000024b4001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="02000000003f00002400128009000100626f6e64000000001400028005001500000000000500010002000000"], 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 62.781626ms ago: executing program 4 (id=1228): set_tid_address(&(0x7f0000000140)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000180)="e6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, 0x0, 0x0, 0x40000141, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) r2 = socket(0x10, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xa0179e08}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x40800, 0x20) finit_module(r4, 0x0, 0x3) epoll_wait(r3, &(0x7f0000000480)=[{}], 0x1, 0x7fffffff) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x8, r1}, 0x38) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xaa9b, 0x13500, 0x0, 0xe2}, &(0x7f0000000240), &(0x7f0000001880)) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x400100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) waitid(0x1, r7, 0x0, 0x8, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xe2}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r9, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 0s ago: executing program 2 (id=1229): prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000040)='\x00^', 0x2}], 0x1) syz_io_uring_setup(0xda, &(0x7f0000000480)={0x0, 0x183, 0x8, 0x1, 0x15}, &(0x7f0000000000)=0x0, &(0x7f0000000640)) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffd, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="100000000314000026bd7000ffdbdf25e0dacc724d7beaaab94d4e620912b9b0f9c892a138790bf1b5cf092cb08351593ad763e80040a0f9df43e4c8fb7f1153e1cf3a3df706e35a06fc62"], 0x10}, 0x1, 0x0, 0x0, 0x20004054}, 0x40) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x48) unshare(0x20040600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x1, 0x538, &(0x7f0000003480)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000009, 0x4082172, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) kernel console output (not intermixed with test programs): slave geneve2): Enslaving as an active interface with an up link [ 77.117267][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.142115][ T3692] udevd[3692]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 77.152438][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 77.229425][ T5500] bond0: Caught tx_queue_len zero misconfig [ 77.264523][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.277382][ T5502] FAULT_INJECTION: forcing a failure. [ 77.277382][ T5502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.290570][ T5502] CPU: 0 UID: 0 PID: 5502 Comm: syz.1.705 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.290668][ T5502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.290685][ T5502] Call Trace: [ 77.290758][ T5502] [ 77.290767][ T5502] __dump_stack+0x1d/0x30 [ 77.290797][ T5502] dump_stack_lvl+0x95/0xd0 [ 77.290857][ T5502] dump_stack+0x15/0x1b [ 77.290883][ T5502] should_fail_ex+0x263/0x280 [ 77.290913][ T5502] should_fail+0xb/0x20 [ 77.290962][ T5502] should_fail_usercopy+0x1a/0x20 [ 77.290987][ T5502] _copy_from_iter+0xcf/0xea0 [ 77.291012][ T5502] ? __alloc_skb+0x397/0x4b0 [ 77.291031][ T5502] ? __alloc_skb+0x219/0x4b0 [ 77.291053][ T5502] netlink_sendmsg+0x4ae/0x6f0 [ 77.291109][ T5502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.291145][ T5502] __sock_sendmsg+0x145/0x170 [ 77.291186][ T5502] ____sys_sendmsg+0x31e/0x4a0 [ 77.291273][ T5502] ___sys_sendmsg+0x195/0x1e0 [ 77.291317][ T5502] __x64_sys_sendmsg+0xd4/0x160 [ 77.291361][ T5502] x64_sys_call+0x17ba/0x3000 [ 77.291394][ T5502] do_syscall_64+0xc0/0x2a0 [ 77.291425][ T5502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.291468][ T5502] RIP: 0033:0x7fed54ebacb9 [ 77.291490][ T5502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.291515][ T5502] RSP: 002b:00007fed53917028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.291542][ T5502] RAX: ffffffffffffffda RBX: 00007fed55135fa0 RCX: 00007fed54ebacb9 [ 77.291595][ T5502] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 77.291612][ T5502] RBP: 00007fed53917090 R08: 0000000000000000 R09: 0000000000000000 [ 77.291708][ T5502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.291720][ T5502] R13: 00007fed55136038 R14: 00007fed55135fa0 R15: 00007ffee0478b68 [ 77.291747][ T5502] [ 77.488112][ T5477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.697'. [ 77.515219][ T5503] netlink: 'syz.3.703': attribute type 1 has an invalid length. [ 77.629764][ T5514] netlink: 'syz.1.710': attribute type 10 has an invalid length. [ 77.641944][ T5516] loop2: detected capacity change from 0 to 1024 [ 77.707604][ T5516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 77.719995][ T5516] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.735162][ T5516] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 3: comm syz.2.711: lblock 3 mapped to illegal pblock 3 (length 3) [ 77.749909][ T5516] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 77.762325][ T5516] EXT4-fs (loop2): This should not happen!! Data will be lost [ 77.762325][ T5516] [ 77.781303][ T5516] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.711: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 77.810662][ T5512] netlink: 'syz.4.709': attribute type 16 has an invalid length. [ 77.818572][ T5512] netlink: 156 bytes leftover after parsing attributes in process `syz.4.709'. [ 77.856079][ T5516] EXT4-fs error (device loop2) in ext4_setattr:6035: Corrupt filesystem [ 77.888847][ T5531] netlink: 28 bytes leftover after parsing attributes in process `syz.3.716'. [ 77.897776][ T5531] netlink: 28 bytes leftover after parsing attributes in process `syz.3.716'. [ 77.921586][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 78.118935][ T5546] EXT4-fs: Ignoring removed orlov option [ 78.161463][ T5546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.186387][ T5546] netlink: 'syz.3.723': attribute type 10 has an invalid length. [ 78.198678][ T5548] netlink: 'syz.0.722': attribute type 10 has an invalid length. [ 78.201266][ T5546] team0: Port device dummy0 added [ 78.218175][ T5546] netlink: 'syz.3.723': attribute type 10 has an invalid length. [ 78.230221][ T5546] team0: Port device dummy0 removed [ 78.247793][ T5546] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 78.278170][ T5548] team0: Port device dummy0 added [ 78.300406][ T5546] syz.3.723 (5546) used greatest stack depth: 9464 bytes left [ 78.349761][ T5552] team0: Port device dummy0 removed [ 78.359468][ T5552] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 78.370780][ T5556] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 78.379779][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.422532][ T5560] netlink: 64 bytes leftover after parsing attributes in process `syz.3.725'. [ 78.443541][ T5556] EXT4-fs (loop1): 1 truncate cleaned up [ 78.456971][ T5556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.471145][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 78.471163][ T29] audit: type=1400 audit(1769019092.592:1984): avc: denied { create } for pid=5559 comm="syz.3.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.500248][ T5560] IPVS: set_ctl: invalid protocol: 1 100.1.1.1:20004 [ 78.528617][ T5556] EXT4-fs error (device loop1): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.1.726: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 78.587953][ T29] audit: type=1400 audit(1769019092.622:1985): avc: denied { ioctl } for pid=5559 comm="syz.3.725" path="socket:[13588]" dev="sockfs" ino=13588 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.613605][ T29] audit: type=1400 audit(1769019092.622:1986): avc: denied { setopt } for pid=5559 comm="syz.3.725" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.634292][ T29] audit: type=1400 audit(1769019092.632:1987): avc: denied { read write } for pid=5562 comm="syz.4.729" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 78.658620][ T29] audit: type=1400 audit(1769019092.632:1988): avc: denied { open } for pid=5562 comm="syz.4.729" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 78.688580][ T5556] EXT4-fs error (device loop1) in ext4_delete_entry:2737: Corrupt filesystem [ 78.704590][ T5556] EXT4-fs warning (device loop1): ext4_rename_delete:3729: inode #2: comm syz.1.726: Deleting old file: nlink 4, error=-117 [ 78.718342][ T5565] bond0: (slave dummy0): Releasing backup interface [ 78.739911][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.759250][ T5565] team0: Port device dummy0 added [ 78.782865][ T5570] netlink: 80 bytes leftover after parsing attributes in process `syz.4.731'. [ 78.812575][ T5572] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8192 sclass=netlink_xfrm_socket pid=5572 comm=syz.3.733 [ 78.825174][ T5572] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=118 sclass=netlink_xfrm_socket pid=5572 comm=syz.3.733 [ 78.889254][ T5569] team0: Port device dummy0 removed [ 78.920570][ T5569] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 78.938408][ T3309] loop2: p1 p3 p4 [ 78.960016][ T3309] loop2: p4 size 589824 extends beyond EOD, truncated [ 78.983641][ T5574] loop2: p1 p3 p4 [ 78.999356][ T5574] loop2: p4 size 589824 extends beyond EOD, truncated [ 79.085397][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 79.095768][ T3691] udevd[3691]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 79.107038][ T29] audit: type=1400 audit(1769019093.222:1989): avc: denied { create } for pid=5583 comm="syz.4.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.175747][ T5591] netlink: 156 bytes leftover after parsing attributes in process `syz.2.741'. [ 79.186003][ T29] audit: type=1400 audit(1769019093.292:1990): avc: denied { bind } for pid=5583 comm="syz.4.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.248600][ T5592] bond0: (slave dummy0): Releasing backup interface [ 79.277982][ T29] audit: type=1400 audit(1769019093.312:1991): avc: denied { setopt } for pid=5583 comm="syz.4.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.301861][ T5600] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 79.359156][ T29] audit: type=1400 audit(1769019093.442:1992): avc: denied { mount } for pid=5601 comm="syz.2.744" name="/" dev="ramfs" ino=14432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 79.381765][ T29] audit: type=1400 audit(1769019093.452:1993): avc: denied { connect } for pid=5601 comm="syz.2.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.462296][ T5592] net_ratelimit: 2 callbacks suppressed [ 79.462363][ T5592] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 79.536762][ T5608] __nla_validate_parse: 1 callbacks suppressed [ 79.536787][ T5608] netlink: 80 bytes leftover after parsing attributes in process `syz.2.746'. [ 79.570650][ T5603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.746562][ T5624] set_capacity_and_notify: 3 callbacks suppressed [ 79.746664][ T5624] loop4: detected capacity change from 0 to 128 [ 79.865601][ T5620] program syz.2.751 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.999337][ T5624] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.017977][ T5624] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.513276][ T5635] bond0: (slave dummy0): Releasing backup interface [ 80.567258][ T5635] team0: Port device dummy0 added [ 80.609394][ T5643] team0: Port device dummy0 removed [ 80.668714][ T5645] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 80.677305][ T5645] FAT-fs (loop4): Filesystem has been set read-only [ 80.689621][ T5643] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 80.855800][ T5649] loop1: detected capacity change from 0 to 1024 [ 80.900613][ T5649] EXT4-fs: Ignoring removed orlov option [ 81.044844][ T5656] loop3: detected capacity change from 0 to 512 [ 81.166763][ T5649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.223539][ T5656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.277147][ T5656] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.483730][ T5649] validate_nla: 9 callbacks suppressed [ 81.483748][ T5649] netlink: 'syz.1.760': attribute type 10 has an invalid length. [ 81.559351][ T5656] SELinux: policydb string does not match my string SE Linux [ 81.598475][ T5661] netlink: 'syz.1.760': attribute type 10 has an invalid length. [ 81.618125][ T5656] SELinux: failed to load policy [ 81.670205][ T5649] team0: Port device dummy0 added [ 81.729265][ T5661] team0: Port device dummy0 removed [ 81.796805][ T5661] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 81.967216][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.980775][ T5660] SELinux: policydb string does not match my string SE Linux [ 81.998618][ T5660] SELinux: failed to load policy [ 82.008800][ T5672] loop1: detected capacity change from 0 to 256 [ 82.015703][ T5672] vfat: Bad value for 'shortname' [ 82.071337][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.090732][ T5674] SELinux: policydb magic number 0x4 does not match expected magic number 0xf97cff8c [ 82.108561][ T5674] SELinux: failed to load policy [ 82.304737][ T5686] netlink: 16 bytes leftover after parsing attributes in process `syz.2.774'. [ 82.344929][ T5691] netlink: 'syz.0.776': attribute type 10 has an invalid length. [ 82.411996][ T5693] bond0: (slave dummy0): Releasing backup interface [ 82.433811][ T5696] loop1: detected capacity change from 0 to 1024 [ 82.451585][ T5696] EXT4-fs: Ignoring removed orlov option [ 82.467506][ T5693] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 82.485263][ T5696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.510856][ T5676] loop3: detected capacity change from 0 to 164 [ 82.551979][ T5693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.572990][ T5696] netlink: 'syz.1.779': attribute type 10 