last executing test programs: 14.872967768s ago: executing program 2 (id=64): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x1e, 0x80004, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r7 = socket(0x1e, 0x4, 0x0) dup3(r7, r3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000) io_uring_register$IORING_REGISTER_FILES2(r12, 0xd, &(0x7f0000000780)={0x8, 0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000200)=""/45, 0x2d}, {&(0x7f0000000440)=""/29, 0x1d}, {&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/248, 0xf8}, {&(0x7f0000000680)=""/123, 0x7b}], &(0x7f0000000480)=[0x4, 0xffffffffffffff7f, 0xfffffffffffffa38, 0x9, 0x2, 0x7, 0xffff]}, 0x20) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x2, 0xa4, 0x7fff0003}]}) close_range(r13, 0xffffffffffffffff, 0x0) 14.670865999s ago: executing program 2 (id=66): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0xff9c}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}, 0x1, 0x0, 0x0, 0xd9}, 0x0) 14.634756491s ago: executing program 2 (id=70): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x7f, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) 14.453367472s ago: executing program 2 (id=75): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0xfffffffffffffffe}, 0x0, 0x40000000, 0xd2, 0x9, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000001c0)=""/79, 0x4f) mlock(&(0x7f0000900000/0x3000)=nil, 0x3000) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x44, 0x7b1, &(0x7f00000004c0)="$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") r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) 14.038907425s ago: executing program 2 (id=77): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)=ANY=[@ANYBLOB="1c0000001a00010000000000000000001c00000000000300"], 0x1c}, 0x1, 0x0, 0x1400}, 0x0) 13.367021774s ago: executing program 2 (id=89): unshare(0x6a040000) socket$inet(0x2, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000020000200000800040001000000", 0x24) 13.366854364s ago: executing program 32 (id=89): unshare(0x6a040000) socket$inet(0x2, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000020000200000800040001000000", 0x24) 5.770289339s ago: executing program 5 (id=208): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x2, 0x1, 0x0, 0x45, 0x28, 0x3, 0xff, 0x2, 0x20}, 0xfffffd91) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000280)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_retopts={{0x10}}], 0x10}, 0x20044854) 5.620369148s ago: executing program 0 (id=212): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) (async, rerun: 64) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x50) (rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) (async, rerun: 64) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @multicast2, @initdev}, &(0x7f00000002c0)=0xc) (rerun: 64) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x20, &(0x7f0000000140)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}, @ldst={0x3, 0x3, 0xa9fe5c29f519eb60, 0x0, 0x2, 0x4, 0x4}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0xb}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc}], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x7f, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000340)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)=[{0x1, 0x5, 0x3}, {0x2, 0x2, 0xd, 0xb}], 0x10, 0x9}, 0x94) 5.551181142s ago: executing program 0 (id=213): unshare(0x2040400) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/key-users\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000000280)=[{&(0x7f0000001680)=""/244, 0xf4}], 0x1, 0x2, 0x6, 0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 5.550434542s ago: executing program 0 (id=214): r0 = creat(&(0x7f0000000040)='./bus\x00', 0xa8) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x105000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000180)={0x6, 0x2, 0x4, 0xffffffff}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)=ANY=[@ANYRESDEC], 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004000) sendto$inet(r2, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) io_uring_setup(0xf44, &(0x7f0000000780)={0x0, 0x94, 0x100, 0x0, 0x123}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b160000000000000000020000084000048018000180080001006f7366000c0002800800014000000004240001800a000100717565756500000014000280060003400002000008000440000000160900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000080)=[r2, r3, r2, r3, 0xffffffffffffffff, r3, r2, r0], 0x8) r5 = socket$netlink(0x10, 0x3, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000300)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000140)=0xffff, 0x92) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x3a, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08004548002c0066000004119078cf1414bbe00000024e224e1e0018907804000000030000000000000000000070"], 0x0) getsockopt(r5, 0x1, 0x9, &(0x7f0000000180)=""/81, &(0x7f0000000000)=0x51) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './bus\x00'}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000069947fcfd9a2e8dcdf2d693fa893c052fba750d401cfad7b0115f666c02fd36a34545be182275c5c3a525b50173d09d44b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fddfffff004000000008000018110000", @ANYRES32=r9, @ANYBLOB="000000fa00000000b7bb0000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000300e4ff9500fdffffff0000"], 0x0, 0x527a, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xf, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") r10 = openat$cgroup_ro(r6, &(0x7f0000000200)='cgroup.kill\x00', 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x500000d, 0x20010, r10, 0x0) 5.438185498s ago: executing program 0 (id=217): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, 0xfffffffffffffffd, 0x4040000) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x400) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='./control\x00', 0x84004, &(0x7f0000000240)=ANY=[], 0x1, 0x361, &(0x7f0000000a00)="$eJzs3U9rY1UfB/Bf8/RpZ8bppAsRFMSDbnQT2voGDDIDYkGpUxldCHdsqiF3kpIbRjKIMztx5+sYXLoTRHDdjXt37rqZ5SwGI/nTtIkdxKE1GfL5QHtOzrlf7rkJN/w2N+fo1vd3GvtFZT/rROmdFJcjovQ4Yj1KcWxp1JYG/ZU47UG8Vb71+6sfffLp+9Xt7es7Kd2o3nx7K6V07bWfv/r6h9d/6bzw8Y/XflqNw/XPjh5t/XH40uHLR3/e/LJepHqRmq1OytLtVquT3c5raa9eNCopfZjXsqKW6s2i1p6Y389bBwfdlDX31q4ctGtFkbJmNzVq3dRppU67m7IvsnozVSqVtHYlFsuzXO/uw52drHoBi+E/9N30wOXJl+12Nevfw6t/S+4+vNCFAQBzabr+L8WlwfiM6v/jEuXf1/9Li17/Pwv1/yLo1/8ro/t3kvofAAAAAAAAAAAAAACeB497vXKv1ysft9N/s14fF8vnv9hOPbh3KSL/9u7u3d1hO5yv7kc98qjFRpTjSURvLAZPCt54b/v6RhpYj7U794f5fvu/yfxmlGN9Mt//389vppR691OazP9/8IsW4/xWlOPFs/Nbw/NP5VfizTdO5StRjt8+j1bksRf97En+m82U3v1geyq/OjgOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMVQSWOD/ftXRuPH+/dXKpPzJ/vjD48b76+/EeV4cvb+/Btn7s+/HK8sz+66AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC0onuvkeV5rX2OnUe9oX84+EE8ZWoU7537wua2E3Fhp/j1ajztfZ6PzvJ8LGMOOldH9+R8rGfGX0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAyebfs96JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMxS0b3XyPK81o5YGgy0xyPn1pn1NQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxP/goAAP//Flsg0A==") mkdir(&(0x7f0000000000)='./control\x00', 0x81) rmdir(&(0x7f0000000040)='./control\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x1}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) recvmmsg(0xffffffffffffffff, &(0x7f000000cec0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000004200)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000006200)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x5, &(0x7f0000000600)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xca}}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@inlinecrypt}]}, 0x1, 0x5a4, &(0x7f0000001180)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x1) fsync(r6) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) connect$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x1}, 0xe) 5.346757274s ago: executing program 4 (id=220): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x11000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x100032, 0x43a1bd75, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x2, 0x12, r1, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4000000000, 0x0, 0x0, 0x100000c03, 0x17, 0x0, 0x28, 0xe}) ftruncate(r1, 0xc17a) creat(&(0x7f0000000000)='./file0\x00', 0x85) ftruncate(r1, 0x84) 5.284364578s ago: executing program 4 (id=222): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x500, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x60030000, {0x4000000000000, 0xff000000}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg1\x00', {0x20, 0x112, 0x40, 0xd89, 0x398, 0x10001, 0x7, 0x8, 0x40}, {0x92}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x61}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 5.226049611s ago: executing program 4 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 4.209024009s ago: executing program 5 (id=226): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x2e8, 0xffffffff, 0x1b8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0xff000000, 0xff000000, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@udp={{0x30}, {[0x4e24, 0x4e21], [0x4e24, 0x4e23], 0x6}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x1, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x60) 4.207239059s ago: executing program 0 (id=227): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000000)={[{@i_version}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@errors_remount}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x470, &(0x7f0000000bc0)="$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") 3.178939268s ago: executing program 1 (id=228): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000040)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@errors_remount}, {@jqfmt_vfsv0}]}, 0x2, 0x46b, &(0x7f0000000580)="$eJzs3M1vFOUfAPDvzLbw+/HWivgColaJsfGlpQWVgxeNJh4wmugB9VTbQgiFGloTIUSqMXgxMSR6Vo8m/gXevBj1ZGLiSe+GhCgX0FPNzM5Ad9ltt3TZrd3PJxl4nn2e7TzfPvPMPDPPbgPoWUPZP0nEtoj4LSIGqtnaCkPV/65dOTf595Vzk0ksLr72Z5LXu3rl3GRZtXzf1iIznEakHyXFTmrNnTl7YmJmZvp0kR+dP/nO6NyZs08ePzlxbPrY9KnxQ4cOHhh75unxp9oSZxbX1T3vz+7d/dIbF1+ePHLx7R+/ydq7rShfGsct2XTzS0NZ4H8t5urLHon/r2l36832Jemkr4sNYVUqEZF1V38+/geiEjc6byBe/LCrjQNuq+zatLl58cIisIEl0e0WAN1RXuiz+99y69DUY124/Fz1BiiL+1qxVUv6Ii3q9Nfd37bTUEQcWfjni2yLdjyHAABYwSeTnx+OJxrN/9K4e0m9HcUaymBE3BEROyPizojYFRF3ReR174mIe1e5//qloZvnP+mlWwqsRdn879libat2/lfO/mKwUuS25/H3J0ePz0zvL34nw9G/OcuPLbOP71745dNmZUvnf9mW7b+cCxbtuNRX94BuamJ+Ip+UtsHlDyL29DWKP7m+EpBExO6I2LO6H72jTBx/7Ou9zSqtHP8y2rDOtPhVxKPV/l+IuvhLyfLrk6P/i5np/aPlUXGzn36+8Gqz/a8p/jbI+n9L7fFflHx5pkgMvrV0vXYuVr1yeeH3j5ve09zq8b8peT0/H5XLru9NzM+fHovYlBzO8zWvj994b5kv62fxD+9rPP53Fu/J+v++iMgO4vsj4oGIeLBo+0MR8XBE7Fsm/h+eb162Hvp/quH57/rxP5jU9P/qE5UT33/bbP+t9f/BPDVcvJKf/1bQagPX8rsDAACA/4o0/wx8ko5cT6fpyEj1M/y7Yks6Mzs3//jR2XdPTVU/Kz8Y/Wn5pGtgyfPQsWSh+InV/HjxrLgsP1A8N/6sEnl+ZHJ2ZqrLsUOv29pk/Gf+qHS7dcBt12gdbbzBF9qAjad+/Ke12fOvdLIxQEf5vjb0rhXGf9qpdgCd5/oPvavR+D9fl7cWABuT6z/0LuMfepfxD72rbvxX4tdutQTooLV8r1+ilxORrotmtJRo/e9B3O7Em+ujGS0kun1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI9/AwAA//9sbvBf") mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs\x00', 