last executing test programs: 3.862862459s ago: executing program 1 (id=272): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x44000}, 0x8804) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x80000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$watch_queue(r6, &(0x7f0000001d40)=""/4095, 0xfff) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x1d9) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000810008003dfb0fa8ac310f49b55197df800c86abaea74dddf4f645819711b0f06a8672f57614cfea95720fd9a6f50177ba200a5c00", @ANYRES32, @ANYBLOB="10000600000000002000000000000000"], 0x2c, 0x3) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000011140100800000000000000008004a0008004b001300000008000000000000b96cf5d30949b0bd34579df7b0ed8a99ed861e7b26a459c4fe3b37c42803a79a50a6bd1a642e42a2a9448bf7d2bfee26e548193350d5d97849053f11bd3873920e2bf63dd7a3c3c54864a54841574b168a8cc3badbb7f8efad16edd8e4264ddde1c2f650dc313f8d715029c42c82fdf1d3c3ff89426bbf15dba5b3763e745063e85e8abf9bb835eb2416053ed70d00000000006757507725d6142b0b0c85a987e58199f1bb87bd9b937ddf706d21a3bfb571a6"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd5}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r9, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) sendfile(r10, r10, 0x0, 0x1008000e0e) 2.883258532s ago: executing program 1 (id=289): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x44000}, 0x8804) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x80000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$watch_queue(r6, &(0x7f0000001d40)=""/4095, 0xfff) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x1d9) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000810008003dfb0fa8ac310f49b55197df800c86abaea74dddf4f645819711b0f06a8672f57614cfea95720fd9a6f50177ba200a5c00", @ANYRES32, @ANYBLOB="10000600000000002000000000000000"], 0x2c, 0x3) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000011140100800000000000000008004a0008004b001300000008000000000000b96cf5d30949b0bd34579df7b0ed8a99ed861e7b26a459c4fe3b37c42803a79a50a6bd1a642e42a2a9448bf7d2bfee26e548193350d5d97849053f11bd3873920e2bf63dd7a3c3c54864a54841574b168a8cc3badbb7f8efad16edd8e4264ddde1c2f650dc313f8d715029c42c82fdf1d3c3ff89426bbf15dba5b3763e745063e85e8abf9bb835eb2416053ed70d00000000006757507725d6142b0b0c85a987e58199f1bb87bd9b937ddf706d21a3bfb571a6"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd5}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r9, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) sendfile(r10, r10, 0x0, 0x1008000e0e) 2.690750536s ago: executing program 2 (id=292): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00', @ANYRES16=r2, @ANYBLOB="11042abd7000fddbdf251400000008000300", @ANYRES32=r3, @ANYBLOB="08001d"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 2.659315627s ago: executing program 2 (id=295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb4}, 0x1, 0x0, 0x0, 0x20004840}, 0x0) 2.567463259s ago: executing program 2 (id=297): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x0) 2.509778771s ago: executing program 2 (id=299): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x44000}, 0x8804) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x80000) read$watch_queue(r6, &(0x7f0000001d40)=""/4095, 0xfff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x1d9) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000810008003dfb0fa8ac310f49b55197df800c86abaea74dddf4f645819711b0f06a8672f57614cfea95720fd9a6f50177ba200a5c00", @ANYRES32, @ANYBLOB="10000600000000002000000000000000"], 0x2c, 0x3) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000011140100800000000000000008004a0008004b001300000008000000000000b96cf5d30949b0bd34579df7b0ed8a99ed861e7b26a459c4fe3b37c42803a79a50a6bd1a642e42a2a9448bf7d2bfee26e548193350d5d97849053f11bd3873920e2bf63dd7a3c3c54864a54841574b168a8cc3badbb7f8efad16edd8e4264ddde1c2f650dc313f8d715029c42c82fdf1d3c3ff89426bbf15dba5b3763e745063e85e8abf9bb835eb2416053ed70d00000000006757507725d6142b0b0c85a987e58199f1bb87bd9b937ddf706d21a3bfb571a6"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd5}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r8, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x1008000e0e) 2.318793035s ago: executing program 0 (id=303): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (fail_nth: 2) 2.241954867s ago: executing program 0 (id=306): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, 0x0, 0x40000) 2.022583252s ago: executing program 0 (id=307): r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, &(0x7f0000000180)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unshare(0x2c020400) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x9, 0x2, 0xd1c, 0x3, 0xfffffffffffffffe, 0x0, 0x9, 0x2, 0x0, 0x802, 0x2000000009, 0x100, 0x3, 0x4, 0x4a, 0x5, 0x100, 0xd, 0xe1, 0x5, 0x6, 0x2aa, 0x7, 0xc39, 0x8, 0x8, 0x0, 0x2, 0xa51, 0x3ff, 0x80401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x933, 0x100, 0x3, 0x8001, 0x8000000000000400, 0x680, 0x0, 0x2000000000000008, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x5, 0x0, 0x14, 0x5, 0x7, 0x8000, 0x8000000000000000, 0x2, 0xfffffffffffffffd, 0x1000000000014, 0x0, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x1, 0x6, 0x1, 0x82c, 0x7ff, 0xffff, 0x1fcc, 0x6, 0x3, 0xf, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x4, 0x8, 0x0, 0x6, 0x26, 0x9, 0x100000002, 0x0, 0x4, 0x40, 0xf, 0x4, 0x9, 0x1001, 0x16d, 0x6, 0x68d, 0xfffffffffff743b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x2400000003, 0x4, 0x8, 0x6, 0x3, 0x8, 0x2000000000000005, 0x0, 0x3, 0x40, 0x80000000, 0x7, 0xe, 0x3]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x10000}], 0x1c) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x140, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20, 0x7, 0x4e24, 0x0, 0xa, 0x20, 0x20, 0x1d}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x6, 0x7f}, {0x0, 0xffffffffffffffff, 0x4}, {0xf6, 0x4, 0x8}, 0x0, 0x34ff, 0x2, 0x1, 0xbe, 0x40}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x60, "7919d8"}}]}, 0x140}}, 0x804) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 2.011551082s ago: executing program 4 (id=308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb4}, 0x1, 0x0, 0x0, 0x20004840}, 0x0) 1.915259965s ago: executing program 4 (id=310): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000480)={0x0, 0xfffffffffffffff0, 0x800000000000, 0x400, 0x800, 0x6, 0x8000001000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x6fee, 0xa8, 0x4, 0x1, 0x0, 0xfc}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) (fail_nth: 6) 1.668349291s ago: executing program 4 (id=312): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x20000023896) 1.634882362s ago: executing program 1 (id=313): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) listen(r0, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 1.611267292s ago: executing program 2 (id=314): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x168, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x168}, 0x1, 0x0, 0x0, 0x20004000}, 0x24006881) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0xad, "46db3bb0d2df74108d6c15518a62bd23adc4ca24e6c638d91120821d06d2c5026e39cfdf6d830866161e2d937f35698ce5c2383fe4e823506620918da334f4b183444aed811fad0a1506b8bfab5739bc579290b3fa7410235b47b07fce41888c48002430880ecce39de96cb2bd84789279d91e2048af3d58d9183775606ab6d9b0303ce8799bf43a4b574cd4fdfdbe8ad782877fb6e4cccda79e65774387ca842419e0cf57cf02598fd2dc0caa"}, &(0x7f0000000300)=0xb5) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000340)={0xdaca, 0x6, 0x8, 0x60000000, 0x400, 0x2, 0x6, 0x0, r2}, 0x20) r3 = socket$inet6_sctp(0xa, 0x875f945f6478c53b, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000380), &(0x7f00000003c0)=0x4) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00'}}}, 0x84) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f00000005c0)={r0, &(0x7f00000004c0)='netdevsim\x00', 0x400, &(0x7f0000000500)={@_ha_fsid={[0x3, 0x9]}, {0x7, 0x5, 0xfffff75a, 0x8000000000000001}}, 0x5, &(0x7f0000000540), &(0x7f0000000580)=0x10}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000600)={r2, @in6={{0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}}}, &(0x7f00000006c0)=0x84) r4 = openat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', 0x8000, 0x14) ioctl$OCFS2_IOC_GROUP_ADD(r4, 0x40186f02, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x8}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000780), &(0x7f00000007c0)=0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x1412, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x28}}, 0x4000400) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/address_bits', 0x420000, 0x122) ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, &(0x7f0000000940)={0x80}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000000a00)=0x1) r6 = getpid() ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r6, 0x0, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000b00)={0x2, [0x0, 0x0]}, &(0x7f0000000b40)=0xc) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000cc0)={&(0x7f0000000b80), 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x50, r8, 0x10, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000d00)={{0x3c, @loopback, 0x4e20, 0x2, 'none\x00', 0x30, 0x1, 0x7c}, {@loopback, 0x4e23, 0x3, 0xe0c0, 0x40, 0xfffffff7}}, 0x44) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000d80)=0x5) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f0000000dc0)={0x2, 0x2}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e40), 0x2, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x80, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x40005) 1.587772442s ago: executing program 1 (id=315): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x8081, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x932, &(0x7f0000000440)="020000000100") 1.579020573s ago: executing program 4 (id=316): syz_mount_image$iso9660(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x406, &(0x7f0000000880), 0x1, 0x7f1, &(0x7f00000008c0)="$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") 1.522742374s ago: executing program 0 (id=317): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) 1.511746704s ago: executing program 2 (id=319): r0 = timerfd_create(0x0, 0x80000) r1 = gettid() syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) kexec_load(0x2, 0x8, &(0x7f0000000140)=[{0x0, 0xb, 0x8000000000, 0x80000000}], 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x50, 0x24, 0x800, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0xfff3}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffe5}, @TCA_CAKE_ATM={0x3, 0x4, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfffffffffffffff9}]}}]}, 0x50}}, 0x20000004) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000240)={0x10, 0x0, "e3078d19bee4c72c3ccc301451cb0e94"}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000540)={0x14, &(0x7f0000000480)={0x2e50b67790ddb316, 0xb, 0x41, {0x41, 0x42, "b3722b5629633647bb25ee8474848ceb2f23d3a34eeedf5dfd5563adf1ea300e44b1b1407240ce7284096f235db252b01d607a7396bf29284394788ad8bbf1"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="40140c000000c6351e8f4a02000000c3e843"], 0x0, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000640), &(0x7f0000000680)={0x40, 0x5, 0x5, "42ae15d763"}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x20, 0x22, 0x78, {0x78, 0xc, "e7f0936ab00139f9c817a803c3f5649819100e3e2ae819266a73c086b96cc1d627719280063551c956ccac7e6e6afaf9e1c930f78e60044710d0aeeb4e90aac8d8c0535a93e6c96dbdd4e0d07e8131d0dccf40f80d238009dc37c3ac03a769e7dacf9b3f11a96f8465eae08a24b5483713ff61c97081"}}, &(0x7f0000000140)={0x0, 0x3, 0x10, @string={0x10, 0x3, "00dd8719bb5f348c65512e6ae720"}}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r6, &(0x7f0000000000)=[{&(0x7f00000006c0)='15', 0x2}], 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}], 0x1c) 1.470421465s ago: executing program 0 (id=320): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x80002, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="120000000d000000080000000200000004000000", @ANYRES32, @ANYBLOB="00000000000000000400000040bbbea30b0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$watch_queue(r3, &(0x7f00000001c0)=""/105, 0x69) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x3830, 0x1, 0xbd6, 0x8, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x800c2, 0x121) r4 = syz_open_procfs(0x0, 0x0) writev(r4, 0x0, 0x0) r5 = syz_open_pts(r2, 0x80) r6 = dup3(r5, r2, 0x80000) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000000)) r7 = socket$inet(0x2, 0x3, 0x2) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) getpgid(0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004500002800d700000402907800000000e000000211009078e00000020001000200000000"], 0x0) r9 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000101c0)={r10, r9, 0x0, 0x0, 0x0}, 0x30) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) 1.423292006s ago: executing program 4 (id=321): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20080, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x802, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) listen(0xffffffffffffffff, 0xeaffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x0, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0xc842, 0x1) pwrite64(r0, &(0x7f0000000080), 0xfdcf, 0x404042ffe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtaction={0x14, 0x30, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x18, &(0x7f0000000040), 0xfe, 0xbb8, &(0x7f00000017c0)="$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") (fail_nth: 3) 1.378651647s ago: executing program 1 (id=323): r0 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa69b534809999036b4e8b003e000800300900001d772e070290780a011416"], 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc088) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4c, 0x0, 0x0, 0x0, 0x2b, &(0x7f0000000540)=[{}, {}, {}, {}], 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800483, &(0x7f0000000300), 0x0, 0x5c8, &(0x7f0000000980)="$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") bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200047fd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4f23, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000000000000000000008510000002000000bc68f4ff100000005f000000000000001800000000000000000000000000000085000000580000009500000000000080"], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=r0, @ANYRES64=r5, @ANYRES8=r4], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000076000d0b"], 0x18}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b90000000000000000070000000600040000ef00000600"], 0x24}}, 0x0) listen(r6, 0x20000b) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) 1.211385492s ago: executing program 3 (id=325): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) listen(r0, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 998.443456ms ago: executing program 3 (id=326): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x20000023896) 927.961038ms ago: executing program 4 (id=327): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sync() socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2c020400) r2 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000340)=0x1, 0x12) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) process_vm_readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/119, 0x77}], 0x1, &(0x7f0000000940)=[{&(0x7f00000007c0)=""/192, 0xc0}], 0x1, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r5, 0x0, 0x5003) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x5400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x1fc}}, 0x20000000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002200)=ANY=[@ANYBLOB="3c00000010004b042bbd7000000500007a000000", @ANYRES32=0x0, @ANYBLOB="6100000081100000140035006d6163736563300000000000000000000800040009000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x810) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a1401000000000000000000080003000000000008"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x10) r9 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0x2, &(0x7f0000000080)=0x12, 0x4) 822.522501ms ago: executing program 1 (id=328): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x44000}, 0x8804) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x80000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$watch_queue(r6, &(0x7f0000001d40)=""/4095, 0xfff) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x1d9) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000810008003dfb0fa8ac310f49b55197df800c86abaea74dddf4f645819711b0f06a8672f57614cfea95720fd9a6f50177ba200a5c00", @ANYRES32, @ANYBLOB="10000600000000002000000000000000"], 0x2c, 0x3) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000011140100800000000000000008004a0008004b001300000008000000000000b96cf5d30949b0bd34579df7b0ed8a99ed861e7b26a459c4fe3b37c42803a79a50a6bd1a642e42a2a9448bf7d2bfee26e548193350d5d97849053f11bd3873920e2bf63dd7a3c3c54864a54841574b168a8cc3badbb7f8efad16edd8e4264ddde1c2f650dc313f8d715029c42c82fdf1d3c3ff89426bbf15dba5b3763e745063e85e8abf9bb835eb2416053ed70d00000000006757507725d6142b0b0c85a987e58199f1bb87bd9b937ddf706d21a3bfb571a6"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd5}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r9, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) sendfile(r10, r10, 0x0, 0x1008000e0e) 775.954552ms ago: executing program 3 (id=329): listen(0xffffffffffffffff, 0x800) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x44004) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) close_range(r0, 0xffffffffffffffff, 0xa00) 646.770325ms ago: executing program 3 (id=330): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) 641.300495ms ago: executing program 3 (id=331): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r2 = dup(r1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x2, 0x10}, 0xc) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[], 0x32600) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @loopback}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000600)="60de6e6b6c9b", 0x6}], 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000000000034"], 0x40}, 0x20008024) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r3, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x8000000) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) (async) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) (async) dup(r1) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x2, 0x10}, 0xc) (async) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[], 0x32600) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) (async) socket$netlink(0x10, 0x3, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) (async) socket$inet(0x2, 0x2, 0x1) (async) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @loopback}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000600)="60de6e6b6c9b", 0x6}], 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000000000034"], 0x40}, 0x20008024) (async) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r3, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x8000000) (async) 204.493466ms ago: executing program 0 (id=332): syz_mount_image$iso9660(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x0, &(0x7f0000000880), 0x1, 0x7f1, &(0x7f00000008c0)="$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") (fail_nth: 10) 0s ago: executing program 3 (id=333): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r2, @ANYBLOB="11042abd7000fddbdf251400000008000300", @ANYRES32=r3, @ANYBLOB="08001d"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) kernel console output (not intermixed with test programs): t=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.659236][ T29] audit: type=1400 audit(1789048373.061:99): avc: denied { noatsecure } for pid=3170 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.659760][ T29] audit: type=1400 audit(1789048373.061:100): avc: denied { write } for pid=3170 comm="sh" path="pipe:[466]" dev="pipefs" ino=466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 21.659796][ T29] audit: type=1400 audit(1789048373.061:101): avc: denied { rlimitinh } for pid=3170 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.659841][ T29] audit: type=1400 audit(1789048373.061:102): avc: denied { siginh } for pid=3170 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.832607][ T29] audit: type=1400 audit(1789048375.231:103): avc: denied { search } for pid=3179 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.832647][ T29] audit: type=1400 audit(1789048375.231:104): avc: denied { search } for pid=3179 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.832682][ T29] audit: type=1400 audit(1789048375.231:105): avc: denied { search } for pid=3179 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.832730][ T29] audit: type=1400 audit(1789048375.231:106): avc: denied { search } for pid=3179 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.833986][ T29] audit: type=1400 audit(1789048375.231:107): avc: denied { read } for pid=3180 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.834045][ T29] audit: type=1400 audit(1789048375.231:108): avc: denied { read open } for pid=3180 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.834104][ T29] audit: type=1400 audit(1789048375.231:109): avc: denied { getattr } for pid=3180 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.947495][ T29] audit: type=1400 audit(1789048375.341:110): avc: denied { write } for pid=3179 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.947606][ T29] audit: type=1400 audit(1789048375.341:111): avc: denied { add_name } for pid=3179 comm="dhcpcd-run-hook" name="resolv.conf.ifb1.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.997210][ T29] audit: type=1400 audit(1789048375.391:112): avc: denied { write } for pid=3190 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.117' (ED25519) to the list of known hosts. [ 30.426978][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 30.426996][ T29] audit: type=1400 audit(1789048381.821:126): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.427323][ T29] audit: type=1400 audit(1789048381.821:127): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.427936][ T3285] cgroup: Unknown subsys name 'net' [ 30.428219][ T29] audit: type=1400 audit(1789048381.821:128): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.569458][ T3285] cgroup: Unknown subsys name 'cpuset' [ 30.570250][ T3285] cgroup: Unknown subsys name 'rlimit' [ 30.697014][ T29] audit: type=1400 audit(1789048382.091:129): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.697848][ T29] audit: type=1400 audit(1789048382.091:130): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.697993][ T29] audit: type=1400 audit(1789048382.091:131): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.698274][ T29] audit: type=1400 audit(1789048382.091:132): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.721216][ T29] audit: type=1400 audit(1789048382.101:133): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.721373][ T29] audit: type=1400 audit(1789048382.101:134): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.744524][ T29] audit: type=1400 audit(1789048382.121:135): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 30.819097][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.853647][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.958344][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.958388][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.958491][ T3295] bridge_slave_0: entered allmulticast mode [ 32.960198][ T3295] bridge_slave_0: entered promiscuous mode [ 32.986916][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.986976][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.987040][ T3300] bridge_slave_0: entered allmulticast mode [ 32.987661][ T3300] bridge_slave_0: entered promiscuous mode [ 32.994861][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.994962][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.995261][ T3295] bridge_slave_1: entered allmulticast mode [ 32.996553][ T3295] bridge_slave_1: entered promiscuous mode [ 33.054170][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.054202][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.054285][ T3300] bridge_slave_1: entered allmulticast mode [ 33.054731][ T3300] bridge_slave_1: entered promiscuous mode [ 33.056172][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.056787][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.056879][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.057082][ T3296] bridge_slave_0: entered allmulticast mode [ 33.058287][ T3296] bridge_slave_0: entered promiscuous mode [ 33.061317][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.061409][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.061574][ T3296] bridge_slave_1: entered allmulticast mode [ 33.062841][ T3296] bridge_slave_1: entered promiscuous mode [ 33.091601][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.108599][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.108704][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.108862][ T3299] bridge_slave_0: entered allmulticast mode [ 33.110574][ T3299] bridge_slave_0: entered promiscuous mode [ 33.145246][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.147918][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.178734][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.178770][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.178980][ T3299] bridge_slave_1: entered allmulticast mode [ 33.180249][ T3299] bridge_slave_1: entered promiscuous mode [ 33.223935][ T3296] team0: Port device team_slave_0 added [ 33.225124][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.236928][ T3295] team0: Port device team_slave_0 added [ 33.248312][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.248421][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.249255][ T3301] bridge_slave_0: entered allmulticast mode [ 33.250339][ T3301] bridge_slave_0: entered promiscuous mode [ 33.253944][ T3296] team0: Port device team_slave_1 added [ 33.268093][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.281297][ T3295] team0: Port device team_slave_1 added [ 33.281687][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.281789][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.281912][ T3301] bridge_slave_1: entered allmulticast mode [ 33.283185][ T3301] bridge_slave_1: entered promiscuous mode [ 33.309591][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.332013][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.332028][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.332077][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.337604][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.339417][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.341523][ T3300] team0: Port device team_slave_0 added [ 33.353427][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.353470][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.353570][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.354597][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.354637][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.354797][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.379899][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.381992][ T3300] team0: Port device team_slave_1 added [ 33.390406][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.390446][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.390530][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.398494][ T3299] team0: Port device team_slave_0 added [ 33.401038][ T3299] team0: Port device team_slave_1 added [ 33.471212][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.471262][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.471354][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.486129][ T3301] team0: Port device team_slave_0 added [ 33.489136][ T3301] team0: Port device team_slave_1 added [ 33.489986][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.490018][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.490102][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.491016][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.491054][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.491207][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.531542][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.531591][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.531681][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.568288][ T3295] hsr_slave_0: entered promiscuous mode [ 33.569287][ T3295] hsr_slave_1: entered promiscuous mode [ 33.575741][ T3296] hsr_slave_0: entered promiscuous mode [ 33.576900][ T3296] hsr_slave_1: entered promiscuous mode [ 33.577413][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 33.577454][ T3296] Cannot create hsr debugfs directory [ 33.591068][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.591118][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.591195][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.618250][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.618292][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.618381][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.669483][ T3299] hsr_slave_0: entered promiscuous mode [ 33.670362][ T3299] hsr_slave_1: entered promiscuous mode [ 33.671034][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 33.671055][ T3299] Cannot create hsr debugfs directory [ 33.719589][ T3300] hsr_slave_0: entered promiscuous mode [ 33.720773][ T3300] hsr_slave_1: entered promiscuous mode [ 33.721262][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 33.721275][ T3300] Cannot create hsr debugfs directory [ 33.801828][ T3301] hsr_slave_0: entered promiscuous mode [ 33.802736][ T3301] hsr_slave_1: entered promiscuous mode [ 33.803365][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 33.803406][ T3301] Cannot create hsr debugfs directory [ 34.119953][ T3295] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.122783][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.123524][ T3295] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.125526][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.126330][ T3295] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.129595][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.136872][ T3295] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.147084][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.186185][ T3299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.189769][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.191269][ T3299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.199638][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.212965][ T3299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.221740][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.231650][ T3299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.233493][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.262370][ T3300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.264039][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.268136][ T3300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.272714][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.285696][ T3300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.293091][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.310085][ T3300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.314908][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.336960][ T3296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.340418][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.341924][ T3296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.350031][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.353053][ T3296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.364736][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.366937][ T3296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.377250][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.424705][ T3301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.426772][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.427410][ T3301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.430225][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.444563][ T3301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.453518][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.467064][ T3301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.475168][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.487921][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.499010][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.534700][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.547681][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.558887][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.558924][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.562688][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.570985][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.571061][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.590992][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.591087][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.594917][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.615545][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.615647][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.619731][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.619871][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.643990][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.644043][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.668742][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.680869][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.722649][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.725681][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.746663][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.746750][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.773370][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.773469][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.775756][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.775799][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.777391][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.777431][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.882792][ T3296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.882834][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.059227][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.100319][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.122355][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.182475][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.201966][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.282463][ T3299] veth0_vlan: entered promiscuous mode [ 35.285382][ T3299] veth1_vlan: entered promiscuous mode [ 35.304634][ T3299] veth0_macvtap: entered promiscuous mode [ 35.306294][ T3299] veth1_macvtap: entered promiscuous mode [ 35.325314][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.336347][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.370209][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.419099][ T70] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.420057][ T3301] veth0_vlan: entered promiscuous mode [ 35.423959][ T3300] veth0_vlan: entered promiscuous mode [ 35.442649][ T3301] veth1_vlan: entered promiscuous mode [ 35.462306][ T3296] veth0_vlan: entered promiscuous mode [ 35.465859][ T3300] veth1_vlan: entered promiscuous mode [ 35.473686][ T3296] veth1_vlan: entered promiscuous mode [ 35.490157][ T38] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.490317][ T38] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.491764][ T3299] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.539589][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 35.539605][ T29] audit: type=1400 audit(1789048386.941:155): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.539635][ T29] audit: type=1400 audit(1789048386.941:156): avc: denied { open } for pid=3299 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.539735][ T29] audit: type=1400 audit(1789048386.941:157): avc: denied { ioctl } for pid=3299 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.542188][ T3301] veth0_macvtap: entered promiscuous mode [ 35.561016][ T3301] veth1_macvtap: entered promiscuous mode [ 35.579304][ T3295] veth0_vlan: entered promiscuous mode [ 35.615212][ T29] audit: type=1400 audit(1789048387.001:158): avc: denied { create } for pid=3499 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 35.633802][ T3300] veth0_macvtap: entered promiscuous mode [ 35.638834][ T3296] veth0_macvtap: entered promiscuous mode [ 35.653092][ T3300] veth1_macvtap: entered promiscuous mode [ 35.653991][ T29] audit: type=1400 audit(1789048387.051:159): avc: denied { setopt } for pid=3499 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 35.657865][ T3296] veth1_macvtap: entered promiscuous mode [ 35.661410][ T29] audit: type=1400 audit(1789048387.061:160): avc: denied { getopt } for pid=3499 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 35.666443][ T29] audit: type=1400 audit(1789048387.061:161): avc: denied { bind } for pid=3499 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 35.666517][ T29] audit: type=1400 audit(1789048387.061:162): avc: denied { name_bind } for pid=3499 comm="syz.0.1" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 35.666634][ T29] audit: type=1400 audit(1789048387.061:163): avc: denied { node_bind } for pid=3499 comm="syz.0.1" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 35.673869][ T3295] veth1_vlan: entered promiscuous mode [ 35.675337][ T29] audit: type=1400 audit(1789048387.071:164): avc: denied { write } for pid=3499 comm="syz.0.1" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 35.724185][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.728243][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.764879][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.766673][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.770922][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.794984][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.859024][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.859868][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.860090][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.860192][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.860349][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.862946][ T3295] veth0_macvtap: entered promiscuous mode [ 35.889075][ T38] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.889239][ T38] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.889356][ T38] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.889457][ T38] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.899937][ T313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.900176][ T313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.900506][ T313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.902254][ T3295] veth1_macvtap: entered promiscuous mode [ 36.007252][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.032022][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.047805][ T313] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.048935][ T313] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.053784][ T38] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.053995][ T38] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.348074][ T3510] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2'. [ 36.348203][ T3510] netlink: 30 bytes leftover after parsing attributes in process `syz.1.2'. [ 36.348392][ T3510] netlink: 30 bytes leftover after parsing attributes in process `syz.1.2'. [ 36.400219][ T3520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 36.626233][ T3515] loop0: detected capacity change from 0 to 512 [ 36.673297][ T3515] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.673351][ T3515] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.754769][ T3515] EXT4-fs (loop0): 1 truncate cleaned up [ 36.778330][ T3515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.927405][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.066134][ T3533] Zero length message leads to an empty skb [ 37.145752][ T3532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8'. [ 37.168043][ T3518] syz.4.5 (3518) used greatest stack depth: 10368 bytes left [ 37.236733][ T3513] loop2: detected capacity change from 0 to 512 [ 37.270873][ T3513] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.325783][ T3541] loop4: detected capacity change from 0 to 1024 [ 37.350826][ T3541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.391309][ T3513] EXT4-fs (loop2): 1 truncate cleaned up [ 37.470589][ T3538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 37.487582][ T3541] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 37.535629][ T3513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.570400][ T3553] syz_tun: entered allmulticast mode [ 37.571436][ T3552] syz_tun: left allmulticast mode [ 37.608991][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.703630][ T3558] syz.4.15 uses obsolete (PF_INET,SOCK_PACKET) [ 37.715096][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811b926a00: rx timeout, send abort [ 37.731285][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.851309][ T3568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 38.030343][ T3574] loop4: detected capacity change from 0 to 1024 [ 38.033657][ T3574] ======================================================= [ 38.033657][ T3574] WARNING: The mand mount option has been deprecated and [ 38.033657][ T3574] and is ignored by this kernel. Remove the mand [ 38.033657][ T3574] option from the mount to silence this warning. [ 38.033657][ T3574] ======================================================= [ 38.090545][ T3574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 38.090629][ T3574] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.187917][ T3574] --map-set only usable from mangle table [ 38.212380][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811b926800: rx timeout, send abort [ 38.215160][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811b926a00: abort rx timeout. Force session deactivation [ 38.308937][ T3583] loop0: detected capacity change from 0 to 1024 [ 38.346576][ T3583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 38.346652][ T3583] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.381283][ T3587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'. [ 38.466582][ T3583] --map-set only usable from mangle table [ 38.594106][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 38.693522][ T3594] loop4: detected capacity change from 0 to 1024 [ 38.712431][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811b926800: abort rx timeout. Force session deactivation [ 38.724337][ T3594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.830953][ T3601] loop2: detected capacity change from 0 to 1024 [ 38.856673][ T3601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 38.856734][ T3601] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.873741][ T3594] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 38.964721][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.025964][ T3601] --map-set only usable from mangle table [ 39.050299][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 39.094683][ T3610] loop0: detected capacity change from 0 to 1024 [ 39.112014][ T3610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 39.112120][ T3610] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.271972][ T3610] --map-set only usable from mangle table [ 39.389495][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 39.499941][ T3618] loop3: detected capacity change from 0 to 512 [ 39.518977][ T3618] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 39.712233][ T3624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 39.773394][ T3608] loop4: detected capacity change from 0 to 1024 [ 39.846434][ T3627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 39.846522][ T3627] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.917647][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 39.923171][ T3627] --map-set only usable from mangle table [ 39.993774][ T3608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 40.010170][ T3608] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.053077][ T3636] syz_tun: entered allmulticast mode [ 40.067000][ T3636] dvmrp6: entered allmulticast mode [ 40.094211][ T3635] syz_tun: left allmulticast mode [ 40.171045][ T3639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.273652][ T3645] syz_tun: entered allmulticast mode [ 40.274605][ T3644] syz_tun: left allmulticast mode [ 40.278014][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 40.619753][ T3646] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 40.634608][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 40.634726][ T29] audit: type=1400 audit(1789048392.031:245): avc: denied { mmap_zero } for pid=3650 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 40.732202][ T3648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 40.732328][ T3648] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.778824][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.789769][ T29] audit: type=1400 audit(1789048392.191:246): avc: denied { write } for pid=3647 comm="syz.0.39" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.789873][ T29] audit: type=1400 audit(1789048392.191:247): avc: denied { create } for pid=3647 comm="syz.0.39" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 40.862349][ T3648] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.39: bg 0: block 112: padding at end of block bitmap is not set [ 40.865645][ T29] audit: type=1400 audit(1789048392.261:248): avc: denied { write } for pid=3647 comm="syz.0.39" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.929468][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 40.972720][ T3660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.003936][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 41.008623][ T29] audit: type=1400 audit(1789048392.401:249): avc: denied { write } for pid=3659 comm="syz.1.42" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.053432][ T3660] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 41.094967][ T29] audit: type=1400 audit(1789048392.491:250): avc: denied { shutdown } for pid=3671 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 41.095464][ T3673] sctp: [Deprecated]: syz.3.45 (pid 3673) Use of struct sctp_assoc_value in delayed_ack socket option. [ 41.095464][ T3673] Use struct sctp_sack_info instead [ 41.184093][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.347208][ T3670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'. [ 41.413864][ T3684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.48'. [ 41.526373][ T3687] netlink: 36 bytes leftover after parsing attributes in process `syz.2.50'. [ 41.526404][ T3687] netlink: 30 bytes leftover after parsing attributes in process `syz.2.50'. [ 41.526613][ T3687] netlink: 30 bytes leftover after parsing attributes in process `syz.2.50'. [ 41.620996][ T3674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 41.622601][ T3674] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.954027][ T3702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'. [ 42.318954][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 42.471354][ T3710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.56'. [ 42.998706][ T29] audit: type=1400 audit(1789048394.391:251): avc: denied { read } for pid=3707 comm="syz.4.57" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 42.998747][ T29] audit: type=1400 audit(1789048394.401:252): avc: denied { open } for pid=3707 comm="syz.4.57" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 43.427598][ T29] audit: type=1400 audit(1789048394.821:253): avc: denied { perfmon } for pid=3717 comm="syz.2.58" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 43.462095][ T29] audit: type=1400 audit(1789048394.861:254): avc: denied { create } for pid=3707 comm="syz.4.57" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 43.556681][ T3718] netlink: 36 bytes leftover after parsing attributes in process `syz.2.58'. [ 43.556902][ T3718] netlink: 30 bytes leftover after parsing attributes in process `syz.2.58'. [ 43.562121][ T3718] netlink: 30 bytes leftover after parsing attributes in process `syz.2.58'. [ 43.562542][ T3720] netlink: 36 bytes leftover after parsing attributes in process `syz.1.59'. [ 44.532207][ T3759] set_capacity_and_notify: 5 callbacks suppressed [ 44.532238][ T3759] loop2: detected capacity change from 0 to 128 [ 44.648102][ T3759] loop2: detected capacity change from 0 to 512 [ 44.692427][ T3759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.692783][ T3759] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.814964][ T3758] syz.2.73 (3758) used greatest stack depth: 9856 bytes left [ 44.904831][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.918442][ T3769] --map-set only usable from mangle table [ 45.033505][ T3773] mmap: syz.3.76 (3773) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.379129][ T3775] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 46.138776][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 46.138795][ T29] audit: type=1400 audit(1789048397.531:287): avc: denied { write } for pid=3800 comm="syz.3.85" name="usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 46.138827][ T29] audit: type=1400 audit(1789048397.531:288): avc: denied { open } for pid=3800 comm="syz.3.85" path="/dev/usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 46.178601][ T29] audit: type=1400 audit(1789048397.571:289): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 46.460336][ T29] audit: type=1400 audit(1789048397.861:290): avc: denied { bind } for pid=3816 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 46.462912][ T29] audit: type=1400 audit(1789048397.861:291): avc: denied { setopt } for pid=3816 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 46.545307][ T29] audit: type=1400 audit(1789048397.941:292): avc: denied { getopt } for pid=3820 comm="syz.0.94" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.661247][ T29] audit: type=1400 audit(1789048398.061:293): avc: denied { connect } for pid=3830 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.745581][ T3825] IPVS: Error connecting to the multicast addr [ 46.894957][ T3836] __nla_validate_parse: 14 callbacks suppressed [ 46.895037][ T3836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'. [ 46.910440][ T3835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.101'. [ 47.054691][ T3841] netlink: 64 bytes leftover after parsing attributes in process `syz.2.103'. [ 47.068624][ T3841] syzkaller1: entered promiscuous mode [ 47.068633][ T29] audit: type=1400 audit(1789048398.461:294): avc: denied { ioctl } for pid=3840 comm="syz.2.103" path="socket:[6329]" dev="sockfs" ino=6329 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.068715][ T3841] syzkaller1: entered allmulticast mode [ 47.353138][ T3847] netlink: 36 bytes leftover after parsing attributes in process `syz.2.107'. [ 47.353337][ T3847] netlink: 30 bytes leftover after parsing attributes in process `syz.2.107'. [ 47.358202][ T3847] netlink: 30 bytes leftover after parsing attributes in process `syz.2.107'. [ 47.463848][ T3850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.106'. [ 47.692966][ T3861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.108'. [ 47.962838][ T3871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'. [ 48.007407][ T3868] netlink: 36 bytes leftover after parsing attributes in process `syz.4.105'. [ 48.145194][ T3880] FAULT_INJECTION: forcing a failure. [ 48.145194][ T3880] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 48.145385][ T3880] CPU: 0 UID: 0 PID: 3880 Comm: syz.0.117 Not tainted syzkaller #0 PREEMPT(lazy) [ 48.145416][ T3880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.145432][ T3880] Call Trace: [ 48.145439][ T3880] [ 48.145447][ T3880] __dump_stack+0x1d/0x30 [ 48.145479][ T3880] dump_stack_lvl+0x95/0xd0 [ 48.145519][ T3880] dump_stack+0x15/0x1b [ 48.145545][ T3880] should_fail_ex+0x262/0x280 [ 48.145577][ T3880] should_fail+0xb/0x20 [ 48.145601][ T3880] should_fail_usercopy+0x1a/0x20 [ 48.145682][ T3880] _copy_from_user+0x1c/0xb0 [ 48.145717][ T3880] do_ipv6_setsockopt+0x127/0x2040 [ 48.145755][ T3880] ? tick_program_event+0x79/0xc0 [ 48.145933][ T3880] ? _raw_spin_unlock+0x9/0x30 [ 48.145964][ T3880] ? __hrtimer_rearm_deferred+0x571/0x650 [ 48.145993][ T3880] ? selinux_netlbl_socket_setsockopt+0x43/0x2f0 [ 48.146039][ T3880] ? irqentry_exit+0x58f/0x610 [ 48.146151][ T3880] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 48.146258][ T3880] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 48.146308][ T3880] ipv6_setsockopt+0x59/0x130 [ 48.146348][ T3880] tcp_setsockopt+0x98/0xb0 [ 48.146385][ T3880] sock_common_setsockopt+0x69/0x80 [ 48.146422][ T3880] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 48.146474][ T3880] __sys_setsockopt+0x184/0x200 [ 48.146520][ T3880] __x64_sys_setsockopt+0x64/0x80 [ 48.146610][ T3880] x64_sys_call+0x248f/0x2550 [ 48.146636][ T3880] do_syscall_64+0x112/0x360 [ 48.146701][ T3880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.146812][ T3880] RIP: 0033:0x7f776590e159 [ 48.146834][ T3880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.146909][ T3880] RSP: 002b:00007f7764346028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 48.146937][ T3880] RAX: ffffffffffffffda RBX: 00007f7765b96090 RCX: 00007f776590e159 [ 48.147031][ T3880] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000008 [ 48.147048][ T3880] RBP: 00007f7764346090 R08: 0000000000000610 R09: 0000000000000000 [ 48.147113][ T3880] R10: 0000200000001a00 R11: 0000000000000246 R12: 0000000000000001 [ 48.147130][ T3880] R13: 00007f7765b96128 R14: 00007f7765b96090 R15: 00007ffc165a81a8 [ 48.147178][ T3880] [ 48.391661][ T29] audit: type=1400 audit(1789048399.791:295): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 48.741644][ T3904] FAULT_INJECTION: forcing a failure. [ 48.741644][ T3904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.741773][ T3904] CPU: 1 UID: 0 PID: 3904 Comm: syz.2.129 Not tainted syzkaller #0 PREEMPT(lazy) [ 48.741806][ T3904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.741873][ T3904] Call Trace: [ 48.741879][ T3904] [ 48.741886][ T3904] __dump_stack+0x1d/0x30 [ 48.741911][ T3904] dump_stack_lvl+0x95/0xd0 [ 48.741938][ T3904] dump_stack+0x15/0x1b [ 48.741965][ T3904] should_fail_ex+0x262/0x280 [ 48.742017][ T3904] should_fail+0xb/0x20 [ 48.742059][ T3904] should_fail_usercopy+0x1a/0x20 [ 48.742142][ T3904] _copy_from_iter+0xcc/0xe70 [ 48.742166][ T3904] ? __alloc_skb+0x516/0x6f0 [ 48.742196][ T3904] ? __alloc_skb+0x209/0x6f0 [ 48.742277][ T3904] netlink_sendmsg+0x4a4/0x6f0 [ 48.742313][ T3904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.742352][ T3904] ____sys_sendmsg+0x532/0x580 [ 48.742382][ T3904] ___sys_sendmsg+0x195/0x1e0 [ 48.742492][ T3904] __x64_sys_sendmsg+0xd4/0x160 [ 48.742524][ T3904] x64_sys_call+0x22ab/0x2550 [ 48.742552][ T3904] do_syscall_64+0x112/0x360 [ 48.742585][ T3904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.742620][ T3904] RIP: 0033:0x7fc0d623e159 [ 48.742641][ T3904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.742665][ T3904] RSP: 002b:00007fc0d4c97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.742692][ T3904] RAX: ffffffffffffffda RBX: 00007fc0d64c5fa0 RCX: 00007fc0d623e159 [ 48.742711][ T3904] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 48.742806][ T3904] RBP: 00007fc0d4c97090 R08: 0000000000000000 R09: 0000000000000000 [ 48.742823][ T3904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.742859][ T3904] R13: 00007fc0d64c6038 R14: 00007fc0d64c5fa0 R15: 00007fffe4a96ad8 [ 48.742885][ T3904] [ 48.949996][ T29] audit: type=1400 audit(1789048400.351:296): avc: denied { watch } for pid=3905 comm="syz.2.130" path="/29" dev="tmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 49.774251][ T3976] netlink: 'syz.2.160': attribute type 10 has an invalid length. [ 50.373294][ T4010] FAULT_INJECTION: forcing a failure. [ 50.373294][ T4010] name failslab, interval 1, probability 0, space 0, times 0 [ 50.373331][ T4010] CPU: 0 UID: 0 PID: 4010 Comm: syz.0.173 Not tainted syzkaller #0 PREEMPT(lazy) [ 50.373360][ T4010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.373373][ T4010] Call Trace: [ 50.373379][ T4010] [ 50.373450][ T4010] __dump_stack+0x1d/0x30 [ 50.373482][ T4010] dump_stack_lvl+0x95/0xd0 [ 50.373546][ T4010] dump_stack+0x15/0x1b [ 50.373566][ T4010] should_fail_ex+0x262/0x280 [ 50.373604][ T4010] ? skb_clone+0x151/0x1f0 [ 50.373674][ T4010] should_failslab+0x8c/0xb0 [ 50.373713][ T4010] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 50.373751][ T4010] ? skb_clone+0x151/0x1f0 [ 50.373841][ T4010] skb_clone+0x151/0x1f0 [ 50.373867][ T4010] __netlink_deliver_tap+0x2be/0x510 [ 50.373913][ T4010] netlink_unicast+0x656/0x680 [ 50.373950][ T4010] netlink_sendmsg+0x5be/0x6f0 [ 50.374002][ T4010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.374073][ T4010] ____sys_sendmsg+0x532/0x580 [ 50.374226][ T4010] ___sys_sendmsg+0x195/0x1e0 [ 50.374262][ T4010] __x64_sys_sendmsg+0xd4/0x160 [ 50.374309][ T4010] x64_sys_call+0x22ab/0x2550 [ 50.374343][ T4010] do_syscall_64+0x112/0x360 [ 50.374454][ T4010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.374482][ T4010] RIP: 0033:0x7f776590e159 [ 50.374499][ T4010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.374519][ T4010] RSP: 002b:00007f7764367028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.374540][ T4010] RAX: ffffffffffffffda RBX: 00007f7765b95fa0 RCX: 00007f776590e159 [ 50.374587][ T4010] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 50.374600][ T4010] RBP: 00007f7764367090 R08: 0000000000000000 R09: 0000000000000000 [ 50.374614][ T4010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.374627][ T4010] R13: 00007f7765b96038 R14: 00007f7765b95fa0 R15: 00007ffc165a81a8 [ 50.374685][ T4010] [ 50.509207][ T4012] loop1: detected capacity change from 0 to 2048 [ 50.571212][ T4012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.758887][ T4026] loop0: detected capacity change from 0 to 512 [ 50.763063][ T4026] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.852801][ T4012] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.172: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 50.859724][ T4012] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.172: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 50.888907][ T4012] netlink: 'syz.1.172': attribute type 39 has an invalid length. [ 50.910994][ T4026] loop0: detected capacity change from 0 to 4096 [ 50.926095][ T4026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.951131][ T4026] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm syz.0.178: corrupted inode contents [ 50.952585][ T4026] EXT4-fs error (device loop0): ext4_dirty_inode:6736: inode #15: comm syz.0.178: mark_inode_dirty error [ 50.952767][ T4026] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm syz.0.178: corrupted inode contents [ 50.952931][ T4026] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.178: mark_inode_dirty error [ 50.953152][ T4026] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm syz.0.178: corrupted inode contents [ 50.953282][ T4026] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.178: mark_inode_dirty error [ 50.953459][ T4026] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm syz.0.178: corrupted inode contents [ 50.953614][ T4026] EXT4-fs error (device loop0): ext4_truncate:4721: inode #15: comm syz.0.178: mark_inode_dirty error [ 50.953753][ T4026] EXT4-fs error (device loop0) in ext4_setattr:6247: Corrupt filesystem [ 50.980270][ T4026] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm syz.0.178: corrupted inode contents [ 51.117775][ T4040] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 51.117792][ T4040] IPv6: NLM_F_CREATE should be set when creating new route [ 51.135022][ T4040] Driver unsupported XDP return value 0 on prog (id 52) dev N/A, expect packet loss! [ 51.188429][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 51.188446][ T29] audit: type=1400 audit(1789048402.581:323): avc: denied { write } for pid=4025 comm="syz.0.178" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.189654][ T29] audit: type=1400 audit(1789048402.591:324): avc: denied { read open } for pid=4025 comm="syz.0.178" path="/50/file3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.194070][ T29] audit: type=1400 audit(1789048402.591:325): avc: denied { append } for pid=4025 comm="syz.0.178" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.194240][ T29] audit: type=1400 audit(1789048402.591:326): avc: denied { write } for pid=4025 comm="syz.0.178" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.355329][ T29] audit: type=1400 audit(1789048402.751:327): avc: denied { connect } for pid=4049 comm="syz.3.