has an invalid length. [ 82.591081][ T5696] bond0: (slave dummy0): Releasing backup interface [ 82.596498][ T5702] netlink: 'syz.0.780': attribute type 10 has an invalid length. [ 82.609287][ T5696] team0: Port device dummy0 added [ 82.622003][ T5696] netlink: 'syz.1.779': attribute type 10 has an invalid length. [ 82.633735][ T5702] bond0: (slave dummy0): Releasing backup interface [ 82.648105][ T5703] netlink: 'syz.0.780': attribute type 10 has an invalid length. [ 82.650646][ T5702] team0: Port device dummy0 added [ 82.665484][ T5696] team0: Port device dummy0 removed [ 82.674739][ T5696] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 82.690176][ T5703] team0: Port device dummy0 removed [ 82.708595][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.730076][ T5705] netlink: 'syz.1.781': attribute type 10 has an invalid length. [ 82.742629][ T5703] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 82.785912][ T5707] netlink: 'syz.1.782': attribute type 4 has an invalid length. [ 82.793640][ T5707] netlink: 152 bytes leftover after parsing attributes in process `syz.1.782'. [ 82.832697][ T5707] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 83.398772][ T5714] program syz.4.785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.427869][ T5725] bond0: Caught tx_queue_len zero misconfig [ 83.569425][ T5726] SELinux: policydb string does not match my string SE Linux [ 83.616049][ T5726] SELinux: failed to load policy [ 83.779639][ T5732] netlink: 'syz.3.790': attribute type 16 has an invalid length. [ 83.787550][ T5732] netlink: 156 bytes leftover after parsing attributes in process `syz.3.790'. [ 83.821228][ T5734] loop2: detected capacity change from 0 to 1024 [ 83.838424][ T5734] EXT4-fs: Ignoring removed orlov option [ 83.865410][ T5734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.987441][ T5734] team0: Port device dummy0 added [ 83.996939][ T5734] team0: Port device dummy0 removed [ 84.047410][ T5734] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 84.108156][ T5737] hub 2-0:1.0: USB hub found [ 84.113079][ T5737] hub 2-0:1.0: 8 ports detected [ 84.162195][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.239355][ T5748] bond0: (slave dummy0): Releasing backup interface [ 84.277198][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 84.277218][ T29] audit: type=1400 audit(1769019098.392:2015): avc: denied { setopt } for pid=5745 comm="syz.2.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.279424][ T5748] team0: Port device dummy0 added [ 84.387408][ T5752] SELinux: policydb string does not match my string SE Linux [ 84.406619][ T5749] team0: Port device dummy0 removed [ 84.416631][ T5752] SELinux: failed to load policy [ 84.434872][ T5749] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 84.754442][ T5768] loop3: detected capacity change from 0 to 512 [ 84.798704][ T5772] FAULT_INJECTION: forcing a failure. [ 84.798704][ T5772] name failslab, interval 1, probability 0, space 0, times 0 [ 84.811466][ T5772] CPU: 0 UID: 0 PID: 5772 Comm: syz.1.803 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.811515][ T5772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.811533][ T5772] Call Trace: [ 84.811543][ T5772] [ 84.811554][ T5772] __dump_stack+0x1d/0x30 [ 84.811588][ T5772] dump_stack_lvl+0x95/0xd0 [ 84.811617][ T5772] dump_stack+0x15/0x1b [ 84.811676][ T5772] should_fail_ex+0x263/0x280 [ 84.811718][ T5772] should_failslab+0x8c/0xb0 [ 84.811740][ T5772] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 84.811763][ T5772] ? __d_alloc+0x37/0x340 [ 84.811795][ T5772] __d_alloc+0x37/0x340 [ 84.811888][ T5772] ? default_pointer+0xf2/0x5e0 [ 84.811922][ T5772] d_alloc+0x2e/0x100 [ 84.811996][ T5772] lookup_one_qstr_excl+0x99/0x250 [ 84.812033][ T5772] start_dirop+0x3e/0x70 [ 84.812066][ T5772] simple_start_creating+0xa2/0xd0 [ 84.812104][ T5772] debugfs_start_creating+0xda/0x150 [ 84.812134][ T5772] __debugfs_create_file+0x70/0x2b0 [ 84.812162][ T5772] debugfs_create_file_full+0x3f/0x60 [ 84.812207][ T5772] ? __pfx_macvlan_setup+0x10/0x10 [ 84.812317][ T5772] ref_tracker_dir_debugfs+0x10e/0x220 [ 84.812349][ T5772] alloc_netdev_mqs+0x1a7/0xa40 [ 84.812377][ T5772] rtnl_create_link+0x239/0x720 [ 84.812412][ T5772] rtnl_newlink_create+0x174/0x650 [ 84.812520][ T5772] ? security_capable+0x7b/0x90 [ 84.812567][ T5772] ? netlink_ns_capable+0x86/0xa0 [ 84.812604][ T5772] rtnl_newlink+0xf5b/0x1370 [ 84.812741][ T5772] ? skb_network_protocol+0x329/0x420 [ 84.812773][ T5772] ? __rcu_read_unlock+0x4e/0x70 [ 84.812801][ T5772] ? avc_has_perm_noaudit+0xab/0x130 [ 84.812890][ T5772] ? cred_has_capability+0x224/0x290 [ 84.812937][ T5772] ? selinux_capable+0x31/0x40 [ 84.812964][ T5772] ? security_capable+0x7b/0x90 [ 84.813005][ T5772] ? ns_capable+0x7c/0xb0 [ 84.813089][ T5772] ? __pfx_rtnl_newlink+0x10/0x10 [ 84.813137][ T5772] rtnetlink_rcv_msg+0x64b/0x720 [ 84.813181][ T5772] netlink_rcv_skb+0x123/0x220 [ 84.813262][ T5772] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 84.813370][ T5772] rtnetlink_rcv+0x1c/0x30 [ 84.813435][ T5772] netlink_unicast+0x5c0/0x690 [ 84.813477][ T5772] netlink_sendmsg+0x5c8/0x6f0 [ 84.813574][ T5772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.813606][ T5772] __sock_sendmsg+0x145/0x170 [ 84.813707][ T5772] ____sys_sendmsg+0x31e/0x4a0 [ 84.813739][ T5772] ___sys_sendmsg+0x195/0x1e0 [ 84.813788][ T5772] __x64_sys_sendmsg+0xd4/0x160 [ 84.813826][ T5772] x64_sys_call+0x17ba/0x3000 [ 84.813869][ T5772] do_syscall_64+0xc0/0x2a0 [ 84.813977][ T5772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.814009][ T5772] RIP: 0033:0x7fed54ebacb9 [ 84.814031][ T5772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.814076][ T5772] RSP: 002b:00007fed53917028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.814104][ T5772] RAX: ffffffffffffffda RBX: 00007fed55135fa0 RCX: 00007fed54ebacb9 [ 84.814124][ T5772] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 84.814141][ T5772] RBP: 00007fed53917090 R08: 0000000000000000 R09: 0000000000000000 [ 84.814155][ T5772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.814171][ T5772] R13: 00007fed55136038 R14: 00007fed55135fa0 R15: 00007ffee0478b68 [ 84.814197][ T5772] [ 85.156007][ T5772] dummy0: entered promiscuous mode [ 85.161575][ T5772] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 85.227969][ T29] audit: type=1400 audit(1769019099.322:2016): avc: denied { ioctl } for pid=5773 comm="syz.1.805" path="socket:[14880]" dev="sockfs" ino=14880 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 85.351619][ T29] audit: type=1400 audit(1769019099.392:2017): avc: denied { shutdown } for pid=5775 comm="syz.1.806" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.372201][ T29] audit: type=1400 audit(1769019099.392:2018): avc: denied { write } for pid=5775 comm="syz.1.806" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.403884][ T5780] loop1: detected capacity change from 0 to 1024 [ 85.419948][ T5780] EXT4-fs: Ignoring removed orlov option [ 85.465138][ T5780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.493263][ T5780] bond0: (slave dummy0): Releasing backup interface [ 85.505483][ T5780] dummy0: left promiscuous mode [ 85.523061][ T5780] team0: Port device dummy0 added [ 85.541119][ T5768] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.573560][ T5768] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.589892][ T5783] team0: Port device dummy0 removed [ 85.617760][ T5783] dummy0: entered promiscuous mode [ 85.635572][ T5783] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 85.696359][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.728614][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.792667][ T5787] loop3: detected capacity change from 0 to 512 [ 85.823997][ T5789] FAULT_INJECTION: forcing a failure. [ 85.823997][ T5789] name failslab, interval 1, probability 0, space 0, times 0 [ 85.836760][ T5789] CPU: 0 UID: 0 PID: 5789 Comm: syz.1.810 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.836830][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 85.836849][ T5789] Call Trace: [ 85.836869][ T5789] [ 85.836880][ T5789] __dump_stack+0x1d/0x30 [ 85.836916][ T5789] dump_stack_lvl+0x95/0xd0 [ 85.837008][ T5789] dump_stack+0x15/0x1b [ 85.837036][ T5789] should_fail_ex+0x263/0x280 [ 85.837066][ T5789] should_failslab+0x8c/0xb0 [ 85.837112][ T5789] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 85.837152][ T5789] ? __alloc_skb+0x2f0/0x4b0 [ 85.837181][ T5789] __alloc_skb+0x2f0/0x4b0 [ 85.837207][ T5789] ? __alloc_skb+0x219/0x4b0 [ 85.837234][ T5789] netlink_alloc_large_skb+0xbf/0xf0 [ 85.837268][ T5789] netlink_sendmsg+0x40c/0x6f0 [ 85.837317][ T5789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.837355][ T5789] __sock_sendmsg+0x145/0x170 [ 85.837445][ T5789] ____sys_sendmsg+0x31e/0x4a0 [ 85.837485][ T5789] ___sys_sendmsg+0x195/0x1e0 [ 85.837534][ T5789] __x64_sys_sendmsg+0xd4/0x160 [ 85.837590][ T5789] x64_sys_call+0x17ba/0x3000 [ 85.837701][ T5789] do_syscall_64+0xc0/0x2a0 [ 85.837731][ T5789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.837837][ T5789] RIP: 0033:0x7fed54ebacb9 [ 85.837866][ T5789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.837973][ T5789] RSP: 002b:00007fed53917028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.838070][ T5789] RAX: ffffffffffffffda RBX: 00007fed55135fa0 RCX: 00007fed54ebacb9 [ 85.838090][ T5789] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 85.838182][ T5789] RBP: 00007fed53917090 R08: 0000000000000000 R09: 0000000000000000 [ 85.838198][ T5789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.838238][ T5789] R13: 00007fed55136038 R14: 00007fed55135fa0 R15: 00007ffee0478b68 [ 85.838318][ T5789] [ 86.035483][ T29] audit: type=1400 audit(1769019099.942:2019): avc: denied { ioctl } for pid=5788 comm="syz.1.810" path="socket:[14925]" dev="sockfs" ino=14925 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.115239][ T5787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.166242][ T5793] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 86.175937][ T5787] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.221813][ T29] audit: type=1400 audit(1769019100.342:2020): avc: denied { relabelfrom } for pid=5786 comm="syz.3.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 86.242354][ T29] audit: type=1400 audit(1769019100.342:2021): avc: denied { relabelto } for pid=5786 comm="syz.3.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 86.265303][ T5787] netlink: 44 bytes leftover after parsing attributes in process `syz.3.809'. [ 86.277002][ T5787] netlink: 48 bytes leftover after parsing attributes in process `syz.3.809'. [ 86.307809][ T5787] EXT4-fs: Ignoring removed orlov option [ 86.314954][ T5787] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.329959][ T5787] EXT4-fs (loop3): can't enable nombcache during remount [ 86.339560][ T29] audit: type=1400 audit(1769019100.422:2022): avc: denied { remount } for pid=5786 comm="syz.3.809" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 86.402106][ T5799] loop1: detected capacity change from 0 to 512 [ 86.414961][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.467520][ T5799] EXT4-fs (loop1): 1 orphan inode deleted [ 86.479611][ T5784] syz.0.808 (5784) used greatest stack depth: 9376 bytes left [ 86.487539][ T5742] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 86.497463][ T5742] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 1 [ 86.518382][ T5799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.546541][ T5805] FAULT_INJECTION: forcing a failure. [ 86.546541][ T5805] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 86.559910][ T5805] CPU: 1 UID: 0 PID: 5805 Comm: syz.0.816 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.559941][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.560033][ T5805] Call Trace: [ 86.560042][ T5805] [ 86.560053][ T5805] __dump_stack+0x1d/0x30 [ 86.560087][ T5805] dump_stack_lvl+0x95/0xd0 [ 86.560182][ T5805] dump_stack+0x15/0x1b [ 86.560210][ T5805] should_fail_ex+0x263/0x280 [ 86.560238][ T5805] should_fail_alloc_page+0xf2/0x100 [ 86.560274][ T5805] __alloc_frozen_pages_noprof+0x108/0x350 [ 86.560370][ T5805] alloc_pages_mpol+0xb3/0x260 [ 86.560408][ T5805] ? css_rstat_updated+0xbb/0x280 [ 86.560494][ T5805] vma_alloc_folio_noprof+0x1a9/0x300 [ 86.560529][ T5805] handle_mm_fault+0x111f/0x3030 [ 86.560638][ T5805] ? vma_start_read+0x1c7/0x2c0 [ 86.560675][ T5805] do_user_addr_fault+0x62f/0x1050 [ 86.560714][ T5805] ? ksys_mmap_pgoff+0xc1/0x310 [ 86.560758][ T5805] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 86.560792][ T5805] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 86.560839][ T5805] ? irqentry_exit+0x3c/0x510 [ 86.560872][ T5805] exc_page_fault+0x62/0xa0 [ 86.560901][ T5805] asm_exc_page_fault+0x26/0x30 [ 86.560934][ T5805] RIP: 0033:0x7f0f617e27e3 [ 86.560951][ T5805] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 86.560973][ T5805] RSP: 002b:00007f0f60386470 EFLAGS: 00010202 [ 86.560996][ T5805] RAX: 000000000000a000 RBX: 00007f0f60386530 RCX: 00007f0f57f67000 [ 86.561072][ T5805] RDX: 00007f0f603866d0 RSI: 0000000000000019 RDI: 00007f0f603865d0 [ 86.561086][ T5805] RBP: 0000000000000055 R08: 0000000000000006 R09: 000000000000000f [ 86.561098][ T5805] R10: 000000000000001c R11: 00007f0f60386530 R12: 0000000000000001 [ 86.561116][ T5805] R13: 00007f0f619d7880 R14: 0000000000000001 R15: 00007f0f603865d0 [ 86.561177][ T5805] [ 86.561192][ T5805] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 86.693227][ T5799] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.788589][ T29] audit: type=1400 audit(1769019100.912:2023): avc: denied { write } for pid=5811 comm="syz.0.819" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.884891][ T5822] tipc: Enabling of