0x1ff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/134, 0x86}, {&(0x7f0000000480)=""/182, 0xb6}], 0x2, 0x1, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="300000001000010029bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a8904000d880902330402bb7e2f778292294a9000dd0800c0dc4468b8a94e0eabb1ae12e4c4ee79caaffc0c828d76236c1a73d97a03457ebdf8f41d6dfccb6a23ebbf4e9ab25eaf728b6d4f06bc04f5c55d7b9cbae3d4481a191b3f43cc422958f4c1d8ba2e92db3f3ec9"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x87, 0x6, '\x00', [@jumbo, @enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x40}, @calipso={0x7, 0x28, {0x1, 0x8, 0x6, 0x3, [0xffffffff00000000, 0xffffffffffffffff, 0xdd7, 0xa000000]}}]}, 0x40) 3.178351218s ago: executing program 5 (id=229): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000020a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="0600150003"], 0x38}}, 0x10) 1.618205687s ago: executing program 5 (id=233): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7ff, 0x8000000000000001}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0xffffffff, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x20) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x8, 0x785, 0x1, 0x7, 0x10}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @redirect={0x8, 0x0, 0x0, @loopback, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r4, 0x25, 0x0, @void}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x24100000, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 1.598956518s ago: executing program 0 (id=242): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYBLOB="01032757c38d085641a726"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 1.57466512s ago: executing program 1 (id=234): r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000240)={0x0, 0x3416, 0x13100, 0x2, 0x4, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0xe091}}) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000040), 0x4) umount2(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f00000002c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) 1.162486093s ago: executing program 3 (id=241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073790800000000003c000000090a010400000000000000000700000008000a400000000009000200fb4142ca000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000090900020061517a31000000000900010073797a3000000000600003805c000080080003400000"], 0x110}}, 0x0) 1.113058236s ago: executing program 3 (id=243): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x458, 0x528, 0xfeffffff, 0x458, 0x528, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'nr0\x00', {}, {}, 0x6}, 0x500, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {}, 0xe, 0x1}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x1, 0x6, 0x1], 0x0, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) 954.912665ms ago: executing program 3 (id=244): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_read_part_table(0x5e1, &(0x7f0000000000)="$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") ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wg0\x00'}) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x80001) r1 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@map=r0, 0xc, 0x0, 0x32d0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0], &(0x7f0000000780)}, 0x40) 942.526226ms ago: executing program 1 (id=245): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000240)={[0x6]}, 0x0, &(0x7f0000000380)={0x0, 0x3938700}, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000280), 0xc) r2 = socket(0x11, 0x3, 0xff) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x6, 0x81, 0xffffffff, 0x2241d13d}) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, 0x0) r3 = socket(0x2c, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8}, @RTA_OIF={0x8}]}, 0x2c}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000180), &(0x7f00000002c0)=@tcp6=r3, 0x2}, 0x20) 845.315121ms ago: executing program 1 (id=246): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x58ee, 0x800, 0x200, 0x13c}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x9, r3}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 800.174604ms ago: executing program 1 (id=247): perf_event_open(0x0, 0x0, 0xffffffffdfffffff, 0xffffffffffffffff, 0xb) io_setup(0x81, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x2c0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r2, @ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x20040840}, 0x4048840) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) syz_emit_ethernet(0x19, &(0x7f0000000040)={@remote, @random="64ff29bbd9d5", @val={@val={0x88a8, 0x3, 0x1}, {0x8100, 0x3, 0x0, 0x1}}, {@llc_tr={0x11, {@llc={0x9a, 0xbc, "d7"}}}}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r1) 746.016667ms ago: executing program 1 (id=248): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x83, 0xffffffff}) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7ff, 0x6}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = signalfd(0xffffffffffffffff, &(0x7f0000003b40)={[0xb]}, 0x8) inotify_add_watch(r1, 0x0, 0x181) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000a00)={[{@discard}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capget(&(0x7f00000000c0)={0x19980330, r3}, &(0x7f0000000100)={0x1000, 0xa, 0x9, 0xd, 0x6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$binfmt_format(r1, &(0x7f00000003c0)='0\x00', 0xfffffe7b) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x40001e0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071002c000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = epoll_create1(0x0) epoll_pwait2(r8, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) msgsnd(0x0, &(0x7f0000002400)={0x1}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000180)={0x60000008}) 743.758718ms ago: executing program 4 (id=249): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd22, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xc, [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe], 0x1, [0x1, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5c1, 0x0, 0xc00, 0x2, 0x3df], [0x7, 0x4, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffe, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 538.906819ms ago: executing program 3 (id=250): perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) 538.330019ms ago: executing program 4 (id=251): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000002c0)='./file0\x00', 0x4002, &(0x7f0000000ac0)={[{@rodir}, {@rodir}, {@fat=@discard}, {@utf8no}, {@numtail}, {@uni_xlateno}, {@utf8no}, {@shortname_win95}, {@utf8}, {@shortname_win95}, {@shortname_mixed}, {@shortname_mixed}, {@shortname_lower}, {@utf8}, {@fat=@flush}, {@uni_xlate}, {@shortname_win95}, {@fat=@tz_utc}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@usefree}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}]}, 0x1, 0x37d, &(0x7f0000000c00)="$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") mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0xa0002f5}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = io_uring_setup(0x3c90, &(0x7f0000000500)={0x0, 0x3, 0x0, 0x0, 0x2}) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) readv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/40, 0x28}], 0x1) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x237a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x7943b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x9, 0xd}, 0x110000, 0x32, 0x43a1bd76, 0x0, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$LINK_DETACH(0x22, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="700000001400010025bd7000fbdbdf25e00000010000000000000000000000000000000000000000000000000000000100000080000700000000e00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0x70}}, 0x24004000) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) 512.44841ms ago: executing program 3 (id=252): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x4, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) modify_ldt$write(0x1, &(0x7f0000000000)={0x1, 0x20000000, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x0, 0x41}, 0x80, 0x0}, 0x20048015) openat$ptmx(0xffffffffffffff9c, 0x0, 0x121200, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) flistxattr(r1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000380)='./file1\x00', 0x2000494, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2bc, &(0x7f00000000c0)="$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") syz_emit_ethernet(0x46, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$rtc(0xffffffffffffff9c, 0x0, 0x60241, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) 212.090458ms ago: executing program 5 (id=253): r0 = getpid() socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x11, 0x3, 0x10) r2 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a00", @ANYRES32=r2], 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="120000000a0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f0000000740)}, 0x22) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r5, &(0x7f0000000180), 0x0}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x41, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x80c4) r7 = syz_pidfd_open(r0, 0x0) process_madvise(r7, &(0x7f00000012c0)=[{&(0x7f0000000000)="877d503a0664d898a5b0409f05aa39d642bf2b78f374fc5e4a8afc0b86f26c10f4b17496261e29e6492c556465b1fc3bf30097e624d13169b59e55b7fe8478976f39164b15d6938c7c1f83cf43dc28ed59bb27449ba6b9ed25e04d11c17e45cd83e6d4f47fefaf0d20f01bbcad1f7ba736b2f9d44a401c3eca55bcefd84d883caefea2ac441f0408eb5548771ff6739a3665cb222c73e43c38c6f25b9ba1a911ed36dab4f69ddf31a27b93e362b0426ffb89fe1e27e818cbf66221b5f67f159b7d1643088df9f66dae65c4", 0xcb}, {&(0x7f0000000100)="5a8643fa00a5801208", 0x9}, {&(0x7f0000000140)="89c1ed53b5bb40fe7fd079dc03a9d29ad50d61688448f0671d0cb2e878067b868f8fe973b7b45bf5029c379c13e7a66087d9ea3517d48b14741a92caa07c9d88bc40395a4afddc5d89bb938e57c344f7aaf1e8c889e051ff8226473a904b9b8b6e7164869c1781a842", 0x69}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="8c85deae2d558f", 0x7}, {&(0x7f0000001200)="a71c6801fc1a1c51718b1714543d222491a3623b78da45d1d5c1fce50ce073cc67139187afc1d8981418e1fd039a343b5b773a907544451dd6b14a2f9ac2f1147b8da1c88c84ce230b14b86365a3ef2da01a6d64dcdb0a9c1eb2056b6e8b17320de827beadf260fcd142a0dc9690624cb0f8482c3001ec156e2c0ccb979e8bb4d42b52e055a0db80b316273b062f513987d75afd1bf6c70bb3d943e718d5699bed729e869f85636c48", 0xa9}], 0x6, 0x2, 0x0) 2.759559ms ago: executing program 5 (id=254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xbf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x1}, 0x2086, 