last executing test programs: 2.623448572s ago: executing program 1 (id=142): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x2b0, &(0x7f0000000280)="$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") renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) write$P9_RGETLOCK(r0, &(0x7f0000000640)=ANY=[], 0x200002e6) 2.371417005s ago: executing program 4 (id=146): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r1, 0x1, 0x300, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 2.370822825s ago: executing program 4 (id=147): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x1f81e3f4, 0x200000, 0x0, 0xe9, 0x400000}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDADDIO(r0, 0x4b34, 0x7) mq_open(&(0x7f0000000380)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x100, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @loopback, 0x5}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000100)=0x5, 0x4) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e733d26955375e122642c7266646e6f3f", @ANYRESHEX=r2, @ANYBLOB="2c7766646e6f3d0e8bd2789884ed5d0c39c5e9a4da14007063f288e4fd2e94d24850ff80db67dc16cef7189ea56ef7a7135171a4790734878f4fe3908af424ef0ff84ec427d9563e911738bd2c4309aadb7a653b385df75c50388d7de7786795899f8913ef3f17e3d32ff8bd360a8aed94091486214b99f0e9a72a47a14f7cfb7d8251309f44270b54be1ee151b3da7a1e31b398860708", @ANYRES8, @ANYRES8=0x0]) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @local}, 0x1, 0x5, 0x1, 0x2}}, 0x26) socket$nl_generic(0x10, 0x3, 0x10) r4 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x2, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) r6 = syz_io_uring_setup(0x21f8, &(0x7f0000000140)={0x0, 0x8006d89, 0x400, 0x2, 0x66}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r6, 0x8aa, 0x0, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x2) r9 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/59, 0x3b}], 0x1}, 0x2000) socket$kcm(0x1e, 0x4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1, 0xfff1}}}, 0x24}}, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e21, 0x1, @remote, 0x1a}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0xff}, 0x40}}}, 0x108) 2.286357016s ago: executing program 2 (id=150): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x303, 0x2, 0x4, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r5, 0x1, {0x1, 0xff}, 0x2}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r5, 0x3, {0x2, 0xf0, 0x3}, 0xfe}, 0x18, &(0x7f0000000100)={&(0x7f00000007c0)="ebdf9a3368ffbfaa13573e49579920af3e27e0ff27dbd3e8b496abc85630aef2ad4932ffad857fb6f969c9d4fdc183960b5d86b7c834980ef1ec3f7da3ed2f55041d5d88bfef20a9b3bd273f7ae3f751624f29afb1ab303a4e71f23dfa46ea5e4773d49f032e11f8cfea134785255396aa92485da02eb0dfa55098cb3642bf3ed74eca90aba265a6c06ce0a781d319f8d611ff657c9d0d104e86fae6b12d185f01b9605145ad3fedcbffcd387571f2dffc5287a321882af6757fbed65211a8d226e4a170727a5e0882ec3f6ef5ecf16a5d196861e23f60295f4cc88b874ea0d896da357f7ef3ad533305a33d67bf2664b034224ae6dd3bace0438b98f7eaf9ebcfdeeb72ce452e3ddc8ab00854deda5ab75d1d82af10fe7c8caecadfd8e4992c0f0299b1a38e554ca2acad2041f3d05f19d16b46179e49ed3855d56666648840895708a9307be935dcc42d08911b49a61b2040906fc19d3949b64245b5003d804124e2eb0096273272d3a6e8e2b0894949a3ba993b40951b32f614929c68c0f2841b9755fadf6a999aee6a792dd83e0ad53b09d6eac395698fc9f69d8e7d39e733c5af925b26e7776ea76ac552bd27465d52d936d7fde67dd3fc6230e5827a59356b9a584377f3583d5eed9468abf7b331ba9ddb47e4af999b607cad2e2c45b99eb683551cabef97b057c1a51a226d5afc2e781fce232f6ba7ed73a5c9ee6bd3a41e29717f1f78bbd9b46ebf81cb96304e0b9a30946c8f891fc283ee80285660dcbed36f6a368a68e99174bad53af5e890216257afdf1096196f8116f1a2fb6f4e3af6cd4238ac76f114550f7b2fd96ae78ef6e332c3a2f653d27eb2f7ddef3586b554a98f2e6cb19088ff9aded5b07ba722240ac7d37fdcc81e9cfc1891a336927ba2671fbaf78e85fbca125320fecb500bd2608992ee5c86d96b0d665d2e422733c4c8c60a6d4827b708708186ce9c365c74613e8c6135e960e5640b3d1c6eb931f2dd65e8f5b668e744e756391924eb7dc93b87f35698a9d52a23d627eacf02fc4b487eac8b70067b07fe8148251bcb9e1bfff32abb3e1daa3e73d332826f145c80becd0d10fb6a7525e817bccd67262bc24bf9aa15ee3a978ac1d0299dbc14f07c0dabf27412755e3178db7192b37a451fb5afcb5fe9b4b21dfc0976138cc3c5a1e04b5d32449bbcace9d51806aba37184ddaa7ee48db97cad4cfa741aa848d300c42860007e8104dbd390d137a793a43703b98daaf85f5a68d87e7701bf7e40d3c7981c202188763eddefe9f0bd08fdc2ba0668a72fe35a623076db60872258b402db73c7ca20b3e2fd29b004496368c3338a6444b7ff6afcbe71be060fc0194874f765bfd4", 0x3c8}}, 0x48000) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r6, 0x4002f516, &(0x7f0000000140)={0x3, 0xff}) splice(r6, &(0x7f0000000240)=0x8000, r3, &(0x7f0000000280)=0x6288, 0x50, 0xb) readv(r6, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/193, 0xc1}, {&(0x7f00000003c0)=""/229, 0xe5}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f00000001c0), 0x4) syz_emit_ethernet(0x56, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xb, 0x1, 0x0, [{@multicast1}, {@multicast1, 0x800000}]}, @generic={0x7, 0x9, "064d291a000000"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x2000}}}}}}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00', 0x0, 0x0) sendto$packet(r6, &(0x7f0000000000)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x1b, r5, 0x1, 0xfe, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14) 2.09439117s ago: executing program 3 (id=153): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000000)={[{@i_version}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@errors_remount}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x470, &(0x7f0000000bc0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000100)={'security\x00', 0x2, [{}, {}]}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140fffffffffffff7ff080003"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e640000000034000280050001000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a0000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) r5 = syz_io_uring_setup(0x8045, &(0x7f0000000480)={0x0, 0xb295, 0x4000, 0x1, 0x18}, &(0x7f0000000140), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000000400)={0x1, 0x4fffff1, 0x0, &(0x7f00000001c0)=[{0x0}], 0x0}, 0x20) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000010a051c00010900010073797a3000"/30], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r6 = socket$pptp(0x18, 0x1, 0x2) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x0, 0x1}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) timer_gettime(r7, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10010, r5, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x10007, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 1.813250047s ago: executing program 1 (id=155): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r1, 0xf, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x9}, 0x2000, 0x37, 0x9, 0x7, 0x0, 0x0, 0xefff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='!pu<20\t||') r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000780)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb88a819198100000006dd6100b64600140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e234e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="511025699078007f"], 0x52) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36513001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e455fe2bb24ef66970746c7f1f2a5c4c3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/274, 0x112}], 0x1}, 0x10182) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = accept$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)=0x10) ioctl$sock_inet_SIOCDELRT(r9, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24, @empty}, {0x2, 0x4e20, @empty}, 0x14, 0x0, 0x0, 0x0, 0xc663, &(0x7f0000000200)='wg1\x00', 0x2, 0x2}) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="38010000160001"], 0x138}}, 0x844) 1.71165953s ago: executing program 3 (id=156): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000005580)={0x0, 0x0, 0x0}, 0x40400d4) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x1f}, 0x0) syz_emit_ethernet(0x6c, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, @remote, {[@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x0, {0x2, 0x0, 0x2, 0x2, [0x3, 0x0, 0x6, 0xa1, 0x7fffffff, 0xffffffff80000001]}}, @ra={0x5, 0x2, 0x80}]}]}}}}}, 0x0) socket$kcm(0x29, 0x5, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000005580)={0x0, 0x0, 0x0}, 0x40400d4) (async) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x1f}, 0x0) (async) syz_emit_ethernet(0x6c, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, @remote, {[@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x0, {0x2, 0x0, 0x2, 0x2, [0x3, 0x0, 0x6, 0xa1, 0x7fffffff, 0xffffffff80000001]}}, @ra={0x5, 0x2, 0x80}]}]}}}}}, 0x0) (async) 1.63120092s ago: executing program 3 (id=157): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x6, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, r0, 0x2) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x24040890) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x3f00, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") 1.507874956s ago: executing program 0 (id=160): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffff7ff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0xd35, 0x1000, 0x1000}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x39, 0x1, 0x0, 0x0, 0x0, 0x40000000000b, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)={0x24, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x0}, @typed={0xd, 0x2e, 0x0, 0x0, @str='\xd0@:-}-+)\x00'}]}, 0x24}], 0x1}, 0x0) r3 = syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000002280)='numa_maps\x00') lseek(r4, 0x369c, 0x0) syz_io_uring_setup(0x16c4, &(0x7f0000000280)={0x0, 0x5123, 0x40, 0x3, 0x258}, &(0x7f0000000040)=0x0, &(0x7f0000000600)) r6 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x12, 0x0, 0x80, 0x0, 0x0, 0x800000000009, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x5, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400000000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40001}, 0x0, 0xffffffffffffffff, r6, 0x0) r7 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x2980, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, r6, 0x0) read(r7, &(0x7f0000000000)=""/56, 0x38) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x3c}}, 0x800) 1.505093916s ago: executing program 1 (id=161): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x110, 0xd}}, @ip_ttl={{0x14, 0x110}}], 0x30}, 0x0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000180)=0x8002000b, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x80002, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}]}]}, 0x4c}}, 0x0) 1.447509204s ago: executing program 1 (id=162): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x41, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$sock_buf(r1, 0x1, 0x6, 0x0, &(0x7f0000000380)) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)="80", 0x1}], 0x1) openat$cgroup_ro(r0, &(0x7f0000000300)='blkio.bfq.idle_time\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x5, 0xb1170, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x1, @perf_bp={0x0, 0x4}, 0x101280, 0x26f, 0xc, 0x7, 0x4, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x4000011, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b0f33b49db96ad24d12595fbea5", 0x29) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="f8010000", @ANYRES16=r4, @ANYBLOB="00002abd7000fedbdf2518000000240003800800010008000000080003000900000008000100050000000800020000800000c00106806801030063fabbaaea9b0acfab561dad6c5beff6f25ac980dd5768111671917dbd52f90bb4727546270092672094a0513c66f2dc32ab4dc960412e3966b2f1a10e62e6e35656bd59b02491516917281627339104c3c7846385963a954005e631a23e4dbf54fe2ad3a35594e3eae52f6f307e18785c968d48adfa147ee6623234ef923e8b257f9683141183b084da87997e45b4b0fea2f289d0e3b04981792a01f8b1584a20eb390390d104a4973301057bf5e7d398e80f55744a79a973946872dd998ff12912b182268071a4224484b7f085330c138daed5bd50ec56f2e45334b6519cc5bfdf749fe51f999c8f8fef486eb32006a871f520056fbf797dc2eaab384812411131c61d0cd6a757248664d0ac694b736768ae055e88dc50d65ba53b729447056e07c0b2a34b6000d4db30b09d30ddf493a0fbe57e9e6683c8d3a33959b79cb9207e5ce2081a231a9283c302858c4f2ebb6dd575d40861d4813b4fe9a6b41bcfe2c3190508000600090000004a00040067636d286165732900000000000000000000000000000000000000000000000022000000400beff6a9e914cb94ef58274e3b2eef710e24b830f32641fd0d96e49cd7cc899b400000eb76831ea61db43a17de93cd10ae5b0ca94a7397f9b339cda39c82cabb717a3cdab5fd122fd5f5d489455dcff0e1b2d25baa36a8929395f3f7e40493170110e7444e6a5ccc78d0394c7cc69dddf26acecbc7d136009a33cd2c5826c244bd7fce7bedbe4e8edcf52bf660364e8aef20b4bb0fac7da67dc959c99ae2f5f1c6687555f129508318fd8a488e5a30e8ff11ff77ceb98081e126750cca2bdbae617a8daea69d74e08fbcf3405661e1d04c322a96c4cff27c353943"], 0x1f8}, 0x1, 0x0, 0x0, 0x8000}, 0x20008400) socket$inet6(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) ppoll(&(0x7f0000000700)=[{r6, 0x1}], 0x1, &(0x7f0000000740), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000340), &(0x7f0000000380)=0x4) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x1}, 0x0, 0x10000, 0x53c, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0xfffffffd, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {0xffff, 0xffff}, {0x10}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x13}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1ff, 0x1, 0x6, 0x3, 0x2, 0x0, 0xcb, 0xf, 0x5, 0xb, 0x1f, 0x1a, 0x8, 0xf, 0xf, 0x9}}]}}]}, 0x170}}, 0x24008004) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.446155354s ago: executing program 4 (id=163): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) fcntl$dupfd(r0, 0x0, r0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.445799964s ago: executing program 4 (id=164): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x810008, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000640000008500000006000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1003, &(0x7f0000001cc0)=""/4099, 0x40f00, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1.388870521s ago: executing program 3 (id=165): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_read_part_table(0x1065, &(0x7f0000001080)="$eJzsz7FNw1AUBdBrW7ZBUDGBKwpGYA3EEGzhhiloqDNBUmWXSGkyQ6Qf2ZaVDZIU5xTv6139W7xwV12SoU5KXnfVnHweDz/J38fLtLTV2CVv1bUwLs/TNOqc+uG3TlJK2S7Jqp/n13PTruX/6V+T/fu8nUsp+d7c5koAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeGyXAAAA//9f6BOL") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x8004001}, 0x4000040) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x4, 0x6, @local}, 0x14) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x840, 0x0) ioctl$SNAPSHOT_S2RAM(r8, 0x330b) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=ANY=[@ANYRES64=r2], 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x41) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r12, 0x80, 0x26, 0xb}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYRES32=r3], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r13, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r13, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x148, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r14, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x4, 0x0, 0x9, 0xe, 0xd, 0x19, 0x1}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x18014005}, 0x800) getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x53, &(0x7f0000000640), &(0x7f0000000680)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006980c70000000001000000940001000000fcffc50000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r14, 0x2}, 0x94) 1.387990821s ago: executing program 2 (id=166): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000000)={[{@i_version}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@errors_remount}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x470, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYui4KGioId6jMm2hG4baaLYUmwqUi+CFPQsHgX/Am8iiHoSvOrFkxSK9tLqKTKzM+1mm02N2WRi9veDzb7vzrs7z5P5eud9dwPoWkPZnyRiR0T8EhEDjeriBkONpxvXzk/+de38ZBILC6//keTtrl87P1k2Ld+3vagMpxHph0mxksVmz547OVGv184U9dG5U2+Pzp4999S7pyZO1E7UTo8fOXL40Nizz4w/3ZE8s7yu73t/Zv/el9+8/Mrksctv/fBVFu+OYnlzHp0ylCX+50KuddnjnV5ZxXY2lZPeCgNhRXoiIttcffnxPxA9cWvjDcRLH1QaHLCmsmvTlvaL5xeATSyJqiMAqlFe6LP73/KxTl2PDeHq840boCzvG8WjsaQ30qJNX8v9bScNRcSx+b8/zx6xRuMQAADNPp787Gh/U7/jVv8jjfvy59/yv7uKOZTBiLg7InZHxD0RsSci7o3I294fEQ+sMp7b+z/plVV+5LKy/t9zxdzW4v5f2fuLwZ6itjPPvy85Pl2vHSz+J8PRtyWrjy2zjm9e/PmTdsua+3/ZI1t/2Rcs4rjS2zJANzUxN5F3Sjvg6sWIfb1L5Z/cnAlIImJvROxb2UfvKgvTT3y5v12jO+e/jA7MMy18kaU3n+U/Hy35l5Lm+cnp2+YnR7dGvXZwtNwrbvfjT5dea7f+VeXfAVdrjeem7d/aZDBpnq+dXfk6Lv36Udt7mv+4/6f9yRv5PHN/8dp7E3NzZ8Yi+pOjeX3R6+O33lvWy/bZ/j98YOnjf3fxniz/ByMi24kfioiHI+KRIvZHI+KxiDiwTP7fv9B+WZl/pBVt/4sRU0ue/27u/y3bf+WFnpPffd1u/f9u+x/OS8PFK/n57w6WCic7XbQGuJr/HQAAAPxfpPl34JN05GY5TUdGGt/h3xN3pfWZ2bknj8+8c3qq8V35wehLy5GugWI8tD5dr40l88UnNsZHx4ux4nK89FAxbvxpz7a8PjI5U5+qOHfodtvbHP+Z33uqjg5YY9uWfHW8f90DASrQOo+eLq5eeDWcDGCz8ntt6F53OP7T9YoDWH+u/9C9ljr+L7TUzQXA5uT6D93L8Q9dKv226giACrn+Q1daze/617CwdWOEUU1ho26UvBBRFtINEY/CGhWqPjMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0xj8BAAD//02e6R0=") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000100)={'security\x00', 