bearer rejected, failed to enable media [ 86.915193][ T5824] ip6tnl0: Caught tx_queue_len zero misconfig [ 86.935794][ T5823] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 86.960374][ T5826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.821'. [ 87.224482][ T5832] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 87.246462][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.250393][ T5834] SELinux: policydb string does not match my string SE Linux [ 87.277533][ T5834] SELinux: failed to load policy [ 87.319867][ T5834] bridge_slave_1: entered promiscuous mode [ 87.365310][ T5832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 87.428690][ T5832] netlink: 80 bytes leftover after parsing attributes in process `syz.4.823'. [ 87.561207][ T5810] loop3: detected capacity change from 0 to 512 [ 87.574491][ T5770] loop2: detected capacity change from 0 to 164 [ 87.633276][ T5852] netlink: 32 bytes leftover after parsing attributes in process `syz.4.831'. [ 87.784953][ T5866] netlink: 40 bytes leftover after parsing attributes in process `syz.0.835'. [ 87.793996][ T5866] netlink: 40 bytes leftover after parsing attributes in process `syz.0.835'. [ 87.804082][ T5866] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 87.822355][ T5866] validate_nla: 8 callbacks suppressed [ 87.822432][ T5866] netlink: 'syz.0.835': attribute type 16 has an invalid length. [ 87.835968][ T5866] netlink: 156 bytes leftover after parsing attributes in process `syz.0.835'. [ 87.903099][ T5810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.922579][ T5810] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.033055][ T5871] bond0: (slave dummy0): Releasing backup interface [ 88.080026][ T5871] dummy0: left promiscuous mode [ 88.102868][ T5871] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 88.140305][ T5819] SELinux: policydb string does not match my string SE Linux [ 88.153643][ T5819] SELinux: failed to load policy [ 88.204353][ T5875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.784604][ T5884] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 88.829266][ T5886] loop2: detected capacity change from 0 to 164 [ 88.962700][ T5890] loop2: detected capacity change from 0 to 1024 [ 88.963480][ T5857] loop4: detected capacity change from 0 to 512 [ 89.025008][ T5890] EXT4-fs: Ignoring removed orlov option [ 89.052620][ T5890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.089460][ T5890] netlink: 'syz.2.844': attribute type 10 has an invalid length. [ 89.145385][ T5890] bond0: (slave dummy0): Releasing backup interface [ 89.165956][ T5896] netlink: 'syz.2.844': attribute type 10 has an invalid length. [ 89.175976][ T5890] team0: Port device dummy0 added [ 89.218928][ T5896] team0: Port device dummy0 removed [ 89.246033][ T5896] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 89.273481][ T5857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.300593][ T5857] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.325323][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.406650][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.472837][ T5912] SELinux: policydb string does not match my string SE Linux [ 89.481235][ T5912] SELinux: failed to load policy [ 89.605153][ T5921] loop1: detected capacity change from 0 to 512 [ 89.620745][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.641036][ T5918] bond0: (slave dummy0): Releasing backup interface [ 89.649133][ T5921] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.855: inode has both inline data and extents flags [ 89.683217][ T5921] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.855: couldn't read orphan inode 15 (err -117) [ 89.731388][ T5918] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 89.768991][ T5926] FAULT_INJECTION: forcing a failure. [ 89.768991][ T5926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.782463][ T5926] CPU: 0 UID: 0 PID: 5926 Comm: syz.4.856 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.782514][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 89.782656][ T5926] Call Trace: [ 89.782665][ T5926] [ 89.782676][ T5926] __dump_stack+0x1d/0x30 [ 89.782757][ T5926] dump_stack_lvl+0x95/0xd0 [ 89.782779][ T5926] dump_stack+0x15/0x1b [ 89.782805][ T5926] should_fail_ex+0x263/0x280 [ 89.782861][ T5926] should_fail+0xb/0x20 [ 89.782948][ T5926] should_fail_usercopy+0x1a/0x20 [ 89.782978][ T5926] _copy_from_user+0x1c/0xb0 [ 89.783011][ T5926] sock_do_ioctl+0xe5/0x230 [ 89.783049][ T5926] sock_ioctl+0x41b/0x610 [ 89.783107][ T5926] ? __pfx_sock_ioctl+0x10/0x10 [ 89.783141][ T5926] __se_sys_ioctl+0xce/0x140 [ 89.783182][ T5926] __x64_sys_ioctl+0x43/0x50 [ 89.783220][ T5926] x64_sys_call+0x14b0/0x3000 [ 89.783284][ T5926] do_syscall_64+0xc0/0x2a0 [ 89.783317][ T5926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.783367][ T5926] RIP: 0033:0x7f3170e4acb9 [ 89.783389][ T5926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.783432][ T5926] RSP: 002b:00007f316f8a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.783459][ T5926] RAX: ffffffffffffffda RBX: 00007f31710c5fa0 RCX: 00007f3170e4acb9 [ 89.783477][ T5926] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000031 [ 89.783495][ T5926] RBP: 00007f316f8a7090 R08: 0000000000000000 R09: 0000000000000000 [ 89.783576][ T5926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.783661][ T5926] R13: 00007f31710c6038 R14: 00007f31710c5fa0 R15: 00007fff5e484fd8 [ 89.783687][ T5926] [ 89.849764][ T5921] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.028433][ T5924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.286168][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.320628][ T5937] loop1: detected capacity change from 0 to 1024 [ 90.355819][ T5937] EXT4-fs: Ignoring removed orlov option [ 90.378463][ T5937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.401759][ T5904] loop2: detected capacity change from 0 to 164 [ 90.468600][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 90.468623][ T29] audit: type=1400 audit(1769019104.592:2030): avc: denied { mounton } for pid=5944 comm="syz.4.862" path="/proc/398/cgroup" dev="proc" ino=15277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 90.531644][ T5937] netlink: 'syz.1.859': attribute type 10 has an invalid length. [ 90.542545][ T5937] team0: Port device dummy0 added [ 90.548461][ T5937] netlink: 'syz.1.859': attribute type 10 has an invalid length. [ 90.558500][ T5937] team0: Port device dummy0 removed [ 90.604648][ T5937] dummy0: entered promiscuous mode [ 90.653479][ T5937] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 90.746268][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.877170][ T29] audit: type=1400 audit(1769019104.992:2031): avc: denied { create } for pid=5960 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 90.971106][ T5961] ieee802154 phy0 wpan0: encryption failed: -22 [ 90.998027][ T29] audit: type=1400 audit(1769019105.082:2032): avc: denied { setopt } for pid=5960 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.017632][ T29] audit: type=1400 audit(1769019105.092:2033): avc: denied { write } for pid=5960 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 91.037840][ T29] audit: type=1400 audit(1769019105.092:2034): avc: denied { read } for pid=5960 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 91.063824][ T5967] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 91.105414][ T5967] SELinux: failed to load policy [ 91.116261][ T5964] FAULT_INJECTION: forcing a failure. [ 91.116261][ T5964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.129464][ T5964] CPU: 0 UID: 0 PID: 5964 Comm: syz.1.867 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.129509][ T5964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.129538][ T5964] Call Trace: [ 91.129548][ T5964] [ 91.129558][ T5964] __dump_stack+0x1d/0x30 [ 91.129594][ T5964] dump_stack_lvl+0x95/0xd0 [ 91.129637][ T5964] dump_stack+0x15/0x1b [ 91.129665][ T5964] should_fail_ex+0x263/0x280 [ 91.129695][ T5964] should_fail+0xb/0x20 [ 91.129719][ T5964] should_fail_usercopy+0x1a/0x20 [ 91.129805][ T5964] _copy_from_iter+0xcf/0xea0 [ 91.129862][ T5964] ? __alloc_skb+0x397/0x4b0 [ 91.129888][ T5964] ? __alloc_skb+0x219/0x4b0 [ 91.129946][ T5964] netlink_sendmsg+0x4ae/0x6f0 [ 91.129986][ T5964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.130022][ T5964] __sock_sendmsg+0x145/0x170 [ 91.130082][ T5964] ____sys_sendmsg+0x31e/0x4a0 [ 91.130175][ T5964] ___sys_sendmsg+0x195/0x1e0 [ 91.130221][ T5964] __x64_sys_sendmsg+0xd4/0x160 [ 91.130258][ T5964] x64_sys_call+0x17ba/0x3000 [ 91.130292][ T5964] do_syscall_64+0xc0/0x2a0 [ 91.130379][ T5964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.130463][ T5964] RIP: 0033:0x7fed54ebacb9 [ 91.130492][ T5964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.130545][ T5964] RSP: 002b:00007fed53917028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.130573][ T5964] RAX: ffffffffffffffda RBX: 00007fed55135fa0 RCX: 00007fed54ebacb9 [ 91.130593][ T5964] RDX: 000000002008c010 RSI: 0000200000000580 RDI: 0000000000000006 [ 91.130611][ T5964] RBP: 00007fed53917090 R08: 0000000000000000 R09: 0000000000000000 [ 91.130629][ T5964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.130646][ T5964] R13: 00007fed55136038 R14: 00007fed55135fa0 R15: 00007ffee0478b68 [ 91.130705][ T5964] [ 91.339830][ T29] audit: type=1400 audit(1769019105.252:2035): avc: denied { kexec_image_load } for pid=5960 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 91.442741][ T5972] SELinux: policydb string does not match my string SE Linux [ 91.482625][ T5972] SELinux: failed to load policy [ 91.495137][ T5973] bridge_slave_1: entered promiscuous mode [ 91.501656][ T5972] netlink: 'syz.1.868': attribute type 13 has an invalid length. [ 91.699159][ T5977] SELinux: failed to load policy [ 91.778598][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.874'. [ 91.843830][ T5989] xt_hashlimit: max too large, truncated to 1048576 [ 91.852617][ T5996] netlink: 40 bytes leftover after parsing attributes in process `syz.0.877'. [ 91.861765][ T5996] netlink: 40 bytes leftover after parsing attributes in process `syz.0.877'. [ 91.871229][ T5992] netlink: 'syz.3.875': attribute type 10 has an invalid length. [ 91.878201][ T29] audit: type=1400 audit(1769019105.992:2036): avc: denied { setopt } for pid=5988 comm="syz.1.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 91.898536][ T29] audit: type=1400 audit(1769019105.992:2037): avc: denied { connect } for pid=5988 comm="syz.1.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 91.901004][ T5996] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 91.939698][ T29] audit: type=1400 audit(1769019106.052:2038): avc: denied { write } for pid=5988 comm="syz.1.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 91.985421][ T5996] netlink: 'syz.0.877': attribute type 16 has an invalid length. [ 91.993786][ T5996] netlink: 156 bytes leftover after parsing attributes in process `syz.0.877'. [ 92.003077][ T29] audit: type=1400 audit(1769019106.082:2039): avc: denied { setopt } for pid=5988 comm="syz.1.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 92.040569][ T6007] loop2: detected capacity change from 0 to 1024 [ 92.053850][ T6007] EXT4-fs (loop2): inodes count not valid: 7 vs 32 [ 92.056598][ T6009] loop1: detected capacity change from 0 to 512 [ 92.114496][ T6009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.146013][ T6009] EXT4-fs (loop1): resizing filesystem from 256 to 1 blocks [ 92.153450][ T6009] EXT4-fs warning (device loop1): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 92.192990][ T6024] loop2: detected capacity change from 0 to 1024 [ 92.204033][ T6024] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.218265][ T6024] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.237631][ T6026] FAULT_INJECTION: forcing a failure. [ 92.237631][ T6026] name failslab, interval 1, probability 0, space 0, times 0 [ 92.250491][ T6026] CPU: 1 UID: 0 PID: 6026 Comm: syz.0.886 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.250522][ T6026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 92.250594][ T6026] Call Trace: [ 92.250605][ T6026] [ 92.250616][ T6026] __dump_stack+0x1d/0x30 [ 92.250651][ T6026] dump_stack_lvl+0x95/0xd0 [ 92.250681][ T6026] dump_stack+0x15/0x1b [ 92.250739][ T6026] should_fail_ex+0x263/0x280 [ 92.250836][ T6026] should_failslab+0x8c/0xb0 [ 92.250888][ T6026] __kmalloc_cache_noprof+0x64/0x4a0 [ 92.250946][ T6026] ? allocate_file_region_entries+0xdd/0x310 [ 92.250978][ T6026] allocate_file_region_entries+0xdd/0x310 [ 92.251011][ T6026] region_chg+0x232/0x2d0 [ 92.251055][ T6026] alloc_hugetlb_folio+0x2d6/0xfd0 [ 92.251134][ T6026] hugetlb_no_page+0x4ce/0x10d0 [ 92.251179][ T6026] ? huge_pte_alloc+0x2cc/0x490 [ 92.251297][ T6026] hugetlb_fault+0x53c/0xdd0 [ 92.251347][ T6026] handle_mm_fault+0x1bea/0x3030 [ 92.251454][ T6026] ? __rcu_read_unlock+0x4e/0x70 [ 92.251482][ T6026] ? try_grab_folio+0x75/0x170 [ 92.251758][ T6026] ? down_read+0x76/0xb0 [ 92.251792][ T6026] __get_user_pages+0x1023/0x1ea0 [ 92.251832][ T6026] __mm_populate+0x242/0x390 [ 92.251899][ T6026] vm_mmap_pgoff+0x23b/0x2d0 [ 92.251929][ T6026] ksys_mmap_pgoff+0x2cf/0x310 [ 92.251964][ T6026] x64_sys_call+0x16bb/0x3000 [ 92.251993][ T6026] do_syscall_64+0xc0/0x2a0 [ 92.252140][ T6026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.252172][ T6026] RIP: 0033:0x7f0f6192acb9 [ 92.252194][ T6026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.252284][ T6026] RSP: 002b:00007f0f60387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 92.252310][ T6026] RAX: ffffffffffffffda RBX: 00007f0f61ba5fa0 RCX: 00007f0f6192acb9 [ 92.252352][ T6026] RDX: 0000000000000003 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 92.252371][ T6026] RBP: 