0x8, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x80, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x50f, &(0x7f0000000680)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOUCQqgSokeQtiHxRlHsOIqd0oQ9pGeuSFTiBEf+AG5IPSFx5ILgxqUckPgRgRokDoNmPMk6WbuJNokdxZ+PNJr35s36+32bnffWL4lfACPrdkTsR8RERLwbEbP59UJ+xFudI73vk4NHK4cHj1YKkSTv/LOQtafXouvPpG7lr1mOiO9/O+JHhSfjtnb3Npbr9dp2Xp9vN7bmW7t799Yby2u1tdpmtbq0uLTwxv3Xq5fW15caE3npix//Yf9rP0nTmsmvdPfjMnW6XjqOkxqPiO9eRbAhGMv7MzHsRHgqxYh4PiJezp7/2RjLvpoAwE2WJLORzHbXAYCbrpitgRWKlXwtYCaKxUqls4b3QkwX681W++7D5s7mametbC5KxYfr9dpCvlY4F6VCWl/Myo/r1VP1+xHxXET8bHIqq1dWmvXVYf7HBwBG2K1T8/9/JjvzPwBww5WHnQAAMHDmfwAYPeZ/ABg95n8AGD2d+X9q2GkAAAPk/T8AjB7zPwCMlO+9/XZ6JIf551+vvre7s9F8795qrbVRaeysVFaa21uVtWZzLfvMnsZZr1dvNrcWX4ud9+e+vtVqz7d29x40mjub7QfZ53o/qJWyu/YH0DMAoJ/nXvroz4V0Rn5zKjuiay+H0lAzA65acdgJAEMzNuwEgKGx2xeMrgu8x7c8ADdEjy16j/3+W0lS7vULQkmSJFebFnCF7nzO+j+Mqq71fz8FDCPG+j+MLuv/MLqSpHDePf/jvDcCANebNX6gz/f/n8/Pv86/OfDD1dN3fHiVWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD1drT/byXfC3wmisVKJeKZiJiLUuHher22EBHPRsSfJkuTaX1xyDkDABdV/Fsh3//rzuyrMyeaXrx1XJyIiB//4p2fv7/cbm//MWKi8K/Jo+vtD/Pr1cFnDwCc7Wiezs5db+Q/OXi0cnQMMp+/fzMiyp34hwcTcXgcfzzGs3M5ShEx/e9CXu8odK1dXMT+BxHx2V79L8RMtgbS2fn0dPw09jMDjV88Eb+YtXXO6d/FZy4hFxg1H6Xjz1u9nr9i3M7OvZ//cjZCXVw+/qUvtXKYjYGP4x+Nf2N9xr/b543x2u++0ylNPdn2QcTnxyOOYh92jT9H8Qt94r96+sX6DIh/+cKLL/fLLfllxJ3oHb871ny7sTXf2t27t95YXqut1Tar1aXFpYU37r9enc/WqOf7zwb/ePPus/3a0v5P94lfPqP/X+4b8aRf/e/dH3zpU+J/9ZVe8YvxwqfET+fEr5wz/vL0b8r92tL4q336f9bX/+4543/8170ntg0HAIantbu3sVyv17b7Fn47ffY9CgoDKaT/ZK9BGj0L3xhUrIno3fTTVzrP9KmmJHmqWCfHicfvHC9j1Q24Do4f+oj477CTAQAAAAAAAAAAAAAAehrEbywNu48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcXP8PAAD//9140jY=") r2 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000040)={0x4, 0xfffffffffffffd80, 0xfa00, {0xffffffffffffffff, 0xd}}, 0xfffffe01) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0xff, '\x00', {0x0, 0x6, '\x00', 0x4, 0x3a, 0x0, @private2, @mcast1}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x40) 541.26µs ago: executing program 3 (id=255): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x540, 0x0, 0xd0, 0x1b8, 0x1b8, 0x0, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0x3}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [0x0, 0xff], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpgrp(0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, r1, 0xfff8000000000001, 0xffffffffffffffff, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = gettid() getpgid(r1) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x19, &(0x7f0000000040)={@remote, @random="64ff29bbd9d5", @val={@val={0x88a8, 0x3, 0x1}, {0x8100, 0x3, 0x0, 0x1}}, {@llc_tr={0x11, {@llc={0x9a, 0xbc, "d7"}}}}}, 0x0) 0s ago: executing program 4 (id=256): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000080000000200000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x10000, 0x0, 0x1, 0x0, 0x2, 0x2, 0xe, 0x20000}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$can_j1939(0x1d, 0x2, 0x7) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x10, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000080)=0x8000000a, 0x4) kernel console output (not intermixed with test programs): [ 20.636491][ T29] audit: type=1400 audit(1770390607.636:62): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.658545][ T29] audit: type=1400 audit(1770390607.636:63): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.682612][ T29] audit: type=1400 audit(1770390607.636:64): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.706062][ T29] audit: type=1400 audit(1770390607.636:65): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.730687][ T29] audit: type=1400 audit(1770390607.646:66): avc: denied { read open } for pid=3193 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.116' (ED25519) to the list of known hosts. [ 25.933838][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 25.933856][ T29] audit: type=1400 audit(1770390612.936:70): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.964624][ T29] audit: type=1400 audit(1770390612.966:71): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.965387][ T3295] cgroup: Unknown subsys name 'net' [ 25.993958][ T29] audit: type=1400 audit(1770390612.996:72): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.087915][ T3295] cgroup: Unknown subsys name 'cpuset' [ 26.094683][ T3295] cgroup: Unknown subsys name 'rlimit' [ 26.284647][ T29] audit: type=1400 audit(1770390613.286:73): avc: denied { setattr } for pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.308581][ T29] audit: type=1400 audit(1770390613.286:74): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.329806][ T29] audit: type=1400 audit(1770390613.286:75): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.340248][ T3300] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.350294][ T29] audit: type=1400 audit(1770390613.286:76): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.350318][ T29] audit: type=1400 audit(1770390613.296:77): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.406305][ T29] audit: type=1400 audit(1770390613.296:78): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.408141][ T3295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.430203][ T29] audit: type=1400 audit(1770390613.316:79): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 28.208312][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 28.247257][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 28.270762][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 28.321466][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.329010][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.336470][ T3317] bridge_slave_0: entered allmulticast mode [ 28.343168][ T3317] bridge_slave_0: entered promiscuous mode [ 28.359070][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 28.369057][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.376686][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.384817][ T3317] bridge_slave_1: entered allmulticast mode [ 28.392196][ T3317] bridge_slave_1: entered promiscuous mode [ 28.412444][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 28.458720][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.466179][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.474044][ T3310] bridge_slave_0: entered allmulticast mode [ 28.481855][ T3310] bridge_slave_0: entered promiscuous mode [ 28.489756][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.499370][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.506651][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.514104][ T3310] bridge_slave_1: entered allmulticast mode [ 28.520764][ T3310] bridge_slave_1: entered promiscuous mode [ 28.538580][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.546032][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.553838][ T3314] bridge_slave_0: entered allmulticast mode [ 28.561153][ T3314] bridge_slave_0: entered promiscuous mode [ 28.568700][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.578136][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.585481][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.592688][ T3314] bridge_slave_1: entered allmulticast mode [ 28.599616][ T3314] bridge_slave_1: entered promiscuous mode [ 28.634384][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.650124][ T3317] team0: Port device team_slave_0 added [ 28.661757][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.678882][ T3317] team0: Port device team_slave_1 added [ 28.691210][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.723180][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.731035][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.738474][ T3315] bridge_slave_0: entered allmulticast mode [ 28.745758][ T3315] bridge_slave_0: entered promiscuous mode [ 28.753278][ T3310] team0: Port device team_slave_0 added [ 28.759115][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.766784][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.774051][ T3315] bridge_slave_1: entered allmulticast mode [ 28.781071][ T3315] bridge_slave_1: entered promiscuous mode [ 28.788509][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.803077][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.811320][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.818865][ T3309] bridge_slave_0: entered allmulticast mode [ 28.825415][ T3309] bridge_slave_0: entered promiscuous mode [ 28.837700][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.844760][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.872423][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.884874][ T3310] team0: Port device team_slave_1 added [ 28.904310][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.911514][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.919245][ T3309] bridge_slave_1: entered allmulticast mode [ 28.926444][ T3309] bridge_slave_1: entered promiscuous mode [ 28.933078][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.940400][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.967800][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.987826][ T3314] team0: Port device team_slave_0 added [ 29.001939][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.011866][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.018993][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.046056][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.057709][ T3314] team0: Port device team_slave_1 added [ 29.063607][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.070713][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.097008][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.113466][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.131707][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.143390][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.179605][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.186711][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.214518][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.228788][ T3315] team0: Port device team_slave_0 added [ 29.250928][ T3317] hsr_slave_0: entered promiscuous mode [ 29.257804][ T3317] hsr_slave_1: entered promiscuous mode [ 29.269633][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.278171][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.306514][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.320860][ T3315] team0: Port device team_slave_1 added [ 29.328878][ T3310] hsr_slave_0: entered promiscuous mode [ 29.335099][ T3310] hsr_slave_1: entered promiscuous mode [ 29.341120][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 29.347584][ T3310] Cannot create hsr debugfs directory [ 29.354617][ T3309] team0: Port device team_slave_0 added [ 29.369096][ T3309] team0: Port device team_slave_1 added [ 29.406160][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.413338][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.441327][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.470218][ T3314] hsr_slave_0: entered promiscuous mode [ 29.476677][ T3314] hsr_slave_1: entered promiscuous mode [ 29.482670][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 29.488940][ T3314] Cannot create hsr debugfs directory [ 29.494875][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.501985][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.529177][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.556198][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.564323][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.591584][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.613083][ T3315] hsr_slave_0: entered promiscuous mode [ 