0x2, [{}, {}]}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140fffffffffffff7ff080003"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e640000000034000280050001000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a0000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) r5 = syz_io_uring_setup(0x8045, &(0x7f0000000480)={0x0, 0xb295, 0x4000, 0x1, 0x18}, &(0x7f0000000140), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000000400)={0x1, 0x4fffff1, 0x0, &(0x7f00000001c0)=[{0x0}], 0x0}, 0x20) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000010a051c00010900010073797a3000"/30], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r6 = socket$pptp(0x18, 0x1, 0x2) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x0, 0x1}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) timer_gettime(r7, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10010, r5, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x10007, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 1.302968962s ago: executing program 4 (id=167): sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x0, 0x5, 0x7, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x2000, 0x3, &(0x7f0000874000/0x2000)=nil) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x23000000, 0xf132, 0xffffffffffffffff, 0x0) 1.291421154s ago: executing program 1 (id=168): prctl$PR_SET_FPEMU(0xa, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4401000010000100feffffbf00010000fe880000000000000000000000000001ac1414aa0000000000000000000000004e2207944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000ff010000003169ee5fc0ccd297ffffff000000002abd700000000000020001fd2000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000170000000c0015005a0735000300"/252], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 998.138081ms ago: executing program 3 (id=169): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 763.372892ms ago: executing program 4 (id=170): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x973, &(0x7f0000006680)) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, 0x0, &(0x7f0000000040)) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x5e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x66}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES64=r4], 0x38}, 0x1, 0x0, 0x0, 0x40090}, 0x20004014) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @nfc={0x27, r5, 0x0, 0x4}, @vsock={0x28, 0x0, 0x2710, @local}, @rc={0x1f, @none, 0xc}, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x800000003, 0x100}) 672.027614ms ago: executing program 1 (id=171): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=r1, @ANYBLOB="000000000031010024001280110001006272696467655f736c617665000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = shmget$private(0x0, 0x3000, 0x442, &(0x7f0000ffa000/0x3000)=nil) shmat(r3, &(0x7f0000001000/0x3000)=nil, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r9 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x7ffffffe, 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000080)='name', &(0x7f0000000100)='\x00\x1f\"\f\x1d\x00\"\xef\xf4e\xb2/ZH\x10\xf6A\xe0\xd1\r\x00\x04\x00\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) readv(r9, &(0x7f0000000140)=[{&(0x7f0000002300)=""/4064, 0xfe0}], 0x1) writev(r6, &(0x7f0000000080)=[{&(0x7f0000001740)='9', 0x1a}], 0x20) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) splice(r10, 0x0, r5, 0x0, 0x4ffe3, 0x8) 527.878272ms ago: executing program 3 (id=172): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = epoll_create1(0x80000) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x1ff, 0x6}, 0x0, 0x6, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r6, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) (async) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) sendto$inet(r5, &(0x7f0000000380)='g', 0x1, 0x8812, 0x0, 0x0) (async) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000340)) (async) syz_emit_ethernet(0xd20, &(0x7f00000004c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00af00", 0xcea, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @empty, [{0x0, 0x15, "a72dcca9d0e289f84eb7f1cdde3f25f3a398c9b10810cb7895aa26bea2dbe09b0e7c0b8a538e88853cd9487c6c1f91a93d856c44788465e03843c9a0535cb599a9b43d32afb7a77943630bcae2d5d18edb24af4fcb6437742bf443690125f903de9d372ed7d5817179a0d5cda2773868c383f8ecfda6ba5bea53d51b9bd34ebb9973d3d53f1b360f59a8b3a668f4397963323a1d00ec4b8c5be219182b685d9d4c15b1a85dd526"}, {0x3, 0x185, "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"}]}}}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) (async) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) epoll_wait(r4, &(0x7f0000000140)=[{}], 0x1, 0xffffffff) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 469.205339ms ago: executing program 0 (id=173): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) semget$private(0x0, 0x6, 0x0) 348.956965ms ago: executing program 2 (id=174): setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) bpf$MAP_CREATE(0x1c000, &(0x7f0000000840)=@base={0xa, 0x101, 0x8000, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) 288.994393ms ago: executing program 0 (id=175): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0xa, 0x0, 0x0, 0x0, 0x6a}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, 0x0, &(0x7f0000000380)='GPL\x00', 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000004c0)='./bus\x00', 0x20) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x1000, 0xffffffffffffffff}, 0x0) brk(0x5d555ede6000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b000000050000005800000004000000050000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 235.262679ms ago: executing program 2 (id=176): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x70bc2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x12, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x70bd}, @qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x6, 0x8000, 0x9, 0xbf, 0x13, 0x1a, 0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x10}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000100)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x0) r3 = request_key(&(0x7f00000003c0)='id_resolver\x00', &(0x7f0000001ffb)={'syz', 0x0}, &(0x7f0000000580)='*\x00\x00\x00\x00\x00\x000\x00\xa5^y\xa9n\x00\xe3\xa3\x89\x90&)\bT\x91\x14\xba\x190\xb3\x00\x00:\xb2\xbe\x1d\x00', 0xfffffffffffffffe) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r4, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000140), &(0x7f0000000180)='%-010d \x00'}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000fdffffff00000000030000008500000036000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa1000000000000073a9074aedf90ab010000f8ffffffbfa400000000000007040000f0ffffffb702000008", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00', r3) 235.00048ms ago: executing program 2 (id=177): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2040e, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_bp={0x0, 0x5}, 0x922c, 0x30, 0x10000, 0x0, 0x18bd, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x32, 0x3e051aac, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='!=u>00||!') 230.37983ms ago: executing program 0 (id=178): r0 = socket(0x1, 0x803, 0x0) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r1, &(0x7f0000001440)=[{&(0x7f0000001080)="dcc33c772fe78016b91b25904bdcccba7b2684ab31182830b596dd0b98d5d6440afe4d4ee2dc6a", 0x27}], 0x1) getpeername$packet(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x8, 0x2}, &(0x7f0000000280)=0xc) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000081"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, &(0x7f00000002c0), 0x4003) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000)=0xc, 0x4) semget$private(0x0, 0x6, 0x0) 136.543432ms ago: executing program 2 (id=179): r0 = fsopen(&(0x7f0000000040)='hpfs\x00', 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0xff03, 0x3c8, 0x1f8, 0x2e0, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private=0xa010100, @multicast1, 0xffffffff, 0xffffff00, 0x4, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, {[0xff, 0x0, 0x0, 0xff, 0x1fe]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x8, 0x0, 0x6, 0x3, 0x8, 0x1000, 'nr0\x00', 'vlan1\x00', {0xff}, {}, 0x0, 0x400}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@arp={@broadcast, @private=0xa010102, 0xff, 0x0, 0x8, 0xd, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x3, 0x5, 0x9, 0xffff, 0x8, 0x65c, 'sit0\x00', 'macsec0\x00', {0xff}, {}, 0x0, 0x488}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @remote, 0x4}}}, {{@arp={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffff00, 0x0, 0x0, {@mac=@multicast, {[0x0, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x9ee8, 0x4f, 0x4, 0xfff, 0x5, 0x1, 'veth0_to_batadv\x00', 'rose0\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1900000004000000080000000c"], 0x50) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000240)='(\\.\x03/\']\\\x81\xac5\x17+.-![\a\x00^\'$9\x00', 0x0) r5 = fsmount(r0, 0x0, 0x80) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000600, r6, &(0x7f0000000100)={0x9e80000000000000, 0x3ff, 0x0, 0x6}) syz_read_part_table(0x5d1, &(0x7f0000000600)="$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") setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000140)=0xcc9d, 0x4) close(0x3) 86.455419ms ago: executing program 0 (id=180): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x1) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='comm\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="c1", 0x1}], 0x1) (async, rerun: 32) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd}, 0x50) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) 0s ago: executing program 0 (id=181): ioprio_get$uid(0x3, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)=""/66, 0x42}], 0x1}}], 0x1, 0x2, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x0, {0x1, 0x0, 0x4}}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) creat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x18, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffef]}}, 0x5c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000002004e230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004416a8b80000000000000000000000000000000000000000000000000000000000000001000000"], 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000000)) syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x8000300, 0x290, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0, 0x0, {0x1000000}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000080004000000000004000500a9930000100000000000000020"], 0x24, 0x0) close_range(r5, 0xffffffffffffffff, 0x200000000000000) kernel console output (not intermixed with test programs): { siginh } for pid=3249 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 25.140648][ T29] audit: type=1400 audit(1768817751.666:62): avc: denied { search } for pid=3254 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.192712][ T29] audit: type=1400 audit(1768817751.666:63): avc: denied { search } for pid=3254 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.216822][ T29] audit: type=1400 audit(1768817751.666:64): avc: denied { search } for pid=3254 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.240986][ T29] audit: type=1400 audit(1768817751.666:65): avc: denied { search } for pid=3254 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.266023][ T29] audit: type=1400 audit(1768817751.666:66): avc: denied { read open } for pid=3255 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.250' (ED25519) to the list of known hosts. [ 33.732493][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 33.732512][ T29] audit: type=1400 audit(1768817760.256:70): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.764640][ T29] audit: type=1400 audit(1768817760.296:71): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.767041][ T3305] cgroup: Unknown subsys name 'net' [ 33.796219][ T29] audit: type=1400 audit(1768817760.336:72): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.903836][ T3305] cgroup: Unknown subsys name 'cpuset' [ 33.910261][ T3305] cgroup: Unknown subsys name 'rlimit' [ 34.041987][ T29] audit: type=1400 audit(1768817760.566:73): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.071033][ T29] audit: type=1400 audit(1768817760.576:74): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.092533][ T29] audit: type=1400 audit(1768817760.576:75): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.113821][ T29] audit: type=1400 audit(1768817760.576:76): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.135098][ T29] audit: type=1400 audit(1768817760.596:77): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.157383][ T29] audit: type=1400 audit(1768817760.596:78): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.177368][ T3310] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.183275][ T29] audit: type=1400 audit(1768817760.596:79): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.254319][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.083249][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 36.121044][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 36.159941][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 36.206591][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 36.231473][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.238867][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.246326][ T3323] bridge_slave_0: entered allmulticast mode [ 36.253073][ T3323] bridge_slave_0: entered promiscuous mode [ 36.274363][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.281933][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.289917][ T3323] bridge_slave_1: entered allmulticast mode [ 36.296788][ T3323] bridge_slave_1: entered promiscuous mode [ 36.329278][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.336618][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.344236][ T3324] bridge_slave_0: entered allmulticast mode [ 36.350786][ T3324] bridge_slave_0: entered promiscuous mode [ 36.365133][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.372444][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.380063][ T3318] bridge_slave_0: entered allmulticast mode [ 36.386735][ T3318] bridge_slave_0: entered promiscuous mode [ 36.398130][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.405761][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.412983][ T3324] bridge_slave_1: entered allmulticast mode [ 36.419757][ T3324] bridge_slave_1: entered promiscuous mode [ 36.436280][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.443757][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.451244][ T3318] bridge_slave_1: entered allmulticast mode [ 36.458179][ T3318] bridge_slave_1: entered promiscuous mode [ 36.466140][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.475835][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 36.501099][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.516381][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.546132][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.566656][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.584058][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.591365][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.599708][ T3321] bridge_slave_0: entered allmulticast mode [ 36.606415][ T3321] bridge_slave_0: entered promiscuous mode [ 36.619357][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.629598][ T3323] team0: Port device team_slave_0 added [ 36.640664][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.647936][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.655260][ T3321] bridge_slave_1: entered allmulticast mode [ 36.661846][ T3321] bridge_slave_1: entered promiscuous mode [ 36.669267][ T3324] team0: Port device team_slave_0 added [ 36.680721][ T3323] team0: Port device team_slave_1 added [ 36.701939][ T3324] team0: Port device team_slave_1 added [ 36.733371][ T3318] team0: Port device team_slave_0 added [ 36.739548][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.746849][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.774143][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.785021][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.792328][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.800877][ T3317] bridge_slave_0: entered allmulticast mode [ 36.808185][ T3317] bridge_slave_0: entered promiscuous mode [ 36.816192][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.830334][ T3318] team0: Port device team_slave_1 added [ 36.836573][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.844089][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.871063][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.882051][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.889516][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.896961][ T3317] bridge_slave_1: entered allmulticast mode [ 36.903628][ T3317] bridge_slave_1: entered promiscuous mode [ 36.911280][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.926002][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.933297][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.961520][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.989306][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.996369][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.024727][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.042897][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.050323][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.077399][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.090062][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.097518][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.124907][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.141844][ T3321] team0: Port device team_slave_0 added [ 37.159849][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.171090][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.182046][ T3321] team0: Port device team_slave_1 added [ 37.210670][ T3323] hsr_slave_0: entered promiscuous mode [ 37.216837][ T3323] hsr_slave_1: entered promiscuous mode [ 37.238849][ T3317] team0: Port device team_slave_0 added [ 37.254888][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.262042][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.288754][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.300983][ T3317] team0: Port device team_slave_1 added [ 37.313924][ T3324] hsr_slave_0: entered promiscuous mode [ 37.320354][ T3324] hsr_slave_1: entered promiscuous mode [ 37.326465][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 37.332303][ T3324] Cannot create hsr debugfs directory [ 37.343744][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.350847][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.378311][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.396699][ T3318] hsr_slave_0: entered promiscuous mode [ 37.403037][ T3318] hsr_slave_1: entered promiscuous mode [ 37.409387][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 37.415377][ T3318] Cannot create hsr debugfs directory [ 37.440249][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.447502][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.475171][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.495835][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.503021][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.530238][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.574664][ T3321] hsr_slave_0: entered promiscuous mode [ 37.581071][ T3321] hsr_slave_1: entered promiscuous mode [ 37.587814][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 37.593743][ T3321] Cannot create hsr debugfs directory [ 37.659356][ T3317] hsr_slave_0: entered promiscuous mode [ 37.665414][ T3317] hsr_slave_1: entered promiscuous mode [ 37.671254][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 37.677518][ T3317] Cannot create hsr debugfs directory [ 37.818292][ T3323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.829651][ T3323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.845279][ T3323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.854325][ T3323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.876832][ T3324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.889920][ T3324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.899396][ T3324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.911697][ T3324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.953266][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.963986][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.980355][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.992310][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.001557][ T3321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.014215][ T3321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.029499][ T3321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.039114][ T3321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.075591][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.085710][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.096647][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.107363][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.126883][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.169159][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.177922][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.209018][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.216894][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.236483][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.243605][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.253697][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.267769][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.283962][ T319] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.291148][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.305922][ T935] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.313551][ T935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.323978][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.340734][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.368367][ T319] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.376253][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.396994][ T935] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.405259][ T935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.415370][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.436039][ T935] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.443439][ T935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.466433][ T935] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.473833][ T935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.492823][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.527952][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.541970][ T1663] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.549337][ T1663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.564255][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.581249][ T1663] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.588429][ T1663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.600777][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.657355][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.675297][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.719658][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.777304][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.826017][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.853090][ T3323] veth0_vlan: entered promiscuous mode [ 38.874881][ T3323] veth1_vlan: entered promiscuous mode [ 38.899971][ T3324] veth0_vlan: entered promiscuous mode [ 38.934050][ T3323] veth0_macvtap: entered promiscuous mode [ 38.941653][ T3324] veth1_vlan: entered promiscuous mode [ 38.957137][ T3323] veth1_macvtap: entered promiscuous mode [ 38.968137][ T3321] veth0_vlan: entered promiscuous mode [ 38.994290][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.017537][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.028024][ T3321] veth1_vlan: entered promiscuous mode [ 39.047709][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.061022][ T3324] veth0_macvtap: entered promiscuous mode [ 39.073502][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.087425][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.097155][ T3324] veth1_macvtap: entered promiscuous mode [ 39.104409][ T3321] veth0_macvtap: entered promiscuous mode [ 39.111972][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.123155][ T3317] veth0_vlan: entered promiscuous mode [ 39.136101][ T3321] veth1_macvtap: entered promiscuous mode [ 39.160469][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 39.160487][ T29] audit: type=1400 audit(1768817765.686:90): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.XSn3O7/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.175789][ T3317] veth1_vlan: entered promiscuous mode [ 39.198097][ T29] audit: type=1400 audit(1768817765.686:91): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.220635][ T29] audit: type=1400 audit(1768817765.686:92): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.XSn3O7/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.246122][ T29] audit: type=1400 audit(1768817765.696:93): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.249774][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.268106][ T29] audit: type=1400 audit(1768817765.696:94): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.XSn3O7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.302398][ T29] audit: type=1400 audit(1768817765.696:95): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.XSn3O7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.330781][ T29] audit: type=1400 audit(1768817765.696:96): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.335966][ T3318] veth0_vlan: entered promiscuous mode [ 39.354069][ T29] audit: type=1400 audit(1768817765.736:97): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.379627][ T29] audit: type=1400 audit(1768817765.736:98): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="gadgetfs" ino=4778 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.407663][ T3318] veth1_vlan: entered promiscuous mode [ 39.420800][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.429515][ T3323] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.445879][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.459963][ T29] audit: type=1400 audit(1768817765.996:99): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.464555][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.498831][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.509062][ T3488] loop3: detected capacity change from 0 to 512 [ 39.521507][ T3488] EXT4-fs: Ignoring removed i_version option [ 39.532387][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.540608][ T3488] EXT4-fs (loop3): orphan cleanup on readonly fs [ 39.546546][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.557958][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.576042][ T3488] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.4: EA inode hash validation failed [ 39.588293][ T3317] veth0_macvtap: entered promiscuous mode [ 39.603153][ T3318] veth0_macvtap: entered promiscuous mode [ 39.610175][ T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.616779][ T3488] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.639037][ T3318] veth1_macvtap: entered promiscuous mode [ 39.656767][ T3317] veth1_macvtap: entered promiscuous mode [ 39.664327][ T3488] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.4: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 39.674185][ T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.685667][ T3488] EXT4-fs (loop3): Remounting filesystem read-only [ 39.696985][ T3488] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.4: ea_inode dec ref err=-117 [ 39.710195][ T3488] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 39.719864][ T3488] EXT4-fs (loop3): 1 orphan inode deleted [ 39.727761][ T3488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 39.745819][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.755897][ T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.768080][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.786088][ T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.802946][ T3494] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=3494 comm=syz.2.6 [ 39.830726][ T935] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.845608][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.865227][ T935] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.895279][ T935] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.918048][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.928281][ T935] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.952155][ T935] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.967571][ T3500] loop0: detected capacity change from 0 to 512 [ 39.983042][ T935] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.011790][ T3500] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 40.020625][ T935] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.048440][ T935] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.098561][ T3507] Zero length message leads to an empty skb [ 40.215224][ T3511] loop0: detected capacity change from 0 to 512 [ 40.254583][ T3511] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.353159][ T3513] ip_vti0: Master is either lo or non-ether device [ 40.425616][ T3511] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 40.444553][ T3522] loop2: detected capacity change from 0 to 256 [ 40.461922][ T3509] loop4: detected capacity change from 0 to 8192 [ 40.469959][ T3511] EXT4-fs (loop0): orphan cleanup on readonly fs [ 40.526804][ T3511] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.9: corrupted inode contents [ 40.549077][ T3524] netlink: 'syz.1.11': attribute type 29 has an invalid length. [ 40.564913][ T3524] netlink: 'syz.1.11': attribute type 29 has an invalid length. [ 40.571146][ T3511] EXT4-fs (loop0): Remounting filesystem read-only [ 40.584794][ T3524] netlink: 508 bytes leftover after parsing attributes in process `syz.1.11'. [ 40.594282][ T3309] loop4: p1 < > p3 < > p4 [ 40.598760][ T3309] loop4: partition table partially beyond EOD, truncated [ 40.615088][ T3524] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.620379][ T3309] loop4: p1 start 4294967040 is beyond EOD, truncated [ 40.626283][ T3511] EXT4-fs (loop0): 1 truncate cleaned up [ 40.638574][ T935] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 40.649521][ T935] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 40.664885][ T3488] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4'. [ 40.675272][ T3309] loop4: p4 start 4227858432 is beyond EOD, truncated [ 40.693901][ T3509] loop4: p1 < > p3 < > p4 [ 40.698462][ T3509] loop4: partition table partially beyond EOD, truncated [ 40.710304][ T935] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 40.730868][ T3509] loop4: p1 start 4294967040 is beyond EOD, truncated [ 40.740279][ T3511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback. [ 40.740597][ T3509] loop4: p4 start 4227858432 is beyond EOD, truncated [ 40.816413][ T3511] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9'. [ 40.825886][ T3511] unsupported nlmsg_type 40 [ 40.847965][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.964528][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 40.992995][ T3540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14'. [ 41.003089][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 41.043706][ T3545] netlink: 'syz.4.17': attribute type 12 has an invalid length. [ 41.063227][ T3545] netlink: 68 bytes leftover after parsing attributes in process `syz.4.17'. [ 41.102405][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-0000002a0000. [ 41.135090][ T3548] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.18' sets config #-1 [ 41.148501][ T3551] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 41.154950][ T3548] bridge0: port 3(ip6gretap0) entered blocking state [ 41.165555][ T3548] bridge0: port 3(ip6gretap0) entered disabled state [ 41.173489][ T3548] ip6gretap0: entered allmulticast mode [ 41.179828][ T3548] ip6gretap0: entered promiscuous mode [ 41.186417][ T3548] bridge0: port 3(ip6gretap0) entered blocking state [ 41.193473][ T3548] bridge0: port 3(ip6gretap0) entered forwarding state [ 41.219930][ T3551] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.265892][ T3554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20'. [ 41.279852][ T3554] loop4: detected capacity change from 0 to 764 [ 41.287869][ T3554] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 41.335087][ T3558] loop0: detected capacity change from 0 to 512 [ 41.348483][ T3554] Symlink component flag not implemented [ 41.362775][ T3554] Symlink component flag not implemented (7) [ 41.369569][ T3554] capability: warning: `syz.4.20' uses deprecated v2 capabilities in a way that may be insecure [ 41.486979][ T3524] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.596730][ T3565] FAULT_INJECTION: forcing a failure. [ 41.596730][ T3565] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 41.610136][ T3565] CPU: 1 UID: 0 PID: 3565 Comm: syz.2.24 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.610175][ T3565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.610211][ T3565] Call Trace: [ 41.610222][ T3565] [ 41.610231][ T3565] __dump_stack+0x1d/0x30 [ 41.610325][ T3565] dump_stack_lvl+0x95/0xd0 [ 41.610348][ T3565] dump_stack+0x15/0x1b [ 41.610372][ T3565] should_fail_ex+0x263/0x280 [ 41.610465][ T3565] should_fail+0xb/0x20 [ 41.610493][ T3565] should_fail_usercopy+0x1a/0x20 [ 41.610603][ T3565] _copy_from_user+0x1c/0xb0 [ 41.610633][ T3565] __sys_bpf+0x183/0x7b0 [ 41.610665][ T3565] __x64_sys_bpf+0x41/0x50 [ 41.610767][ T3565] x64_sys_call+0x28e1/0x3000 [ 41.610801][ T3565] do_syscall_64+0xc0/0x2a0 [ 41.610829][ T3565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.610851][ T3565] RIP: 0033:0x7f51a59eacb9 [ 41.610867][ T3565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.610917][ T3565] RSP: 002b:00007f51a4447028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 41.610942][ T3565] RAX: ffffffffffffffda RBX: 00007f51a5c65fa0 RCX: 00007f51a59eacb9 [ 41.610960][ T3565] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 41.610976][ T3565] RBP: 00007f51a4447090 R08: 0000000000000000 R09: 0000000000000000 [ 41.611000][ T3565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.611016][ T3565] R13: 00007f51a5c66038 R14: 00007f51a5c65fa0 R15: 00007ffdfffe7fa8 [ 41.611037][ T3565] [ 41.870223][ C1] hrtimer: interrupt took 26767 ns [ 41.933393][ T3570] can0: slcan on ttyS3. [ 41.957662][ T3578] netlink: 'syz.2.28': attribute type 12 has an invalid length. [ 41.967622][ T3578] netlink: 68 bytes leftover after parsing attributes in process `syz.2.28'. [ 42.037794][ T3584] FAULT_INJECTION: forcing a failure. [ 42.037794][ T3584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.051404][ T3584] CPU: 0 UID: 0 PID: 3584 Comm: syz.2.29 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.051484][ T3584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.051497][ T3584] Call Trace: [ 42.051504][ T3584] [ 42.051513][ T3584] __dump_stack+0x1d/0x30 [ 42.051544][ T3584] dump_stack_lvl+0x95/0xd0 [ 42.051568][ T3584] dump_stack+0x15/0x1b [ 42.051608][ T3584] should_fail_ex+0x263/0x280 [ 42.051639][ T3584] should_fail+0xb/0x20 [ 42.051664][ T3584] should_fail_usercopy+0x1a/0x20 [ 42.051697][ T3584] _copy_from_user+0x1c/0xb0 [ 42.051743][ T3584] perf_copy_attr+0x145/0x610 [ 42.051771][ T3584] ? get_pid_task+0x96/0xd0 [ 42.051805][ T3584] __se_sys_perf_event_open+0x67/0x1290 [ 42.051846][ T3584] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 42.051959][ T3584] ? vfs_write+0x86e/0x9f0 [ 42.051981][ T3584] ? __rcu_read_unlock+0x4e/0x70 [ 42.052013][ T3584] __x64_sys_perf_event_open+0x67/0x80 [ 42.052082][ T3584] x64_sys_call+0x78c/0x3000 [ 42.052112][ T3584] do_syscall_64+0xc0/0x2a0 [ 42.052209][ T3584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.052236][ T3584] RIP: 0033:0x7f51a59eacb9 [ 42.052252][ T3584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.052311][ T3584] RSP: 002b:00007f51a4447028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 42.052337][ T3584] RAX: ffffffffffffffda RBX: 00007f51a5c65fa0 RCX: 00007f51a59eacb9 [ 42.052355][ T3584] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000340 [ 42.052373][ T3584] RBP: 00007f51a4447090 R08: 000000000000000a R09: 0000000000000000 [ 42.052423][ T3584] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 42.052437][ T3584] R13: 00007f51a5c66038 R14: 00007f51a5c65fa0 R15: 00007ffdfffe7fa8 [ 42.052455][ T3584] [ 42.260357][ T3570] loop4: detected capacity change from 0 to 128 [ 42.383638][ T3570] ======================================================= [ 42.383638][ T3570] WARNING: The mand mount option has been deprecated and [ 42.383638][ T3570] and is ignored by this kernel. Remove the mand [ 42.383638][ T3570] option from the mount to silence this warning. [ 42.383638][ T3570] ======================================================= [ 42.470136][ T3597] loop2: detected capacity change from 0 to 512 [ 42.497642][ T3597] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.530813][ T3597] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 42.549057][ T3597] System zones: 1-2, 4-12, 8-8 [ 42.559632][ T3597] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.31: iget: bad i_size value: 38620345925642 [ 42.601816][ T3597] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.31: couldn't read orphan inode 15 (err -117) [ 42.626626][ T3524] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.650583][ T3597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.670644][ T3597] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.31: bg 0: block 5: invalid block bitmap [ 42.693635][ T3603] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=3603 comm=syz.3.32 [ 42.759109][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.805450][ T3616] Illegal XDP return value 4294967274 on prog (id 7) dev N/A, expect packet loss! [ 42.865296][ T3620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'. [ 42.874304][ T3620] netlink: 20 bytes leftover after parsing attributes in process `syz.2.38'. [ 42.916719][ T935] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.916741][ T3620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'. [ 42.935744][ T3623] netlink: 'syz.0.39': attribute type 12 has an invalid length. [ 42.947327][ T935] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.973077][ T935] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.997134][ T935] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.007127][ T3570] syz.4.25: attempt to access beyond end of device [ 43.007127][ T3570] loop4: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 43.054578][ T3570] syz.4.25: attempt to access beyond end of device [ 43.054578][ T3570] loop4: rw=2049, sector=145, nr_sectors = 680 limit=128 [ 43.071864][ T3524] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.141390][ T319] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.152979][ T3566] can0 (unregistered): slcan off ttyS3. [ 43.211858][ T3638] ipvlan2: entered promiscuous mode [ 43.250684][ T319] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.270425][ T319] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.305732][ T3655] loop1: detected capacity change from 0 to 512 [ 43.322849][ T319] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.375120][ T3655] /dev/loop1: Can't open blockdev [ 43.397849][ T3659] xt_connbytes: Forcing CT accounting to be enabled [ 43.700230][ T3686] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.707560][ T3686] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.800528][ T3686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.811108][ T3686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.865379][ T3683] netlink: 'syz.1.51': attribute type 12 has an invalid length. [ 43.876138][ T1663] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.885393][ T1663] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.926422][ T1663] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.935470][ T1663] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.953935][ T1663] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.963073][ T1663] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.975817][ T1663] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.985188][ T1663] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.049810][ T3705] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.113661][ T3709] EXT4-fs: Ignoring removed i_version option [ 44.152927][ T3709] EXT4-fs (loop0): orphan cleanup on readonly fs [ 44.173551][ T3709] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.59: EA inode hash validation failed [ 44.186664][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 44.186681][ T29] audit: type=1400 audit(1768817770.716:211): avc: denied { create } for pid=3699 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.216913][ T3709] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.0.59: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 44.246807][ T29] audit: type=1400 audit(1768817770.776:212): avc: denied { ioctl } for pid=3699 comm="syz.3.55" path="socket:[6265]" dev="sockfs" ino=6265 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.283788][ T3709] EXT4-fs (loop0): Remounting filesystem read-only [ 44.291166][ T3709] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.0.59: ea_inode dec ref err=-117 [ 44.326227][ T29] audit: type=1326 audit(1768817770.856:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0571acb9 code=0x7ffc0000 [ 44.351209][ T29] audit: type=1326 audit(1768817770.856:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0571acb9 code=0x7ffc0000 [ 44.375704][ T29] audit: type=1326 audit(1768817770.856:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0571acb9 code=0x7ffc0000 [ 44.396951][ T3709] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 44.399886][ T29] audit: type=1326 audit(1768817770.856:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f8c0571acb9 code=0x7ffc0000 [ 44.438588][ T29] audit: type=1326 audit(1768817770.966:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8c056db58e code=0x7ffc0000 [ 44.462308][ T29] audit: type=1326 audit(1768817770.966:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8c056db58e code=0x7ffc0000 [ 44.464782][ T3709] EXT4-fs (loop0): 1 orphan inode deleted [ 44.486207][ T29] audit: type=1326 audit(1768817770.966:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8c056db58e code=0x7ffc0000 [ 44.493591][ T3709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 44.545528][ T29] audit: type=1326 audit(1768817771.066:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8c056db58e code=0x7ffc0000 [ 44.675224][ T3718] FAULT_INJECTION: forcing a failure. [ 44.675224][ T3718] name failslab, interval 1, probability 0, space 0, times 1 [ 44.689543][ T3718] CPU: 0 UID: 0 PID: 3718 Comm: syz.4.62 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.689571][ T3718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 44.689583][ T3718] Call Trace: [ 44.689590][ T3718] [ 44.689607][ T3718] __dump_stack+0x1d/0x30 [ 44.689636][ T3718] dump_stack_lvl+0x95/0xd0 [ 44.689661][ T3718] dump_stack+0x15/0x1b [ 44.689731][ T3718] should_fail_ex+0x263/0x280 [ 44.689757][ T3718] should_failslab+0x8c/0xb0 [ 44.689784][ T3718] __kmalloc_cache_noprof+0x64/0x4a0 [ 44.689813][ T3718] ? tcf_action_init_1+0x12d/0x4d0 [ 44.689849][ T3718] tcf_action_init_1+0x12d/0x4d0 [ 44.689898][ T3718] tcf_action_init+0x29c/0x700 [ 44.689983][ T3718] tc_ctl_action+0x29b/0x830 [ 44.690025][ T3718] ? __mutex_lock_slowpath+0xa/0x10 [ 44.690059][ T3718] ? __pfx_tc_ctl_action+0x10/0x10 [ 44.690162][ T3718] rtnetlink_rcv_msg+0x6a7/0x720 [ 44.690266][ T3718] netlink_rcv_skb+0x123/0x220 [ 44.690303][ T3718] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 44.690375][ T3718] rtnetlink_rcv+0x1c/0x30 [ 44.690398][ T3718] netlink_unicast+0x5c0/0x690 [ 44.690439][ T3718] netlink_sendmsg+0x5c8/0x6f0 [ 44.690464][ T3718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 44.690533][ T3718] __sock_sendmsg+0x145/0x170 [ 44.690561][ T3718] ____sys_sendmsg+0x31e/0x4a0 [ 44.690614][ T3718] ___sys_sendmsg+0x195/0x1e0 [ 44.690659][ T3718] __x64_sys_sendmsg+0xd4/0x160 [ 44.690719][ T3718] x64_sys_call+0x17ba/0x3000 [ 44.690751][ T3718] do_syscall_64+0xc0/0x2a0 [ 44.690774][ T3718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.690861][ T3718] RIP: 0033:0x7f5b6d95acb9 [ 44.690882][ T3718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.690904][ T3718] RSP: 002b:00007f5b6c3b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.690928][ T3718] RAX: ffffffffffffffda RBX: 00007f5b6dbd5fa0 RCX: 00007f5b6d95acb9 [ 44.690983][ T3718] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 0000000000000007 [ 44.690995][ T3718] RBP: 00007f5b6c3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 44.691006][ T3718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.691020][ T3718] R13: 00007f5b6dbd6038 R14: 00007f5b6dbd5fa0 R15: 00007ffd7ffdc3f8 [ 44.691104][ T3718] [ 44.825056][ T3718] syz.4.62 (3718) used greatest stack depth: 10296 bytes left [ 44.986399][ T3734] set_capacity_and_notify: 2 callbacks suppressed [ 44.986422][ T3734] loop4: detected capacity change from 0 to 764 [ 44.999907][ T3724] loop1: detected capacity change from 0 to 512 [ 45.022933][ T3734] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 45.031946][ T3724] ext2: Unknown parameter 'fowner>00000000000000000000' [ 45.078912][ T3734] Symlink component flag not implemented [ 45.106386][ T3734] Symlink component flag not implemented (7) [ 45.163571][ T3737] loop3: detected capacity change from 0 to 128 [ 45.184190][ T3737] vfat: Unknown parameter '+L*˘fź ŮnxN¤NÄ_`ČńDZĐTĂMz]}EŇ·Qµ*©uę|zŕŻđX*cOsUý…ÂN$đČŤy•;Ţ”/¶ż [ 45.184190][ T3737] # ö/´©cĂ9>–Fˇ˙ ' [ 45.219085][ T3741] loop4: detected capacity change from 0 to 256 [ 45.273273][ T3741] FAULT_INJECTION: forcing a failure. [ 45.273273][ T3741] name failslab, interval 1, probability 0, space 0, times 0 [ 45.286162][ T3741] CPU: 0 UID: 0 PID: 3741 Comm: syz.4.70 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.286211][ T3741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 45.286227][ T3741] Call Trace: [ 45.286235][ T3741] [ 45.286246][ T3741] __dump_stack+0x1d/0x30 [ 45.286272][ T3741] dump_stack_lvl+0x95/0xd0 [ 45.286293][ T3741] dump_stack+0x15/0x1b [ 45.286318][ T3741] should_fail_ex+0x263/0x280 [ 45.286373][ T3741] ? __pfx_fat_alloc_inode+0x10/0x10 [ 45.286400][ T3741] should_failslab+0x8c/0xb0 [ 45.286476][ T3741] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 45.286507][ T3741] ? fat_alloc_inode+0x38/0xc0 [ 45.286584][ T3741] ? __pfx_fat_alloc_inode+0x10/0x10 [ 45.286617][ T3741] fat_alloc_inode+0x38/0xc0 [ 45.286673][ T3741] ? __pfx_fat_alloc_inode+0x10/0x10 [ 45.286706][ T3741] alloc_inode+0x40/0x170 [ 45.286806][ T3741] new_inode+0x1d/0xe0 [ 45.286835][ T3741] fat_build_inode+0x169/0x290 [ 45.286885][ T3741] vfat_mkdir+0x13d/0x210 [ 45.286929][ T3741] vfs_mkdir+0x2da/0x3d0 [ 45.286970][ T3741] do_mkdirat+0x133/0x3b0 [ 45.286990][ T3741] __x64_sys_mkdir+0x42/0x50 [ 45.287088][ T3741] x64_sys_call+0x2f32/0x3000 [ 45.287128][ T3741] do_syscall_64+0xc0/0x2a0 [ 45.287157][ T3741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.287199][ T3741] RIP: 0033:0x7f5b6d95acb9 [ 45.287272][ T3741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.287295][ T3741] RSP: 002b:00007f5b6c3b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 45.287320][ T3741] RAX: ffffffffffffffda RBX: 00007f5b6dbd5fa0 RCX: 00007f5b6d95acb9 [ 45.287412][ T3741] RDX: 0000000000000000 RSI: 0000000000000100 RDI: 0000200000000140 [ 45.287425][ T3741] RBP: 00007f5b6c3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 45.287437][ T3741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.287449][ T3741] R13: 00007f5b6dbd6038 R14: 00007f5b6dbd5fa0 R15: 00007ffd7ffdc3f8 [ 45.287469][ T3741] [ 45.596263][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.639041][ T3752] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 45.665933][ T3757] __nla_validate_parse: 7 callbacks suppressed [ 45.665953][ T3757] netlink: 32 bytes leftover after parsing attributes in process `syz.0.74'. [ 45.685976][ T3758] loop1: detected capacity change from 0 to 256 [ 45.715080][ T3758] vfat: Bad value for 'fmask' [ 45.721381][ T3757] syz.0.74 uses obsolete (PF_INET,SOCK_PACKET) [ 45.729636][ T3760] netlink: 144 bytes leftover after parsing attributes in process `syz.3.77'. [ 45.764104][ T3764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.78'. [ 45.918612][ T3771] netlink: 'syz.0.81': attribute type 12 has an invalid length. [ 46.010314][ T3777] usb usb1: usbfs: process 3777 (syz.3.84) did not claim interface 0 before use [ 46.088188][ T3789] netlink: 'syz.4.87': attribute type 3 has an invalid length. [ 46.154965][ T3788] mmap: syz.2.85 (3788): VmData 29208576 exceed data ulimit 4096. Update limits or use boot option ignore_rlimit_data. [ 46.181397][ T3796] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 46.229953][ T3798] loop4: detected capacity change from 0 to 1024 [ 46.255141][ T3801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.91'. [ 46.264915][ T3801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.91'. [ 46.297768][ T3809] netlink: 144 bytes leftover after parsing attributes in process `syz.1.93'. [ 46.325805][ T3813] loop2: detected capacity change from 0 to 512 [ 46.337887][ T3813] EXT4-fs: Ignoring removed orlov option [ 46.348474][ T3812] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=3812 comm=syz.0.94 [ 46.375120][ T3815] netlink: 'syz.4.96': attribute type 12 has an invalid length. [ 46.384168][ T3813] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 46.414972][ T3818] loop4: detected capacity change from 0 to 512 [ 46.421677][ T3818] EXT4-fs: Ignoring removed i_version option [ 46.428860][ T3818] EXT4-fs: Ignoring removed orlov option [ 46.437020][ T3818] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 46.453716][ T3813] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 46.467888][ T3813] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.95: bad orphan inode 4 [ 46.500054][ T3813] EXT4-fs (loop2): 1 orphan inode deleted [ 46.507269][ T3813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.521733][ T3813] FAULT_INJECTION: forcing a failure. [ 46.521733][ T3813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.535437][ T3813] CPU: 0 UID: 0 PID: 3813 Comm: syz.2.95 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.535473][ T3813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.535531][ T3813] Call Trace: [ 46.535538][ T3813] [ 46.535548][ T3813] __dump_stack+0x1d/0x30 [ 46.535613][ T3813] dump_stack_lvl+0x95/0xd0 [ 46.535639][ T3813] dump_stack+0x15/0x1b [ 46.535659][ T3813] should_fail_ex+0x263/0x280 [ 46.535682][ T3813] should_fail+0xb/0x20 [ 46.535709][ T3813] should_fail_usercopy+0x1a/0x20 [ 46.535794][ T3813] strncpy_from_user+0x27/0x250 [ 46.535832][ T3813] getname_flags+0xad/0x3b0 [ 46.535857][ T3813] do_sys_openat2+0x60/0x150 [ 46.535895][ T3813] __x64_sys_openat+0xf2/0x120 [ 46.536011][ T3813] x64_sys_call+0x2b07/0x3000 [ 46.536037][ T3813] do_syscall_64+0xc0/0x2a0 [ 46.536059][ T3813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.536087][ T3813] RIP: 0033:0x7f51a59eacb9 [ 46.536133][ T3813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.536150][ T3813] RSP: 002b:00007f51a4447028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 46.536170][ T3813] RAX: ffffffffffffffda RBX: 00007f51a5c65fa0 RCX: 00007f51a59eacb9 [ 46.536237][ T3813] RDX: 000000000000275a RSI: 0000200000009840 RDI: ffffffffffffff9c [ 46.536254][ T3813] RBP: 00007f51a4447090 R08: 0000000000000000 R09: 0000000000000000 [ 46.536270][ T3813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.536286][ T3813] R13: 00007f51a5c66038 R14: 00007f51a5c65fa0 R15: 00007ffdfffe7fa8 [ 46.536306][ T3813] [ 46.716223][ T3818] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 46.733987][ T3828] loop0: detected capacity change from 0 to 1024 [ 46.784340][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.814547][ T3828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 46.857440][ T3828] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.861307][ T3836] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 46.944770][ T3843] syz_tun: entered allmulticast mode [ 46.950825][ T3843] FAULT_INJECTION: forcing a failure. [ 46.950825][ T3843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.964666][ T3843] CPU: 0 UID: 0 PID: 3843 Comm: syz.2.104 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.964774][ T3843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.964787][ T3843] Call Trace: [ 46.964794][ T3843] [ 46.964802][ T3843] __dump_stack+0x1d/0x30 [ 46.964829][ T3843] dump_stack_lvl+0x95/0xd0 [ 46.964852][ T3843] dump_stack+0x15/0x1b [ 46.964944][ T3843] should_fail_ex+0x263/0x280 [ 46.964967][ T3843] should_fail+0xb/0x20 [ 46.964988][ T3843] should_fail_usercopy+0x1a/0x20 [ 46.965071][ T3843] _copy_to_user+0x20/0xa0 [ 46.965105][ T3843] simple_read_from_buffer+0xb5/0x130 [ 46.965147][ T3843] proc_fail_nth_read+0x10e/0x150 [ 46.965230][ T3843] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 46.965304][ T3843] vfs_read+0x1ab/0x7f0 [ 46.965335][ T3843] ? __rcu_read_unlock+0x4e/0x70 [ 46.965354][ T3843] ? __fget_files+0x184/0x1c0 [ 46.965379][ T3843] ? mutex_lock+0x57/0x90 [ 46.965410][ T3843] ksys_read+0xdc/0x1a0 [ 46.965496][ T3843] __x64_sys_read+0x40/0x50 [ 46.965592][ T3843] x64_sys_call+0x2889/0x3000 [ 46.965617][ T3843] do_syscall_64+0xc0/0x2a0 [ 46.965644][ T3843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.965686][ T3843] RIP: 0033:0x7f51a59ab58e [ 46.965706][ T3843] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 46.965728][ T3843] RSP: 002b:00007f51a4446fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 46.965822][ T3843] RAX: ffffffffffffffda RBX: 00007f51a44476c0 RCX: 00007f51a59ab58e [ 46.965837][ T3843] RDX: 000000000000000f RSI: 00007f51a44470a0 RDI: 0000000000000006 [ 46.965849][ T3843] RBP: 00007f51a4447090 R08: 0000000000000000 R09: 0000000000000000 [ 46.965861][ T3843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.965872][ T3843] R13: 00007f51a5c66038 R14: 00007f51a5c65fa0 R15: 00007ffdfffe7fa8 [ 46.965966][ T3843] [ 47.221386][ T3847] FAULT_INJECTION: forcing a failure. [ 47.221386][ T3847] name failslab, interval 1, probability 0, space 0, times 0 [ 47.234490][ T3847] CPU: 0 UID: 0 PID: 3847 Comm: syz.1.106 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.234564][ T3847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 47.234577][ T3847] Call Trace: [ 47.234585][ T3847] [ 47.234595][ T3847] __dump_stack+0x1d/0x30 [ 47.234676][ T3847] dump_stack_lvl+0x95/0xd0 [ 47.234706][ T3847] dump_stack+0x15/0x1b [ 47.234770][ T3847] should_fail_ex+0x263/0x280 [ 47.234800][ T3847] should_failslab+0x8c/0xb0 [ 47.234893][ T3847] kmem_cache_alloc_noprof+0x68/0x490 [ 47.234919][ T3847] ? alloc_empty_file+0x76/0x200 [ 47.234950][ T3847] alloc_empty_file+0x76/0x200 [ 47.235026][ T3847] alloc_file_pseudo+0xf6/0x190 [ 47.235062][ T3847] __shmem_file_setup+0x1dd/0x210 [ 47.235089][ T3847] shmem_file_setup+0x3b/0x50 [ 47.235117][ T3847] __se_sys_memfd_create+0x2f6/0x6c0 [ 47.235232][ T3847] __x64_sys_memfd_create+0x31/0x40 [ 47.235323][ T3847] x64_sys_call+0x28cb/0x3000 [ 47.235355][ T3847] do_syscall_64+0xc0/0x2a0 [ 47.235379][ T3847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.235401][ T3847] RIP: 0033:0x7f8c0571acb9 [ 47.235418][ T3847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.235439][ T3847] RSP: 002b:00007f8c04176e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 47.235534][ T3847] RAX: ffffffffffffffda RBX: 00000000000002bc RCX: 00007f8c0571acb9 [ 47.235617][ T3847] RDX: 00007f8c04176ee0 RSI: 0000000000000000 RDI: 00007f8c0578730b [ 47.235631][ T3847] RBP: 00002000000000c0 R08: 00000000ffffffff R09: 0000000000000000 [ 47.235646][ T3847] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000 [ 47.235660][ T3847] R13: 00007f8c04176ee0 R14: 00007f8c04176ea0 R15: 0000200000000440 [ 47.235678][ T3847] [ 47.461770][ T3842] syz_tun: left allmulticast mode [ 47.495296][ T3850] netlink: 144 bytes leftover after parsing attributes in process `syz.2.107'. [ 47.533248][ T3825] Set syz1 is full, maxelem 65536 reached [ 47.567278][ T3854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.108'. [ 47.581394][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 47.621954][ T3831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.103'. [ 47.641917][ T3854] vlan2: entered promiscuous mode [ 47.648095][ T3854] team0: entered promiscuous mode [ 47.655637][ T3854] team_slave_0: entered promiscuous mode [ 47.664318][ T3854] team_slave_1: entered promiscuous mode [ 47.701874][ T3859] netlink: 'syz.0.110': attribute type 3 has an invalid length. [ 47.737645][ T3861] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.744904][ T3861] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.769018][ T3863] loop0: detected capacity change from 0 to 512 [ 47.776140][ T3863] EXT4-fs: Ignoring removed nobh option [ 47.795682][ T3863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.814924][ T3863] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.827934][ T3863] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.110: iget: bad i_size value: 2533274857506816 [ 47.880973][ T3861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.892572][ T3861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.935453][ T3869] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 47.943370][ T319] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.952475][ T319] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.974958][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.992775][ T319] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.002466][ T319] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.038428][ T3871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.114'. [ 48.068234][ T3876] vfat: Unknown parameter 'shortna}e' [ 48.168542][ T3881] FAULT_INJECTION: forcing a failure. [ 48.168542][ T3881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.181825][ T3881] CPU: 1 UID: 0 PID: 3881 Comm: syz.0.117 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.181911][ T3881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.181926][ T3881] Call Trace: [ 48.181934][ T3881] [ 48.181943][ T3881] __dump_stack+0x1d/0x30 [ 48.181974][ T3881] dump_stack_lvl+0x95/0xd0 [ 48.182005][ T3881] dump_stack+0x15/0x1b [ 48.182074][ T3881] should_fail_ex+0x263/0x280 [ 48.182141][ T3881] should_fail+0xb/0x20 [ 48.182167][ T3881] should_fail_usercopy+0x1a/0x20 [ 48.182273][ T3881] _copy_to_user+0x20/0xa0 [ 48.182311][ T3881] simple_read_from_buffer+0xb5/0x130 [ 48.182431][ T3881] proc_fail_nth_read+0x10e/0x150 [ 48.182521][ T3881] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 48.182555][ T3881] vfs_read+0x1ab/0x7f0 [ 48.182597][ T3881] ? __rcu_read_unlock+0x4e/0x70 [ 48.182699][ T3881] ? __fget_files+0x184/0x1c0 [ 48.182727][ T3881] ? mutex_lock+0x57/0x90 [ 48.182759][ T3881] ksys_read+0xdc/0x1a0 [ 48.182782][ T3881] __x64_sys_read+0x40/0x50 [ 48.182805][ T3881] x64_sys_call+0x2889/0x3000 [ 48.182836][ T3881] do_syscall_64+0xc0/0x2a0 [ 48.182935][ T3881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.182975][ T3881] RIP: 0033:0x7f0413abb58e [ 48.182990][ T3881] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 48.183010][ T3881] RSP: 002b:00007f0412556fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 48.183034][ T3881] RAX: ffffffffffffffda RBX: 00007f04125576c0 RCX: 00007f0413abb58e [ 48.183052][ T3881] RDX: 000000000000000f RSI: 00007f04125570a0 RDI: 0000000000000005 [ 48.183068][ T3881] RBP: 00007f0412557090 R08: 0000000000000000 R09: 0000000000000000 [ 48.183084][ T3881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.183167][ T3881] R13: 00007f0413d76038 R14: 00007f0413d75fa0 R15: 00007ffd5100a9b8 [ 48.183193][ T3881] [ 48.384706][ T3878] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.118: corrupted inode contents [ 48.410367][ T3878] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 48.410638][ T3874] loop3: p1 < > p3 < > p4 [ 48.423593][ T3874] loop3: partition table partially beyond EOD, truncated [ 48.437837][ T3874] loop3: p1 start 4294967040 is beyond EOD, truncated [ 48.460463][ T3878] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.118: corrupted inode contents [ 48.472868][ T3878] EXT4-fs error (device loop4): ext4_evict_inode:301: inode #15: comm syz.4.118: mark_inode_dirty error [ 48.484641][ T3878] EXT4-fs (loop4): 1 orphan inode deleted [ 48.490954][ T3878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.506562][ T3874] loop3: p4 start 4227858432 is beyond EOD, truncated [ 48.515711][ T3878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.528353][ T3892] bridge0: entered promiscuous mode [ 48.533772][ T3892] macvtap1: entered promiscuous mode [ 48.539288][ T3892] macvtap1: entered allmulticast mode [ 48.544844][ T3892] bridge0: entered allmulticast mode [ 48.556030][ T3892] bridge0: port 3(macvtap1) entered blocking state [ 48.562942][ T3892] bridge0: port 3(macvtap1) entered disabled state [ 48.607258][ T3892] bridge0: left allmulticast mode [ 48.612500][ T3892] bridge0: left promiscuous mode [ 48.647534][ T3552] udevd[3552]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 48.706898][ T3903] vfat: Bad value for 'fmask' [ 48.818225][ T3906] FAULT_INJECTION: forcing a failure. [ 48.818225][ T3906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.831523][ T3906] CPU: 0 UID: 0 PID: 3906 Comm: syz.0.127 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.831571][ T3906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.831601][ T3906] Call Trace: [ 48.831638][ T3906] [ 48.831647][ T3906] __dump_stack+0x1d/0x30 [ 48.831674][ T3906] dump_stack_lvl+0x95/0xd0 [ 48.831698][ T3906] dump_stack+0x15/0x1b [ 48.831721][ T3906] should_fail_ex+0x263/0x280 [ 48.831754][ T3906] should_fail+0xb/0x20 [ 48.831852][ T3906] should_fail_usercopy+0x1a/0x20 [ 48.831905][ T3906] strncpy_from_user+0x27/0x250 [ 48.831952][ T3906] getname_flags+0xad/0x3b0 [ 48.832031][ T3906] do_sys_openat2+0x60/0x150 [ 48.832073][ T3906] __x64_sys_openat+0xf2/0x120 [ 48.832114][ T3906] x64_sys_call+0x2b07/0x3000 [ 48.832168][ T3906] do_syscall_64+0xc0/0x2a0 [ 48.832208][ T3906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.832233][ T3906] RIP: 0033:0x7f0413abb58e [ 48.832250][ T3906] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 48.832273][ T3906] RSP: 002b:00007f0412556ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 48.832330][ T3906] RAX: ffffffffffffffda RBX: 00007f04125576c0 RCX: 00007f0413abb58e [ 48.832345][ T3906] RDX: 0000000000000002 RSI: 00007f0412556f90 RDI: ffffffffffffff9c [ 48.832360][ T3906] RBP: 00007f0412557090 R08: 0000000000000000 R09: 0000000000000000 [ 48.832379][ T3906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.832442][ T3906] R13: 00007f0413d76038 R14: 00007f0413d75fa0 R15: 00007ffd5100a9b8 [ 48.832475][ T3906] [ 49.168343][ T3909] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 49.219085][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 49.219104][ T29] audit: type=1400 audit(1768817775.746:382): avc: denied { write } for pid=3915 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 49.266608][ T29] audit: type=1400 audit(1768817775.796:383): avc: denied { create } for pid=3920 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.334930][ T3927] veth0_virt_wifi: entered promiscuous mode [ 49.341708][ T29] audit: type=1400 audit(1768817775.816:384): avc: denied { getopt } for pid=3920 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.362334][ T29] audit: type=1400 audit(1768817775.816:385): avc: denied { kexec_image_load } for pid=3920 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 49.382143][ T29] audit: type=1400 audit(1768817775.816:386): avc: denied { map_create } for pid=3920 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 49.401770][ T29] audit: type=1400 audit(1768817775.836:387): avc: denied { prog_run } for pid=3923 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 49.433412][ T29] audit: type=1400 audit(1768817775.956:388): avc: denied { map_read map_write } for pid=3930 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 49.443780][ T3927] veth0_virt_wifi: left promiscuous mode [ 49.453175][ T29] audit: type=1400 audit(1768817775.956:389): avc: denied { create } for pid=3930 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 49.479181][ T29] audit: type=1400 audit(1768817775.956:390): avc: denied { write } for pid=3930 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 49.499250][ T29] audit: type=1400 audit(1768817775.956:391): avc: denied { append } for pid=3930 comm="syz.0.138" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 49.549497][ T3929] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.137' sets config #-1 [ 49.563048][ T3552] loop1: p1 < > p3 < > p4 [ 49.567880][ T3552] loop1: partition table partially beyond EOD, truncated [ 49.610185][ T3552] loop1: p1 start 4294967040 is beyond EOD, truncated [ 49.618648][ T3932] bridge0: port 3(ip6gretap0) entered blocking state [ 49.625519][ T3932] bridge0: port 3(ip6gretap0) entered disabled state [ 49.635064][ T3932] ip6gretap0: entered allmulticast mode [ 49.648372][ T3932] ip6gretap0: entered promiscuous mode [ 49.659949][ T3552] loop1: p4 start 4227858432 is beyond EOD, truncated [ 49.679612][ T3924] loop1: p1 < > p3 < > p4 [ 49.684153][ T3924] loop1: partition table partially beyond EOD, truncated [ 49.691621][ T3944] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 49.691698][ T3924] loop1: p1 start 4294967040 is beyond EOD, [ 49.695027][ T3944] EXT4-fs (loop4): mount failed [ 49.706477][ T3924] truncated [ 49.707647][ T3924] loop1: p4 start 4227858432 is beyond EOD, truncated [ 49.809804][ T3948] syz.2.140: attempt to access beyond end of device [ 49.809804][ T3948] loop2: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 49.822598][ T3552] udevd[3552]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 49.824605][ T3940] syz.2.140: attempt to access beyond end of device [ 49.824605][ T3940] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 