00007f0f60387090 R08: ffffffffffffffff R09: 0000000000000000 [ 92.252419][ T6026] R10: 00020000000ec071 R11: 0000000000000246 R12: 0000000000000002 [ 92.252501][ T6026] R13: 00007f0f61ba6038 R14: 00007f0f61ba5fa0 R15: 00007ffe2d7ec768 [ 92.252524][ T6026] [ 92.257461][ T6024] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 92.265379][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.887'. [ 92.273394][ T6024] System zones: 0-1, 3-36 [ 92.505489][ T6024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.548406][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.584905][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.892'. [ 92.588217][ T6045] netlink: 'syz.2.891': attribute type 10 has an invalid length. [ 92.608702][ T6043] xt_hashlimit: max too large, truncated to 1048576 [ 92.634201][ T6048] netlink: 40 bytes leftover after parsing attributes in process `syz.2.894'. [ 92.643339][ T6048] netlink: 40 bytes leftover after parsing attributes in process `syz.2.894'. [ 92.653302][ T6048] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 92.673723][ T6046] veth0: entered promiscuous mode [ 92.679275][ T6048] netlink: 'syz.2.894': attribute type 16 has an invalid length. [ 92.680532][ T6046] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 92.687089][ T6048] netlink: 156 bytes leftover after parsing attributes in process `syz.2.894'. [ 92.695105][ T6046] vhci_hcd vhci_hcd.2: invalid port number 96 [ 92.710023][ T6046] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 92.726234][ T6044] veth0: left promiscuous mode [ 92.760849][ T6052] bond0: (slave dummy0): Releasing backup interface [ 92.783329][ T6052] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 92.805508][ T6050] unsupported nlmsg_type 40 [ 92.876905][ T6052] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.905162][ T6060] netlink: 'syz.4.898': attribute type 11 has an invalid length. [ 92.914808][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.967786][ T6069] FAULT_INJECTION: forcing a failure. [ 92.967786][ T6069] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 92.981578][ T6069] CPU: 1 UID: 0 PID: 6069 Comm: syz.1.902 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.981610][ T6069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 92.981625][ T6069] Call Trace: [ 92.981631][ T6069] [ 92.981640][ T6069] __dump_stack+0x1d/0x30 [ 92.981668][ T6069] dump_stack_lvl+0x95/0xd0 [ 92.981692][ T6069] dump_stack+0x15/0x1b [ 92.981756][ T6069] should_fail_ex+0x263/0x280 [ 92.981780][ T6069] should_fail_alloc_page+0xf2/0x100 [ 92.981805][ T6069] __alloc_frozen_pages_noprof+0x108/0x350 [ 92.981848][ T6069] alloc_pages_mpol+0xb3/0x260 [ 92.981884][ T6069] alloc_pages_noprof+0x8f/0x130 [ 92.981914][ T6069] pte_alloc_one+0x1e/0xd0 [ 92.981987][ T6069] __pte_alloc+0x32/0x2c0 [ 92.982013][ T6069] handle_mm_fault+0x2057/0x3030 [ 92.982048][ T6069] ? vma_start_read+0x1c7/0x2c0 [ 92.982167][ T6069] do_user_addr_fault+0x62f/0x1050 [ 92.982238][ T6069] ? ksys_mmap_pgoff+0xc1/0x310 [ 92.982265][ T6069] ? __x64_sys_mmap+0x49/0x70 [ 92.982301][ T6069] exc_page_fault+0x62/0xa0 [ 92.982327][ T6069] asm_exc_page_fault+0x26/0x30 [ 92.982401][ T6069] RIP: 0033:0x7fed54d7288e [ 92.982419][ T6069] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 92.982439][ T6069] RSP: 002b:00007fed53916470 EFLAGS: 00010246 [ 92.982458][ T6069] RAX: 0000000000000001 RBX: 00007fed53916530 RCX: 0000000000000101 [ 92.982473][ T6069] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007fed539165d0 [ 92.982552][ T6069] RBP: 0000000000000102 R08: 00007fed4b4f7000 R09: 0000000000000000 [ 92.982645][ T6069] R10: 0000000000000000 R11: 00007fed53916540 R12: 0000000000000001 [ 92.982658][ T6069] R13: 00007fed54f67880 R14: 0000000000000000 R15: 00007fed539165d0 [ 92.982680][ T6069] [ 92.982697][ T6069] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 93.102301][ T6071] loop3: detected capacity change from 0 to 2048 [ 93.130731][ T6069] loop1: detected capacity change from 0 to 1024 [ 93.155404][ T6071] ext4: Unknown parameter 'subj_role' [ 93.202350][ T6069] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.902: Failed to acquire dquot type 0 [ 93.214244][ T6069] EXT4-fs (loop1): 1 truncate cleaned up [ 93.220409][ T6069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.255064][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.309881][ T6079] xt_hashlimit: max too large, truncated to 1048576 [ 93.372802][ T6076] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 93.400830][ T6076] vhci_hcd vhci_hcd.2: invalid port number 96 [ 93.407170][ T6076] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 93.448857][ T6085] syz.4.909 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 93.459701][ T6087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.909'. [ 93.541487][ T6093] FAULT_INJECTION: forcing a failure. [ 93.541487][ T6093] name failslab, interval 1, probability 0, space 0, times 0 [ 93.554575][ T6093] CPU: 1 UID: 0 PID: 6093 Comm: syz.1.912 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.554664][ T6093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.554681][ T6093] Call Trace: [ 93.554692][ T6093] [ 93.554704][ T6093] __dump_stack+0x1d/0x30 [ 93.554740][ T6093] dump_stack_lvl+0x95/0xd0 [ 93.554772][ T6093] dump_stack+0x15/0x1b [ 93.554800][ T6093] should_fail_ex+0x263/0x280 [ 93.554898][ T6093] should_failslab+0x8c/0xb0 [ 93.554924][ T6093] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 93.554952][ T6093] ? __d_alloc+0x37/0x340 [ 93.555067][ T6093] __d_alloc+0x37/0x340 [ 93.555098][ T6093] ? selinux_socket_post_create+0x219/0x290 [ 93.555132][ T6093] d_alloc_pseudo+0x1e/0x80 [ 93.555231][ T6093] alloc_file_pseudo+0x91/0x190 [ 93.555262][ T6093] ? alloc_fd+0x389/0x3c0 [ 93.555352][ T6093] sock_alloc_file+0x9c/0x1e0 [ 93.555393][ T6093] __sys_socket+0x115/0x180 [ 93.555435][ T6093] __x64_sys_socket+0x3f/0x50 [ 93.555488][ T6093] x64_sys_call+0x127b/0x3000 [ 93.555600][ T6093] do_syscall_64+0xc0/0x2a0 [ 93.555643][ T6093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.555674][ T6093] RIP: 0033:0x7fed54ebacb9 [ 93.555696][ T6093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.555721][ T6093] RSP: 002b:00007fed53916fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 93.555749][ T6093] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fed54ebacb9 [ 93.555767][ T6093] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 000000000000001f [ 93.555784][ T6093] RBP: 00007fed53917090 R08: 0000000000000000 R09: 0000000000000000 [ 93.555848][ T6093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.555863][ T6093] R13: 00007fed55136038 R14: 00007fed55135fa0 R15: 00007ffee0478b68 [ 93.555890][ T6093] [ 93.815014][ T6094] SELinux: policydb string does not match my string SE Linux [ 93.854279][ T6105] loop2: detected capacity change from 0 to 4096 [ 93.861775][ T6094] SELinux: failed to load policy [ 93.908553][ T6105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.959921][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.127301][ T6127] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 94.242325][ T6127] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.262098][ T6138] geneve2: entered promiscuous mode [ 94.267481][ T6138] geneve2: entered allmulticast mode [ 94.305645][ T6147] loop2: detected capacity change from 0 to 512 [ 94.310754][ T390] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 94.329376][ T6147] EXT4-fs: Ignoring removed i_version option [ 94.335471][ T6147] EXT4-fs: Ignoring removed nobh option [ 94.335782][ T390] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 94.361833][ T6147] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 94.377817][ T403] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 94.391669][ T6147] EXT4-fs (loop2): 1 truncate cleaned up [ 94.400176][ T403] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 94.415907][ T6147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.432753][ T6156] xt_hashlimit: max too large, truncated to 1048576 [ 94.514934][ T6162] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 94.533667][ T6162] netlink: 'syz.3.940': attribute type 16 has an invalid length. [ 94.642218][ T6169] SELinux: policydb string does not match my string SE Linux [ 94.650024][ T6169] SELinux: failed to load policy [ 94.721911][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.734659][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.754652][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.764236][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.815846][ T6182] loop2: detected capacity change from 0 to 512 [ 94.825591][ T6182] EXT4-fs: Ignoring removed bh option [ 94.834336][ T6182] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 95.021665][ T6182] EXT4-fs (loop2): 1 truncate cleaned up [ 95.080392][ T6197] EXT4-fs (loop2): 1 orphan inode deleted [ 95.086774][ T6197] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.108113][ T390] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 1 [ 95.147033][ T6204] netlink: 'syz.1.956': attribute type 16 has an invalid length. [ 95.186210][ T6206] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 95.310263][ T6214] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 95.327289][ T6214] netlink: 'syz.1.960': attribute type 16 has an invalid length. [ 95.481354][ T6232] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 95.488010][ T6232] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 95.495684][ T6232] vhci_hcd vhci_hcd.0: Device attached [ 95.555761][ T6237] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 95.562435][ T6237] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 95.570405][ T6237] vhci_hcd vhci_hcd.0: Device attached [ 95.582235][ T6238] vhci_hcd: connection closed [ 95.582470][ T4221] vhci_hcd vhci_hcd.0: stop threads [ 95.592653][ T4221] vhci_hcd vhci_hcd.0: release socket [ 95.598152][ T4221] vhci_hcd vhci_hcd.0: disconnect device [ 95.604498][ T6233] vhci_hcd: connection closed [ 95.608957][ T4221] vhci_hcd vhci_hcd.0: stop threads [ 95.619096][ T4221] vhci_hcd vhci_hcd.0: release socket [ 95.624840][ T4221] vhci_hcd vhci_hcd.0: disconnect device [ 95.668152][ T9] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 95.700936][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 95.700957][ T29] audit: type=1326 audit(1769019109.822:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.4.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3170e4acb9 code=0x7ffc0000 [ 95.731781][ T29] audit: type=1326 audit(1769019109.822:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.4.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f3170e4acb9 code=0x7ffc0000 [ 95.756292][ T29] audit: type=1326 audit(1769019109.822:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.4.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3170e4acb9 code=0x7ffc0000 [ 95.891158][ T29] audit: type=1400 audit(1769019110.012:2146): avc: denied { setopt } for pid=6260 comm="syz.4.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 95.928479][ T6261] netlink: 'syz.4.977': attribute type 4 has an invalid length. [ 95.950671][ T6261] netlink: 'syz.4.977': attribute type 4 has an invalid length. [ 96.014378][ T6269] set_capacity_and_notify: 1 callbacks suppressed [ 96.014430][ T6269] loop3: detected capacity change from 0 to 1024 [ 96.027871][ T6269] EXT4-fs: Ignoring removed orlov option [ 96.046223][ T6269] netlink: 'syz.3.980': attribute type 10 has an invalid length. [ 96.095289][ T6278] netlink: 'syz.4.983': attribute type 10 has an invalid length. [ 96.108041][ T6278] team0: Port device dummy0 added [ 96.141079][ T6274] loop2: detected capacity change from 0 to 1024 [ 96.152788][ T6274] EXT4-fs: Ignoring removed orlov option [ 96.170952][ T6274] netlink: 'syz.2.981': attribute type 10 has an invalid length. [ 96.179860][ T6284] netlink: 'syz.3.984': attribute type 10 has an invalid length. [ 96.202762][ T6284] team0: Port device dummy0 added [ 96.213644][ T29] audit: type=1400 audit(1769019110.332:2147): avc: denied { validate_trans } for pid=6283 comm="syz.0.986" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 96.570682][ T6310] loop2: detected capacity change from 0 to 164 [ 96.751043][ T6320] bond0: Caught tx_queue_len zero misconfig [ 96.769695][ T6319] xt_hashlimit: max too large, truncated to 1048576 [ 96.868950][ T29] audit: type=1326 audit(1769019110.992:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6327 comm="syz.1.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fed54ebacb9 code=0x7ffc0000 [ 96.901787][ T6322] loop2: detected capacity change from 0 to 1024 [ 96.928035][ T6322] EXT4-fs: Ignoring removed orlov option [ 96.948109][ T29] audit: type=1400 audit(1769019111.002:2149): avc: denied { read } for pid=6329 comm="syz.0.1002" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 96.971302][ T29] audit: type=1400 audit(1769019111.002:2150): avc: denied { open } for pid=6329 comm="syz.0.1002" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 96.994981][ T29] audit: type=1326 audit(1769019111.012:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6327 comm="syz.1.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fed54ebacb9 code=0x7ffc0000 [ 97.003186][ T6298] loop4: detected capacity change from 0 to 512 [ 97.018789][ T29] audit: type=1326 audit(1769019111.012:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6327 comm="syz.1.