29.619971][ T3315] hsr_slave_1: entered promiscuous mode [ 29.626024][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 29.632260][ T3315] Cannot create hsr debugfs directory [ 29.638452][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.646635][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.676338][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.784556][ T3309] hsr_slave_0: entered promiscuous mode [ 29.791437][ T3309] hsr_slave_1: entered promiscuous mode [ 29.797736][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 29.803711][ T3309] Cannot create hsr debugfs directory [ 29.919685][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.937238][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.946225][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.958323][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.969224][ T3310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.980048][ T3310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.991508][ T3310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.003429][ T3310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.035480][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.053029][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.066511][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.079903][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.107486][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.124024][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.133182][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.146693][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.172782][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.183206][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.201703][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.210927][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.221435][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.245637][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.271519][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.288251][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.295692][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.307479][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.323947][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.331388][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.342995][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.350530][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.362090][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.380477][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.388670][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.418099][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.435934][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.454332][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.461532][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.479646][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.490319][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.503558][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.510946][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.524952][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.537545][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.552236][ T1650] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.560326][ T1650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.590581][ T1650] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.597931][ T1650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.629983][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.649419][ T1650] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.657325][ T1650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.685737][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.693724][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.706815][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.736021][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.785772][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.802249][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.949268][ T3315] veth0_vlan: entered promiscuous mode [ 30.958996][ T3315] veth1_vlan: entered promiscuous mode [ 30.969194][ T3310] veth0_vlan: entered promiscuous mode [ 30.998765][ T3310] veth1_vlan: entered promiscuous mode [ 31.007726][ T3317] veth0_vlan: entered promiscuous mode [ 31.018445][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.039714][ T3315] veth0_macvtap: entered promiscuous mode [ 31.048124][ T3317] veth1_vlan: entered promiscuous mode [ 31.072226][ T3315] veth1_macvtap: entered promiscuous mode [ 31.098057][ T3317] veth0_macvtap: entered promiscuous mode [ 31.114452][ T3310] veth0_macvtap: entered promiscuous mode [ 31.127394][ T3317] veth1_macvtap: entered promiscuous mode [ 31.134909][ T3314] veth0_vlan: entered promiscuous mode [ 31.145726][ T3310] veth1_macvtap: entered promiscuous mode [ 31.156101][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.170223][ T3314] veth1_vlan: entered promiscuous mode [ 31.183705][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.202858][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.216305][ T3309] veth0_vlan: entered promiscuous mode [ 31.224555][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.235634][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.244371][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.257138][ T314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.282713][ T314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.291990][ T314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.308262][ T314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.317656][ T314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.334283][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 31.334300][ T29] audit: type=1400 audit(1770390618.336:90): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.67gdwF/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.336629][ T3309] veth1_vlan: entered promiscuous mode [ 31.340868][ T29] audit: type=1400 audit(1770390618.336:91): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.368874][ T314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.372999][ T29] audit: type=1400 audit(1770390618.336:92): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.67gdwF/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.429983][ T29] audit: type=1400 audit(1770390618.336:93): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.452332][ T29] audit: type=1400 audit(1770390618.336:94): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.67gdwF/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 31.479546][ T29] audit: type=1400 audit(1770390618.336:95): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.67gdwF/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 31.507662][ T29] audit: type=1400 audit(1770390618.336:96): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.531952][ T29] audit: type=1400 audit(1770390618.536:97): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.555294][ T29] audit: type=1400 audit(1770390618.536:98): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="gadgetfs" ino=4339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 31.587070][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.597912][ T314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.613100][ T3314] veth0_macvtap: entered promiscuous mode [ 31.623306][ T29] audit: type=1400 audit(1770390618.626:99): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.660324][ T3309] veth0_macvtap: entered promiscuous mode [ 31.669460][ T3481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 31.670031][ T314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.711714][ T3314] veth1_macvtap: entered promiscuous mode [ 31.745015][ T314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.754739][ T3309] veth1_macvtap: entered promiscuous mode [ 31.768521][ T314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.800516][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.810867][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.820484][ T314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.840766][ T3488] smc: net device bond0 applied user defined pnetid S [ 31.846952][ T314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.868926][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.899022][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.929205][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.943562][ T3492] loop1: detected capacity change from 0 to 512 [ 31.958478][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.984076][ T3492] EXT4-fs (loop1): Invalid log cluster size: 24320 [ 32.007685][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.030608][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.081217][ T3492] syz.1.7 (3492): /proc/3490/oom_adj is deprecated, please use /proc/3490/oom_score_adj instead. [ 32.093159][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.124163][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.156838][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.156951][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.184794][ T3507] loop2: detected capacity change from 0 to 512 [ 32.191586][ T3507] ======================================================= [ 32.191586][ T3507] WARNING: The mand mount option has been deprecated and [ 32.191586][ T3507] and is ignored by this kernel. Remove the mand [ 32.191586][ T3507] option from the mount to silence this warning. [ 32.191586][ T3507] ======================================================= [ 32.191735][ T3507] EXT4-fs: Ignoring removed mblk_io_submit option [ 32.192317][ T3507] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 32.202168][ T3511] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12'. [ 32.211443][ T3511] program syz.1.12 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 32.227593][ T3507] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 32.227615][ T3507] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a000e018, mo2=0002] [ 32.227647][ T3507] System zones: 0-1, 15-15, 18-18, 34-34 [ 32.227842][ T3507] EXT4-fs (loop2): orphan cleanup on readonly fs [ 32.228020][ T3507] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #4: comm syz.2.11: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 32.228406][ T3507] EXT4-fs error (device loop2): ext4_quota_enable:7180: comm syz.2.11: Bad quota inode: 4, type: 1 [ 32.233260][ T3507] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 32.233347][ T3507] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 32.240518][ T3507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.292331][ T3518] syzkaller0: entered promiscuous mode [ 32.292351][ T3518] syzkaller0: entered allmulticast mode [ 32.294470][ T3507] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.11: bad symlink. [ 32.295113][ T3516] batadv_slave_0: entered promiscuous mode [ 32.345575][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.386061][ T3515] batadv_slave_0: left promiscuous mode [ 32.409000][ T3520] bridge0: entered promiscuous mode [ 32.409365][ T3520] bridge0: left promiscuous mode [ 32.462472][ T3524] Cannot find add_set index 0 as target [ 32.573969][ T3537] syzkaller0: entered promiscuous mode [ 32.574054][ T3537] syzkaller0: entered allmulticast mode [ 32.622892][ T3539] FAULT_INJECTION: forcing a failure. [ 32.622892][ T3539] name failslab, interval 1, probability 0, space 0, times 1 [ 32.622928][ T3539] CPU: 0 UID: 0 PID: 3539 Comm: syz.2.23 Not tainted syzkaller #0 PREEMPT(voluntary) [ 32.622961][ T3539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 32.622976][ T3539] Call Trace: [ 32.622984][ T3539] [ 32.622993][ T3539] __dump_stack+0x1d/0x30 [ 32.623096][ T3539] dump_stack_lvl+0x95/0xd0 [ 32.623122][ T3539] dump_stack+0x15/0x1b [ 32.623216][ T3539] should_fail_ex+0x263/0x280 [ 32.623251][ T3539] should_failslab+0x8c/0xb0 [ 32.623331][ T3539] kmem_cache_alloc_noprof+0x68/0x490 [ 32.623359][ T3539] ? __break_lease+0xff/0xe40 [ 32.623384][ T3539] __break_lease+0xff/0xe40 [ 32.623408][ T3539] ? lockref_put_return+0xf7/0x130 [ 32.623434][ T3539] ? iput+0x226/0x650 [ 32.623476][ T3539] do_unlinkat+0x2a5/0x4b0 [ 32.623502][ T3539] __x64_sys_unlink+0x2e/0x40 [ 32.623587][ T3539] x64_sys_call+0x2f48/0x3000 [ 32.623615][ T3539] do_syscall_64+0xc0/0x2a0 [ 32.623649][ T3539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.623674][ T3539] RIP: 0033:0x7f3cdbaaaeb9 [ 32.623768][ T3539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.623788][ T3539] RSP: 002b:00007f3cda4ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 32.623811][ T3539] RAX: ffffffffffffffda RBX: 00007f3cdbd25fa0 RCX: 00007f3cdbaaaeb9 [ 32.623827][ T3539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 32.623916][ T3539] RBP: 00007f3cda4ff090 R08: 0000000000000000 R09: 0000000000000000 [ 32.623955][ T3539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.623969][ T3539] R13: 00007f3cdbd26038 R14: 00007f3cdbd25fa0 R15: 00007ffcfe68e288 [ 32.623989][ T3539] [ 32.864419][ T3542] loop3: detected capacity change from 0 to 512 [ 32.864853][ T3542] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.884277][ T3542] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.3.24: corrupted xattr block 95: invalid header [ 32.884455][ T3542] EXT4-fs (loop3): Remounting filesystem read-only [ 32.884473][ T3542] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 32.884499][ T3542] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 32.884570][ T3542] EXT4-fs (loop3): 1 orphan inode deleted [ 32.884902][ T3542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.029717][ T3552] netlink: 40 bytes leftover after parsing attributes in process `syz.2.26'. [ 33.030116][ T3552] capability: warning: `syz.2.26' uses deprecated v2 capabilities in a way that may be insecure [ 33.254822][ T3554] loop4: detected capacity change from 0 to 512 [ 33.264264][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.304903][ T3554] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.319157][ T3554] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 33.377976][ T3554] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.27: bg 0: block 4: invalid block bitmap [ 33.428387][ T3554] EXT4-fs (loop4): 1 truncate cleaned up [ 33.434716][ T3554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.437780][ T3565] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.473401][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.630531][ T3569] loop0: detected capacity change from 0 to 1024 [ 33.641043][ T3576] netlink: 32 bytes leftover after parsing attributes in process `syz.3.36'. [ 33.707781][ T3569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 33.727184][ T3569] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.745890][ T3581] Dead loop on virtual device ip6_vti0, fix it urgently! [ 33.944212][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 34.015277][ T3368] IPVS: starting estimator thread 0... [ 34.072940][ T3575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30010 sclass=netlink_route_socket pid=3575 comm=syz.1.35 [ 34.116863][ T3591] IPVS: using max 2448 ests per chain, 122400 per kthread [ 34.242230][ T3604] loop2: detected capacity change from 0 to 1024 [ 34.262443][ T3604] EXT4-fs: Ignoring removed oldalloc option [ 34.268709][ T3604] EXT4-fs: dax option not supported [ 34.410992][ T3610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.44'. [ 34.458521][ T3346] IPVS: stop unused estimator thread 0... [ 34.603459][ T3581] syz.3.37 (3581) used greatest stack depth: 10240 bytes left [ 34.694451][ T3620] netlink: 156 bytes leftover after parsing attributes in process `syz.3.48'. [ 34.734350][ C0] hrtimer: interrupt took 35315 ns [ 34.837884][ T3628] FAULT_INJECTION: forcing a failure. [ 34.837884][ T3628] name failslab, interval 1, probability 0, space 0, times 0 [ 34.850894][ T3628] CPU: 0 UID: 0 PID: 3628 Comm: syz.3.50 Not tainted syzkaller #0 PREEMPT(voluntary) [ 34.850927][ T3628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 34.850940][ T3628] Call Trace: [ 34.850949][ T3628] [ 34.850958][ T3628] __dump_stack+0x1d/0x30 [ 34.850987][ T3628] dump_stack_lvl+0x95/0xd0 [ 34.851012][ T3628] dump_stack+0x15/0x1b [ 34.851068][ T3628] should_fail_ex+0x263/0x280 [ 34.851102][ T3628] ? __pfx_sock_alloc_inode+0x10/0x10 [ 34.851152][ T3628] should_failslab+0x8c/0xb0 [ 34.851179][ T3628] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 34.851208][ T3628] ? sock_alloc_inode+0x34/0xa0 [ 34.851302][ T3628] ? __pfx_sock_alloc_inode+0x10/0x10 [ 34.851329][ T3628] sock_alloc_inode+0x34/0xa0 [ 34.851355][ T3628] alloc_inode+0x40/0x170 [ 34.851380][ T3628] do_accept+0xa0/0x390 [ 34.851452][ T3628] ? _raw_spin_lock+0x52/0xa0 [ 34.851491][ T3628] __sys_accept4+0xbe/0x170 [ 34.851523][ T3628] __x64_sys_accept4+0x51/0x60 [ 34.851635][ T3628] x64_sys_call+0x2b3e/0x3000 [ 34.851664][ T3628] do_syscall_64+0xc0/0x2a0 [ 34.851698][ T3628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.851792][ T3628] RIP: 0033:0x7f7d132baeb9 [ 34.851879][ T3628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.851918][ T3628] RSP: 002b:00007f7d11ccd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 34.851982][ T3628] RAX: ffffffffffffffda RBX: 00007f7d13536180 RCX: 00007f7d132baeb9 [ 34.852060][ T3628] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 34.852075][ T3628] RBP: 00007f7d11ccd090 R08: 0000000000000000 R09: 0000000000000000 [ 34.852090][ T3628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.852157][ T3628] R13: 00007f7d13536218 R14: 00007f7d13536180 R15: 00007fff36722938 [ 34.852177][ T3628] [ 35.312524][ T3640] netlink: 'syz.2.54': attribute type 4 has an invalid length. [ 35.324631][ T3640] netlink: 'syz.2.54': attribute type 4 has an invalid length. [ 35.337362][ T3640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.54'. [ 35.346331][ T3640] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 35.368757][ T3641] netlink: 72 bytes leftover after parsing attributes in process `syz.0.53'. [ 35.390628][ T3641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.53'. [ 35.399573][ T3641] netlink: 36 bytes leftover after parsing attributes in process `syz.0.53'. [ 35.459891][ T3645] loop1: detected capacity change from 0 to 1024 [ 35.479013][ T3645] EXT4-fs: Ignoring removed orlov option [ 35.488855][ T3638] netlink: 'syz.0.53': attribute type 13 has an invalid length. [ 35.489501][ T3645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.509730][ T3643] loop2: detected capacity change from 0 to 8192 [ 35.567818][ T3638] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.575168][ T3638] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.607379][ T3643] syz.2.55: attempt to access beyond end of device [ 35.607379][ T3643] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 35.722728][ T3638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.743834][ T3638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.769819][ T3659] loop3: detected capacity change from 0 to 512 [ 35.783407][ T3659] vfat: Unknown parameter 'n' [ 35.810613][ T3659] loop3: detected capacity change from 0 to 512 [ 35.835165][ T3659] vfat: Unknown parameter 'n' [ 35.867034][ T52] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.909918][ T52] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.935021][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.955809][ T314] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.988794][ T3664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1287 sclass=netlink_route_socket pid=3664 comm=syz.3.62 [ 35.994221][ T314] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.236601][ T3677] EXT4-fs (loop0): Unsupported encryption level 255 [ 36.239666][ T3447] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.284575][ T3447] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.328197][ T3447] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.346254][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 36.346271][ T29] audit: type=1400 audit(1770390623.346:300): avc: denied { ioctl } for pid=3687 comm="syz.1.72" path="socket:[4794]" dev="sockfs" ino=4794 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.409741][ T3693] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.425298][ T3346] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.451670][ T29] audit: type=1400 audit(1770390623.446:301): avc: denied { ioctl } for pid=3695 comm="syz.2.75" path="socket:[4810]" dev="sockfs" ino=4810 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.525310][ T3696] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.533074][ T29] audit: type=1400 audit(1770390623.516:302): avc: denied { mount } for pid=3690 comm="syz.0.74" name="/" dev="configfs" ino=1712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 36.569749][ T3704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.597406][ T3696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.631829][ T29] audit: type=1400 audit(1770390623.636:303): avc: denied { read } for pid=3703 comm="syz.3.76" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 36.656655][ T29] audit: type=1400 audit(1770390623.636:304): avc: denied { open } for pid=3703 comm="syz.3.76" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 36.681368][ T29] audit: type=1400 audit(1770390623.636:305): avc: denied { ioctl } for pid=3703 comm="syz.3.76" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 36.720809][ T29] audit: type=1400 audit(1770390623.726:306): avc: denied { write } for pid=3703 comm="syz.3.76" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 36.745508][ T29] audit: type=1400 audit(1770390623.726:307): avc: denied { map } for pid=3695 comm="syz.2.75" path="/23/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.773083][ T3315] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 34: comm syz-executor: path /23/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=66560, size=2048 fake=0 [ 36.796910][ T3315] EXT4-fs (loop2): Remounting filesystem read-only [ 36.917813][ T29] audit: type=1400 audit(1770390623.726:308): avc: denied { execute } for pid=3695 