49.847268][ T3948] syz.2.140: attempt to access beyond end of device [ 49.847268][ T3948] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 49.861206][ T3940] syz.2.140: attempt to access beyond end of device [ 49.861206][ T3940] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 49.875204][ T3948] syz.2.140: attempt to access beyond end of device [ 49.875204][ T3948] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 49.879318][ T3552] udevd[3552]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 49.899423][ T3940] syz.2.140: attempt to access beyond end of device [ 49.899423][ T3940] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 49.930481][ T3940] syz.2.140: attempt to access beyond end of device [ 49.930481][ T3940] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 49.944303][ T3940] syz.2.140: attempt to access beyond end of device [ 49.944303][ T3940] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 49.965737][ T3940] syz.2.140: attempt to access beyond end of device [ 49.965737][ T3940] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 49.979589][ T3940] syz.2.140: attempt to access beyond end of device [ 49.979589][ T3940] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 50.043811][ T3961] 9p: Could not find request transport: &•Suá"d [ 50.100153][ T3966] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 50.231374][ T3972] netlink: 'syz.3.151': attribute type 4 has an invalid length. [ 50.291002][ T3976] set_capacity_and_notify: 8 callbacks suppressed [ 50.291094][ T3976] loop3: detected capacity change from 0 to 512 [ 50.304790][ T3976] EXT4-fs: Ignoring removed i_version option [ 50.313146][ T3976] EXT4-fs (loop3): orphan cleanup on readonly fs [ 50.320195][ T3976] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.153: EA inode hash validation failed [ 50.333872][ T3976] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.153: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 50.349926][ T3976] EXT4-fs (loop3): Remounting filesystem read-only [ 50.356811][ T3976] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.153: ea_inode dec ref err=-117 [ 50.369925][ T3976] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 50.379001][ T3976] EXT4-fs (loop3): 1 orphan inode deleted [ 50.385512][ T3976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 50.397757][ T3975] loop0: detected capacity change from 0 to 8192 [ 50.443581][ T3552] loop0: p1 < > p3 < > p4 [ 50.448313][ T3552] loop0: partition table partially beyond EOD, truncated [ 50.455631][ T3552] loop0: p1 start 4294967040 is beyond EOD, truncated [ 50.463424][ T3552] loop0: p4 start 4227858432 is beyond EOD, truncated [ 50.472300][ T3975] loop0: p1 < > p3 < > p4 [ 50.477371][ T3975] loop0: partition table partially beyond EOD, truncated [ 50.485011][ T3975] loop0: p1 start 4294967040 is beyond EOD, truncated [ 50.492522][ T3975] loop0: p4 start 4227858432 is beyond EOD, truncated [ 50.613707][ T3552] udevd[3552]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 50.688987][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.756134][ T3988] loop3: detected capacity change from 0 to 128 [ 50.831310][ T3991] cgroup: none used incorrectly [ 50.953251][ T4003] __nla_validate_parse: 19 callbacks suppressed [ 50.953334][ T4003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.160'. [ 51.008889][ T4000] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=4000 comm=syz.1.162 [ 51.040271][ T4010] loop2: detected capacity change from 0 to 512 [ 51.071590][ T4007] loop3: detected capacity change from 0 to 8192 [ 51.097884][ T4010] EXT4-fs: Ignoring removed i_version option [ 51.134745][ T4010] EXT4-fs (loop2): orphan cleanup on readonly fs [ 51.145006][ T4010] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.166: EA inode hash validation failed [ 51.165220][ T3309] loop3: p1 < > p3 < > p4 [ 51.169866][ T3309] loop3: partition table partially beyond EOD, truncated [ 51.177266][ T4010] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.166: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 51.201238][ T4016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.168'. [ 51.240479][ T3309] loop3: p1 start 4294967040 is beyond EOD, truncated [ 51.248166][ T4010] EXT4-fs (loop2): Remounting filesystem read-only [ 51.254750][ T4010] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.2.166: ea_inode dec ref err=-117 [ 51.280337][ T3309] loop3: p4 start 4227858432 is beyond EOD, truncated [ 51.315887][ T4007] loop3: p1 < > p3 < > p4 [ 51.320420][ T4007] loop3: partition table partially beyond EOD, truncated [ 51.332857][ T4010] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 51.342413][ T4007] loop3: p1 start 4294967040 is beyond EOD, truncated [ 51.381306][ T4007] loop3: p4 start 4227858432 is beyond EOD, truncated [ 51.390686][ T4010] EXT4-fs (loop2): 1 orphan inode deleted [ 51.429450][ T4010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 51.488323][ T3552] udevd[3552]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 51.545311][ T3552] udevd[3552]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 51.771920][ T4030] SELinux: syz.1.171 (4030) set checkreqprot to 1. This is no longer supported. [ 51.935769][ T4010] netlink: 76 bytes leftover after parsing attributes in process `syz.2.166'. [ 51.948896][ T4010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.166'. [ 52.064412][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.309363][ T4053] loop2: detected capacity change from 0 to 2048 [ 52.462569][ C1] ================================================================== [ 52.470829][ C1] BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit [ 52.477377][ C1] [ 52.479721][ C1] read-write to 0xffff888119988228 of 8 bytes by interrupt on cpu 0: [ 52.487809][ C1] vxcan_xmit+0x28b/0x340 [ 52.492262][ C1] dev_hard_start_xmit+0x125/0x3e0 [ 52.497482][ C1] __dev_queue_xmit+0xdb1/0x1f20 [ 52.502447][ C1] can_send+0x589/0x720 [ 52.506800][ C1] can_can_gw_rcv+0x7bb/0x820 [ 52.511510][ C1] can_rcv_filter+0xc7/0x4f0 [ 52.516123][ C1] can_receive+0x163/0x1c0 [ 52.520674][ C1] can_rcv+0xed/0x190 [ 52.524694][ C1] __netif_receive_skb+0x120/0x270 [ 52.529913][ C1] process_backlog+0x228/0x420 [ 52.534755][ C1] __napi_poll+0x5f/0x300 [ 52.539110][ C1] net_rx_action+0x452/0x930 [ 52.543739][ C1] handle_softirqs+0xb9/0x280 [ 52.548450][ C1] run_ksoftirqd+0x1c/0x30 [ 52.552980][ C1] smpboot_thread_fn+0x32a/0x510 [ 52.558120][ C1] kthread+0x488/0x510 [ 52.562308][ C1] ret_from_fork+0x148/0x280 [ 52.567000][ C1] ret_from_fork_asm+0x1a/0x30 [ 52.571789][ C1] [ 52.574114][ C1] read-write to 0xffff888119988228 of 8 bytes by interrupt on cpu 1: [ 52.582199][ C1] vxcan_xmit+0x28b/0x340 [ 52.586674][ C1] dev_hard_start_xmit+0x125/0x3e0 [ 52.591858][ C1] __dev_queue_xmit+0xdb1/0x1f20 [ 52.596857][ C1] can_send+0x589/0x720 [ 52.601286][ C1] can_can_gw_rcv+0x7bb/0x820 [ 52.606063][ C1] can_rcv_filter+0xc7/0x4f0 [ 52.610698][ C1] can_receive+0x163/0x1c0 [ 52.615167][ C1] can_rcv+0xed/0x190 [ 52.619194][ C1] __netif_receive_skb+0x120/0x270 [ 52.624344][ C1] process_backlog+0x228/0x420 [ 52.629156][ C1] __napi_poll+0x5f/0x300 [ 52.633542][ C1] net_rx_action+0x452/0x930 [ 52.638240][ C1] handle_softirqs+0xb9/0x280 [ 52.642953][ C1] run_ksoftirqd+0x1c/0x30 [ 52.647401][ C1] smpboot_thread_fn+0x32a/0x510 [ 52.652485][ C1] kthread+0x488/0x510 [ 52.656684][ C1] ret_from_fork+0x148/0x280 [ 52.661325][ C1] ret_from_fork_asm+0x1a/0x30 [ 52.666288][ C1] [ 52.668635][ C1] value changed: 0x00000000000012f5 -> 0x00000000000012f6 [ 52.675930][ C1] [ 52.678268][ C1] Reported by Kernel Concurrency Sanitizer on: [ 52.684536][ C1] CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.694281][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.704448][ C1] ================================================================== [ 52.771156][ C0] ================================================================== [ 52.780048][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 52.787419][ C0] [ 52.789865][ C0] read-write to 0xffff888146edf020 of 4 bytes by interrupt on cpu 1: [ 52.797959][ C0] can_can_gw_rcv+0x807/0x820 [ 52.802792][ C0] can_rcv_filter+0xc7/0x4f0 [ 52.807530][ C0] can_receive+0x163/0x1c0 [ 52.812003][ C0] can_rcv+0xed/0x190 [ 52.816058][ C0] __netif_receive_skb+0x120/0x270 [ 52.821781][ C0] process_backlog+0x228/0x420 [ 52.826724][ C0] __napi_poll+0x5f/0x300 [ 52.831280][ C0] net_rx_action+0x452/0x930 [ 52.835915][ C0] handle_softirqs+0xb9/0x280 [ 52.840664][ C0] do_softirq+0x45/0x60 [ 52.844867][ C0] __local_bh_enable_ip+0x70/0x80 [ 52.850122][ C0] __alloc_skb+0x2d0/0x4b0 [ 52.854591][ C0] nsim_dev_trap_report_work+0x18a/0x630 [ 52.860362][ C0] process_scheduled_works+0x4cd/0x9d0 [ 52.865873][ C0] worker_thread+0x581/0x770 [ 52.870587][ C0] kthread+0x488/0x510 [ 52.874743][ C0] ret_from_fork+0x148/0x280 [ 52.879373][ C0] ret_from_fork_asm+0x1a/0x30 [ 52.884295][ C0] [ 52.886641][ C0] read-write to 0xffff888146edf020 of 4 bytes by interrupt on cpu 0: [ 52.894904][ C0] can_can_gw_rcv+0x807/0x820 [ 52.899633][ C0] can_rcv_filter+0xc7/0x4f0 [ 52.904275][ C0] can_receive+0x163/0x1c0 [ 52.908739][ C0] can_rcv+0xed/0x190 [ 52.912886][ C0] __netif_receive_skb+0x120/0x270 [ 52.918482][ C0] process_backlog+0x228/0x420 [ 52.923642][ C0] __napi_poll+0x5f/0x300 [ 52.928018][ C0] net_rx_action+0x452/0x930 [ 52.932747][ C0] handle_softirqs+0xb9/0x280 [ 52.937650][ C0] do_softirq+0x45/0x60 [ 52.941858][ C0] __local_bh_enable_ip+0x70/0x80 [ 52.947018][ C0] copy_fpstate_to_sigframe+0x30d/0x7d0 [ 52.952948][ C0] get_sigframe+0x34c/0x470 [ 52.957579][ C0] x64_setup_rt_frame+0xa7/0x4e0 [ 52.962555][ C0] arch_do_signal_or_restart+0x24b/0x450 [ 52.968370][ C0] exit_to_user_mode_loop+0x6a/0x6f0 [ 52.973723][ C0] do_syscall_64+0x1d3/0x2a0 [ 52.978615][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.984546][ C0] [ 52.987504][ C0] value changed: 0x0000296a -> 0x0000296b [ 52.993937][ C0] [ 52.996292][ C0] Reported by Kernel Concurrency Sanitizer on: [ 53.002469][ C0] CPU: 0 UID: 0 PID: 3318 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.012667][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.022845][ C0] ================================================================== [ 53.057353][ C0] ================================================================== [ 53.065527][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 53.073063][ C0] [ 53.075773][ C0] read-write to 0xffff8881009581f8 of 8 bytes by interrupt on cpu 1: [ 53.084046][ C0] can_rcv_filter+0x242/0x4f0 [ 53.088875][ C0] can_receive+0x163/0x1c0 [ 53.093487][ C0] can_rcv+0xed/0x190 [ 53.097518][ C0] __netif_receive_skb+0x120/0x270 [ 53.102666][ C0] process_backlog+0x228/0x420 [ 53.107569][ C0] __napi_poll+0x5f/0x300 [ 53.112015][ C0] net_rx_action+0x452/0x930 [ 53.116736][ C0] handle_softirqs+0xb9/0x280 [ 53.121489][ C0] do_softirq+0x45/0x60 [ 53.125792][ C0] __local_bh_enable_ip+0x70/0x80 [ 53.131069][ C0] __alloc_skb+0x2d0/0x4b0 [ 53.135658][ C0] alloc_skb_with_frags+0x7d/0x470 [ 53.141095][ C0] sock_alloc_send_pskb+0x44d/0x500 [ 53.146468][ C0] unix_dgram_sendmsg+0x397/0x1000 [ 53.151618][ C0] __sock_sendmsg+0x145/0x170 [ 53.156436][ C0] __sys_sendto+0x2b2/0x380 [ 53.160973][ C0] __x64_sys_sendto+0x76/0x90 [ 53.166053][ C0] x64_sys_call+0x29a7/0x3000 [ 53.170860][ C0] do_syscall_64+0xc0/0x2a0 [ 53.175687][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.181727][ C0] [ 53.184122][ C0] read-write to 0xffff8881009581f8 of 8 bytes by interrupt on cpu 0: [ 53.192668][ C0] can_rcv_filter+0x242/0x4f0 [ 53.197397][ C0] can_receive+0x163/0x1c0 [ 53.201869][ C0] can_rcv+0xed/0x190 [ 53.205998][ C0] __netif_receive_skb+0x120/0x270 [ 53.211158][ C0] process_backlog+0x228/0x420 [ 53.216055][ C0] __napi_poll+0x5f/0x300 [ 53.220498][ C0] net_rx_action+0x452/0x930 [ 53.225381][ C0] handle_softirqs+0xb9/0x280 [ 53.231156][ C0] do_softirq+0x45/0x60 [ 53.235452][ C0] __local_bh_enable_ip+0x70/0x80 [ 53.240544][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 53.245523][ C0] release_sock+0x116/0x150 [ 53.250237][ C0] tcp_sendmsg+0x39/0x50 [ 53.254714][ C0] inet_sendmsg+0x76/0xd0 [ 53.259086][ C0] __sock_sendmsg+0x102/0x170 [ 53.263793][ C0] sock_write_iter+0x1d2/0x210 [ 53.268868][ C0] vfs_write+0x5a6/0x9f0 [ 53.273160][ C0] ksys_write+0xdc/0x1a0 [ 53.277440][ C0] __x64_sys_write+0x40/0x50 [ 53.282389][ C0] x64_sys_call+0x2847/0x3000 [ 53.287271][ C0] do_syscall_64+0xc0/0x2a0 [ 53.291924][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.298272][ C0] [ 53.300736][ C0] value changed: 0x0000000000004c82 -> 0x0000000000004c83 [ 53.307877][ C0] [ 53.310217][ C0] Reported by Kernel Concurrency Sanitizer on: [ 53.316562][ C0] CPU: 0 UID: 0 PID: 3305 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.326503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.336665][ C0] ================================================================== [ 53.359515][ C0] ================================================================== [ 53.367657][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 53.375271][ C0] [ 53.377645][ C0] read-write to 0xffff888100958298 of 8 bytes by interrupt on cpu 1: [ 53.385929][ C0] can_rcv_filter+0xd9/0x4f0 [ 53.390783][ C0] can_receive+0x163/0x1c0 [ 53.395358][ C0] can_rcv+0xed/0x190 [ 53.399676][ C0] __netif_receive_skb+0x120/0x270 [ 53.404836][ C0] process_backlog+0x228/0x420 [ 53.409996][ C0] __napi_poll+0x5f/0x300 [ 53.414556][ C0] net_rx_action+0x452/0x930 [ 53.419299][ C0] handle_softirqs+0xb9/0x280 [ 53.424627][ C0] do_softirq+0x45/0x60 [ 53.429360][ C0] __local_bh_enable_ip+0x70/0x80 [ 53.434439][ C0] kernel_fpu_end+0x6c/0x80 [ 53.439159][ C0] blake2s_compress+0x67/0x1740 [ 53.444259][ C0] blake2s_final+0x6a/0xa0 [ 53.448848][ C0] hmac+0x219/0x400 [ 53.452814][ C0] message_ephemeral+0x1e6/0x260 [ 53.458084][ C0] wg_noise_handshake_create_initiation+0x15e/0x610 [ 53.465031][ C0] wg_packet_handshake_send_worker+0xb2/0x160 [ 53.471508][ C0] process_scheduled_works+0x4cd/0x9d0 [ 53.477095][ C0] worker_thread+0x581/0x770 [ 53.481909][ C0] kthread+0x488/0x510 [ 53.486023][ C0] ret_from_fork+0x148/0x280 [ 53.490662][ C0] ret_from_fork_asm+0x1a/0x30 [ 53.495570][ C0] [ 53.497943][ C0] read-write to 0xffff888100958298 of 8 bytes by interrupt on cpu 0: [ 53.506440][ C0] can_rcv_filter+0xd9/0x4f0 [ 53.511096][ C0] can_receive+0x163/0x1c0 [ 53.515571][ C0] can_rcv+0xed/0x190 [ 53.520616][ C0] __netif_receive_skb+0x120/0x270 [ 53.525879][ C0] process_backlog+0x228/0x420 [ 53.531161][ C0] __napi_poll+0x5f/0x300 [ 53.535540][ C0] net_rx_action+0x452/0x930 [ 53.540705][ C0] handle_softirqs+0xb9/0x280 [ 53.545539][ C0] do_softirq+0x45/0x60 [ 53.549946][ C0] __local_bh_enable_ip+0x70/0x80 [ 53.555217][ C0] update_defense_level+0x59d/0x5d0 [ 53.560577][ C0] defense_work_handler+0x1f/0x80 [ 53.565739][ C0] process_scheduled_works+0x4cd/0x9d0 [ 53.571777][ C0] worker_thread+0x581/0x770 [ 53.576462][ C0] kthread+0x488/0x510 [ 53.580968][ C0] ret_from_fork+0x148/0x280 [ 53.586851][ C0] ret_from_fork_asm+0x1a/0x30 [ 53.594252][ C0] [ 53.597138][ C0] value changed: 0x0000000000006045 -> 0x0000000000006046 [ 53.605144][ C0] [ 53.607948][ C0] Reported by Kernel Concurrency Sanitizer on: [ 53.614644][ C0] CPU: 0 UID: 0 PID: 1039 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.625387][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.635581][ C0] Workqueue: events_long defense_work_handler [ 53.641810][ C0] ================================================================== [ 53.760186][ C0] ================================================================== [ 53.768606][ C0] BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit [ 53.775220][ C0] [ 53.777569][ C0] read-write to 0xffff888119980220 of 8 bytes by interrupt on cpu 1: [ 53.785847][ C0] vxcan_xmit+0x2c8/0x340 [ 53.790419][ C0] dev_hard_start_xmit+0x125/0x3e0 [ 53.795585][ C0] __dev_queue_xmit+0xdb1/0x1f20 [ 53.800897][ C0] can_send+0x589/0x720 [ 53.805358][ C0] can_can_gw_rcv+0x7bb/0x820 [ 53.810680][ C0] can_rcv_filter+0xc7/0x4f0 [ 53.815395][ C0] can_receive+0x163/0x1c0 [ 53.819968][ C0] can_rcv+0xed/0x190 [ 53.824071][ C0] __netif_receive_skb+0x120/0x270 [ 53.829704][ C0] process_backlog+0x228/0x420 [ 53.834866][ C0] __napi_poll+0x5f/0x300 [ 53.839228][ C0] net_rx_action+0x452/0x930 [ 53.843971][ C0] handle_softirqs+0xb9/0x280 [ 53.848836][ C0] run_ksoftirqd+0x1c/0x30 [ 53.853353][ C0] smpboot_thread_fn+0x32a/0x510 [ 53.858428][ C0] kthread+0x488/0x510 [ 53.862537][ C0] ret_from_fork+0x148/0x280 [ 53.867148][ C0] ret_from_fork_asm+0x1a/0x30 [ 53.872027][ C0] [ 53.874373][ C0] read-write to 0xffff888119980220 of 8 bytes by interrupt on cpu 0: [ 53.882732][ C0] vxcan_xmit+0x2c8/0x340 [ 53.887205][ C0] dev_hard_start_xmit+0x125/0x3e0 [ 53.892524][ C0] __dev_queue_xmit+0xdb1/0x1f20 [ 53.897579][ C0] can_send+0x589/0x720 [ 53.901780][ C0] can_can_gw_rcv+0x7bb/0x820 [ 53.906831][ C0] can_rcv_filter+0xc7/0x4f0 [ 53.911563][ C0] can_receive+0x163/0x1c0 [ 53.916196][ C0] can_rcv+0xed/0x190 [ 53.920308][ C0] __netif_receive_skb+0x120/0x270 [ 53.925786][ C0] process_backlog+0x228/0x420 [ 53.930817][ C0] __napi_poll+0x5f/0x300 [ 53.935272][ C0] net_rx_action+0x452/0x930 [ 53.940128][ C0] handle_softirqs+0xb9/0x280 [ 53.944836][ C0] do_softirq+0x45/0x60 [ 53.949459][ C0] __local_bh_enable_ip+0x70/0x80 [ 53.954514][ C0] kernel_fpu_end+0x6c/0x80 [ 53.959220][ C0] blake2s_compress+0x67/0x1740 [ 53.964265][ C0] blake2s_final+0x6a/0xa0 [ 53.969169][ C0] hmac+0x3a1/0x400 [ 53.973194][ C0] message_ephemeral+0x1b2/0x260 [ 53.978357][ C0] wg_noise_handshake_create_initiation+0x15e/0x610 [ 53.985166][ C0] wg_packet_handshake_send_worker+0xb2/0x160 [ 53.991376][ C0] process_scheduled_works+0x4cd/0x9d0 [ 53.997863][ C0] worker_thread+0x581/0x770 [ 54.003395][ C0] kthread+0x488/0x510 [ 54.008395][ C0] ret_from_fork+0x148/0x280 [ 54.013193][ C0] ret_from_fork_asm+0x1a/0x30 [ 54.018005][ C0] [ 54.020540][ C0] value changed: 0x000000000000a6ff -> 0x000000000000a700 [ 54.028897][ C0] [ 54.031561][ C0] Reported by Kernel Concurrency Sanitizer on: [ 54.037741][ C0] CPU: 0 UID: 0 PID: 31 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.048286][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 54.058574][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 54.065735][ C0] ================================================================== [ 54.504168][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 54.504252][ T29] audit: type=1400 audit(1768817780.856:531): avc: denied { create } for pid=4059 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 54.719009][ T4064] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 54.755156][ T29] audit: type=1400 audit(1768817781.176:532): avc: denied { write } for pid=3305 comm="syz-executor" path="pipe:[483]" dev="pipefs" ino=483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to send rpc fd=3 want=296 sent=0 n=-1 (errno 32: Broken pipe) [ 55.606926][ C1] ================================================================== [ 55.615158][ C1] BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit [ 55.621721][ C1] [ 55.624077][ C1] read-write to 0xffff888119988228 of 8 bytes by interrupt on cpu 0: [ 55.632167][ C1] vxcan_xmit+0x28b/0x340 [ 55.636540][ C1] dev_hard_start_xmit+0x125/0x3e0 [ 55.641694][ C1] __dev_queue_xmit+0xdb1/0x1f20 [ 55.646671][ C1] can_send+0x589/0x720 [ 55.650934][ C1] can_can_gw_rcv+0x7bb/0x820 [ 55.655655][ C1] can_rcv_filter+0xc7/0x4f0 [ 55.660424][ C1] can_receive+0x163/0x1c0 [ 55.664890][ C1] can_rcv+0xed/0x190 [ 55.668948][ C1] __netif_receive_skb+0x120/0x270 [ 55.674464][ C1] process_backlog+0x228/0x420 [ 55.679263][ C1] __napi_poll+0x5f/0x300 [ 55.683834][ C1] net_rx_action+0x452/0x930 [ 55.688481][ C1] handle_softirqs+0xb9/0x280 [ 55.693208][ C1] do_softirq+0x45/0x60 [ 55.697405][ C1] __local_bh_enable_ip+0x70/0x80 [ 55.702460][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 55.707777][ C1] wg_index_hashtable_insert+0xab/0x2b0 [ 55.713533][ C1] wg_noise_handshake_create_initiation+0x55b/0x610 [ 55.720179][ C1] wg_packet_handshake_send_worker+0xb2/0x160 [ 55.726271][ C1] process_scheduled_works+0x4cd/0x9d0 [ 55.731775][ C1] worker_thread+0x581/0x770 [ 55.736788][ C1] kthread+0x488/0x510 [ 55.741096][ C1] ret_from_fork+0x148/0x280 [ 55.745709][ C1] ret_from_fork_asm+0x1a/0x30 [ 55.750632][ C1] [ 55.752991][ C1] read-write to 0xffff888119988228 of 8 bytes by interrupt on cpu 1: [ 55.761174][ C1] vxcan_xmit+0x28b/0x340 [ 55.765543][ C1] dev_hard_start_xmit+0x125/0x3e0 [ 55.770719][ C1] __dev_queue_xmit+0xdb1/0x1f20 [ 55.775697][ C1] can_send+0x589/0x720 [ 55.779906][ C1] can_can_gw_rcv+0x7bb/0x820 [ 55.784617][ C1] can_rcv_filter+0xc7/0x4f0 [ 55.789515][ C1] can_receive+0x163/0x1c0 [ 55.794055][ C1] can_rcv+0xed/0x190 [ 55.798117][ C1] __netif_receive_skb+0x120/0x270 [ 55.803431][ C1] process_backlog+0x228/0x420 [ 55.808275][ C1] __napi_poll+0x5f/0x300 [ 55.812695][ C1] net_rx_action+0x452/0x930 [ 55.817322][ C1] handle_softirqs+0xb9/0x280 [ 55.822153][ C1] do_softirq+0x45/0x60 [ 55.826443][ C1] __local_bh_enable_ip+0x70/0x80 [ 55.831785][ C1] kernel_fpu_end+0x6c/0x80 [ 55.836504][ C1] blake2s_compress+0x67/0x1740 [ 55.842243][ C1] blake2s_final+0x6a/0xa0 [ 55.846707][ C1] wg_noise_handshake_create_initiation+0x31c/0x610 [ 55.853393][ C1] wg_packet_handshake_send_worker+0xb2/0x160 [ 55.859569][ C1] process_scheduled_works+0x4cd/0x9d0 [ 55.865073][ C1] worker_thread+0x581/0x770 [ 55.869789][ C1] kthread+0x488/0x510 [ 55.873991][ C1] ret_from_fork+0x148/0x280 [ 55.878628][ C1] ret_from_fork_asm+0x1a/0x30 [ 55.883538][ C1] [ 55.885976][ C1] value changed: 0x00000000000284cd -> 0x00000000000284ce [ 55.893100][ C1] [ 55.895440][ C1] Reported by Kernel Concurrency Sanitizer on: [ 55.902033][ C1] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.911947][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 55.922034][ C1] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 55.928996][ C1] ================================================================== [ 55.983588][ C1] ================================================================== [ 55.991991][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 55.999324][ C1] [ 56.001671][ C1] read-write to 0xffff888146edf020 of 4 bytes by interrupt on cpu 0: [ 56.009766][ C1] can_can_gw_rcv+0x807/0x820 [ 56.014480][ C1] can_rcv_filter+0xc7/0x4f0 [ 56.019122][ C1] can_receive+0x163/0x1c0 [ 56.023587][ C1] can_rcv+0xed/0x190 [ 56.028050][ C1] __netif_receive_skb+0x120/0x270 [ 56.033339][ C1] process_backlog+0x228/0x420 [ 56.038159][ C1] __napi_poll+0x5f/0x300 [ 56.042610][ C1] net_rx_action+0x452/0x930 [ 56.047239][ C1] handle_softirqs+0xb9/0x280 [ 56.052037][ C1] do_softirq+0x45/0x60 [ 56.056236][ C1] __local_bh_enable_ip+0x70/0x80 [ 56.061290][ C1] skb_attempt_defer_free+0x31d/0x450 [ 56.066699][ C1] tcp_recvmsg_locked+0x1b48/0x20d0 [ 56.072045][ C1] tcp_recvmsg+0x12c/0x460 [ 56.076515][ C1] inet_recvmsg+0xb7/0x290 [ 56.080979][ C1] sock_recvmsg+0xf6/0x160 [ 56.085433][ C1] sock_read_iter+0x169/0x1b0 [ 56.090145][ C1] vfs_read+0x6c0/0x7f0 [ 56.094332][ C1] ksys_read+0xdc/0x1a0 [ 56.098517][ C1] __x64_sys_read+0x40/0x50 [ 56.103138][ C1] x64_sys_call+0x2889/0x3000 [ 56.107865][ C1] do_syscall_64+0xc0/0x2a0 [ 56.112592][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.118525][ C1] [ 56.120905][ C1] read-write to 0xffff888146edf020 of 4 bytes by interrupt on cpu 1: [ 56.129008][ C1] can_can_gw_rcv+0x807/0x820 [ 56.133728][ C1] can_rcv_filter+0xc7/0x4f0 [ 56.138375][ C1] can_receive+0x163/0x1c0 [ 56.142850][ C1] can_rcv+0xed/0x190 [ 56.146977][ C1] __netif_receive_skb+0x120/0x270 [ 56.152129][ C1] process_backlog+0x228/0x420 [ 56.156939][ C1] __napi_poll+0x5f/0x300 [ 56.161327][ C1] net_rx_action+0x452/0x930 [ 56.165951][ C1] handle_softirqs+0xb9/0x280 [ 56.170728][ C1] do_softirq+0x45/0x60 [ 56.175013][ C1] __local_bh_enable_ip+0x70/0x80 [ 56.180081][ C1] kernel_fpu_end+0x6c/0x80 [ 56.184609][ C1] blake2s_compress+0x67/0x1740 [ 56.189509][ C1] blake2s_update+0xa3/0x160 [ 56.194189][ C1] hmac+0x20c/0x400 [ 56.198100][ C1] kdf+0xa9/0x1e0 [ 56.201791][ C1] wg_noise_handshake_create_initiation+0x1b0/0x610 [ 56.208954][ C1] wg_packet_handshake_send_worker+0xb2/0x160 [ 56.215151][ C1] process_scheduled_works+0x4cd/0x9d0 [ 56.220644][ C1] worker_thread+0x581/0x770 [ 56.225260][ C1] kthread+0x488/0x510 [ 56.229380][ C1] ret_from_fork+0x148/0x280 [ 56.234002][ C1] ret_from_fork_asm+0x1a/0x30 [ 56.238807][ C1] [ 56.241147][ C1] value changed: 0x00027b68 -> 0x00027b69 [ 56.246876][ C1] [ 56.249217][ C1] Reported by Kernel Concurrency Sanitizer on: [ 56.255386][ C1] CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.265132][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.275216][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 56.282203][ C1] ================================================================== [ 56.313012][ C1] ================================================================== [ 56.321256][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 56.328610][ C1] [ 56.330955][ C1] read-write to 0xffff8881009581f8 of 8 bytes by interrupt on cpu 0: [ 56.339050][ C1] can_rcv_filter+0x242/0x4f0 [ 56.343881][ C1] can_receive+0x163/0x1c0 [ 56.348431][ C1] can_rcv+0xed/0x190 [ 56.352470][ C1] __netif_receive_skb+0x120/0x270 [ 56.357611][ C1] process_backlog+0x228/0x420 [ 56.362496][ C1] __napi_poll+0x5f/0x300 [ 56.366854][ C1] net_rx_action+0x452/0x930 [ 56.371487][ C1] handle_softirqs+0xb9/0x280 [ 56.376210][ C1] do_softirq+0x45/0x60 [ 56.380410][ C1] __local_bh_enable_ip+0x70/0x80 [ 56.385574][ C1] kernel_fpu_end+0x6c/0x80 [ 56.390107][ C1] blake2s_compress+0x67/0x1740 [ 56.395016][ C1] blake2s_final+0x6a/0xa0 [ 56.399482][ C1] hmac+0x3a1/0x400 [ 56.403336][ C1] kdf+0x7d/0x1e0 [ 56.407021][ C1] wg_noise_handshake_create_initiation+0x1b0/0x610 [ 56.413742][ C1] wg_packet_handshake_send_worker+0xb2/0x160 [ 56.419947][ C1] process_scheduled_works+0x4cd/0x9d0 [ 56.425455][ C1] worker_thread+0x581/0x770 [ 56.430088][ C1] kthread+0x488/0x510 [ 56.434302][ C1] ret_from_fork+0x148/0x280 [ 56.438983][ C1] ret_from_fork_asm+0x1a/0x30 [ 56.443791][ C1] [ 56.446151][ C1] read-write to 0xffff8881009581f8 of 8 bytes by interrupt on cpu 1: [ 56.454241][ C1] can_rcv_filter+0x242/0x4f0 [ 56.458969][ C1] can_receive+0x163/0x1c0 [ 56.463432][ C1] can_rcv+0xed/0x190 [ 56.467461][ C1] __netif_receive_skb+0x120/0x270 [ 56.472604][ C1] process_backlog+0x228/0x420 [ 56.477398][ C1] __napi_poll+0x5f/0x300 [ 56.481755][ C1] net_rx_action+0x452/0x930 [ 56.486382][ C1] handle_softirqs+0xb9/0x280 [ 56.491117][ C1] do_softirq+0x45/0x60 [ 56.495327][ C1] __local_bh_enable_ip+0x70/0x80 [ 56.500482][ C1] kernel_fpu_end+0x6c/0x80 [ 56.505019][ C1] blake2s_compress+0x67/0x1740 [ 56.509918][ C1] blake2s_final+0x6a/0xa0 [ 56.514458][ C1] hmac+0x219/0x400 [ 56.518353][ C1] kdf+0xa9/0x1e0 [ 56.522043][ C1] wg_noise_handshake_create_initiation+0x372/0x610 [ 56.528690][ C1] wg_packet_handshake_send_worker+0xb2/0x160 [ 56.534796][ C1] process_scheduled_works+0x4cd/0x9d0 [ 56.540291][ C1] worker_thread+0x581/0x770 [ 56.544941][ C1] kthread+0x488/0x510 [ 56.549048][ C1] ret_from_fork+0x148/0x280 [ 56.553769][ C1] ret_from_fork_asm+0x1a/0x30 [ 56.558914][ C1] [ 56.561346][ C1] value changed: 0x000000000002966d -> 0x000000000002966e [ 56.568572][ C1] [ 56.570917][ C1] Reported by Kernel Concurrency Sanitizer on: [ 56.577190][ C1] CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.586976][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.597148][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 56.604145][ C1] ================================================================== [ 56.702523][ C1] ================================================================== [ 56.710765][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 56.718733][ C1] [ 56.721093][ C1] read-write to 0xffff888100958298 of 8 bytes by interrupt on cpu 0: [ 56.729453][ C1] can_rcv_filter+0xd9/0x4f0 [ 56.734201][ C1] can_receive+0x163/0x1c0 [ 56.738767][ C1] can_rcv+0xed/0x190 [ 56.742813][ C1] __netif_receive_skb+0x120/0x270 [ 56.748204][ C1] process_backlog+0x228/0x420 [ 56.753359][ C1] __napi_poll+0x5f/0x300 [ 56.757729][ C1] net_rx_action+0x452/0x930 [ 56.762459][ C1] handle_softirqs+0xb9/0x280 [ 56.767294][ C1] do_softirq+0x45/0x60 [ 56.771641][ C1] __local_bh_enable_ip+0x70/0x80 [ 56.777138][ C1] kernel_fpu_end+0x6c/0x80 [ 56.781766][ C1] blake2s_compress+0x67/0x1740 [ 56.787203][ C1] blake2s_final+0x6a/0xa0 [ 56.791661][ C1] hmac+0x3a1/0x400 [ 56.795515][ C1] kdf+0x7d/0x1e0 [ 56.799275][ C1] wg_noise_handshake_consume_initiation+0x176/0x800 [ 56.806008][ C1] wg_packet_handshake_receive_worker+0x3a8/0x5d0 [ 56.812480][ C1] process_scheduled_works+0x4cd/0x9d0 [ 56.818192][ C1] worker_thread+0x581/0x770 [ 56.822840][ C1] kthread+0x488/0x510 [ 56.827498][ C1] ret_from_fork+0x148/0x280 [ 56.832180][ C1] ret_from_fork_asm+0x1a/0x30 [ 56.837365][ C1] [ 56.839715][ C1] read-write to 0xffff888100958298 of 8 bytes by interrupt on cpu 1: [ 56.848076][ C1] can_rcv_filter+0xd9/0x4f0 [ 56.852798][ C1] can_receive+0x163/0x1c0 [ 56.857300][ C1] can_rcv+0xed/0x190 [ 56.861516][ C1] __netif_receive_skb+0x120/0x270 [ 56.866748][ C1] process_backlog+0x228/0x420 [ 56.872187][ C1] __napi_poll+0x5f/0x300 [ 56.876911][ C1] net_rx_action+0x452/0x930 [ 56.881810][ C1] handle_softirqs+0xb9/0x280 [ 56.886723][ C1] run_ksoftirqd+0x1c/0x30 [ 56.891189][ C1] smpboot_thread_fn+0x32a/0x510 [ 56.896258][ C1] kthread+0x488/0x510 [ 56.900566][ C1] ret_from_fork+0x148/0x280 [ 56.905468][ C1] ret_from_fork_asm+0x1a/0x30 [ 56.910358][ C1] [ 56.912714][ C1] value changed: 0x000000000002bf2e -> 0x000000000002bf2f [ 56.919903][ C1] [ 56.922266][ C1] Reported by Kernel Concurrency Sanitizer on: [ 56.928445][ C1] CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.938221][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.948412][ C1] ================================================================== [ 57.001082][ C1] ================================================================== [ 57.009402][ C1] BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit [ 57.016046][ C1] [ 57.018379][ C1] read-write to 0xffff888119980220 of 8 bytes by interrupt on cpu 0: [ 57.026458][ C1] vxcan_xmit+0x2c8/0x340 [ 57.030838][ C1] dev_hard_start_xmit+0x125/0x3e0 [ 57.035978][ C1] __dev_queue_xmit+0xdb1/0x1f20 [ 57.040988][ C1] can_send+0x589/0x720 [ 57.045166][ C1] can_can_gw_rcv+0x7bb/0x820 [ 57.049873][ C1] can_rcv_filter+0xc7/0x4f0 [ 57.054496][ C1] can_receive+0x163/0x1c0 [ 57.059050][ C1] can_rcv+0xed/0x190 [ 57.063070][ C1] __netif_receive_skb+0x120/0x270 [ 57.068241][ C1] process_backlog+0x228/0x420 [ 57.073117][ C1] __napi_poll+0x5f/0x300 [ 57.077471][ C1] net_rx_action+0x452/0x930 [ 57.082078][ C1] handle_softirqs+0xb9/0x280 [ 57.086798][ C1] run_ksoftirqd+0x1c/0x30 [ 57.091270][ C1] smpboot_thread_fn+0x32a/0x510 [ 57.096246][ C1] kthread+0x488/0x510 [ 57.100449][ C1] ret_from_fork+0x148/0x280 [ 57.105066][ C1] ret_from_fork_asm+0x1a/0x30 [ 57.109942][ C1] [ 57.112350][ C1] read-write to 0xffff888119980220 of 8 bytes by interrupt on cpu 1: [ 57.120511][ C1] vxcan_xmit+0x2c8/0x340 [ 57.125068][ C1] dev_hard_start_xmit+0x125/0x3e0 [ 57.130223][ C1] __dev_queue_xmit+0xdb1/0x1f20 [ 57.135183][ C1] can_send+0x589/0x720 [ 57.139383][ C1] can_can_gw_rcv+0x7bb/0x820 [ 57.144103][ C1] can_rcv_filter+0xc7/0x4f0 [ 57.148842][ C1] can_receive+0x163/0x1c0 [ 57.153309][ C1] can_rcv+0xed/0x190 [ 57.158039][ C1] __netif_receive_skb+0x120/0x270 [ 57.163194][ C1] process_backlog+0x228/0x420 [ 57.168360][ C1] __napi_poll+0x5f/0x300 [ 57.172720][ C1] net_rx_action+0x452/0x930 [ 57.177518][ C1] handle_softirqs+0xb9/0x280 [ 57.182284][ C1] do_softirq+0x45/0x60 [ 57.186756][ C1] __local_bh_enable_ip+0x70/0x80 [ 57.191854][ C1] __alloc_skb+0x2d0/0x4b0 [ 57.196593][ C1] nsim_dev_trap_report_work+0x18a/0x630 [ 57.202443][ C1] process_scheduled_works+0x4cd/0x9d0 [ 57.207934][ C1] worker_thread+0x581/0x770 [ 57.212561][ C1] kthread+0x488/0x510 [ 57.216752][ C1] ret_from_fork+0x148/0x280 [ 57.221560][ C1] ret_from_fork_asm+0x1a/0x30 [ 57.226439][ C1] [ 57.228795][ C1] value changed: 0x000000000002f581 -> 0x000000000002f582 [ 57.235922][ C1] [ 57.238261][ C1] Reported by Kernel Concurrency Sanitizer on: [ 57.244430][ C1] CPU: 1 UID: 0 PID: 1663 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.254961][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 57.265337][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 57.272148][ C1] ================================================================== [ 58.629686][ C1] ================================================================== [ 58.638181][ C1] BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit [ 58.644736][ C1] [ 58.647252][ C1] read-write to 0xffff888119988228 of 8 bytes by interrupt on cpu 0: [ 58.655348][ C1] vxcan_xmit+0x28b/0x340 [ 58.659711][ C1] dev_hard_start_xmit+0x125/0x3e0 [ 58.664943][ C1] __dev_queue_xmit+0xdb1/0x1f20 [ 58.669968][ C1] can_send+0x589/0x720 [ 58.674148][ C1] can_can_gw_rcv+0x7bb/0x820 [ 58.678857][ C1] can_rcv_filter+0xc7/0x4f0 [ 58.683489][ C1] can_receive+0x163/0x1c0 [ 58.687938][ C1] can_rcv+0xed/0x190 [ 58.691956][ C1] __netif_receive_skb+0x120/0x270 [ 58.697078][ C1] process_backlog+0x228/0x420 [ 58.701879][ C1] __napi_poll+0x5f/0x300 [ 58.706337][ C1] net_rx_action+0x452/0x930 [ 58.711052][ C1] handle_softirqs+0xb9/0x280 [ 58.715842][ C1] do_softirq+0x45/0x60 [ 58.720037][ C1] __local_bh_enable_ip+0x70/0x80 [ 58.725084][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 58.730042][ C1] batadv_tt_local_purge+0x1a8/0x1f0 [ 58.735337][ C1] batadv_tt_purge+0x2b/0x610 [ 58.740032][ C1] process_scheduled_works+0x4cd/0x9d0 [ 58.745510][ C1] worker_thread+0x581/0x770 [ 58.750219][ C1] kthread+0x488/0x510 [ 58.754328][ C1] ret_from_fork+0x148/0x280 [ 58.759436][ C1] ret_from_fork_asm+0x1a/0x30 [ 58.764238][ C1] [ 58.766599][ C1] read-write to 0xffff888119988228 of 8 bytes by interrupt on cpu 1: [ 58.774735][ C1] vxcan_xmit+0x28b/0x340 [ 58.779114][ C1] dev_hard_start_xmit+0x125/0x3e0 [ 58.784256][ C1] __dev_queue_xmit+0xdb1/0x1f20 [ 58.789232][ C1] can_send+0x589/0x720 [ 58.793410][ C1] can_can_gw_rcv+0x7bb/0x820 [ 58.798211][ C1] can_rcv_filter+0xc7/0x4f0 [ 58.802853][ C1] can_receive+0x163/0x1c0 [ 58.807323][ C1] can_rcv+0xed/0x190 [ 58.811350][ C1] __netif_receive_skb+0x120/0x270 [ 58.816496][ C1] process_backlog+0x228/0x420 [ 58.821319][ C1] __napi_poll+0x5f/0x300 [ 58.825755][ C1] net_rx_action+0x452/0x930 [ 58.830389][ C1] handle_softirqs+0xb9/0x280 [ 58.835096][ C1] run_ksoftirqd+0x1c/0x30 [ 58.839544][ C1] smpboot_thread_fn+0x32a/0x510 [ 58.844558][ C1] kthread+0x488/0x510 [ 58.848662][ C1] ret_from_fork+0x148/0x280 [ 58.853458][ C1] ret_from_fork_asm+0x1a/0x30 [ 58.858262][ C1] [ 58.860615][ C1] value changed: 0x0000000000052a38 -> 0x0000000000052a39 [ 58.867745][ C1] [ 58.870090][ C1] Reported by Kernel Concurrency Sanitizer on: [ 58.876417][ C1] CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.886243][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 58.896329][ C1] ================================================================== [ 59.003878][ C0] ================================================================== [ 59.012029][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 59.019369][ C0] [ 59.021775][ C0] read-write to 0xffff888146edf020 of 4 bytes by interrupt on cpu 1: [ 59.030088][ C0] can_can_gw_rcv+0x807/0x820 [ 59.034816][ C0] can_rcv_filter+0xc7/0x4f0 [ 59.039550][ C0] can_receive+0x163/0x1c0 [ 59.044051][ C0] can_rcv+0xed/0x190 [ 59.048084][ C0] __netif_receive_skb+0x120/0x270 [ 59.053402][ C0] process_backlog+0x228/0x420 [ 59.058206][ C0] __napi_poll+0x5f/0x300 [ 59.062571][ C0] net_rx_action+0x452/0x930 [ 59.067456][ C0] handle_softirqs+0xb9/0x280 [ 59.072224][ C0] do_softirq+0x45/0x60 [ 59.076424][ C0] __local_bh_enable_ip+0x70/0x80 [ 59.081600][ C0] __alloc_skb+0x477/0x4b0 [ 59.086078][ C0] alloc_skb_with_frags+0x7d/0x470 [ 59.091226][ C0] sock_alloc_send_pskb+0x44d/0x500 [ 59.096466][ C0] unix_dgram_sendmsg+0x397/0x1000 [ 59.101623][ C0] __sock_sendmsg+0x145/0x170 [ 59.106349][ C0] __sys_sendto+0x2b2/0x380 [ 59.110975][ C0] __x64_sys_sendto+0x76/0x90 [ 59.115705][ C0] x64_sys_call+0x29a7/0x3000 [ 59.120531][ C0] do_syscall_64+0xc0/0x2a0 [ 59.125162][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.131088][ C0] [ 59.133434][ C0] read-write to 0xffff888146edf020 of 4 bytes by interrupt on cpu 0: [ 59.141527][ C0] can_can_gw_rcv+0x807/0x820 [ 59.146272][ C0] can_rcv_filter+0xc7/0x4f0 [ 59.150928][ C0] can_receive+0x163/0x1c0 [ 59.155395][ C0] can_rcv+0xed/0x190 [ 59.159428][ C0] __netif_receive_skb+0x120/0x270 [ 59.164665][ C0] process_backlog+0x228/0x420 [ 59.169724][ C0] __napi_poll+0x5f/0x300 [ 59.174082][ C0] net_rx_action+0x452/0x930 [ 59.178715][ C0] handle_softirqs+0xb9/0x280 [ 59.183437][ C0] do_softirq+0x45/0x60 [ 59.187693][ C0] __local_bh_enable_ip+0x70/0x80 [ 59.192854][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 59.197845][ C0] batadv_tt_local_purge+0x1a8/0x1f0 [ 59.203254][ C0] batadv_tt_purge+0x2b/0x610 [ 59.207976][ C0] process_scheduled_works+0x4cd/0x9d0 [ 59.213478][ C0] worker_thread+0x581/0x770 [ 59.218219][ C0] kthread+0x488/0x510 [ 59.222349][ C0] ret_from_fork+0x148/0x280 [ 59.227090][ C0] ret_from_fork_asm+0x1a/0x30 [ 59.231902][ C0] [ 59.234293][ C0] value changed: 0x000533ba -> 0x000533bb [ 59.240152][ C0] [ 59.242498][ C0] Reported by Kernel Concurrency Sanitizer on: [ 59.248672][ C0] CPU: 0 UID: 0 PID: 862 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.258603][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 59.268784][ C0] Workqueue: bat_events batadv_tt_purge [ 59.274560][ C0] ================================================================== [ 59.342628][ C1] ================================================================== [ 59.350788][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 59.358237][ C1] [ 59.360667][ C1] read-write to 0xffff8881009581f8 of 8 bytes by interrupt on cpu 0: [ 59.368849][ C1] can_rcv_filter+0x242/0x4f0 [ 59.373925][ C1] can_receive+0x163/0x1c0 [ 59.378391][ C1] can_rcv+0xed/0x190 [ 59.382507][ C1] __netif_receive_skb+0x120/0x270 [ 59.387664][ C1] process_backlog+0x228/0x420 [ 59.392727][ C1] __napi_poll+0x5f/0x300 [ 59.397084][ C1] net_rx_action+0x452/0x930 [ 59.401711][ C1] handle_softirqs+0xb9/0x280 [ 59.406444][ C1] do_softirq+0x45/0x60 [ 59.410821][ C1] __local_bh_enable_ip+0x70/0x80 [ 59.415983][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 59.420973][ C1] batadv_tt_local_purge+0x1a8/0x1f0 [ 59.426311][ C1] batadv_tt_purge+0x2b/0x610 [ 59.431139][ C1] process_scheduled_works+0x4cd/0x9d0 [ 59.436918][ C1] worker_thread+0x581/0x770 [ 59.441570][ C1] kthread+0x488/0x510 [ 59.445684][ C1] ret_from_fork+0x148/0x280 [ 59.450490][ C1] ret_from_fork_asm+0x1a/0x30 [ 59.455300][ C1] [ 59.457747][ C1] read-write to 0xffff8881009581f8 of 8 bytes by interrupt on cpu 1: [ 59.465949][ C1] can_rcv_filter+0x242/0x4f0 [ 59.470716][ C1] can_receive+0x163/0x1c0 [ 59.475300][ C1] can_rcv+0xed/0x190 [ 59.479334][ C1] __netif_receive_skb+0x120/0x270 [ 59.484481][ C1] process_backlog+0x228/0x420 [ 59.489372][ C1] __napi_poll+0x5f/0x300 [ 59.493738][ C1] net_rx_action+0x452/0x930 [ 59.498364][ C1] handle_softirqs+0xb9/0x280 [ 59.503094][ C1] do_softirq+0x45/0x60 [ 59.507292][ C1] __local_bh_enable_ip+0x70/0x80 [ 59.512368][ C1] __alloc_skb+0x477/0x4b0 [ 59.516828][ C1] nsim_dev_trap_report_work+0x18a/0x630 [ 59.522566][ C1] process_scheduled_works+0x4cd/0x9d0 [ 59.528089][ C1] worker_thread+0x581/0x770 [ 59.533161][ C1] kthread+0x488/0x510 [ 59.537368][ C1] ret_from_fork+0x148/0x280 [ 59.542182][ C1] ret_from_fork_asm+0x1a/0x30 [ 59.547161][ C1] [ 59.549510][ C1] value changed: 0x000000000005671d -> 0x000000000005671e [ 59.556642][ C1] [ 59.559079][ C1] Reported by Kernel Concurrency Sanitizer on: [ 59.565278][ C1] CPU: 1 UID: 0 PID: 268 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.575210][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 59.585401][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 59.592245][ C1] ================================================================== [ 59.716987][ C0] ================================================================== [ 59.725238][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 59.732592][ C0] [ 59.734937][ C0] read-write to 0xffff888100958298 of 8 bytes by interrupt on cpu 1: [ 59.743029][ C0] can_rcv_filter+0xd9/0x4f0 [ 59.747757][ C0] can_receive+0x163/0x1c0 [ 59.752354][ C0] can_rcv+0xed/0x190 [ 59.756676][ C0] __netif_receive_skb+0x120/0x270 [ 59.761821][ C0] process_backlog+0x228/0x420 [ 59.766712][ C0] __napi_poll+0x5f/0x300 [ 59.771092][ C0] net_rx_action+0x452/0x930 [ 59.775715][ C0] handle_softirqs+0xb9/0x280 [ 59.780530][ C0] run_ksoftirqd+0x1c/0x30 [ 59.784985][ C0] smpboot_thread_fn+0x32a/0x510 [ 59.790069][ C0] kthread+0x488/0x510 [ 59.794198][ C0] ret_from_fork+0x148/0x280 [ 59.798886][ C0] ret_from_fork_asm+0x1a/0x30 [ 59.803723][ C0] [ 59.806161][ C0] read-write to 0xffff888100958298 of 8 bytes by interrupt on cpu 0: [ 59.814625][ C0] can_rcv_filter+0xd9/0x4f0 [ 59.819368][ C0] can_receive+0x163/0x1c0 [ 59.823834][ C0] can_rcv+0xed/0x190 [ 59.827855][ C0] __netif_receive_skb+0x120/0x270 [ 59.833172][ C0] process_backlog+0x228/0x420 [ 59.837971][ C0] __napi_poll+0x5f/0x300 [ 59.842354][ C0] net_rx_action+0x452/0x930 [ 59.846971][ C0] handle_softirqs+0xb9/0x280 [ 59.851707][ C0] do_softirq+0x45/0x60 [ 59.855905][ C0] __local_bh_enable_ip+0x70/0x80 [ 59.860966][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 59.865932][ C0] batadv_tt_local_purge+0x1a8/0x1f0 [ 59.871256][ C0] batadv_tt_purge+0x2b/0x610 [ 59.876060][ C0] process_scheduled_works+0x4cd/0x9d0 [ 59.881558][ C0] worker_thread+0x581/0x770 [ 59.886191][ C0] kthread+0x488/0x510 [ 59.890484][ C0] ret_from_fork+0x148/0x280 [ 59.895218][ C0] ret_from_fork_asm+0x1a/0x30 [ 59.900135][ C0] [ 59.902489][ C0] value changed: 0x000000000005b0ee -> 0x000000000005b0ef [ 59.910319][ C0] [ 59.912675][ C0] Reported by Kernel Concurrency Sanitizer on: [ 59.918912][ C0] CPU: 0 UID: 0 PID: 862 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.928751][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 59.938941][ C0] Workqueue: bat_events batadv_tt_purge [ 59.944632][ C0] ================================================================== [ 60.018053][ C1] ================================================================== [ 60.026380][ C1] BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit [ 60.032934][ C1] [ 60.035277][ C1] read-write to 0xffff888119980220 of 8 bytes by interrupt on cpu 0: [ 60.043367][ C1] vxcan_xmit+0x2c8/0x340 [ 60.047738][ C1] dev_hard_start_xmit+0x125/0x3e0 [ 60.052976][ C1] __dev_queue_xmit+0xdb1/0x1f20 [ 60.057977][ C1] can_send+0x589/0x720 [ 60.062528][ C1] can_can_gw_rcv+0x7bb/0x820 [ 60.067256][ C1] can_rcv_filter+0xc7/0x4f0 [ 60.071885][ C1] can_receive+0x163/0x1c0 [ 60.076685][ C1] can_rcv+0xed/0x190 [ 60.080746][ C1] __netif_receive_skb+0x120/0x270 [ 60.085868][ C1] process_backlog+0x228/0x420 [ 60.090695][ C1] __napi_poll+0x5f/0x300 [ 60.095037][ C1] net_rx_action+0x452/0x930 [ 60.099646][ C1] handle_softirqs+0xb9/0x280 [ 60.104696][ C1] do_softirq+0x45/0x60 [ 60.108896][ C1] __local_bh_enable_ip+0x70/0x80 [ 60.114044][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 60.119440][ C1] batadv_tt_local_purge+0x1a8/0x1f0 [ 60.125260][ C1] batadv_tt_purge+0x2b/0x610 [ 60.129979][ C1] process_scheduled_works+0x4cd/0x9d0 [ 60.135480][ C1] worker_thread+0x581/0x770 [ 60.140098][ C1] kthread+0x488/0x510 [ 60.144215][ C1] ret_from_fork+0x148/0x280 [ 60.148911][ C1] ret_from_fork_asm+0x1a/0x30 [ 60.153711][ C1] [ 60.156062][ C1] read-write to 0xffff888119980220 of 8 bytes by interrupt on cpu 1: [ 60.164324][ C1] vxcan_xmit+0x2c8/0x340 [ 60.168692][ C1] dev_hard_start_xmit+0x125/0x3e0 [ 60.173832][ C1] __dev_queue_xmit+0xdb1/0x1f20 [ 60.178811][ C1] can_send+0x589/0x720 [ 60.183004][ C1] can_can_gw_rcv+0x7bb/0x820 [ 60.187706][ C1] can_rcv_filter+0xc7/0x4f0 [ 60.192329][ C1] can_receive+0x163/0x1c0 [ 60.196956][ C1] can_rcv+0xed/0x190 [ 60.201092][ C1] __netif_receive_skb+0x120/0x270 [ 60.206240][ C1] process_backlog+0x228/0x420 [ 60.211032][ C1] __napi_poll+0x5f/0x300 [ 60.215457][ C1] net_rx_action+0x452/0x930 [ 60.220072][ C1] handle_softirqs+0xb9/0x280 [ 60.224770][ C1] do_softirq+0x45/0x60 [ 60.228966][ C1] __local_bh_enable_ip+0x70/0x80 [ 60.234203][ C1] __alloc_skb+0x477/0x4b0 [ 60.238680][ C1] nsim_dev_trap_report_work+0x18a/0x630 [ 60.244423][ C1] process_scheduled_works+0x4cd/0x9d0 [ 60.251471][ C1] worker_thread+0x581/0x770 [ 60.256093][ C1] kthread+0x488/0x510 [ 60.260241][ C1] ret_from_fork+0x148/0x280 [ 60.264867][ C1] ret_from_fork_asm+0x1a/0x30 [ 60.269670][ C1] [ 60.271998][ C1] value changed: 0x00000000000612c4 -> 0x00000000000612c5 [ 60.279205][ C1] [ 60.281698][ C1] Reported by Kernel Concurrency Sanitizer on: [ 60.287867][ C1] CPU: 1 UID: 0 PID: 935 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.298053][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 60.308236][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 60.315059][ C1] ================================================================== [ 61.185905][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88811a005600: connection exists (00 02). last cmd: 10 [ 61.676832][ C0] ================================================================== [ 61.684967][ C0] BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit [ 61.691518][ C0] [ 61.693849][ C0] read-write to 0xffff888119988228 of 8 bytes by interrupt on cpu 1: [ 61.701931][ C0] vxcan_xmit+0x28b/0x340 [ 61.706278][ C0] dev_hard_start_xmit+0x125/0x3e0 [ 61.711448][ C0] __dev_queue_xmit+0xdb1/0x1f20 [ 61.716506][ C0] can_send+0x589/0x720 [ 61.720687][ C0] can_can_gw_rcv+0x7bb/0x820 [ 61.725463][ C0] can_rcv_filter+0xc7/0x4f0 [ 61.730085][ C0] can_receive+0x163/0x1c0 [ 61.734523][ C0] can_rcv+0xed/0x190 [ 61.738548][ C0] __netif_receive_skb+0x120/0x270 [ 61.743680][ C0] process_backlog+0x228/0x420 [ 61.748492][ C0] __napi_poll+0x5f/0x300 [ 61.752935][ C0] net_rx_action+0x452/0x930 [ 61.757549][ C0] handle_softirqs+0xb9/0x280 [ 61.762260][ C0] do_softirq+0x45/0x60 [ 61.766449][ C0] __local_bh_enable_ip+0x70/0x80 [ 61.771520][ C0] update_defense_level+0x59d/0x5d0 [ 61.776833][ C0] defense_work_handler+0x1f/0x80 [ 61.781900][ C0] process_scheduled_works+0x4cd/0x9d0 [ 61.787378][ C0] worker_thread+0x581/0x770 [ 61.791997][ C0] kthread+0x488/0x510 [ 61.797039][ C0] ret_from_fork+0x148/0x280 [ 61.801653][ C0] ret_from_fork_asm+0x1a/0x30 [ 61.806436][ C0] [ 61.808786][ C0] read-write to 0xffff888119988228 of 8 bytes by interrupt on cpu 0: [ 61.816869][ C0] vxcan_xmit+0x28b/0x340 [ 61.821321][ C0] dev_hard_start_xmit+0x125/0x3e0 [ 61.826542][ C0] __dev_queue_xmit+0xdb1/0x1f20 [ 61.831515][ C0] can_send+0x589/0x720 [ 61.835686][ C0] can_can_gw_rcv+0x7bb/0x820 [ 61.840395][ C0] can_rcv_filter+0xc7/0x4f0 [ 61.845092][ C0] can_receive+0x163/0x1c0 [ 61.849553][ C0] can_rcv+0xed/0x190 [ 61.853582][ C0] __netif_receive_skb+0x120/0x270 [ 61.858814][ C0] process_backlog+0x228/0x420 [ 61.863964][ C0] __napi_poll+0x5f/0x300 [ 61.868339][ C0] net_rx_action+0x452/0x930 [ 61.872954][ C0] handle_softirqs+0xb9/0x280 [ 61.877669][ C0] do_softirq+0x45/0x60 [ 61.881855][ C0] __local_bh_enable_ip+0x70/0x80 [ 61.886918][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 61.891887][ C0] batadv_tt_purge+0x2cd/0x610 [ 61.896665][ C0] process_scheduled_works+0x4cd/0x9d0 [ 61.902146][ C0] worker_thread+0x581/0x770 [ 61.906771][ C0] kthread+0x488/0x510 [ 61.911135][ C0] ret_from_fork+0x148/0x280 [ 61.915745][ C0] ret_from_fork_asm+0x1a/0x30 [ 61.920538][ C0] [ 61.922897][ C0] value changed: 0x0000000000086fac -> 0x0000000000086fad [ 61.930014][ C0] [ 61.932333][ C0] Reported by Kernel Concurrency Sanitizer on: [ 61.938492][ C0] CPU: 0 UID: 0 PID: 862 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.948343][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 61.958442][ C0] Workqueue: bat_events batadv_tt_purge [ 61.964028][ C0] ================================================================== [ 62.020751][ C0] ================================================================== [ 62.028982][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 62.036238][ C0] [ 62.038635][ C0] read-write to 0xffff888146edf020 of 4 bytes by interrupt on cpu 1: [ 62.046902][ C0] can_can_gw_rcv+0x807/0x820 [ 62.051625][ C0] can_rcv_filter+0xc7/0x4f0 [ 62.056465][ C0] can_receive+0x163/0x1c0 [ 62.060928][ C0] can_rcv+0xed/0x190 [ 62.064957][ C0] __netif_receive_skb+0x120/0x270 [ 62.070102][ C0] process_backlog+0x228/0x420 [ 62.074900][ C0] __napi_poll+0x5f/0x300 [ 62.079257][ C0] net_rx_action+0x452/0x930 [ 62.083876][ C0] handle_softirqs+0xb9/0x280 [ 62.088628][ C0] run_ksoftirqd+0x1c/0x30 [ 62.093246][ C0] smpboot_thread_fn+0x32a/0x510 [ 62.098230][ C0] kthread+0x488/0x510 [ 62.102347][ C0] ret_from_fork+0x148/0x280 [ 62.107026][ C0] ret_from_fork_asm+0x1a/0x30 [ 62.111831][ C0] [ 62.114171][ C0] read-write to 0xffff888146edf020 of 4 bytes by interrupt on cpu 0: [ 62.122259][ C0] can_can_gw_rcv+0x807/0x820 [ 62.126971][ C0] can_rcv_filter+0xc7/0x4f0 [ 62.131609][ C0] can_receive+0x163/0x1c0 [ 62.136065][ C0] can_rcv+0xed/0x190 [ 62.140097][ C0] __netif_receive_skb+0x120/0x270 [ 62.145315][ C0] process_backlog+0x228/0x420 [ 62.150202][ C0] __napi_poll+0x5f/0x300 [ 62.154743][ C0] net_rx_action+0x452/0x930 [ 62.159420][ C0] handle_softirqs+0xb9/0x280 [ 62.164156][ C0] do_softirq+0x45/0x60 [ 62.168360][ C0] __local_bh_enable_ip+0x70/0x80 [ 62.173447][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 62.178508][ C0] batadv_tt_purge+0x2cd/0x610 [ 62.183319][ C0] process_scheduled_works+0x4cd/0x9d0 [ 62.188896][ C0] worker_thread+0x581/0x770 [ 62.193526][ C0] kthread+0x488/0x510 [ 62.197648][ C0] ret_from_fork+0x148/0x280 [ 62.202272][ C0] ret_from_fork_asm+0x1a/0x30 [ 62.207173][ C0] [ 62.209517][ C0] value changed: 0x00084521 -> 0x00084522 [ 62.215252][ C0] [ 62.217602][ C0] Reported by Kernel Concurrency Sanitizer on: [ 62.223775][ C0] CPU: 0 UID: 0 PID: 862 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.233958][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 62.244043][ C0] Workqueue: bat_events batadv_tt_purge [ 62.249631][ C0] ==================================================================