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fed54ebacb9 code=0x7ffc0000 [ 97.051129][ T6332] bond0: (slave dummy0): Releasing backup interface [ 97.093329][ T6332] batman_adv: batadv0: Adding interface: dummy0 [ 97.100926][ T6332] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.127522][ T6332] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 97.131510][ T6302] loop3: detected capacity change from 0 to 512 [ 97.268134][ T6302] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.297782][ T6298] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.355846][ T6351] team0: Port device dummy0 added [ 97.881621][ T6370] FAULT_INJECTION: forcing a failure. [ 97.881621][ T6370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.895155][ T6370] CPU: 0 UID: 0 PID: 6370 Comm: syz.4.1011 Not tainted syzkaller #0 PREEMPT(voluntary) [ 97.895201][ T6370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.895219][ T6370] Call Trace: [ 97.895230][ T6370] [ 97.895243][ T6370] __dump_stack+0x1d/0x30 [ 97.895279][ T6370] dump_stack_lvl+0x95/0xd0 [ 97.895348][ T6370] dump_stack+0x15/0x1b [ 97.895377][ T6370] should_fail_ex+0x263/0x280 [ 97.895478][ T6370] should_fail+0xb/0x20 [ 97.895500][ T6370] should_fail_usercopy+0x1a/0x20 [ 97.895529][ T6370] _copy_to_user+0x20/0xa0 [ 97.895565][ T6370] simple_read_from_buffer+0xb5/0x130 [ 97.895665][ T6370] proc_fail_nth_read+0x10e/0x150 [ 97.895784][ T6370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.895818][ T6370] vfs_read+0x1ab/0x7f0 [ 97.895855][ T6370] ? __rcu_read_unlock+0x4e/0x70 [ 97.895926][ T6370] ? __fget_files+0x184/0x1c0 [ 97.895948][ T6370] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 97.895989][ T6370] ? mutex_lock+0x57/0x90 [ 97.896016][ T6370] ksys_read+0xdc/0x1a0 [ 97.896077][ T6370] __x64_sys_read+0x40/0x50 [ 97.896120][ T6370] x64_sys_call+0x2889/0x3000 [ 97.896181][ T6370] do_syscall_64+0xc0/0x2a0 [ 97.896225][ T6370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.896274][ T6370] RIP: 0033:0x7f3170e0b58e [ 97.896294][ T6370] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 97.896372][ T6370] RSP: 002b:00007f316f8a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.896398][ T6370] RAX: ffffffffffffffda RBX: 00007f316f8a76c0 RCX: 00007f3170e0b58e [ 97.896417][ T6370] RDX: 000000000000000f RSI: 00007f316f8a70a0 RDI: 0000000000000005 [ 97.896434][ T6370] RBP: 00007f316f8a7090 R08: 0000000000000000 R09: 0000000000000000 [ 97.896486][ T6370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.896503][ T6370] R13: 00007f31710c6038 R14: 00007f31710c5fa0 R15: 00007fff5e484fd8 [ 97.896529][ T6370] [ 98.149126][ T6375] __nla_validate_parse: 18 callbacks suppressed [ 98.149153][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1012'. [ 98.205874][ T6375] xt_hashlimit: max too large, truncated to 1048576 [ 98.319285][ T6387] loop1: detected capacity change from 0 to 1024 [ 98.328796][ T6387] EXT4-fs: Ignoring removed orlov option [ 98.356487][ T6387] validate_nla: 2 callbacks suppressed [ 98.356503][ T6387] netlink: 'syz.1.1014': attribute type 10 has an invalid length. [ 98.429932][ T6390] loop4: detected capacity change from 0 to 764 [ 98.443719][ T6390] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 98.541017][ T6394] netlink: 'syz.4.1017': attribute type 10 has an invalid length. [ 98.634050][ T6398] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 98.814086][ T6405] netlink: 'syz.2.1021': attribute type 10 has an invalid length. [ 98.930161][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1026'. [ 98.949385][ T6416] xt_hashlimit: max too large, truncated to 1048576 [ 98.957113][ T6410] loop2: detected capacity change from 0 to 4096 [ 99.103872][ T6428] netlink: 'syz.3.1030': attribute type 10 has an invalid length. [ 99.134030][ T6425] loop2: detected capacity change from 0 to 512 [ 99.163727][ T6425] EXT4-fs: Ignoring removed bh option [ 99.190459][ T6425] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 99.247999][ T6425] EXT4-fs (loop2): 1 truncate cleaned up [ 99.257522][ T6437] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.275264][ T6435] 9p: Bad value for 'wfdno' [ 99.512098][ T6449] xt_hashlimit: max too large, truncated to 1048576 [ 99.699425][ T6459] netlink: 'syz.3.1043': attribute type 10 has an invalid length. [ 99.748268][ T6456] team0: Port device dummy0 removed [ 99.824506][ T6456] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 99.890815][ T6465] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1045'. [ 99.913007][ T6456] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.025838][ T6477] EXT4-fs: Ignoring removed orlov option [ 100.059356][ T6477] EXT4-fs mount: 21 callbacks suppressed [ 100.059381][ T6477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.104362][ T6477] netlink: 'syz.3.1049': attribute type 10 has an invalid length. [ 100.114002][ T6477] team0: Port device dummy0 removed [ 100.135342][ T6477] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 100.256728][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.320302][ T6489] macvtap1: entered promiscuous mode [ 100.325680][ T6489] macvtap1: entered allmulticast mode [ 100.372555][ T6489] vlan0: entered allmulticast mode [ 100.377772][ T6489] veth0_vlan: entered allmulticast mode [ 100.383488][ T6489] vlan0: entered promiscuous mode [ 100.422993][ T6489] team0: Device macvtap1 failed to register rx_handler [ 100.459863][ T6489] vlan0: left allmulticast mode [ 100.464802][ T6489] veth0_vlan: left allmulticast mode [ 100.470316][ T6489] vlan0: left promiscuous mode [ 100.525033][ T6504] FAT-fs (loop4): bogus number of reserved sectors [ 100.531911][ T6504] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 100.541446][ T6504] FAT-fs (loop4): Can't find a valid FAT filesystem [ 100.855478][ T6516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.900934][ T6516] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.939909][ T6516] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.109415][ T6520] netlink: 'syz.2.1056': attribute type 10 has an invalid length. [ 101.233645][ T6488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.249607][ T6488] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.292772][ T6529] macvlan2: entered promiscuous mode [ 101.327523][ T6529] set_capacity_and_notify: 6 callbacks suppressed [ 101.327548][ T6529] loop2: detected capacity change from 0 to 512 [ 101.338304][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 101.338359][ T29] audit: type=1400 audit(1769019115.452:2223): avc: denied { setattr } for pid=6534 comm="syz.3.1061" name="PACKET" dev="sockfs" ino=16910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.384963][ T6537] loop4: detected capacity change from 0 to 1024 [ 101.407385][ T6537] EXT4-fs: Ignoring removed orlov option [ 101.414295][ T29] audit: type=1400 audit(1769019115.522:2224): avc: denied { write } for pid=6534 comm="syz.3.1061" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 101.448502][ T6529] ------------[ cut here ]------------ [ 101.454093][ T6529] EA inode 11 i_nlink=2 [ 101.454121][ T6529] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.2.1059/6529 [ 101.469522][ T6529] Modules linked in: [ 101.473474][ T6529] CPU: 0 UID: 0 PID: 6529 Comm: syz.2.1059 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.483899][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.494046][ T6529] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 101.501068][ T6529] Code: f4 cd 9b ff 4c 8d 2d 1d 96 3f 05 49 8d 7e 40 e8 f4 7f b7 ff 49 8b 6e 40 4c 89 e7 e8 28 7b b7 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 2f 4c c5 03 66 66 66 66 66 66 2e [ 101.521396][ T6529] RSP: 0018:ffffc900028ef778 EFLAGS: 00010246 [ 101.527666][ T6529] RAX: ffff88810d103c10 RBX: ffff88811acc7af0 RCX: ffffffff81bc66d8 [ 101.535898][ T6529] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fbfce0 [ 101.544049][ T6529] RBP: 000000000000000b R08: 000188811acc7aa3 R09: 0000000000000000 [ 101.550528][ T6537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.552314][ T6529] R10: ffffc900028ef6a8 R11: 0001c900028ef6a8 R12: ffff88811acc7aa0 [ 101.572981][ T6529] R13: ffffffff86fbfce0 R14: ffff88811acc7a58 R15: 0000000000000001 [ 101.579129][ T6540] batman_adv: batadv0: Removing interface: dummy0 [ 101.582188][ T6529] FS: 00007fc5ceb376c0(0000) GS:ffff8882aeb7e000(0000) knlGS:0000000000000000 [ 101.596926][ T6529] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.603653][ T6529] CR2: 0000200000000100 CR3: 000000011b53e000 CR4: 00000000003506f0 [ 101.611732][ T6529] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 101.619826][ T6529] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 101.627881][ T6529] Call Trace: [ 101.627967][ T6529] [ 101.627985][ T6529] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 101.628042][ T6529] ? errseq_check+0x2c/0x50 [ 101.628193][ T6529] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 101.628301][ T6529] ? ext4_truncate+0x92b/0xad0 [ 101.628385][ T6529] ext4_evict_inode+0xa1f/0xd40 [ 101.628462][ T6529] ? __pfx_ext4_evict_inode+0x10/0x10 [ 101.628493][ T6529] evict+0x2af/0x510 [ 101.628595][ T6529] ? __dquot_initialize+0x146/0x7c0 [ 101.628703][ T6529] ? iput+0x2b8/0x650 [ 101.628726][ T6529] iput+0x4b9/0x650 [ 101.628757][ T6529] ext4_process_orphan+0x1a9/0x1c0 [ 101.628827][ T6529] ext4_orphan_cleanup+0x6a8/0xa00 [ 101.628855][ T6529] ext4_fill_super+0x3476/0x3800 [ 101.628883][ T6529] ? set_blocksize+0x1a3/0x310 [ 101.628914][ T6529] ? setup_bdev_super+0x30e/0x370 [ 101.628956][ T6529] ? __pfx_ext4_fill_super+0x10/0x10 [ 101.629010][ T6529] get_tree_bdev_flags+0x291/0x300 [ 101.629055][ T6529] ? __pfx_ext4_fill_super+0x10/0x10 [ 101.629125][ T6529] get_tree_bdev+0x1f/0x30 [ 101.629164][ T6529] ext4_get_tree+0x1c/0x30 [ 101.629246][ T6529] vfs_get_tree+0x57/0x1d0 [ 101.629291][ T6529] do_new_mount+0x288/0x700 [ 101.629317][ T6529] path_mount+0x4c0/0xb90 [ 101.629358][ T6529] ? user_path_at+0xbf/0x130 [ 101.629398][ T6529] __se_sys_mount+0x28c/0x2e0 [ 101.629422][ T6529] __x64_sys_mount+0x67/0x80 [ 101.629446][ T6529] x64_sys_call+0x2cca/0x3000 [ 101.629472][ T6529] do_syscall_64+0xc0/0x2a0 [ 101.629544][ T6529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.629634][ T6529] RIP: 0033:0x7fc5d00dbf4a [ 101.629706][ T6529] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.629727][ T6529] RSP: 002b:00007fc5ceb36e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 101.629805][ T6529] RAX: ffffffffffffffda RBX: 00007fc5ceb36ee0 RCX: 00007fc5d00dbf4a [ 101.629822][ T6529] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fc5ceb36ea0 [ 101.629838][ T6529] RBP: 0000200000000180 R08: 00007fc5ceb36ee0 R09: 0000000000800718 [ 101.629853][ T6529] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 101.629870][ T6529] R13: 00007fc5ceb36ea0 R14: 000000000000047f R15: 0000200000000200 [ 101.629926][ T6529] [ 101.629945][ T6529] ---[ end trace 0000000000000000 ]--- [ 101.632160][ T6529] EXT4-fs (loop2): 1 orphan inode deleted [ 101.632750][ T6529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.652709][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.656114][ T6540] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 101.672291][ T6537] netlink: 'syz.4.1063': attribute type 10 has an invalid length. [ 101.765310][ T6546] loop2: detected capacity change from 0 to 128 [ 101.952914][ T6543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.999661][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.078477][ T6554] xt_connbytes: Forcing CT accounting to be enabled [ 102.085752][ T6554] xt_NFQUEUE: number of total queues is 0 [ 102.110005][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.120777][ T6557] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1069'. [ 102.131184][ T6554] loop2: detected capacity change from 0 to 128 [ 102.179297][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1070'. [ 102.238423][ T6564] SELinux: policydb string does not match my string SE Linux [ 102.271322][ T6564] SELinux: failed to load policy [ 102.283956][ T6570] loop3: detected capacity change from 0 to 128 [ 102.306754][ T6564] netlink: 'syz.4.1072': attribute type 13 has an invalid length. [ 102.320021][ T6570] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 102.331992][ T6574] loop1: detected capacity change from 0 to 2048 [ 102.365520][ T6574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.373944][ T6582] loop2: detected capacity change from 0 to 256 [ 102.420813][ T6574] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.441052][ T6570] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.445509][ T6586] loop4: detected capacity change from 0 to 128 [ 102.493250][ T6574] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #16: comm syz.1.1073: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 102.525913][ T6570] ext2 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.560312][ T6574] EXT4-fs (loop1): Remounting filesystem read-only [ 102.576124][ T29] audit: type=1400 audit(1769019116.692:2225): avc: denied { unlink } for pid=6561 comm="syz.3.1071" name="file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 102.607779][ T29] audit: type=1400 audit(1769019116.722:2226): avc: denied { link } for pid=6565 comm="syz.1.1073" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 102.630097][ T29] audit: type=1400 audit(1769019116.722:2227): avc: denied { ioctl } for pid=6565 comm="syz.1.1073" path="socket:[16992]" dev="sockfs" ino=16992 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 102.681165][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.721102][ T6604] netlink: 'syz.4.1082': attribute type 10 has an invalid length. [ 102.755675][ T3316] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.766061][ T6604] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 102.833140][ T29] audit: type=1400 audit(1769019116.942:2228): avc: denied { watch watch_reads } for pid=6612 comm="syz.0.1084" path="/210/file0" dev="tmpfs" ino=1139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.835597][ T6615] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1086'. [ 102.875061][ T6613] tipc: Started in network mode [ 102.880216][ T6613] tipc: Node identity 22c61b9204a9, cluster identity 4711 [ 102.887606][ T6613] tipc: Enabled bearer , priority 0 [ 102.918106][ T29] audit: type=1400 audit(1769019116.992:2229): avc: denied { getopt } for pid=6616 comm="syz.1.