comm="syz.2.75" path="/23/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.918576][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.941969][ T29] audit: type=1400 audit(1770390623.776:309): avc: denied { watch watch_reads } for pid=3703 comm="syz.3.76" path="/21/file1" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.114303][ T3738] __nla_validate_parse: 6 callbacks suppressed [ 37.114332][ T3738] netlink: 20 bytes leftover after parsing attributes in process `syz.1.80'. [ 37.115601][ T3737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.81'. [ 37.138356][ T3737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.81'. [ 37.154630][ T3740] netlink: 'syz.3.82': attribute type 2 has an invalid length. [ 37.162398][ T3740] netlink: 'syz.3.82': attribute type 1 has an invalid length. [ 37.170096][ T3740] netlink: 152 bytes leftover after parsing attributes in process `syz.3.82'. [ 37.189734][ T3741] set_capacity_and_notify: 3 callbacks suppressed [ 37.189751][ T3741] loop3: detected capacity change from 0 to 736 [ 37.321456][ T3743] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 37.369359][ T314] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.420835][ T3723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.439985][ T314] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.466908][ T3754] loop0: detected capacity change from 0 to 8192 [ 37.527205][ T3754] loop0: p1 p2 p3 p4 [ 37.531406][ T3754] loop0: p1 size 262144 extends beyond EOD, truncated [ 37.559173][ T3754] loop0: p2 start 2531787010 is beyond EOD, truncated [ 37.566357][ T3754] loop0: p3 size 100663552 extends beyond EOD, truncated [ 37.583508][ T3767] can: request_module (can-proto-0) failed. [ 37.606956][ T3754] loop0: p4 size 50331648 extends beyond EOD, truncated [ 37.618107][ T314] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.786516][ T3761] wireguard0: entered promiscuous mode [ 37.794985][ T3761] wireguard0: entered allmulticast mode [ 38.102024][ T314] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.216344][ T3780] loop0: detected capacity change from 0 to 8192 [ 38.341972][ T3780] netlink: 152 bytes leftover after parsing attributes in process `syz.0.94'. [ 38.387883][ T3789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'. [ 38.444637][ T314] bridge_slave_1: left allmulticast mode [ 38.450522][ T314] bridge_slave_1: left promiscuous mode [ 38.456389][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.464685][ T3795] netlink: 28 bytes leftover after parsing attributes in process `syz.4.96'. [ 38.500692][ T3800] FAULT_INJECTION: forcing a failure. [ 38.500692][ T3800] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 38.514193][ T3800] CPU: 1 UID: 0 PID: 3800 Comm: syz.3.97 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.514228][ T3800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 38.514243][ T3800] Call Trace: [ 38.514330][ T3800] [ 38.514338][ T3800] __dump_stack+0x1d/0x30 [ 38.514366][ T3800] dump_stack_lvl+0x95/0xd0 [ 38.514387][ T3800] dump_stack+0x15/0x1b [ 38.514479][ T3800] should_fail_ex+0x263/0x280 [ 38.514516][ T3800] should_fail+0xb/0x20 [ 38.514549][ T3800] should_fail_usercopy+0x1a/0x20 [ 38.514643][ T3800] _copy_from_user+0x1c/0xb0 [ 38.514667][ T3800] ___sys_sendmsg+0xc1/0x1e0 [ 38.514695][ T3800] __x64_sys_sendmsg+0xd4/0x160 [ 38.514770][ T3800] x64_sys_call+0x17ba/0x3000 [ 38.514802][ T3800] do_syscall_64+0xc0/0x2a0 [ 38.514833][ T3800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.514895][ T3800] RIP: 0033:0x7f7d132baeb9 [ 38.514977][ T3800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.514999][ T3800] RSP: 002b:00007f7d11d0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.515025][ T3800] RAX: ffffffffffffffda RBX: 00007f7d13535fa0 RCX: 00007f7d132baeb9 [ 38.515042][ T3800] RDX: 0000000020000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 38.515078][ T3800] RBP: 00007f7d11d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 38.515091][ T3800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.515107][ T3800] R13: 00007f7d13536038 R14: 00007f7d13535fa0 R15: 00007fff36722938 [ 38.515128][ T3800] [ 38.708434][ T314] bridge_slave_0: left allmulticast mode [ 38.715091][ T314] bridge_slave_0: left promiscuous mode [ 38.721346][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.876638][ T3827] tmpfs: Bad value for 'mpol' [ 38.915702][ T3834] FAULT_INJECTION: forcing a failure. [ 38.915702][ T3834] name failslab, interval 1, probability 0, space 0, times 0 [ 38.928978][ T3834] CPU: 1 UID: 0 PID: 3834 Comm: syz.3.106 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.929043][ T3834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 38.929055][ T3834] Call Trace: [ 38.929064][ T3834] [ 38.929073][ T3834] __dump_stack+0x1d/0x30 [ 38.929103][ T3834] dump_stack_lvl+0x95/0xd0 [ 38.929128][ T3834] dump_stack+0x15/0x1b [ 38.929229][ T3834] should_fail_ex+0x263/0x280 [ 38.929263][ T3834] should_failslab+0x8c/0xb0 [ 38.929289][ T3834] __kmalloc_cache_noprof+0x64/0x4a0 [ 38.929331][ T3834] ? do_mq_timedreceive+0x23b/0x6e0 [ 38.929367][ T3834] do_mq_timedreceive+0x23b/0x6e0 [ 38.929402][ T3834] ? putname+0x90/0x100 [ 38.929506][ T3834] __x64_sys_mq_timedreceive+0xc6/0x170 [ 38.929592][ T3834] x64_sys_call+0x2adb/0x3000 [ 38.929616][ T3834] do_syscall_64+0xc0/0x2a0 [ 38.929645][ T3834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.929672][ T3834] RIP: 0033:0x7f7d132baeb9 [ 38.929692][ T3834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.929710][ T3834] RSP: 002b:00007f7d11d0f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f3 [ 38.929730][ T3834] RAX: ffffffffffffffda RBX: 00007f7d13535fa0 RCX: 00007f7d132baeb9 [ 38.929744][ T3834] RDX: 0000000000018ff1 RSI: 000020000001a600 RDI: 0000000000000003 [ 38.929757][ T3834] RBP: 00007f7d11d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 38.929787][ T3834] R10: 0200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.929800][ T3834] R13: 00007f7d13536038 R14: 00007f7d13535fa0 R15: 00007fff36722938 [ 38.929826][ T3834] [ 38.934197][ T314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.141178][ T314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.159246][ T314] bond0 (unregistering): Released all slaves [ 39.169909][ T3789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.260799][ T3762] chnl_net:caif_netlink_parms(): no params data found [ 39.306140][ T314] hsr_slave_0: left promiscuous mode [ 39.312150][ T314] hsr_slave_1: left promiscuous mode [ 39.318498][ T314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.326292][ T314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.334554][ T314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.342575][ T314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.365744][ T314] veth1_macvtap: left promiscuous mode [ 39.382299][ T314] veth0_macvtap: left promiscuous mode [ 39.382521][ T3852] netlink: 16 bytes leftover after parsing attributes in process `syz.0.112'. [ 39.388642][ T314] veth1_vlan: left promiscuous mode [ 39.404015][ T314] veth0_vlan: left promiscuous mode [ 39.434563][ T3852] loop0: detected capacity change from 0 to 764 [ 39.445978][ T3850] loop3: detected capacity change from 0 to 512 [ 39.500118][ T3850] EXT4-fs error (device loop3): ext4_quota_enable:7173: comm syz.3.111: Bad quota inum: 1, type: 2 [ 39.512062][ T3850] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 39.529571][ T3850] EXT4-fs (loop3): mount failed [ 39.600864][ T314] team0 (unregistering): Port device team_slave_1 removed [ 39.612149][ T314] team0 (unregistering): Port device team_slave_0 removed [ 39.758134][ T3762] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.765274][ T3762] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.813060][ T3762] bridge_slave_0: entered allmulticast mode [ 39.826520][ T3762] bridge_slave_0: entered promiscuous mode [ 39.849419][ T3872] tipc: Started in network mode [ 39.854454][ T3872] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 39.864137][ T3872] tipc: Enabling of bearer rejected, failed to enable media [ 39.873012][ T3762] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.881522][ T3762] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.890448][ T3762] bridge_slave_1: entered allmulticast mode [ 39.897985][ T3762] bridge_slave_1: entered promiscuous mode [ 39.951916][ T3762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.994104][ T3762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.075477][ T3762] team0: Port device team_slave_0 added [ 40.098965][ T3762] team0: Port device team_slave_1 added [ 40.144544][ T3762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.152090][ T3762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.178866][ T3762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.205913][ T3762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.213754][ T3762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.244457][ T3762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.290251][ T3762] hsr_slave_0: entered promiscuous mode [ 40.307251][ T3762] hsr_slave_1: entered promiscuous mode [ 40.319176][ T3762] debugfs: 'hsr0' already exists in 'hsr' [ 40.325584][ T3762] Cannot create hsr debugfs directory [ 40.503135][ T3762] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 40.521289][ T3931] netlink: 'syz.0.127': attribute type 6 has an invalid length. [ 40.531857][ T3762] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 40.557442][ T3762] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 40.582711][ T3762] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 40.582732][ T3423] IPVS: starting estimator thread 0... [ 40.677137][ T3934] IPVS: using max 2496 ests per chain, 124800 per kthread [ 40.759150][ T3956] netlink: 2 bytes leftover after parsing attributes in process `syz.3.133'. [ 40.769295][ T3956] netlink: 2 bytes leftover after parsing attributes in process `syz.3.133'. [ 40.809006][ T3762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.827685][ T3762] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.867810][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.875470][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.924383][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.931601][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.963958][ T3762] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.974529][ T3762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.213148][ T3762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.244525][ T4008] netlink: 'syz.4.143': attribute type 20 has an invalid length. [ 41.382301][ T4020] netlink: 'syz.3.146': attribute type 4 has an invalid length. [ 41.432845][ T4020] syz.3.146 uses obsolete (PF_INET,SOCK_PACKET) [ 41.618221][ T3762] veth0_vlan: entered promiscuous mode [ 41.655195][ T3762] veth1_vlan: entered promiscuous mode [ 41.714383][ T3762] veth0_macvtap: entered promiscuous mode [ 41.747996][ T3762] veth1_macvtap: entered promiscuous mode [ 41.801996][ T3762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.858278][ T3762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.898896][ T52] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.934579][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 41.934596][ T29] audit: type=1400 audit(1770390628.936:414): avc: denied { connect } for pid=4049 comm="syz.4.