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 51.355508][ T29] audit: type=1400 audit(1789048402.751:328): avc: denied { bind } for pid=4049 comm="syz.3.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 51.357054][ T4050] FAULT_INJECTION: forcing a failure. [ 51.357054][ T4050] name failslab, interval 1, probability 0, space 0, times 0 [ 51.357089][ T4050] CPU: 1 UID: 0 PID: 4050 Comm: syz.3.187 Not tainted syzkaller #0 PREEMPT(lazy) [ 51.357120][ T4050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.357133][ T4050] Call Trace: [ 51.357139][ T4050] [ 51.357210][ T4050] __dump_stack+0x1d/0x30 [ 51.357245][ T4050] dump_stack_lvl+0x95/0xd0 [ 51.357296][ T4050] dump_stack+0x15/0x1b [ 51.357324][ T4050] should_fail_ex+0x262/0x280 [ 51.357351][ T4050] ? __do_once_done+0x62/0x110 [ 51.357437][ T4050] should_failslab+0x8c/0xb0 [ 51.357548][ T4050] __kmalloc_cache_noprof+0x7a/0x400 [ 51.357611][ T4050] ? __do_once_done+0x62/0x110 [ 51.357642][ T4050] __do_once_done+0x62/0x110 [ 51.357709][ T4050] __rds_conn_create+0x1191/0x11a0 [ 51.357748][ T4050] ? inode_doinit_with_dentry+0x98/0x7b0 [ 51.357844][ T4050] ? should_fail_ex+0xdb/0x280 [ 51.357975][ T4050] ? rds_message_alloc+0x45/0x120 [ 51.358041][ T4050] ? should_failslab+0x8c/0xb0 [ 51.358083][ T4050] rds_conn_create_outgoing+0x43/0x60 [ 51.358123][ T4050] rds_sendmsg+0xbf0/0x1580 [ 51.358161][ T4050] ? __pfx_rds_sendmsg+0x10/0x10 [ 51.358196][ T4050] ____sys_sendmsg+0x532/0x580 [ 51.358227][ T4050] ___sys_sendmsg+0x195/0x1e0 [ 51.358270][ T4050] __x64_sys_sendmsg+0xd4/0x160 [ 51.358353][ T4050] x64_sys_call+0x22ab/0x2550 [ 51.358388][ T4050] do_syscall_64+0x112/0x360 [ 51.358510][ T4050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.358541][ T4050] RIP: 0033:0x7f8e36dfe159 [ 51.358616][ T4050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.358641][ T4050] RSP: 002b:00007f8e35857028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.358676][ T4050] RAX: ffffffffffffffda RBX: 00007f8e37085fa0 RCX: 00007f8e36dfe159 [ 51.358696][ T4050] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 51.358713][ T4050] RBP: 00007f8e35857090 R08: 0000000000000000 R09: 0000000000000000 [ 51.358731][ T4050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.358748][ T4050] R13: 00007f8e37086038 R14: 00007f8e37085fa0 R15: 00007ffeadd51e58 [ 51.358776][ T4050] [ 51.469805][ T4051] process 'syz.2.186' launched './file0' with NULL argv: empty string added [ 51.470419][ T29] audit: type=1400 audit(1789048402.871:329): avc: denied { execute_no_trans } for pid=4046 comm="syz.2.186" path="/47/file0" dev="tmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.686820][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.721109][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.764344][ T4062] loop0: detected capacity change from 0 to 1024 [ 51.808346][ T4062] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.830447][ T29] audit: type=1400 audit(1789048403.231:330): avc: denied { write } for pid=4061 comm="syz.0.191" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.838005][ T29] audit: type=1400 audit(1789048403.231:331): avc: denied { write } for pid=4061 comm="syz.0.191" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.838171][ T29] audit: type=1400 audit(1789048403.231:332): avc: denied { create } for pid=4061 comm="syz.0.191" name="proc" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 51.844782][ T4062] FAULT_INJECTION: forcing a failure. [ 51.844782][ T4062] name failslab, interval 1, probability 0, space 0, times 0 [ 51.845023][ T4062] CPU: 1 UID: 0 PID: 4062 Comm: syz.0.191 Not tainted syzkaller #0 PREEMPT(lazy) [ 51.845106][ T4062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.845157][ T4062] Call Trace: [ 51.845237][ T4062] [ 51.845259][ T4062] __dump_stack+0x1d/0x30 [ 51.845343][ T4062] dump_stack_lvl+0x95/0xd0 [ 51.845417][ T4062] dump_stack+0x15/0x1b [ 51.845486][ T4062] should_fail_ex+0x262/0x280 [ 51.845556][ T4062] ? __es_insert_extent+0x50e/0xee0 [ 51.845670][ T4062] should_failslab+0x8c/0xb0 [ 51.845736][ T4062] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 51.845951][ T4062] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 51.846089][ T4062] ? __es_insert_extent+0x50e/0xee0 [ 51.846172][ T4062] __es_insert_extent+0x50e/0xee0 [ 51.846246][ T4062] ? should_fail_ex+0xdb/0x280 [ 51.846397][ T4062] ? ext4_find_extent+0x17f/0x7a0 [ 51.846507][ T4062] ? should_failslab+0x8c/0xb0 [ 51.846620][ T4062] ext4_es_cache_extent+0x386/0x5b0 [ 51.846713][ T4062] ? __es_find_extent_range+0x17d/0x310 [ 51.846797][ T4062] ext4_ext_map_blocks+0x1546/0x2f40 [ 51.847009][ T4062] ? __account_obj_stock+0x43d/0x720 [ 51.847120][ T4062] ext4_map_query_blocks+0xa1/0x500 [ 51.847242][ T4062] ? ext4_es_lookup_extent+0x390/0x4f0 [ 51.847371][ T4062] ext4_map_blocks+0x300/0x9a0 [ 51.847457][ T4062] _ext4_get_block+0x117/0x370 [ 51.847542][ T4062] ext4_get_block_unwritten+0x2a/0xb0 [ 51.847625][ T4062] ext4_block_write_begin+0x695/0xcb0 [ 51.847718][ T4062] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 51.847807][ T4062] ext4_convert_inline_data_to_extent+0x37d/0x770 [ 51.847999][ T4062] ext4_try_to_write_inline_data+0x54/0x90 [ 51.848125][ T4062] ext4_write_begin+0x1bf/0xeb0 [ 51.848275][ T4062] ? inode_to_bdi+0x47/0xa0 [ 51.848364][ T4062] ? ext4_mark_iloc_dirty+0xdac/0xe40 [ 51.848472][ T4062] ext4_da_write_begin+0x1f4/0x6b0 [ 51.848663][ T4062] ? balance_dirty_pages_ratelimited_flags+0x421/0x800 [ 51.848783][ T4062] generic_perform_write+0x186/0x490 [ 51.848893][ T4062] ext4_buffered_write_iter+0x2e3/0x480 [ 51.849074][ T4062] ext4_file_write_iter+0x36e/0x1020 [ 51.849161][ T4062] ? avc_policy_seqno+0x15/0x30 [ 51.849241][ T4062] ? selinux_file_permission+0x1dc/0x310 [ 51.849333][ T4062] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 51.849452][ T4062] vfs_write+0x57f/0x9a0 [ 51.849557][ T4062] __x64_sys_pwrite64+0xfd/0x150 [ 51.849718][ T4062] x64_sys_call+0x23be/0x2550 [ 51.849805][ T4062] do_syscall_64+0x112/0x360 [ 51.849919][ T4062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.850067][ T4062] RIP: 0033:0x7f776590e159 [ 51.850134][ T4062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.850209][ T4062] RSP: 002b:00007f7764367028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 51.850281][ T4062] RAX: ffffffffffffffda RBX: 00007f7765b95fa0 RCX: 00007f776590e159 [ 51.850326][ T4062] RDX: 0000000000000184 RSI: 0000200000000140 RDI: 0000000000000004 [ 51.850368][ T4062] RBP: 00007f77659a503b R08: 0000000000000000 R09: 0000000000000000 [ 51.850475][ T4062] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 51.850534][ T4062] R13: 00007f7765b96038 R14: 00007f7765b95fa0 R15: 00007ffc165a81a8 [ 51.850598][ T4062] [ 52.136800][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.295593][ T4076] __nla_validate_parse: 14 callbacks suppressed [ 52.295609][ T4076] netlink: 64 bytes leftover after parsing attributes in process `syz.2.196'. [ 52.342390][ T4083] FAULT_INJECTION: forcing a failure. [ 52.342390][ T4083] name failslab, interval 1, probability 0, space 0, times 0 [ 52.342422][ T4083] CPU: 1 UID: 0 PID: 4083 Comm: syz.0.198 Not tainted syzkaller #0 PREEMPT(lazy) [ 52.342447][ T4083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.342459][ T4083] Call Trace: [ 52.342465][ T4083] [ 52.342473][ T4083] __dump_stack+0x1d/0x30 [ 52.342541][ T4083] dump_stack_lvl+0x95/0xd0 [ 52.342613][ T4083] dump_stack+0x15/0x1b [ 52.342641][ T4083] should_fail_ex+0x262/0x280 [ 52.342667][ T4083] ? do_getname+0x2e/0x1c0 [ 52.342724][ T4083] should_failslab+0x8c/0xb0 [ 52.342755][ T4083] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 52.342789][ T4083] ? do_getname+0x2e/0x1c0 [ 52.342814][ T4083] ? vfs_write+0x850/0x9a0 [ 52.342894][ T4083] do_getname+0x2e/0x1c0 [ 52.342917][ T4083] getname_flags+0x1d/0x30 [ 52.342946][ T4083] do_sys_openat2+0x6c/0x130 [ 52.342989][ T4083] __x64_sys_openat+0xf2/0x120 [ 52.343022][ T4083] x64_sys_call+0x1f72/0x2550 [ 52.343056][ T4083] do_syscall_64+0x112/0x360 [ 52.343110][ T4083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.343138][ T4083] RIP: 0033:0x7f776590e159 [ 52.343159][ T4083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.343184][ T4083] RSP: 002b:00007f7764367028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 52.343207][ T4083] RAX: ffffffffffffffda RBX: 00007f7765b95fa0 RCX: 00007f776590e159 [ 52.343262][ T4083] RDX: 0000000000020040 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 52.343356][ T4083] RBP: 00007f7764367090 R08: 0000000000000000 R09: 0000000000000000 [ 52.343371][ T4083] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000001 [ 52.343407][ T4083] R13: 00007f7765b96038 R14: 00007f7765b95fa0 R15: 00007ffc165a81a8 [ 52.343429][ T4083] [ 52.345636][ T4081] netlink: 36 bytes leftover after parsing attributes in process `syz.3.199'. [ 52.345658][ T4081] netlink: 30 bytes leftover after parsing attributes in process `syz.3.199'. [ 52.345678][ T4081] netlink: 30 bytes leftover after parsing attributes in process `syz.3.199'. [ 52.597720][ T4086] netlink: 36 bytes leftover after parsing attributes in process `syz.2.201'. [ 52.597861][ T4086] netlink: 30 bytes leftover after parsing attributes in process `syz.2.201'. [ 52.597961][ T4086] netlink: 30 bytes leftover after parsing attributes in process `syz.2.201'. [ 53.267158][ T4101] FAULT_INJECTION: forcing a failure. [ 53.267158][ T4101] name failslab, interval 1, probability 0, space 0, times 0 [ 53.267217][ T4101] CPU: 1 UID: 0 PID: 4101 Comm: syz.1.207 Not tainted syzkaller #0 PREEMPT(lazy) [ 53.267251][ T4101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.267269][ T4101] Call Trace: [ 53.267278][ T4101] [ 53.267288][ T4101] __dump_stack+0x1d/0x30 [ 53.267395][ T4101] dump_stack_lvl+0x95/0xd0 [ 53.267417][ T4101] dump_stack+0x15/0x1b [ 53.267522][ T4101] should_fail_ex+0x262/0x280 [ 53.267546][ T4101] ? alloc_workqueue_va+0x61c/0x1630 [ 53.267571][ T4101] should_failslab+0x8c/0xb0 [ 53.267678][ T4101] __kmalloc_cache_node_noprof+0x81/0x420 [ 53.267711][ T4101] ? alloc_workqueue_va+0x61c/0x1630 [ 53.267811][ T4101] alloc_workqueue_va+0x61c/0x1630 [ 53.267838][ T4101] alloc_workqueue_noprof+0x84/0xb0 [ 53.267864][ T4101] ? timer_init_key+0x75/0x130 [ 53.267898][ T4101] __rds_conn_create+0xa85/0x11a0 [ 53.268057][ T4101] rds_conn_create_outgoing+0x43/0x60 [ 53.268085][ T4101] rds_sendmsg+0xbf0/0x1580 [ 53.268130][ T4101] ? __pfx_rds_sendmsg+0x10/0x10 [ 53.268159][ T4101] ____sys_sendmsg+0x532/0x580 [ 53.268211][ T4101] ___sys_sendmsg+0x195/0x1e0 [ 53.268251][ T4101] __x64_sys_sendmsg+0xd4/0x160 [ 53.268291][ T4101] x64_sys_call+0x22ab/0x2550 [ 53.268390][ T4101] do_syscall_64+0x112/0x360 [ 53.268435][ T4101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.268494][ T4101] RIP: 0033:0x7ff2ece2e159 [ 53.268511][ T4101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.268536][ T4101] RSP: 002b:00007ff2eb887028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.268565][ T4101] RAX: ffffffffffffffda RBX: 00007ff2ed0b5fa0 RCX: 00007ff2ece2e159 [ 53.268584][ T4101] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 53.268603][ T4101] RBP: 00007ff2ecec503b R08: 0000000000000000 R09: 0000000000000000 [ 53.268654][ T4101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.268666][ T4101] R13: 00007ff2ed0b6038 R14: 00007ff2ed0b5fa0 R15: 00007fff927f4e78 [ 53.268691][ T4101] [ 53.640711][ T4113] netlink: 64 bytes leftover after parsing attributes in process `syz.0.211'. [ 53.699412][ T4116] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.212'. [ 54.232308][ T4127] FAULT_INJECTION: forcing a failure. [ 54.232308][ T4127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.232357][ T4127] CPU: 0 UID: 0 PID: 4127 Comm: syz.2.216 Not tainted syzkaller #0 PREEMPT(lazy) [ 54.232391][ T4127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.232422][ T4127] Call Trace: [ 54.232431][ T4127] [ 54.232441][ T4127] __dump_stack+0x1d/0x30 [ 54.232468][ T4127] dump_stack_lvl+0x95/0xd0 [ 54.232568][ T4127] dump_stack+0x15/0x1b [ 54.232658][ T4127] should_fail_ex+0x262/0x280 [ 54.232754][ T4127] should_fail+0xb/0x20 [ 54.232782][ T4127] should_fail_usercopy+0x1a/0x20 [ 54.232817][ T4127] _copy_from_iter+0xcc/0xe70 [ 54.232850][ T4127] ? __alloc_skb+0x516/0x6f0 [ 54.233015][ T4127] ? __alloc_skb+0x209/0x6f0 [ 54.233058][ T4127] netlink_sendmsg+0x4a4/0x6f0 [ 54.233138][ T4127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.233240][ T4127] ____sys_sendmsg+0x532/0x580 [ 54.233309][ T4127] ___sys_sendmsg+0x195/0x1e0 [ 54.233359][ T4127] __x64_sys_sendmsg+0xd4/0x160 [ 54.233420][ T4127] x64_sys_call+0x22ab/0x2550 [ 54.233471][ T4127] do_syscall_64+0x112/0x360 [ 54.233513][ T4127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.233543][ T4127] RIP: 0033:0x7fc0d623e159 [ 54.233563][ T4127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.233584][ T4127] RSP: 002b:00007fc0d4c97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.233606][ T4127] RAX: ffffffffffffffda RBX: 00007fc0d64c5fa0 RCX: 00007fc0d623e159 [ 54.233625][ T4127] RDX: 0000000000040000 RSI: 0000200000000640 RDI: 0000000000000003 [ 54.233691][ T4127] RBP: 00007fc0d4c97090 R08: 0000000000000000 R09: 0000000000000000 [ 54.233708][ T4127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.233725][ T4127] R13: 00007fc0d64c6038 R14: 00007fc0d64c5fa0 R15: 00007fffe4a96ad8 [ 54.233762][ T4127] [ 54.882401][ T4139] loop0: detected capacity change from 0 to 1024 [ 54.920630][ T4139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.969422][ T4139] FAULT_INJECTION: forcing a failure. [ 54.969422][ T4139] name failslab, interval 1, probability 0, space 0, times 0 [ 54.969461][ T4139] CPU: 1 UID: 0 PID: 4139 Comm: syz.0.222 Not tainted syzkaller #0 PREEMPT(lazy) [ 54.969494][ T4139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.969582][ T4139] Call Trace: [ 54.969590][ T4139] [ 54.969600][ T4139] __dump_stack+0x1d/0x30 [ 54.969633][ T4139] dump_stack_lvl+0x95/0xd0 [ 54.969662][ T4139] dump_stack+0x15/0x1b [ 54.969690][ T4139] should_fail_ex+0x262/0x280 [ 54.969724][ T4139] ? security_sk_alloc+0x52/0x120 [ 54.969762][ T4139] should_failslab+0x8c/0xb0 [ 54.969792][ T4139] __kmalloc_noprof+0xd0/0x4d0 [ 54.969832][ T4139] ? security_sk_alloc+0x52/0x120 [ 54.969935][ T4139] ? __kmalloc_noprof+0x1f1/0x4d0 [ 54.970060][ T4139] security_sk_alloc+0x52/0x120 [ 54.970100][ T4139] sk_prot_alloc+0xc2/0x180 [ 54.970193][ T4139] sk_alloc+0x34/0x3e0 [ 54.970235][ T4139] ? __pfx_tun_chr_open+0x10/0x10 [ 54.970301][ T4139] tun_chr_open+0x56/0x2e0 [ 54.970338][ T4139] ? __pfx_tun_chr_open+0x10/0x10 [ 54.970374][ T4139] misc_open+0x1df/0x220 [ 54.970408][ T4139] chrdev_open+0x2eb/0x3a0 [ 54.970552][ T4139] do_dentry_open+0x49f/0xa60 [ 54.970579][ T4139] ? __pfx_chrdev_open+0x10/0x10 [ 54.970621][ T4139] ? may_open+0x1ee/0x350 [ 54.970662][ T4139] vfs_open+0x37/0x1e0 [ 54.970687][ T4139] path_openat+0xc01/0x10d0 [ 54.970727][ T4139] do_file_open+0x16c/0x290 [ 54.970809][ T4139] do_sys_openat2+0xa0/0x130 [ 54.970842][ T4139] __x64_sys_openat+0xf2/0x120 [ 54.970873][ T4139] x64_sys_call+0x1f72/0x2550 [ 54.970939][ T4139] do_syscall_64+0x112/0x360 [ 54.970989][ T4139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.971019][ T4139] RIP: 0033:0x7f776590e159 [ 54.971086][ T4139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.971105][ T4139] RSP: 002b:00007f7764367028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 54.971126][ T4139] RAX: ffffffffffffffda RBX: 00007f7765b95fa0 RCX: 00007f776590e159 [ 54.971143][ T4139] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 54.971239][ T4139] RBP: 00007f77659a503b R08: 0000000000000000 R09: 0000000000000000 [ 54.971258][ T4139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.971276][ T4139] R13: 00007f7765b96038 R14: 00007f7765b95fa0 R15: 00007ffc165a81a8 [ 54.971303][ T4139] [ 55.245474][ T4155] cgroup: Unknown subsys name 'subj_user' [ 55.290728][ T4159] bridge0: entered promiscuous mode [ 55.290755][ T4159] bridge0: entered allmulticast mode [ 55.353793][ T4159] netlink: 48 bytes leftover after parsing attributes in process `syz.4.228'. [ 55.389187][ T4159] syz.4.228 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 55.461736][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.661616][ T4190] syzkaller0: entered promiscuous mode [ 55.867566][ T4210] usb usb7: usbfs: process 4210 (syz.4.248) did not claim interface 0 before use [ 55.880562][ T4209] usb usb7: usbfs: process 4209 (syz.4.248) did not claim interface 0 before use [ 55.948049][ T4200] loop2: detected capacity change from 0 to 512 [ 55.990942][ T4209] netlink: 'syz.4.248': attribute type 20 has an invalid length. [ 55.990962][ T4209] IPv6: NLM_F_CREATE should be specified when creating new route [ 55.991016][ T4209] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 55.991027][ T4209] IPv6: NLM_F_CREATE should be set when creating new route [ 56.558322][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 56.558342][ T29] audit: type=1400 audit(1789048407.951:442): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 56.662986][ T29] audit: type=1400 audit(1789048408.061:443): avc: denied { create } for pid=4228 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.675437][ T29] audit: type=1400 audit(1789048408.071:444): avc: denied { bind } for pid=4228 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.695123][ T29] audit: type=1400 audit(1789048408.091:445): avc: denied { listen } for pid=4228 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.768085][ T29] audit: type=1326 audit(1789048408.161:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.2.255" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d623e159 code=0x7ffc0000 [ 56.768336][ T29] audit: type=1326 audit(1789048408.161:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.2.255" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d623e159 code=0x7ffc0000 [ 56.768365][ T29] audit: type=1326 audit(1789048408.161:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.2.255" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d623e159 code=0x7ffc0000 [ 56.785092][ T29] audit: type=1326 audit(1789048408.181:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.2.255" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0d61fe98e code=0x7ffc0000 [ 56.797473][ T29] audit: type=1326 audit(1789048408.191:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.2.255" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc0d61fe98e code=0x7ffc0000 [ 56.797600][ T4236] FAULT_INJECTION: forcing a failure. [ 56.797600][ T4236] name failslab, interval 1, probability 0, space 0, times 0 [ 56.797719][ T4236] CPU: 1 UID: 0 PID: 4236 Comm: syz.2.255 Not tainted syzkaller #0 PREEMPT(lazy) [ 56.797799][ T4236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.797863][ T4236] Call Trace: [ 56.797884][ T4236] [ 56.797906][ T4236] __dump_stack+0x1d/0x30 [ 56.797995][ T4236] dump_stack_lvl+0x95/0xd0 [ 56.798070][ T4236] dump_stack+0x15/0x1b [ 56.798138][ T4236] should_fail_ex+0x262/0x280 [ 56.798244][ T4236] ? __alloc_skb+0x2e0/0x6f0 [ 56.798345][ T4236] should_failslab+0x8c/0xb0 [ 56.798439][ T4236] kmem_cache_alloc_node_noprof+0x82/0x400 [ 56.798623][ T4236] ? should_fail_ex+0xdb/0x280 [ 56.798709][ T4236] ? __alloc_skb+0x2e0/0x6f0 [ 56.798828][ T4236] __alloc_skb+0x2e0/0x6f0 [ 56.798907][ T4236] ? __alloc_skb+0x209/0x6f0 [ 56.799005][ T4236] audit_log_start+0x3aa/0x730 [ 56.799154][ T4236] audit_seccomp+0x49/0x110 [ 56.799263][ T4236] __seccomp_filter+0x909/0x1360 [ 56.799431][ T4236] ? __fget_files+0x184/0x1c0 [ 56.799512][ T4236] __seccomp_permit_syscall+0x7d/0x150 [ 56.799610][ T4236] do_syscall_64+0xca/0x360 [ 56.799761][ T4236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.799832][ T4236] RIP: 0033:0x7fc0d623e159 [ 56.799885][ T4236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.799944][ T4236] RSP: 002b:00007fc0d4c55028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 56.800007][ T4236] RAX: ffffffffffffffda RBX: 00007fc0d64c6180 RCX: 00007fc0d623e159 [ 56.800062][ T4236] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 56.800187][ T4236] RBP: 00007fc0d4c55090 R08: 0000000000000000 R09: 0000000000000000 [ 56.800229][ T4236] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 56.800269][ T4236] R13: 00007fc0d64c6218 R14: 00007fc0d64c6180 R15: 00007fffe4a96ad8 [ 56.800346][ T4236] [ 56.819804][ T29] audit: type=1326 audit(1789048408.221:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.2.255" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc0d61fe98e code=0x7ffc0000 [ 56.914331][ T4237] syzkaller1: entered promiscuous mode [ 56.914395][ T4237] syzkaller1: entered allmulticast mode [ 57.361629][ T4257] __nla_validate_parse: 4 callbacks suppressed [ 57.361645][ T4257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'. [ 58.228708][ T4283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.272'. [ 58.272781][ T4282] netlink: 64 bytes leftover after parsing attributes in process `syz.0.274'. [ 58.295809][ T4282] syzkaller1: entered promiscuous mode [ 58.295838][ T4282] syzkaller1: entered allmulticast mode [ 58.499094][ T4275] loop3: detected capacity change from 0 to 512 [ 58.529037][ T4275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.529293][ T4275] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.716400][ T4319] FAULT_INJECTION: forcing a failure. [ 58.716400][ T4319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.716437][ T4319] CPU: 1 UID: 0 PID: 4319 Comm: syz.4.285 Not tainted syzkaller #0 PREEMPT(lazy) [ 58.716470][ T4319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.716529][ T4319] Call Trace: [ 58.716536][ T4319] [ 58.716543][ T4319] __dump_stack+0x1d/0x30 [ 58.716645][ T4319] dump_stack_lvl+0x95/0xd0 [ 58.716743][ T4319] dump_stack+0x15/0x1b [ 58.716771][ T4319] should_fail_ex+0x262/0x280 [ 58.716804][ T4319] should_fail+0xb/0x20 [ 58.716831][ T4319] should_fail_usercopy+0x1a/0x20 [ 58.716866][ T4319] _copy_from_user+0x1c/0xb0 [ 58.716968][ T4319] __copy_msghdr+0x242/0x300 [ 58.717016][ T4319] ___sys_sendmsg+0x10c/0x1e0 [ 58.717060][ T4319] __x64_sys_sendmsg+0xd4/0x160 [ 58.717092][ T4319] x64_sys_call+0x22ab/0x2550 [ 58.717171][ T4319] do_syscall_64+0x112/0x360 [ 58.717215][ T4319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.717245][ T4319] RIP: 0033:0x7f9f8ba2e159 [ 58.717265][ T4319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.717354][ T4319] RSP: 002b:00007f9f8a487028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.717381][ T4319] RAX: ffffffffffffffda RBX: 00007f9f8bcb5fa0 RCX: 00007f9f8ba2e159 [ 58.717409][ T4319] RDX: 0000000030006041 RSI: 0000200000000000 RDI: 0000000000000005 [ 58.717428][ T4319] RBP: 00007f9f8a487090 R08: 0000000000000000 R09: 0000000000000000 [ 58.717444][ T4319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.717461][ T4319] R13: 00007f9f8bcb6038 R14: 00007f9f8bcb5fa0 R15: 00007fffc6ccd8f8 [ 58.717535][ T4319] [ 58.852163][ T4320] loop2: detected capacity change from 0 to 