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.002744][ T29] audit: type=1400 audit(1769019117.052:2230): avc: denied { ioctl } for pid=6616 comm="syz.1.1085" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 103.028003][ T29] audit: type=1400 audit(1769019117.052:2231): avc: denied { connect } for pid=6616 comm="syz.1.1085" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.199284][ T6632] bond1: option mode: invalid value (9) [ 103.206326][ T6632] bond1 (unregistering): Released all slaves [ 103.238805][ T29] audit: type=1400 audit(1769019117.362:2232): avc: denied { read } for pid=3044 comm="dhcpcd" name="n25" dev="tmpfs" ino=7248 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.457448][ T6665] xt_hashlimit: max too large, truncated to 1048576 [ 103.470844][ T6664] macvtap1: entered promiscuous mode [ 103.476211][ T6664] macvtap1: entered allmulticast mode [ 103.486566][ T6664] vlan0: entered allmulticast mode [ 103.492495][ T6664] vlan0: entered promiscuous mode [ 103.514720][ T6664] team0: Device macvtap1 failed to register rx_handler [ 103.527287][ T6664] vlan0: left allmulticast mode [ 103.532321][ T6664] vlan0: left promiscuous mode [ 103.684772][ T6683] : renamed from veth0_to_bond (while UP) [ 103.699282][ T6687] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1099'. [ 103.733491][ T6612] tipc: Disabling bearer [ 103.757503][ T6694] validate_nla: 2 callbacks suppressed [ 103.757521][ T6694] netlink: 'syz.3.1103': attribute type 10 has an invalid length. [ 103.783476][ T6696] loop4: detected capacity change from 0 to 512 [ 103.793634][ T6694] bond0: (slave dummy0): Releasing backup interface [ 103.799286][ T6696] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.820063][ T6695] SELinux: policydb string does not match my string SE Linux [ 103.829408][ T6694] team0: Port device dummy0 added [ 103.840949][ T6695] SELinux: failed to load policy [ 103.860293][ T6695] netlink: 'syz.2.1101': attribute type 13 has an invalid length. [ 103.891394][ T6698] loop1: detected capacity change from 0 to 512 [ 103.928302][ T6698] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.958334][ T6705] xt_hashlimit: max too large, truncated to 1048576 [ 103.995765][ T6708] FAULT_INJECTION: forcing a failure. [ 103.995765][ T6708] name failslab, interval 1, probability 0, space 0, times 0 [ 104.008639][ T6708] CPU: 1 UID: 0 PID: 6708 Comm: syz.2.1108 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 104.008757][ T6708] Tainted: [W]=WARN [ 104.008767][ T6708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.008784][ T6708] Call Trace: [ 104.008794][ T6708] [ 104.008805][ T6708] __dump_stack+0x1d/0x30 [ 104.008838][ T6708] dump_stack_lvl+0x95/0xd0 [ 104.008909][ T6708] dump_stack+0x15/0x1b [ 104.008932][ T6708] should_fail_ex+0x263/0x280 [ 104.008962][ T6708] should_failslab+0x8c/0xb0 [ 104.009044][ T6708] __kmalloc_cache_noprof+0x64/0x4a0 [ 104.009069][ T6708] ? __se_sys_memfd_create+0x1d5/0x6c0 [ 104.009118][ T6708] ? mutex_unlock+0x4e/0x90 [ 104.009141][ T6708] __se_sys_memfd_create+0x1d5/0x6c0 [ 104.009185][ T6708] __x64_sys_memfd_create+0x31/0x40 [ 104.009289][ T6708] x64_sys_call+0x28cb/0x3000 [ 104.009398][ T6708] do_syscall_64+0xc0/0x2a0 [ 104.009437][ T6708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.009467][ T6708] RIP: 0033:0x7fc5d00dacb9 [ 104.009489][ T6708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.009513][ T6708] RSP: 002b:00007fc5ceb36d58 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 104.009571][ T6708] RAX: ffffffffffffffda RBX: 00000000000005be RCX: 00007fc5d00dacb9 [ 104.009585][ T6708] RDX: 00007fc5ceb36ddc RSI: 0000000000000000 RDI: 00007fc5d014730b [ 104.009604][ T6708] RBP: 00002000000005c0 R08: 00000000ffffffff R09: 0000000000000000 [ 104.009621][ T6708] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000001 [ 104.009639][ T6708] R13: 00007fc5ceb36ddc R14: 00007fc5ceb36de0 R15: 00007ffda0b16968 [ 104.009664][ T6708] [ 104.078679][ T6711] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1105'. [ 104.093099][ T6700] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 104.224219][ T3309] loop3: p1 p2 p3 [ 104.232167][ T6709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.256004][ T6702] loop3: p1 p2 p3 [ 104.317422][ T6712] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 104.327666][ T6712] FAT-fs (loop4): Filesystem has been set read-only [ 104.382041][ T3692] udevd[3692]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 104.393024][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 104.403663][ T6722] netlink: 'syz.2.1112': attribute type 16 has an invalid length. [ 104.411730][ T6722] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1112'. [ 104.422303][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 104.462437][ T6728] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1114'. [ 104.619912][ T6737] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.638180][ T6737] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 104.648371][ T6737] FAT-fs (loop1): Filesystem has been set read-only [ 104.678004][ T6737] FAULT_INJECTION: forcing a failure. [ 104.678004][ T6737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.691257][ T6737] CPU: 0 UID: 0 PID: 6737 Comm: syz.1.1117 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 104.691311][ T6737] Tainted: [W]=WARN [ 104.691318][ T6737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.691401][ T6737] Call Trace: [ 104.691453][ T6737] [ 104.691527][ T6737] __dump_stack+0x1d/0x30 [ 104.691562][ T6737] dump_stack_lvl+0x95/0xd0 [ 104.691590][ T6737] dump_stack+0x15/0x1b [ 104.691613][ T6737] should_fail_ex+0x263/0x280 [ 104.691638][ T6737] should_fail+0xb/0x20 [ 104.691729][ T6737] should_fail_usercopy+0x1a/0x20 [ 104.691832][ T6737] _copy_from_user+0x1c/0xb0 [ 104.691860][ T6737] kstrtouint_from_user+0x69/0xf0 [ 104.691882][ T6737] ? 0xffffffff81000000 [ 104.691938][ T6737] ? selinux_file_permission+0x1e1/0x320 [ 104.691982][ T6737] proc_fail_nth_write+0x50/0x160 [ 104.692098][ T6737] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 104.692133][ T6737] vfs_write+0x269/0x9f0 [ 104.692222][ T6737] ? __rcu_read_unlock+0x4e/0x70 [ 104.692248][ T6737] ? __fget_files+0x184/0x1c0 [ 104.692277][ T6737] ? mutex_lock+0x57/0x90 [ 104.692328][ T6737] ksys_write+0xdc/0x1a0 [ 104.692349][ T6737] __x64_sys_write+0x40/0x50 [ 104.692369][ T6737] x64_sys_call+0x2847/0x3000 [ 104.692402][ T6737] do_syscall_64+0xc0/0x2a0 [ 104.692498][ T6737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.692527][ T6737] RIP: 0033:0x7fed54e7b58e [ 104.692548][ T6737] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.692568][ T6737] RSP: 002b:00007fed53916fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.692660][ T6737] RAX: ffffffffffffffda RBX: 00007fed539176c0 RCX: 00007fed54e7b58e [ 104.692678][ T6737] RDX: 0000000000000001 RSI: 00007fed539170a0 RDI: 0000000000000004 [ 104.692696][ T6737] RBP: 00007fed53917090 R08: 0000000000000000 R09: 0000000000000000 [ 104.692713][ T6737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.692730][ T6737] R13: 00007fed55136038 R14: 00007fed55135fa0 R15: 00007ffee0478b68 [ 104.692768][ T6737] [ 105.015227][ T6744] bond0: (slave dummy0): Releasing backup interface [ 105.045753][ T6744] dummy0: left promiscuous mode [ 105.094490][ T6744] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 105.097663][ T6741] netlink: 824 bytes leftover after parsing attributes in process `syz.3.1120'. [ 105.122661][ T6745] bond0: Caught tx_queue_len zero misconfig [ 105.161321][ T6747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.271383][ T6751] FAULT_INJECTION: forcing a failure. [ 105.271383][ T6751] name failslab, interval 1, probability 0, space 0, times 0 [ 105.275535][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1120'. [ 105.284118][ T6751] CPU: 0 UID: 0 PID: 6751 Comm: syz.0.1123 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 105.284165][ T6751] Tainted: [W]=WARN [ 105.284239][ T6751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.284258][ T6751] Call Trace: [ 105.284269][ T6751] [ 105.284303][ T6751] __dump_stack+0x1d/0x30 [ 105.284338][ T6751] dump_stack_lvl+0x95/0xd0 [ 105.284365][ T6751] dump_stack+0x15/0x1b [ 105.284474][ T6751] should_fail_ex+0x263/0x280 [ 105.284507][ T6751] should_failslab+0x8c/0xb0 [ 105.284541][ T6751] kmem_cache_alloc_noprof+0x68/0x490 [ 105.284591][ T6751] ? skb_clone+0x151/0x1f0 [ 105.284706][ T6751] skb_clone+0x151/0x1f0 [ 105.284741][ T6751] __netlink_deliver_tap+0x2c9/0x500 [ 105.284785][ T6751] ? netlink_attachskb+0x2e2/0x660 [ 105.284821][ T6751] netlink_sendskb+0x126/0x150 [ 105.284892][ T6751] netlink_unicast+0x2a2/0x690 [ 105.284930][ T6751] netlink_ack+0x4c8/0x500 [ 105.284995][ T6751] netlink_rcv_skb+0x192/0x220 [ 105.285029][ T6751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 105.285079][ T6751] rtnetlink_rcv+0x1c/0x30 [ 105.285119][ T6751] netlink_unicast+0x5c0/0x690 [ 105.285237][ T6751] netlink_sendmsg+0x5c8/0x6f0 [ 105.285332][ T6751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.285370][ T6751] __sock_sendmsg+0x145/0x170 [ 105.285420][ T6751] ____sys_sendmsg+0x31e/0x4a0 [ 105.285620][ T6751] ___sys_sendmsg+0x195/0x1e0 [ 105.285788][ T6751] __x64_sys_sendmsg+0xd4/0x160 [ 105.285935][ T6751] x64_sys_call+0x17ba/0x3000 [ 105.286022][ T6751] do_syscall_64+0xc0/0x2a0 [ 105.286133][ T6751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.286296][ T6751] RIP: 0033:0x7f0f6192acb9 [ 105.286371][ T6751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.286519][ T6751] RSP: 002b:00007f0f60387028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.286611][ T6751] RAX: ffffffffffffffda RBX: 00007f0f61ba5fa0 RCX: 00007f0f6192acb9 [ 105.286667][ T6751] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 105.286714][ T6751] RBP: 00007f0f60387090 R08: 0000000000000000 R09: 0000000000000000 [ 105.286826][ T6751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.286905][ T6751] R13: 00007f0f61ba6038 R14: 00007f0f61ba5fa0 R15: 00007ffe2d7ec768 [ 105.287040][ T6751] [ 105.584291][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1120'. [ 105.617234][ T6757] xt_hashlimit: max too large, truncated to 1048576 [ 105.667585][ T6759] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.712528][ T6759] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.781838][ T6759] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.822871][ T6759] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.871600][ T6765] EXT4-fs: Ignoring removed orlov option [ 105.884985][ T6765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.909596][ T6765] netlink: 'syz.1.1128': attribute type 10 has an invalid length. [ 105.919903][ T4204] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.938060][ T4204] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.946515][ T4204] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.955368][ T4204] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.998828][ T6762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50422 sclass=netlink_route_socket pid=6762 comm=syz.4.1127 [ 106.024494][ T6772] FAULT_INJECTION: forcing a failure. [ 106.024494][ T6772] name failslab, interval 1, probability 0, space 0, times 0 [ 106.037263][ T6772] CPU: 1 UID: 0 PID: 6772 Comm: syz.0.1130 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 106.037309][ T6772] Tainted: [W]=WARN [ 106.037317][ T6772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.037365][ T6772] Call Trace: [ 106.037376][ T6772] [ 106.037387][ T6772] __dump_stack+0x1d/0x30 [ 106.037423][ T6772] dump_stack_lvl+0x95/0xd0 [ 106.037447][ T6772] dump_stack+0x15/0x1b [ 106.037534][ T6772] should_fail_ex+0x263/0x280 [ 106.037565][ T6772] should_failslab+0x8c/0xb0 [ 106.037593][ T6772] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 106.037631][ T6772] ? __alloc_skb+0x2f0/0x4b0 [ 106.037658][ T6772] __alloc_skb+0x2f0/0x4b0 [ 106.037702][ T6772] ? __alloc_skb+0x219/0x4b0 [ 106.037745][ T6772] hci_sock_dev_event+0xd0/0x2f0 [ 106.037781][ T6772] hci_unregister_dev+0x244/0x2b0 [ 106.037824][ T6772] hci_uart_tty_close+0x115/0x170 [ 106.037861][ T6772] ? __pfx_hci_uart_tty_close+0x10/0x10 [ 106.037981][ T6772] tty_ldisc_kill+0x8d/0x140 [ 106.038141][ T6772] tty_ldisc_hangup+0x2fa/0x370 [ 106.038188][ T6772] __tty_hangup+0x3c2/0x540 [ 106.038223][ T6772] tty_ioctl+0x601/0xb80 [ 106.038251][ T6772] ? __pfx_tty_ioctl+0x10/0x10 [ 106.038270][ T6772] __se_sys_ioctl+0xce/0x140 [ 106.038402][ T6772] __x64_sys_ioctl+0x43/0x50 [ 106.038434][ T6772] x64_sys_call+0x14b0/0x3000 [ 106.038463][ T6772] do_syscall_64+0xc0/0x2a0 [ 106.038549][ T6772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.038593][ T6772] RIP: 0033:0x7f0f6192acb9 [ 106.038610][ T6772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.038648][ T6772] RSP: 002b:00007f0f60387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.038670][ T6772] RAX: ffffffffffffffda RBX: 00007f0f61ba5fa0 RCX: 00007f0f6192acb9 [ 106.038685][ T6772] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000007 [ 106.038700][ T6772] RBP: 00007f0f60387090 R08: 0000000000000000 R09: 0000000000000000 [ 106.038714][ T6772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.038806][ T6772] R13: 00007f0f61ba6038 R14: 00007f0f61ba5fa0 R15: 00007ffe2d7ec768 [ 106.038829][ T6772] [ 106.263278][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.305905][ T6778] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 106.405474][ T6789] xt_hashlimit: max too large, truncated to 1048576 [ 106.439938][ T6792] netlink: 'syz.1.1139': attribute type 16 has an invalid length. [ 106.447917][ T6792] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1139'. [ 106.493735][ T6797] lo speed is unknown, defaulting to 1000 [ 106.500299][ T6797] lo speed is unknown, defaulting to 1000 [ 106.506451][ T6797] lo speed is unknown, defaulting to 1000 [ 106.523372][ T6797] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 106.531063][ T6797] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 106.551415][ T6797] lo speed is unknown, defaulting to 1000 [ 106.558353][ T6797] lo speed is unknown, defaulting to 1000 [ 106.564577][ T6797] lo speed is unknown, defaulting to 1000 [ 106.608550][ T6797] lo speed is unknown, defaulting to 1000 [ 106.632406][ T6797] lo speed is unknown, defaulting to 1000 [ 106.749101][ T6809] bond1: option mode: invalid value (9) [ 106.767298][ T6809] bond1 (unregistering): Released all slaves [ 106.983383][ T6802] set_capacity_and_notify: 4 callbacks suppressed [ 106.983403][ T6802] loop4: detected capacity change from 0 to 164 [ 107.000532][ T6818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6818 comm=syz.3.1148 [ 107.037358][ T6822] SELinux: policydb string does not match my string SE Linux [ 107.045219][ T6822] SELinux: failed to load policy [ 107.054513][ T6824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1149'. [ 107.066196][ T6822] bridge_slave_1: entered promiscuous mode [ 107.072659][ T6822] netlink: 'syz.3.1150': attribute type 13 has an invalid length. [ 107.108411][ T6825] netlink: 'syz.1.1151': attribute type 16 has an invalid length. [ 107.116436][ T6825] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1151'. [ 107.346624][ T6839] sctp: [Deprecated]: syz.1.1156 (pid 6839) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.346624][ T6839] Use struct sctp_sack_info instead [ 107.397333][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 107.397355][ T29] audit: type=1400 audit(1769019121.512:2249): avc: denied { write } for pid=6842 comm="syz.1.