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 41.957006][ T52] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.991794][ T4056] raw_sendmsg: syz.1.155 forgot to set AF_INET. Fix it! [ 42.000764][ T52] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.022740][ T4059] ALSA: seq fatal error: cannot create timer (-22) [ 42.025357][ T52] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.089144][ T4064] syzkaller0: entered promiscuous mode [ 42.096024][ T4064] syzkaller0: entered allmulticast mode [ 42.132365][ T4068] loop1: detected capacity change from 0 to 512 [ 42.154756][ T4068] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.165917][ T29] audit: type=1400 audit(1770390629.166:415): avc: denied { execmod } for pid=4065 comm="syz.4.157" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=6548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 42.193100][ T29] audit: type=1400 audit(1770390629.166:416): avc: denied { execute } for pid=4065 comm="syz.4.157" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=6548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 42.230776][ T4068] EXT4-fs (loop1): 1 truncate cleaned up [ 42.237664][ T4068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.276217][ T4071] loop3: detected capacity change from 0 to 512 [ 42.310785][ T4076] loop5: detected capacity change from 0 to 1024 [ 42.367677][ T4071] EXT4-fs: Ignoring removed orlov option [ 42.430832][ T4071] EXT4-fs error (device loop3): __ext4_iget:5426: inode #2: block 775168: comm syz.3.159: invalid block [ 42.485160][ T4083] loop5: detected capacity change from 0 to 512 [ 42.518707][ T4071] EXT4-fs (loop3): get root inode failed [ 42.524569][ T4071] EXT4-fs (loop3): mount failed [ 42.528069][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.539303][ T4083] ------------[ cut here ]------------ [ 42.544988][ T4083] EA inode 11 i_nlink=0 [ 42.545006][ T4083] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.5.164/4083 [ 42.560403][ T4083] Modules linked in: [ 42.564420][ T4083] CPU: 1 UID: 0 PID: 4083 Comm: syz.5.164 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.574600][ T4083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 42.584956][ T4083] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 42.592011][ T4083] Code: a4 e5 9a ff 4c 8d 2d ed 20 3e 05 49 8d 7e 40 e8 b4 cf b6 ff 49 8b 6e 40 4c 89 e7 e8 e8 ca b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 0f e1 d0 03 66 66 66 66 66 66 2e [ 42.612258][ T4083] RSP: 0018:ffffc90001a675a8 EFLAGS: 00010246 [ 42.618829][ T4083] RAX: ffff88810167cc90 RBX: ffff888107fedc18 RCX: ffffffff81be1a38 [ 42.626892][ T4083] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff86fc3b10 [ 42.634982][ T4083] RBP: 000000000000000b R08: 0001888107fedbcb R09: 0000000000000000 [ 42.643112][ T4083] R10: ffffc90001a674d8 R11: 0001c90001a674d8 R12: ffff888107fedbc8 [ 42.652126][ T4083] R13: ffffffff86fc3b10 R14: ffff888107fedb80 R15: 0000000000000001 [ 42.660626][ T4083] FS: 00007f4bfeb076c0(0000) GS:ffff8882aec57000(0000) knlGS:0000000000000000 [ 42.669996][ T4083] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.676936][ T4083] CR2: 000055555ed9f908 CR3: 000000011bfee000 CR4: 00000000003506f0 [ 42.685545][ T4083] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.693941][ T4083] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 42.697647][ T4088] 9p: Bad value for 'rfdno' [ 42.702397][ T4083] Call Trace: [ 42.710431][ T4083] [ 42.713390][ T4083] ext4_xattr_set_entry+0x77c/0x1010 [ 42.718895][ T4083] ext4_xattr_ibody_set+0x184/0x3c0 [ 42.720213][ T4088] __nla_validate_parse: 3 callbacks suppressed [ 42.720228][ T4088] netlink: 156 bytes leftover after parsing attributes in process `syz.4.166'. [ 42.724383][ T4083] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 42.745629][ T4083] __ext4_expand_extra_isize+0x246/0x280 [ 42.751459][ T4083] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 42.757244][ T4083] ext4_evict_inode+0x7c3/0xd40 [ 42.762227][ T4083] ? __pfx_ext4_evict_inode+0x10/0x10 [ 42.767688][ T4083] evict+0x2af/0x510 [ 42.771823][ T4083] ? __dquot_initialize+0x146/0x7c0 [ 42.777409][ T4083] iput+0x4b9/0x650 [ 42.781353][ T4083] ext4_process_orphan+0x1a9/0x1c0 [ 42.786604][ T4083] ext4_orphan_cleanup+0x6a8/0xa00 [ 42.792130][ T4083] ext4_fill_super+0x3476/0x3800 [ 42.797314][ T4083] ? set_blocksize+0x1a3/0x310 [ 42.802460][ T4083] ? setup_bdev_super+0x30e/0x370 [ 42.804939][ T4092] loop0: detected capacity change from 0 to 512 [ 42.807658][ T4083] ? __pfx_ext4_fill_super+0x10/0x10 [ 42.819451][ T4083] get_tree_bdev_flags+0x291/0x300 [ 42.824695][ T4083] ? __pfx_ext4_fill_super+0x10/0x10 [ 42.830873][ T4083] get_tree_bdev+0x1f/0x30 [ 42.835567][ T4083] ext4_get_tree+0x1c/0x30 [ 42.840235][ T4083] vfs_get_tree+0x57/0x1d0 [ 42.845043][ T4083] do_new_mount+0x288/0x700 [ 42.845237][ T4092] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.849910][ T4083] path_mount+0x4d0/0xbc0 [ 42.864807][ T4083] ? user_path_at+0xbf/0x130 [ 42.869799][ T4083] __se_sys_mount+0x28c/0x2e0 [ 42.874835][ T4083] __x64_sys_mount+0x67/0x80 [ 42.880038][ T4083] x64_sys_call+0x2cca/0x3000 [ 42.884999][ T4083] do_syscall_64+0xc0/0x2a0 [ 42.889922][ T4083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.896264][ T4083] RIP: 0033:0x7f4c000ac14a [ 42.900990][ T4083] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.922109][ T4083] RSP: 002b:00007f4bfeb06e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 42.931739][ T4083] RAX: ffffffffffffffda RBX: 00007f4bfeb06ee0 RCX: 00007f4c000ac14a [ 42.938213][ T4092] EXT4-fs (loop0): 1 truncate cleaned up [ 42.940661][ T4083] RDX: 0000200000000000 RSI: 00002000000001c0 RDI: 00007f4bfeb06ea0 [ 42.956880][ T4083] RBP: 0000200000000000 R08: 00007f4bfeb06ee0 R09: 0000000000800700 [ 42.960803][ T4097] loop4: detected capacity change from 0 to 512 [ 42.965760][ T4083] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 42.973582][ T4092] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.981756][ T4083] R13: 00007f4bfeb06ea0 R14: 000000000000046f R15: 00002000000007c0 [ 43.003406][ T4083] [ 43.006656][ T4083] ---[ end trace 0000000000000000 ]--- [ 43.018104][ T4083] EXT4-fs error (device loop5): ext4_free_inode:354: comm syz.5.164: bit already cleared for inode 11 [ 43.036027][ T4083] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 43.046377][ T4097] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.049599][ T4083] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 43.077092][ T4097] EXT4-fs (loop4): 1 truncate cleaned up [ 43.083625][ T4097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.120276][ T4083] EXT4-fs (loop5): 1 orphan inode deleted [ 43.122857][ T29] audit: type=1400 audit(1770390630.126:417): avc: denied { kexec_image_load } for pid=4099 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 43.126608][ T4083] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.186205][ T4094] EXT4-fs (loop4): shut down requested (0) [ 43.186535][ T3762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.205022][ T29] audit: type=1400 audit(1770390630.186:418): avc: denied { unmount } for pid=3762 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 43.227936][ T29] audit: type=1400 audit(1770390630.206:419): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 43.253112][ T29] audit: type=1400 audit(1770390630.206:420): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.276012][ T29] audit: type=1400 audit(1770390630.206:421): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.299639][ T29] audit: type=1400 audit(1770390630.206:422): avc: denied { add_name } for pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.321853][ T29] audit: type=1400 audit(1770390630.206:423): avc: denied { create } for pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.344654][ T4089] netlink: 'syz.0.167': attribute type 1 has an invalid length. [ 43.376287][ T4089] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.409331][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.420098][ T4108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.172'. [ 43.441633][ T4108] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 43.509650][ T4115] tmpfs: Bad value for 'mpol' [ 43.524878][ T4116] loop4: detected capacity change from 0 to 512 [ 43.534815][ T4116] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.550569][ T4116] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 43.558979][ T4116] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 43.584580][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.586977][ T4116] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 43.603650][ T4116] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 43.613673][ T4116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 43.630890][ T4116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.639786][ T4116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.729443][ T4127] loop1: detected capacity change from 0 to 512 [ 43.747711][ T4129] netlink: 60 bytes leftover after parsing attributes in process `syz.3.179'. [ 43.768486][ T4127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.787050][ T4127] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.807831][ T4127] FAULT_INJECTION: forcing a failure. [ 43.807831][ T4127] name failslab, interval 1, probability 0, space 0, times 0 [ 43.821023][ T4127] CPU: 0 UID: 0 PID: 4127 Comm: syz.1.180 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 43.821061][ T4127] Tainted: [W]=WARN [ 43.821069][ T4127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 43.821082][ T4127] Call Trace: [ 43.821091][ T4127] [ 43.821120][ T4127] __dump_stack+0x1d/0x30 [ 43.821148][ T4127] dump_stack_lvl+0x95/0xd0 [ 43.821171][ T4127] dump_stack+0x15/0x1b [ 43.821192][ T4127] should_fail_ex+0x263/0x280 [ 43.821252][ T4127] should_failslab+0x8c/0xb0 [ 43.821276][ T4127] __kmalloc_noprof+0xb8/0x580 [ 43.821383][ T4127] ? do_handle_open+0x3a9/0x790 [ 43.821412][ T4127] do_handle_open+0x3a9/0x790 [ 43.821439][ T4127] __x64_sys_open_by_handle_at+0x44/0x50 [ 43.821465][ T4127] x64_sys_call+0x2b6a/0x3000 [ 43.821550][ T4127] do_syscall_64+0xc0/0x2a0 [ 43.821665][ T4127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.821765][ T4127] RIP: 0033:0x7fcb39c4aeb9 [ 43.821783][ T4127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.821801][ T4127] RSP: 002b:00007fcb386a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 43.821824][ T4127] RAX: ffffffffffffffda RBX: 00007fcb39ec5fa0 RCX: 00007fcb39c4aeb9 [ 43.821944][ T4127] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 43.821960][ T4127] RBP: 00007fcb386a7090 R08: 0000000000000000 R09: 0000000000000000 [ 43.821976][ T4127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.821990][ T4127] R13: 00007fcb39ec6038 R14: 00007fcb39ec5fa0 R15: 00007ffd7ecd7748 [ 43.822008][ T4127] [ 44.037739][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.066334][ T4140] netlink: 20 bytes leftover after parsing attributes in process `syz.1.184'. [ 