1024 [ 58.971436][ T4320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.284'. [ 58.974051][ T4320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.284'. [ 59.003761][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.049035][ T4324] netlink: 64 bytes leftover after parsing attributes in process `syz.4.288'. [ 59.079951][ T4324] syzkaller1: entered promiscuous mode [ 59.079977][ T4324] syzkaller1: entered allmulticast mode [ 59.260002][ T4336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.289'. [ 59.404359][ T4341] program syz.3.294 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.580885][ T4360] loop3: detected capacity change from 0 to 512 [ 59.594216][ T4367] FAULT_INJECTION: forcing a failure. [ 59.594216][ T4367] name failslab, interval 1, probability 0, space 0, times 0 [ 59.594243][ T4367] CPU: 1 UID: 0 PID: 4367 Comm: syz.0.303 Not tainted syzkaller #0 PREEMPT(lazy) [ 59.594267][ T4367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.594279][ T4367] Call Trace: [ 59.594362][ T4367] [ 59.594370][ T4367] __dump_stack+0x1d/0x30 [ 59.594475][ T4367] dump_stack_lvl+0x95/0xd0 [ 59.594504][ T4367] dump_stack+0x15/0x1b [ 59.594530][ T4367] should_fail_ex+0x262/0x280 [ 59.594554][ T4367] ? __alloc_skb+0x2e0/0x6f0 [ 59.594632][ T4367] should_failslab+0x8c/0xb0 [ 59.594671][ T4367] kmem_cache_alloc_node_noprof+0x82/0x400 [ 59.594774][ T4367] ? netlink_insert+0x684/0x900 [ 59.594811][ T4367] ? __alloc_skb+0x2e0/0x6f0 [ 59.594845][ T4367] __alloc_skb+0x2e0/0x6f0 [ 59.594873][ T4367] ? __alloc_skb+0x209/0x6f0 [ 59.594960][ T4367] netlink_alloc_large_skb+0xbf/0xf0 [ 59.595003][ T4367] netlink_sendmsg+0x40c/0x6f0 [ 59.595038][ T4367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.595104][ T4367] ____sys_sendmsg+0x532/0x580 [ 59.595130][ T4367] ___sys_sendmsg+0x195/0x1e0 [ 59.595166][ T4367] __x64_sys_sendmsg+0xd4/0x160 [ 59.595255][ T4367] x64_sys_call+0x22ab/0x2550 [ 59.595294][ T4367] do_syscall_64+0x112/0x360 [ 59.595338][ T4367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.595367][ T4367] RIP: 0033:0x7f776590e159 [ 59.595427][ T4367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.595445][ T4367] RSP: 002b:00007f7764367028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.595465][ T4367] RAX: ffffffffffffffda RBX: 00007f7765b95fa0 RCX: 00007f776590e159 [ 59.595492][ T4367] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 59.595510][ T4367] RBP: 00007f7764367090 R08: 0000000000000000 R09: 0000000000000000 [ 59.595527][ T4367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.595544][ T4367] R13: 00007f7765b96038 R14: 00007f7765b95fa0 R15: 00007ffc165a81a8 [ 59.595625][ T4367] [ 59.610462][ T4364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.299'. [ 59.671863][ T4360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.671940][ T4360] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.762843][ T4360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.302'. [ 59.962908][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.064868][ T4381] FAULT_INJECTION: forcing a failure. [ 60.064868][ T4381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.064909][ T4381] CPU: 1 UID: 0 PID: 4381 Comm: syz.4.310 Not tainted syzkaller #0 PREEMPT(lazy) [ 60.064952][ T4381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.065014][ T4381] Call Trace: [ 60.065022][ T4381] [ 60.065030][ T4381] __dump_stack+0x1d/0x30 [ 60.065079][ T4381] dump_stack_lvl+0x95/0xd0 [ 60.065108][ T4381] dump_stack+0x15/0x1b [ 60.065138][ T4381] should_fail_ex+0x262/0x280 [ 60.065168][ T4381] should_fail+0xb/0x20 [ 60.065264][ T4381] should_fail_usercopy+0x1a/0x20 [ 60.065289][ T4381] _copy_to_user+0x20/0xa0 [ 60.065317][ T4381] put_timespec64+0x70/0xc0 [ 60.065362][ T4381] poll_select_finish+0x34a/0x440 [ 60.065395][ T4381] __se_sys_pselect6+0x253/0x2a0 [ 60.065422][ T4381] __x64_sys_pselect6+0x78/0x90 [ 60.065503][ T4381] x64_sys_call+0x1dfc/0x2550 [ 60.065537][ T4381] do_syscall_64+0x112/0x360 [ 60.065642][ T4381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.065689][ T4381] RIP: 0033:0x7f9f8ba2e159 [ 60.065709][ T4381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.065772][ T4381] RSP: 002b:00007f9f8a487028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 60.065792][ T4381] RAX: ffffffffffffffda RBX: 00007f9f8bcb5fa0 RCX: 00007f9f8ba2e159 [ 60.065808][ T4381] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000040 [ 60.065873][ T4381] RBP: 00007f9f8a487090 R08: 0000200000000280 R09: 0000000000000000 [ 60.065888][ T4381] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 60.065901][ T4381] R13: 00007f9f8bcb6038 R14: 00007f9f8bcb5fa0 R15: 00007fffc6ccd8f8 [ 60.065921][ T4381] [ 60.396354][ T4395] loop4: detected capacity change from 0 to 1764 [ 60.562759][ T4401] syz.2.319 (4401): /proc/4399/oom_adj is deprecated, please use /proc/4399/oom_score_adj instead. [ 60.621444][ T4416] loop4: detected capacity change from 0 to 128 [ 60.638010][ T4415] IPv6: NLM_F_CREATE should be specified when creating new route [ 60.642928][ T4416] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 60.659299][ T4416] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 60.661389][ T4416] ext2 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.761448][ T4411] FAULT_INJECTION: forcing a failure. [ 60.761448][ T4411] name failslab, interval 1, probability 0, space 0, times 0 [ 60.761901][ T4411] CPU: 1 UID: 0 PID: 4411 Comm: syz.4.321 Not tainted syzkaller #0 PREEMPT(lazy) [ 60.761954][ T4411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.761967][ T4411] Call Trace: [ 60.761974][ T4411] [ 60.761982][ T4411] __dump_stack+0x1d/0x30 [ 60.762009][ T4411] dump_stack_lvl+0x95/0xd0 [ 60.762037][ T4411] dump_stack+0x15/0x1b [ 60.762084][ T4411] should_fail_ex+0x262/0x280 [ 60.762108][ T4411] should_failslab+0x8c/0xb0 [ 60.762256][ T4411] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 60.762302][ T4411] ? kstrtoull+0x119/0x150 [ 60.762339][ T4411] ? shmem_alloc_inode+0x34/0x50 [ 60.762515][ T4411] ? shmem_alloc_inode+0x34/0x50 [ 60.762548][ T4411] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 60.762642][ T4411] shmem_alloc_inode+0x34/0x50 [ 60.762681][ T4411] alloc_inode+0x40/0x170 [ 60.762704][ T4411] new_inode+0x1d/0xe0 [ 60.762784][ T4411] shmem_get_inode+0x250/0x7b0 [ 60.762879][ T4411] __shmem_file_setup+0x14f/0x260 [ 60.762917][ T4411] shmem_file_setup+0x3b/0x50 [ 60.763016][ T4411] memfd_alloc_file+0x4e/0x300 [ 60.763049][ T4411] __se_sys_memfd_create+0x2e1/0x3b0 [ 60.763132][ T4411] __x64_sys_memfd_create+0x31/0x40 [ 60.763192][ T4411] x64_sys_call+0x1955/0x2550 [ 60.763219][ T4411] do_syscall_64+0x112/0x360 [ 60.763260][ T4411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.763351][ T4411] RIP: 0033:0x7f9f8ba2e159 [ 60.763370][ T4411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.763389][ T4411] RSP: 002b:00007f9f8a486e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 60.763409][ T4411] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f9f8ba2e159 [ 60.763423][ T4411] RDX: 00007f9f8a486ee0 RSI: 0000000000000000 RDI: 00007f9f8bac521b [ 60.763436][ T4411] RBP: 00002000000017c0 R08: 00000000ffffffff R09: 0000000000000000 [ 60.763527][ T4411] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000240 [ 60.763540][ T4411] R13: 00007f9f8a486ee0 R14: 00007f9f8a486ea0 R15: 0000200000000040 [ 60.763559][ T4411] [ 60.819898][ T4410] loop1: detected capacity change from 0 to 1024 [ 60.831339][ T4410] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 60.831365][ T4410] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 60.843308][ T4410] JBD2: no valid journal superblock found [ 60.843348][ T4410] EXT4-fs (loop1): Could not load journal inode [ 60.961169][ T3295] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.397544][ T4440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.328'. [ 61.749254][ T4453] FAULT_INJECTION: forcing a failure. [ 61.749254][ T4453] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 61.749294][ T4453] CPU: 0 UID: 0 PID: 4453 Comm: syz.0.332 Not tainted syzkaller #0 PREEMPT(lazy) [ 61.749324][ T4453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.749337][ T4453] Call Trace: [ 61.749344][ T4453] [ 61.749352][ T4453] __dump_stack+0x1d/0x30 [ 61.749436][ T4453] dump_stack_lvl+0x95/0xd0 [ 61.749458][ T4453] dump_stack+0x15/0x1b [ 61.749486][ T4453] should_fail_ex+0x262/0x280 [ 61.749520][ T4453] should_fail_alloc_page+0xf2/0x100 [ 61.749598][ T4453] __alloc_frozen_pages_noprof+0x157/0x400 [ 61.749658][ T4453] alloc_pages_mpol+0xaf/0x1d0 [ 61.749697][ T4453] alloc_pages_noprof+0x94/0x140 [ 61.749719][ T4453] pte_alloc_one+0x1c/0xc0 [ 61.749738][ T4453] __pte_alloc+0x32/0x2a0 [ 61.749828][ T4453] handle_mm_fault+0x3083/0x3bb0 [ 61.749867][ T4453] do_user_addr_fault+0x636/0x1060 [ 61.749952][ T4453] ? ksys_mmap_pgoff+0xc1/0x310 [ 61.749986][ T4453] ? __x64_sys_mmap+0x49/0x70 [ 61.750031][ T4453] ? trace_page_fault_user+0x1f/0xa0 [ 61.750069][ T4453] exc_page_fault+0x62/0xa0 [ 61.750095][ T4453] asm_exc_page_fault+0x26/0x30 [ 61.750120][ T4453] RIP: 0033:0x7f77657c524e [ 61.750149][ T4453] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 61.750217][ T4453] RSP: 002b:00007f7764366470 EFLAGS: 00010246 [ 61.750238][ T4453] RAX: 0000000000000001 RBX: 00007f7764366530 RCX: 0000000000000101 [ 61.750256][ T4453] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 00007f77643665d0 [ 61.750274][ T4453] RBP: 0000000000000102 R08: 00007f775bf47000 R09: 0000000000000000 [ 61.750292][ T4453] R10: 0000000000000000 R11: 00007f7764366540 R12: 0000000000000001 [ 61.750313][ T4453] R13: 00007f77659c5040 R14: 0000000000000000 R15: 00007f77643665d0 [ 61.750336][ T4453] [ 61.750502][ T4453] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 61.974651][ T4453] loop0: detected capacity change from 0 to 1764 [ 62.003877][ T4426] ================================================================== [ 62.003917][ T4426] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 62.003981][ T4426] [ 62.003998][ T4426] read-write to 0xffff88811a170480 of 8 bytes by task 70 on cpu 1: [ 62.004015][ T4426] xas_clear_mark+0x91/0x180 [ 62.004062][ T4426] __folio_start_writeback+0x258/0x370 [ 62.004104][ T4426] __block_write_full_folio+0x526/0x8d0 [ 62.004146][ T4426] block_write_full_folio+0x2c1/0x2e0 [ 62.004179][ T4426] blkdev_writepages+0x88/0x100 [ 62.004197][ T4426] do_writepages+0x1b9/0x300 [ 62.004228][ T4426] __writeback_single_inode+0x7b/0x790 [ 62.004259][ T4426] writeback_sb_inodes+0x4d9/0xaa0 [ 62.004293][ T4426] __writeback_inodes_wb+0x8a/0x180 [ 62.004334][ T4426] wb_writeback+0x21e/0x510 [ 62.004363][ T4426] wb_workfn+0x4f4/0xa50 [ 62.004384][ T4426] process_scheduled_works+0x56a/0xa50 [ 62.004423][ T4426] worker_thread+0x569/0x750 [ 62.004454][ T4426] kthread+0x223/0x270 [ 62.004473][ T4426] ret_from_fork+0x146/0x330 [ 62.004509][ T4426] ret_from_fork_asm+0x1a/0x30 [ 62.004544][ T4426] [ 62.004551][ T4426] read to 0xffff88811a170480 of 8 bytes by task 4426 on cpu 0: [ 62.004573][ T4426] xas_find_marked+0x211/0x650 [ 62.004611][ T4426] filemap_get_folios_tag+0xf7/0x400 [ 62.004638][ T4426] writeback_iter+0x48f/0x7c0 [ 62.004664][ T4426] blkdev_writepages+0xa7/0x100 [ 62.004687][ T4426] do_writepages+0x1b9/0x300 [ 62.004721][ T4426] filemap_fdatawrite+0x100/0x140 [ 62.004757][ T4426] sync_bdevs+0x1a2/0x260 [ 62.004796][ T4426] __ia32_sys_sync+0x81/0xb0 [ 62.004822][ T4426] x64_sys_call+0x1e8b/0x2550 [ 62.004856][ T4426] do_syscall_64+0x112/0x360 [ 62.004894][ T4426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.004915][ T4426] [ 62.004919][ T4426] value changed: 0xfffffffffffffff8 -> 0xffffffffffffff80 [ 62.004931][ T4426] [ 62.004935][ T4426] Reported by Kernel Concurrency Sanitizer on: [ 62.004946][ T4426] CPU: 0 UID: 0 PID: 4426 Comm: syz.4.327 Not tainted syzkaller #0 PREEMPT(lazy) [ 62.004972][ T4426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.004990][ T4426] ================================================================== [ 62.456726][ T4400] kexec: Could not allocate control_code_buffer