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.424181][ T6843] dummy0: Caught tx_queue_len zero misconfig [ 107.554051][ T29] audit: type=1400 audit(1769019121.672:2250): avc: denied { execute } for pid=6849 comm="syz.1.1160" path="/newroot/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 107.588122][ T6855] loop2: detected capacity change from 0 to 128 [ 107.649658][ T6859] loop3: detected capacity change from 0 to 1024 [ 107.656918][ T6859] EXT4-fs: Ignoring removed orlov option [ 107.702329][ T6859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.780312][ T6859] netlink: 'syz.3.1163': attribute type 10 has an invalid length. [ 107.791879][ T6859] team0: Port device dummy0 removed [ 107.801558][ T6859] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 107.862278][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.866935][ T6866] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 107.976229][ T6879] loop2: detected capacity change from 0 to 512 [ 108.004658][ T6866] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.026623][ T6879] EXT4-fs: Ignoring removed nobh option [ 108.050605][ T6882] team0: Port device bridge1 added [ 108.072591][ T6879] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 108.114692][ T6879] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 108.129479][ T6888] loop3: detected capacity change from 0 to 164 [ 108.148916][ T6879] System zones: 1-12 [ 108.153370][ T6888] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 108.164070][ T6879] EXT4-fs (loop2): 1 truncate cleaned up [ 108.170426][ T6879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.189669][ T6888] FAULT_INJECTION: forcing a failure. [ 108.189669][ T6888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.203136][ T6888] CPU: 1 UID: 0 PID: 6888 Comm: syz.3.1174 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 108.203181][ T6888] Tainted: [W]=WARN [ 108.203189][ T6888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 108.203206][ T6888] Call Trace: [ 108.203234][ T6888] [ 108.203245][ T6888] __dump_stack+0x1d/0x30 [ 108.203277][ T6888] dump_stack_lvl+0x95/0xd0 [ 108.203354][ T6888] dump_stack+0x15/0x1b [ 108.203396][ T6888] should_fail_ex+0x263/0x280 [ 108.203426][ T6888] should_fail+0xb/0x20 [ 108.203449][ T6888] should_fail_usercopy+0x1a/0x20 [ 108.203479][ T6888] _copy_from_iter+0xcf/0xea0 [ 108.203588][ T6888] ? __alloc_skb+0x397/0x4b0 [ 108.203615][ T6888] ? __alloc_skb+0x219/0x4b0 [ 108.203643][ T6888] netlink_sendmsg+0x4ae/0x6f0 [ 108.203709][ T6888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.203753][ T6888] __sock_sendmsg+0x145/0x170 [ 108.203799][ T6888] ____sys_sendmsg+0x31e/0x4a0 [ 108.203835][ T6888] ___sys_sendmsg+0x195/0x1e0 [ 108.203883][ T6888] __x64_sys_sendmsg+0xd4/0x160 [ 108.203955][ T6888] x64_sys_call+0x17ba/0x3000 [ 108.203985][ T6888] do_syscall_64+0xc0/0x2a0 [ 108.204018][ T6888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.204044][ T6888] RIP: 0033:0x7efc3a3facb9 [ 108.204114][ T6888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.204135][ T6888] RSP: 002b:00007efc38e57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.204159][ T6888] RAX: ffffffffffffffda RBX: 00007efc3a675fa0 RCX: 00007efc3a3facb9 [ 108.204177][ T6888] RDX: 0000000004000c00 RSI: 0000200000000180 RDI: 0000000000000005 [ 108.204209][ T6888] RBP: 00007efc38e57090 R08: 0000000000000000 R09: 0000000000000000 [ 108.204226][ T6888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.204241][ T6888] R13: 00007efc3a676038 R14: 00007efc3a675fa0 R15: 00007ffdc1ee68b8 [ 108.204266][ T6888] [ 108.204386][ T29] audit: type=1400 audit(1769019122.302:2251): avc: denied { read } for pid=6878 comm="syz.2.1171" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 108.421572][ T29] audit: type=1400 audit(1769019122.302:2252): avc: denied { open } for pid=6878 comm="syz.2.1171" path="/237/file2/file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 108.456047][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.497180][ T6886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.538177][ T6886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.554926][ T6895] netlink: 'syz.2.1175': attribute type 16 has an invalid length. [ 108.675990][ T6903] loop2: detected capacity change from 0 to 128 [ 108.753616][ T6886] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2305 sclass=netlink_tcpdiag_socket pid=6886 comm=syz.4.1173 [ 108.863280][ T6912] SELinux: policydb string does not match my string SE Linux [ 108.871310][ T6912] SELinux: failed to load policy [ 108.878512][ T6912] netlink: 'syz.1.1183': attribute type 13 has an invalid length. [ 109.058072][ T6910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.089048][ T6910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.167814][ T6922] lo speed is unknown, defaulting to 1000 [ 109.188150][ T6922] lo speed is unknown, defaulting to 1000 [ 109.194345][ T6922] lo speed is unknown, defaulting to 1000 [ 109.205429][ T6922] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 109.235807][ T6922] lo speed is unknown, defaulting to 1000 [ 109.256969][ T6922] lo speed is unknown, defaulting to 1000 [ 109.263752][ T6922] lo speed is unknown, defaulting to 1000 [ 109.280448][ T6922] lo speed is unknown, defaulting to 1000 [ 109.286575][ T6922] lo speed is unknown, defaulting to 1000 [ 109.378719][ T6900] loop3: detected capacity change from 0 to 164 [ 109.474274][ T6928] loop1: detected capacity change from 0 to 512 [ 109.482964][ T6928] EXT4-fs: Ignoring removed bh option [ 109.509257][ T6928] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 109.529187][ T6928] EXT4-fs (loop1): 1 truncate cleaned up [ 109.535210][ T6928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.592563][ T6928] batadv0: entered promiscuous mode [ 109.614243][ T6928] vlan2: entered promiscuous mode [ 109.731179][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.976502][ T6950] syzkaller0: entered promiscuous mode [ 109.982287][ T6950] syzkaller0: entered allmulticast mode [ 110.000092][ T29] audit: type=1326 audit(1769019124.122:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6948 comm="syz.3.1193" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc3a3facb9 code=0x0 [ 110.138867][ T6956] FAULT_INJECTION: forcing a failure. [ 110.138867][ T6956] name failslab, interval 1, probability 0, space 0, times 0 [ 110.151985][ T6956] CPU: 1 UID: 0 PID: 6956 Comm: syz.2.1195 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 110.152034][ T6956] Tainted: [W]=WARN [ 110.152084][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.152101][ T6956] Call Trace: [ 110.152110][ T6956] [ 110.152120][ T6956] __dump_stack+0x1d/0x30 [ 110.152199][ T6956] dump_stack_lvl+0x95/0xd0 [ 110.152229][ T6956] dump_stack+0x15/0x1b [ 110.152253][ T6956] should_fail_ex+0x263/0x280 [ 110.152278][ T6956] should_failslab+0x8c/0xb0 [ 110.152305][ T6956] __kmalloc_node_noprof+0xbd/0x590 [ 110.152401][ T6956] ? __vmalloc_node_range_noprof+0x428/0x12b0 [ 110.152431][ T6956] __vmalloc_node_range_noprof+0x428/0x12b0 [ 110.152465][ T6956] ? __rcu_read_unlock+0x4e/0x70 [ 110.152491][ T6956] ? sel_write_load+0x156/0x380 [ 110.152537][ T6956] vmalloc_noprof+0x82/0xb0 [ 110.152577][ T6956] ? sel_write_load+0x156/0x380 [ 110.152725][ T6956] sel_write_load+0x156/0x380 [ 110.152761][ T6956] ? __pfx_sel_write_load+0x10/0x10 [ 110.152798][ T6956] vfs_write+0x269/0x9f0 [ 110.152834][ T6956] ? __rcu_read_unlock+0x4e/0x70 [ 110.152861][ T6956] ? __fget_files+0x184/0x1c0 [ 110.152885][ T6956] ? mutex_lock+0x57/0x90 [ 110.152908][ T6956] ksys_write+0xdc/0x1a0 [ 110.152929][ T6956] __x64_sys_write+0x40/0x50 [ 110.152948][ T6956] x64_sys_call+0x2847/0x3000 [ 110.153029][ T6956] do_syscall_64+0xc0/0x2a0 [ 110.153060][ T6956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.153084][ T6956] RIP: 0033:0x7fc5d00dacb9 [ 110.153100][ T6956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.153120][ T6956] RSP: 002b:00007fc5ceb37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 110.153209][ T6956] RAX: ffffffffffffffda RBX: 00007fc5d0355fa0 RCX: 00007fc5d00dacb9 [ 110.153225][ T6956] RDX: 000000000000ffaf RSI: 0000200000000000 RDI: 0000000000000003 [ 110.153264][ T6956] RBP: 00007fc5ceb37090 R08: 0000000000000000 R09: 0000000000000000 [ 110.153278][ T6956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.153292][ T6956] R13: 00007fc5d0356038 R14: 00007fc5d0355fa0 R15: 00007ffda0b16968 [ 110.153314][ T6956] [ 110.153325][ T6956] syz.2.1195: vmalloc error: size 65536, failed to allocated page array size 128, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null) [ 110.272527][ T29] audit: type=1400 audit(1769019124.322:2254): avc: denied { read } for pid=6948 comm="syz.3.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 110.273385][ T6956] ,cpuset=/,mems_allowed=0 [ 110.411837][ T6956] CPU: 1 UID: 0 PID: 6956 Comm: syz.2.1195 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 110.411942][ T6956] Tainted: [W]=WARN [ 110.411951][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.411967][ T6956] Call Trace: [ 110.411976][ T6956] [ 110.411986][ T6956] __dump_stack+0x1d/0x30 [ 110.412018][ T6956] dump_stack_lvl+0x95/0xd0 [ 110.412047][ T6956] dump_stack+0x15/0x1b [ 110.412134][ T6956] warn_alloc+0x145/0x1c0 [ 110.412274][ T6956] __vmalloc_node_range_noprof+0x7d9/0x12b0 [ 110.412308][ T6956] ? __rcu_read_unlock+0x4e/0x70 [ 110.412332][ T6956] ? sel_write_load+0x156/0x380 [ 110.412375][ T6956] vmalloc_noprof+0x82/0xb0 [ 110.412409][ T6956] ? sel_write_load+0x156/0x380 [ 110.412454][ T6956] sel_write_load+0x156/0x380 [ 110.412503][ T6956] ? __pfx_sel_write_load+0x10/0x10 [ 110.412571][ T6956] vfs_write+0x269/0x9f0 [ 110.412605][ T6956] ? __rcu_read_unlock+0x4e/0x70 [ 110.412630][ T6956] ? __fget_files+0x184/0x1c0 [ 110.412660][ T6956] ? mutex_lock+0x57/0x90 [ 110.412701][ T6956] ksys_write+0xdc/0x1a0 [ 110.412727][ T6956] __x64_sys_write+0x40/0x50 [ 110.412752][ T6956] x64_sys_call+0x2847/0x3000 [ 110.412940][ T6956] do_syscall_64+0xc0/0x2a0 [ 110.413043][ T6956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.413074][ T6956] RIP: 0033:0x7fc5d00dacb9 [ 110.413096][ T6956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.413204][ T6956] RSP: 002b:00007fc5ceb37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 110.413224][ T6956] RAX: ffffffffffffffda RBX: 00007fc5d0355fa0 RCX: 00007fc5d00dacb9 [ 110.413241][ T6956] RDX: 000000000000ffaf RSI: 0000200000000000 RDI: 0000000000000003 [ 110.413259][ T6956] RBP: 00007fc5ceb37090 R08: 0000000000000000 R09: 0000000000000000 [ 110.413281][ T6956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.413344][ T6956] R13: 00007fc5d0356038 R14: 00007fc5d0355fa0 R15: 00007ffda0b16968 [ 110.413371][ T6956] [ 110.413390][ T6956] Mem-Info: [ 110.605832][ T6945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50422 sclass=netlink_route_socket pid=6945 comm=syz.1.1192 [ 110.607429][ T6956] active_anon:12608 inactive_anon:0 isolated_anon:0 [ 110.607429][ T6956] active_file:24586 inactive_file:2334 isolated_file:0 [ 110.607429][ T6956] unevictable:0 dirty:313 writeback:0 [ 110.607429][ T6956] slab_reclaimable:3366 slab_unreclaimable:16622 [ 110.607429][ T6956] mapped:34745 shmem:3068 pagetables:2007 [ 110.607429][ T6956] sec_pagetables:0 bounce:0 [ 110.607429][ T6956] kernel_misc_reclaimable:0 [ 110.607429][ T6956] free:1867680 free_pcp:7579 free_cma:0 [ 110.679597][ T6956] Node 0 active_anon:50316kB inactive_anon:0kB active_file:98344kB inactive_file:9336kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:134920kB dirty:1252kB writeback:0kB shmem:12272kB kernel_stack:4192kB pagetables:8028kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 110.707620][ T6956] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 110.737560][ T6956] lowmem_reserve[]: 0 2879 7858 7858 [ 110.743009][ T6956] Node 0 DMA32 free:2945392kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949020kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3528kB free_cma:0kB [ 110.774568][ T6956] lowmem_reserve[]: 0 0 4978 4978 [ 110.779684][ T6956] Node 0 Normal free:4509968kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50264kB inactive_anon:0kB active_file:98344kB inactive_file:9320kB unevictable:0kB writepending:1300kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:26808kB local_pcp:10944kB free_cma:0kB [ 110.813071][ T6956] lowmem_reserve[]: 0 0 0 0 [ 110.817667][ T6956] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 110.830914][ T6956] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 2*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 2*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945392kB [ 110.847418][ T6956] Node 0 Normal: 1138*4kB (UM) 1041*8kB (UME) 529*16kB (UM) 431*32kB (UM) 142*64kB (UME) 256*128kB (UME) 136*256kB (UME) 66*512kB (UM) 38*1024kB (UME) 18*2048kB (UM) 1047*4096kB (UM) = 4509888kB [ 110.867111][ T6956] Node 0 hugepages_total=8 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 110.876584][ T6956] 29957 total pagecache pages [ 110.881443][ T6956] 0 pages in swap cache [ 110.886165][ T6956] Free swap = 124996kB [ 110.890512][ T6956] Total swap = 124996kB [ 110.894714][ T6956] 2097051 pages RAM [ 110.898569][ T6956] 0 pages HighMem/MovableOnly [ 110.903382][ T6956] 81396 pages reserved [ 110.989141][ T6970] netlink: 'syz.2.1198': attribute type 16 has an invalid length. [ 110.997064][ T6970] __nla_validate_parse: 2 callbacks suppressed [ 110.997080][ T6970] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1198'. [ 111.026924][ T6977] FAULT_INJECTION: forcing a failure. [ 111.026924][ T6977] name failslab, interval 1, probability 0, space 0, times 0 [ 111.039673][ T6977] CPU: 1 UID: 0 PID: 6977 Comm: syz.4.1203 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 111.039753][ T6977] Tainted: [W]=WARN [ 111.039762][ T6977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.039779][ T6977] Call Trace: [ 111.039788][ T6977] [ 111.039840][ T6977] __dump_stack+0x1d/0x30 [ 111.039874][ T6977] dump_stack_lvl+0x95/0xd0 [ 111.039903][ T6977] dump_stack+0x15/0x1b [ 111.040011][ T6977] should_fail_ex+0x263/0x280 [ 111.040042][ T6977] should_failslab+0x8c/0xb0 [ 111.040071][ T6977] __kmalloc_cache_noprof+0x64/0x4a0 [ 111.040174][ T6977] ? alloc_fs_context+0x46/0x590 [ 111.040207][ T6977] alloc_fs_context+0x46/0x590 [ 111.040237][ T6977] fs_context_for_mount+0x22/0x30 [ 111.040265][ T6977] do_new_mount+0xea/0x700 [ 111.040367][ T6977] ? security_capable+0x7b/0x90 [ 111.040445][ T6977] path_mount+0x4c0/0xb90 [ 111.040487][ T6977] ? user_path_at+0xbf/0x130 [ 111.040565][ T6977] __se_sys_mount+0x28c/0x2e0 [ 111.040591][ T6977] ? fput+0x8f/0xc0 [ 111.040627][ T6977] __x64_sys_mount+0x67/0x80 [ 111.040653][ T6977] x64_sys_call+0x2cca/0x3000 [ 111.040716][ T6977] do_syscall_64+0xc0/0x2a0 [ 111.040755][ T6977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.040786][ T6977] RIP: 0033:0x7f3170e4acb9 [ 111.040808][ T6977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.040884][ T6977] RSP: 002b:00007f316f8a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 111.040907][ T6977] RAX: ffffffffffffffda RBX: 00007f31710c5fa0 RCX: 00007f3170e4acb9 [ 111.040966][ T6977] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000000 [ 111.040985][ T6977] RBP: 00007f316f8a7090 R08: 0000200000000300 R09: 0000000000000000 [ 111.041049][ T6977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.041066][ T6977] R13: 00007f31710c6038 R14: 00007f31710c5fa0 R15: 00007fff5e484fd8 [ 111.041093][ T6977] [ 111.306377][ T6985] loop4: detected capacity change from 0 to 2048 [ 111.349629][ T6985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.374683][ T6985] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 111.378169][ T29] audit: type=1400 audit(1769019125.492:2255): avc: denied { setopt } for pid=6984 comm="syz.4.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 111.448412][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.508304][ T29] audit: type=1400 audit(1769019125.562:2256): avc: denied { setattr } for pid=6992 comm="syz.2.1208" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 111.559439][ T6999] loop4: detected capacity change from 0 to 736 [ 111.627834][ T6999] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1210'. [ 111.732125][ T7003] netlink: 'syz.4.1212': attribute type 10 has an invalid length. [ 111.792130][ T7003] team0: Port device dummy0 added [ 111.985878][ T7008] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1214'. [ 111.995093][ T29] audit: type=1326 audit(1769019126.102:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.4.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3170e4acb9 code=0x7ffc0000 [ 112.018772][ T29] audit: type=1326 audit(1769019126.102:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.4.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3170e4acb9 code=0x7ffc0000 [ 112.081602][ T6974] loop3: detected capacity change from 0 to 512 [ 112.220383][ T6974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.235960][ T6974] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.382072][ T7020] FAULT_INJECTION: forcing a failure. [ 112.382072][ T7020] name failslab, interval 1, probability 0, space 0, times 0 [ 112.383798][ T7021] program syz.4.1216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.395057][ T7020] CPU: 1 UID: 0 PID: 7020 Comm: syz.2.1217 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 112.395169][ T7020] Tainted: [W]=WARN [ 112.395197][ T7020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 112.395233][ T7020] Call Trace: [ 112.395278][ T7020] [ 112.395309][ T7020] __dump_stack+0x1d/0x30 [ 112.395394][ T7020] dump_stack_lvl+0x95/0xd0 [ 112.395468][ T7020] dump_stack+0x15/0x1b [ 112.395535][ T7020] should_fail_ex+0x263/0x280 [ 112.395608][ T7020] should_failslab+0x8c/0xb0 [ 112.395693][ T7020] kmem_cache_alloc_noprof+0x68/0x490 [ 112.395765][ T7020] ? vm_area_dup+0x33/0x2c0 [ 112.395840][ T7020] vm_area_dup+0x33/0x2c0 [ 112.395933][ T7020] __split_vma+0xe9/0x660 [ 112.396047][ T7020] ? mas_find+0x5d5/0x700 [ 112.396133][ T7020] vms_gather_munmap_vmas+0x2b2/0x7b0 [ 112.396251][ T7020] do_vmi_align_munmap+0x1e1/0x400 [ 112.396377][ T7020] do_vmi_munmap+0x1da/0x220 [ 112.396480][ T7020] do_munmap+0x8d/0xc0 [ 112.396576][ T7020] mremap_to+0x1a3/0x440 [ 112.396660][ T7020] ? check_prep_vma+0x5d5/0x660 [ 112.396746][ T7020] __se_sys_mremap+0x667/0xb50 [ 112.396848][ T7020] __x64_sys_mremap+0x67/0x80 [ 112.396915][ T7020] x64_sys_call+0x2944/0x3000 [ 112.396993][ T7020] do_syscall_64+0xc0/0x2a0 [ 112.397088][ T7020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.397172][ T7020] RIP: 0033:0x7fc5d00dacb9 [ 112.397233][ T7020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.397296][ T7020] RSP: 002b:00007fc5ceb37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 112.397367][ T7020] RAX: ffffffffffffffda RBX: 00007fc5d0355fa0 RCX: 00007fc5d00dacb9 [ 112.397410][ T7020] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000200000001000 [ 112.397451][ T7020] RBP: 00007fc5ceb37090 R08: 0000200000005000 R09: 0000000000000000 [ 112.397493][ T7020] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 112.397536][ T7020] R13: 00007fc5d0356038 R14: 00007fc5d0355fa0 R15: 00007ffda0b16968 [ 112.397600][ T7020] [ 112.425854][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 112.425984][ T29] audit: type=1326 audit(1769019126.542:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7019 comm="syz.2.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc5d009b58e code=0x7ffc0000 [ 112.643551][ T29] audit: type=1326 audit(1769019126.722:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7019 comm="syz.2.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc5d009b58e code=0x7ffc0000 [ 112.667115][ T29] audit: type=1326 audit(1769019126.722:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7019 comm="syz.2.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc5d009b58e code=0x7ffc0000 [ 112.690513][ T29] audit: type=1326 audit(1769019126.722:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7019 comm="syz.2.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d00dacb9 code=0x7ffc0000 [ 112.714181][ T29] audit: type=1326 audit(1769019126.722:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7019 comm="syz.2.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d00dacb9 code=0x7ffc0000 [ 112.847522][ T7023] loop2: detected capacity change from 0 to 2048 [ 112.880542][ T7023] ext2: Unknown parameter 'obj_role' [ 112.889551][ T7023] macvlan1: entered promiscuous mode [ 112.896483][ T7023] macvlan1: left promiscuous mode [ 112.933309][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.050499][ T29] audit: type=1326 audit(1769019127.172:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d00dacb9 code=0x7ffc0000 [ 113.074109][ T29] audit: type=1326 audit(1769019127.172:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d00dacb9 code=0x7ffc0000 [ 113.099558][ T29] audit: type=1326 audit(1769019127.222:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fc5d00dacb9 code=0x7ffc0000 [ 113.123309][ T29] audit: type=1326 audit(1769019127.222:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d00dacb9 code=0x7ffc0000 [ 113.147020][ T29] audit: type=1326 audit(1769019127.222:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d00dacb9 code=0x7ffc0000 [ 113.176318][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'. [ 113.209863][ T7041] FAULT_INJECTION: forcing a failure. [ 113.209863][ T7041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.219465][ T7039] netlink: 'syz.3.1223': attribute type 10 has an invalid length. [ 113.223224][ T7041] CPU: 1 UID: 0 PID: 7041 Comm: syz.4.1224 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 113.223372][ T7041] Tainted: [W]=WARN [ 113.223403][ T7041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.223516][ T7041] Call Trace: [ 113.223538][ T7041] [ 113.223618][ T7041] __dump_stack+0x1d/0x30 [ 113.223706][ T7041] dump_stack_lvl+0x95/0xd0 [ 113.223773][ T7041] dump_stack+0x15/0x1b [ 113.223851][ T7041] should_fail_ex+0x263/0x280 [ 113.223946][ T7041] should_fail+0xb/0x20 [ 113.224008][ T7041] should_fail_usercopy+0x1a/0x20 [ 113.224076][ T7041] _copy_to_user+0x20/0xa0 [ 113.224214][ T7041] simple_read_from_buffer+0xb5/0x130 [ 113.224340][ T7041] proc_fail_nth_read+0x10e/0x150 [ 113.224444][ T7041] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.224529][ T7041] vfs_read+0x1ab/0x7f0 [ 113.224633][ T7041] ? __schedule+0x82d/0xc90 [ 113.224817][ T7041] ? __rcu_read_unlock+0x4e/0x70 [ 113.224889][ T7041] ? __fget_files+0x184/0x1c0 [ 113.224961][ T7041] ? tiocsti+0x19a/0x1d0 [ 113.225033][ T7041] ? mutex_lock+0x57/0x90 [ 113.225099][ T7041] ksys_read+0xdc/0x1a0 [ 113.225285][ T7041] __x64_sys_read+0x40/0x50 [ 113.225433][ T7041] x64_sys_call+0x2889/0x3000 [ 113.225510][ T7041] do_syscall_64+0xc0/0x2a0 [ 113.225656][ T7041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.225730][ T7041] RIP: 0033:0x7f3170e0b58e [ 113.225784][ T7041] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 113.225846][ T7041] RSP: 002b:00007f316f8a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.225910][ T7041] RAX: ffffffffffffffda RBX: 00007f316f8a76c0 RCX: 00007f3170e0b58e [ 113.226037][ T7041] RDX: 000000000000000f RSI: 00007f316f8a70a0 RDI: 0000000000000005 [ 113.226093][ T7041] RBP: 00007f316f8a7090 R08: 0000000000000000 R09: 0000000000000000 [ 113.226142][ T7041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.226185][ T7041] R13: 00007f31710c6038 R14: 00007f31710c5fa0 R15: 00007fff5e484fd8 [ 113.226250][ T7041] [ 113.444070][ T7039] bond0: (slave dummy0): Releasing backup interface [ 113.454829][ T7039] team0: Port device dummy0 added [ 113.589110][ T7046] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1225'. [ 113.613307][ T7053] ================================================================== [ 113.621627][ T7053] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter [ 113.629368][ T7053] [ 113.631827][ T7053] write to 0xffff88812b85d000 of 4096 bytes by task 7051 on cpu 1: [ 113.639736][ T7053] _copy_from_iter+0x106/0xea0 [ 113.644806][ T7053] copy_page_from_iter+0x178/0x2a0 [ 113.649958][ T7053] process_vm_rw+0x6ad/0x9c0 [ 113.654608][ T7053] __x64_sys_process_vm_writev+0x78/0x90 [ 113.660278][ T7053] x64_sys_call+0x27ef/0x3000 [ 113.665001][ T7053] do_syscall_64+0xc0/0x2a0 [ 113.669634][ T7053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.675601][ T7053] [ 113.677972][ T7053] write to 0xffff88812b85d000 of 4096 bytes by task 7053 on cpu 0: [ 113.685989][ T7053] _copy_from_iter+0x106/0xea0 [ 113.690975][ T7053] copy_page_from_iter+0x178/0x2a0 [ 113.696135][ T7053] process_vm_rw+0x6ad/0x9c0 [ 113.700762][ T7053] __x64_sys_process_vm_writev+0x78/0x90 [ 113.706793][ T7053] x64_sys_call+0x27ef/0x3000 [ 113.711528][ T7053] do_syscall_64+0xc0/0x2a0 [ 113.716265][ T7053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.722210][ T7053] [ 113.724737][ T7053] Reported by Kernel Concurrency Sanitizer on: [ 113.731099][ T7053] CPU: 0 UID: 0 PID: 7053 Comm: syz.3.1227 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 113.742510][ T7053] Tainted: [W]=WARN [ 113.746338][ T7053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.756602][ T7053] ================================================================== [ 113.835924][ T7049] netlink: 'syz.4.1228': attribute type 1 has an invalid length. [ 113.938042][ T7052] loop2: detected capacity change from 0 to 164