44.075469][ T4140] Unknown options in mask 7bf2 [ 44.122438][ T4148] netlink: 16 bytes leftover after parsing attributes in process `syz.0.185'. [ 44.139745][ T4148] gtp0: entered promiscuous mode [ 44.244018][ T4158] loop5: detected capacity change from 0 to 512 [ 44.253811][ T4158] EXT4-fs (loop5): filesystem is read-only [ 44.265958][ T4161] IPVS: dh: FWM 3 0x00000003 - no destination available [ 44.275750][ T4158] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 44.325561][ T4167] netlink: 'syz.0.191': attribute type 1 has an invalid length. [ 44.335426][ T4158] EXT4-fs (loop5): filesystem is read-only [ 44.341498][ T4158] EXT4-fs (loop5): orphan cleanup on readonly fs [ 44.354871][ T4167] loop0: detected capacity change from 0 to 128 [ 44.367280][ T4158] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.188: bg 0: block 64: padding at end of block bitmap is not set [ 44.455513][ T4158] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 44.469311][ T4158] EXT4-fs (loop5): 1 orphan inode deleted [ 44.478161][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.494284][ T4158] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 44.516247][ T4169] loop3: detected capacity change from 0 to 4096 [ 44.569722][ T4172] syz.0.191 (4172) used greatest stack depth: 10080 bytes left [ 44.584637][ T3762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.614782][ T4169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.636449][ T4169] EXT4-fs (loop3): shut down requested (1) [ 44.645579][ T4169] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 44.656356][ T4169] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 44.668697][ T4169] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 44.679618][ T4169] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 44.689930][ T4169] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 44.699771][ T4169] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 44.730675][ T4184] EXT4-fs: Ignoring removed oldalloc option [ 44.761140][ T4184] EXT4-fs (loop5): 1 truncate cleaned up [ 44.775607][ T4184] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.782319][ T4193] netlink: 'syz.0.199': attribute type 21 has an invalid length. [ 44.798613][ T4193] netlink: 128 bytes leftover after parsing attributes in process `syz.0.199'. [ 44.813298][ T4191] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.827334][ T4193] netlink: 3 bytes leftover after parsing attributes in process `syz.0.199'. [ 44.838305][ T4191] EXT4-fs (loop4): 1 orphan inode deleted [ 44.844519][ T4191] EXT4-fs (loop4): 1 truncate cleaned up [ 44.852285][ T4184] netlink: 32 bytes leftover after parsing attributes in process `syz.5.195'. [ 44.857658][ T4191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.876963][ T4184] netlink: 32 bytes leftover after parsing attributes in process `syz.5.195'. [ 44.900235][ T4193] netlink: 'syz.0.199': attribute type 21 has an invalid length. [ 44.908607][ T4193] netlink: 128 bytes leftover after parsing attributes in process `syz.0.199'. [ 44.924567][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.934597][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.990360][ T3762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.151219][ T4236] syzkaller0: entered promiscuous mode [ 45.157692][ T4236] syzkaller0: entered allmulticast mode [ 45.172080][ T4205] Zero length message leads to an empty skb [ 45.184911][ T4238] vfat: Unknown parameter '' [ 45.194350][ T4229] bridge0: entered promiscuous mode [ 45.211780][ T4229] vlan2: entered promiscuous mode [ 45.310833][ T4259] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.326481][ T4259] EXT4-fs (loop0): orphan cleanup on readonly fs [ 45.333208][ T4259] EXT4-fs (loop0): 1 truncate cleaned up [ 45.339615][ T4259] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 45.352730][ T4259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.577963][ T4289] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 46.677952][ T4301] EXT4-fs: Ignoring removed i_version option [ 47.655556][ T4301] EXT4-fs (loop0): orphan cleanup on readonly fs [ 47.690276][ T4307] set_capacity_and_notify: 6 callbacks suppressed [ 47.690358][ T4307] loop1: detected capacity change from 0 to 512 [ 47.847502][ T4301] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.227: EA inode hash validation failed [ 48.728504][ T4301] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 48.734260][ T4309] __nla_validate_parse: 6 callbacks suppressed [ 48.734280][ T4309] netlink: 12 bytes leftover after parsing attributes in process `syz.5.229'. [ 48.751649][ T4301] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.0.227: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 48.845118][ T4301] EXT4-fs (loop0): Remounting filesystem read-only [ 48.852744][ T4301] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.0.227: ea_inode dec ref err=-117 [ 48.923669][ T4309] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 48.933701][ T4309] IPv6: NLM_F_CREATE should be set when creating new route [ 48.955573][ T4307] EXT4-fs (loop1): 1 truncate cleaned up [ 48.977877][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 48.977898][ T29] audit: type=1400 audit(1770390635.976:458): avc: denied { create } for pid=4314 comm="syz.3.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 49.019893][ T4307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.036183][ T4301] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 49.052028][ T4307] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.228: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 49.075683][ T4301] EXT4-fs (loop0): 1 orphan inode deleted [ 49.082829][ T4301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 49.097361][ T29] audit: type=1400 audit(1770390636.056:459): avc: denied { create } for pid=4305 comm="syz.1.228" name="binderfs" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 49.152317][ T4307] EXT4-fs (loop1): Remounting filesystem read-only [ 49.171702][ T4318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.228'. [ 49.190204][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.228360][ T4321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'. [ 49.239399][ T4321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'. [ 49.276259][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.429041][ T4332] netlink: 'syz.3.237': attribute type 3 has an invalid length. [ 49.581382][ T29] audit: type=1400 audit(1770390636.586:460): avc: denied { bind } for pid=4338 comm="syz.3.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.601369][ T29] audit: type=1400 audit(1770390636.586:461): avc: denied { name_bind } for pid=4338 comm="syz.3.240" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 49.624089][ T29] audit: type=1400 audit(1770390636.586:462): avc: denied { node_bind } for pid=4338 comm="syz.3.240" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 49.691790][ T4341] netlink: 80 bytes leftover after parsing attributes in process `syz.3.241'. [ 49.821268][ T29] audit: type=1400 audit(1770390636.816:463): avc: denied { ioctl } for pid=4345 comm="syz.1.234" path="socket:[8087]" dev="sockfs" ino=8087 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 49.885210][ T4348] loop3: detected capacity change from 0 to 2048 [ 50.139173][ T4362] loop1: detected capacity change from 0 to 2048 [ 50.200722][ T29] audit: type=1400 audit(1770390637.116:464): avc: denied { mount } for pid=4347 comm="syz.3.244" name="/" dev="hugetlbfs" ino=8135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 50.340808][ T4369] loop4: detected capacity change from 0 to 512 [ 50.389590][ T4372] loop3: detected capacity change from 0 to 128 [ 50.414582][ T4369] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 50.419709][ T4372] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.426557][ T4369] FAT-fs (loop4): Filesystem has been set read-only [ 50.508143][ T4372] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.585739][ T4362] capability: warning: `syz.1.248' uses 32-bit capabilities (legacy support in use) [ 50.649878][ T4377] netlink: 56 bytes leftover after parsing attributes in process `syz.5.253'. [ 50.661547][ T4377] netlink: 28 bytes leftover after parsing attributes in process `syz.5.253'. [ 50.667458][ T29] audit: type=1400 audit(1770390637.646:465): avc: denied { write } for pid=4368 comm="syz.4.251" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 50.671985][ T4377] netlink: 28 bytes leftover after parsing attributes in process `syz.5.253'. [ 50.716184][ T29] audit: type=1326 audit(1770390637.726:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb39c4aeb9 code=0x7ffc0000 [ 50.742577][ T29] audit: type=1326 audit(1770390637.726:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fcb39c4aeb9 code=0x7ffc0000 [ 50.832407][ T4383] xt_TPROXY: Can be used only with -p tcp or -p udp [ 50.853191][ T4381] loop5: detected capacity change from 0 to 512 [ 50.860340][ T3301] ================================================================== [ 50.868982][ T3301] BUG: KCSAN: data-race in set_nlink / set_nlink [ 50.876256][ T3301] [ 50.879045][ T3301] read to 0xffff888107d3d858 of 4 bytes by task 2999 on cpu 1: [ 50.887897][ T3301] set_nlink+0x29/0xb0 [ 50.893058][ T3301] kernfs_iop_permission+0x1e2/0x220 [ 50.899084][ T3301] inode_permission+0x2de/0x3c0 [ 50.904135][ T3301] link_path_walk+0x779/0xe30 [ 50.908929][ T3301] path_lookupat+0x8c/0x500 [ 50.913576][ T3301] filename_lookup+0x190/0x390 [ 50.918579][ T3301] vfs_statx+0x96/0x170 [ 50.922927][ T3301] vfs_fstatat+0x115/0x170 [ 50.927370][ T3301] __se_sys_newfstatat+0x55/0x3e0 [ 50.932603][ T3301] __x64_sys_newfstatat+0x55/0x70 [ 50.938013][ T3301] x64_sys_call+0x111f/0x3000 [ 50.942966][ T3301] do_syscall_64+0xc0/0x2a0 [ 50.947986][ T3301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.953994][ T3301] [ 50.956417][ T3301] write to 0xffff888107d3d858 of 4 bytes by task 3301 on cpu 0: [ 50.964415][ T3301] set_nlink+0x99/0xb0 [ 50.968682][ T3301] kernfs_iop_permission+0x1e2/0x220 [ 50.974777][ T3301] inode_permission+0x2de/0x3c0 [ 50.979751][ T3301] link_path_walk+0x779/0xe30 [ 50.984874][ T3301] path_openat+0x1bf/0x23c0 [ 50.989589][ T3301] do_filp_open+0x15d/0x280 [ 50.994199][ T3301] do_sys_openat2+0xa6/0x150 [ 50.998814][ T3301] __x64_sys_openat+0xf2/0x120 [ 51.003703][ T3301] x64_sys_call+0x2b07/0x3000 [ 51.008752][ T3301] do_syscall_64+0xc0/0x2a0 [ 51.013449][ T3301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.019831][ T3301] [ 51.022340][ T3301] value changed: 0x00000009 -> 0x00000008 [ 51.028245][ T3301] [ 51.030818][ T3301] Reported by Kernel Concurrency Sanitizer on: [ 51.037257][ T3301] CPU: 0 UID: 0 PID: 3301 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 51.048865][ T3301] Tainted: [W]=WARN [ 51.052761][ T3301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 51.063524][ T3301] ================================================================== [ 51.158560][ T4381] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.182596][ T4381] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.377032][ T3762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.