last executing test programs: 2.460170598s ago: executing program 2 (id=275): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xa, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) fsopen(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='atkbd', 0x5) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) flock(0xffffffffffffffff, 0x2) open(0x0, 0x30000, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x2) flock(r1, 0xe1) 2.394879582s ago: executing program 4 (id=276): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x103) r0 = getpgrp(0xffffffffffffffff) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x0, 0x0, 0x0}, 0x94) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000200025a729bd7000fdfbdf250a0000cdfe00000102"], 0x30}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r1, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xb, &(0x7f00000004c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x6, 0xde, &(0x7f0000003e40)=""/222, 0x41100, 0x73}, 0x94) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/sem\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='20', 0x2) write$P9_RLCREATE(r5, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x80, 0x3, 0x6}, 0x10001}}, 0x18) 2.185284177s ago: executing program 3 (id=279): capset(0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x800, 0x1ff}, 0x400, 0x5, 0x8, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0x10, 0xffffffffffffffff, 0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x64000) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000001e80), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40000d0) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000045c0)=ANY=[@ANYBLOB="3c000000100001040000000000000000000000007ffaca629b80248951d8ca6fcad15e803c2c6b2d800e958cd218ec60f142dfff44599dcf1bc558c77a107e160bb6662fdb42b48006b87bfe63919cdb72", @ANYRES32=0x0, @ANYBLOB="7b13000000000000140012800b00010067656e65766500000400028008000400e1ff0000"], 0x3c}}, 0x40800) 2.150574115s ago: executing program 3 (id=281): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x400, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0x81}}, {@minixdf}, {@bh}, {@delalloc}, {@dioread_nolock}, {@noquota}]}, 0xff, 0x4a6, &(0x7f0000000a40)="$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") r0 = creat(&(0x7f0000000140)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2002, 0xa) fallocate(r0, 0x0, 0x0, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'dummy0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb1e}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x2400d010) 2.092105567s ago: executing program 2 (id=282): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r0, 0x5, &(0x7f00000000c0)={0x1, 0xfffffffffffffffa}, &(0x7f0000000100)) r3 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x4004550c, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000"], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'syzkaller1\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x4b, 0x1, [0xffffffc0]}}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000f80)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x280801b, &(0x7f0000000240), 0xff, 0x523, &(0x7f00000006c0)="$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") setuid(0xee01) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000180)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 1.659910901s ago: executing program 0 (id=286): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) (fail_nth: 2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.536368418s ago: executing program 3 (id=287): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad10102030109022400010000000009042902"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3bc5, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x17}, 0x180, 0xc8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3fc00000, 0x0, 0x400000001000}, 0xffffffffffffffff, 0x4000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10040) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e48864"], 0xfdef) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f00000000c0)={0x1, 0x6, 0x8}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x801}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x108810, &(0x7f0000000180)={[{@journal_checksum}, {@grpquota}, {@auto_da_alloc}, {@delalloc}, {@dioread_lock}]}, 0x48, 0x4fe, &(0x7f0000000a40)="$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") r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="380000000b14010000000000fbdbdf2509000200"], 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2008080}, 0x24008805) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x50, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xe0b}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x50}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) 1.360799496s ago: executing program 4 (id=288): setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @local}}, 0x0, 0x8001, 0x2, 0x0, 0x4f, 0x7f, 0x8}, 0x9c) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2a, 0x2, 0x9) (async) socket(0x2a, 0x2, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000002c0), 0x8}, 0x0, 0x0, 0xc00000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000002c0), 0x8}, 0x0, 0x0, 0xc00000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd0, &(0x7f0000000080)=0x8, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xb4, 0x1, 0x0, 0x0, 0x0, 0xd, 0x800, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x9, 0x100}, 0xb45, 0x4, 0x1, 0x8, 0x109, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x552e1a756153c265, 0x0, 0x39, 0x0, &(0x7f0000000000)) getitimer(0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000070d28bd700002dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="0082060002460000180004000b00afce0ef9d43ae7cb0100697036746e6c000008000280040013000800040000050000"], 0x40}}, 0x4000080) (async) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000070d28bd700002dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="0082060002460000180004000b00afce0ef9d43ae7cb0100697036746e6c000008000280040013000800040000050000"], 0x40}}, 0x4000080) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad03010000000000bf000000000000006916a00000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 1.000916243s ago: executing program 2 (id=290): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001300010000000000000000", @ANYRES32=r1, @ANYBLOB="000000000000000034001a8006000000020000002800058024000180080001000100000008000200000000000800030000000000080004"], 0x54}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000d2}, 0x0) 764.803355ms ago: executing program 0 (id=292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xa, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) fsopen(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='atkbd', 0x5) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) flock(0xffffffffffffffff, 0x2) open(0x0, 0x30000, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x2) flock(r1, 0xe1) 750.681908ms ago: executing program 2 (id=294): socket$inet_sctp(0x2, 0x1, 0x84) read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 703.258928ms ago: executing program 3 (id=297): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x400, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0x81}}, {@minixdf}, {@bh}, {@delalloc}, {@dioread_nolock}, {@noquota}]}, 0xff, 0x4a6, &(0x7f0000000a40)="$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") r0 = creat(&(0x7f0000000140)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2002, 0xa) fallocate(r0, 0x0, 0x0, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'dummy0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe00, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x2400d010) 636.833093ms ago: executing program 2 (id=298): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x103) r0 = getpgrp(0xffffffffffffffff) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x0, 0x0, 0x0}, 0x94) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000200025a729bd7000fdfbdf250a0000cdfe00000102"], 0x30}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r1, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xb, &(0x7f00000004c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x6, 0xde, &(0x7f0000003e40)=""/222, 0x41100, 0x73}, 0x94) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/sem\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='20', 0x2) write$P9_RLCREATE(r5, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x80, 0x3, 0x6}, 0x10001}}, 0x18) 587.241433ms ago: executing program 3 (id=299): r0 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) ptrace(0x4206, r0) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x5, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8df, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x4c, 0x0, 0x0) setpriority(0x2, 0x0, 0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a", 0x1e) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x80) pread64(r3, &(0x7f0000001340)=""/102385, 0x18ff1, 0x12c) getpgrp(0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1b, 0x4, @thr={&(0x7f0000000140)="200cb6edfb5358ee194cfc8071b7c0e33359a0892f056db251a0f40a4ffa57fcd18f13a38d11ffa73f887f51fb649f979e0ed3fd32824cf4d1fe04da9cc04c116a54d7eed46da7e93a56f3c3857f215e7c801cbc26136003c158a921b231590a72", &(0x7f0000000200)="d95cf94d3ddeeafe8041fe92d7502d5d1396ec463931c208251c0a96857976bc727b8f0b8263132e0fc7ef76607d518a205c9eb0a3280192c40d399c8ebffca4b2ffa3a7e1e1872202daf0d5a3ea40e8211e15a11b7ca298329828eee6626127574701d5d3834d93d4c9c94a9a0d3550bec7921abdcc822463e30ba580649ca09477dc89bf1183b8aaf44eecb6a9769a0bde0eb413e60ee61a519c055bf3ce4bad4397ba620d2560f31600000000000000"}}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x3, 0x10002, 0xfffffffffffffffe}) mprotect(&(0x7f00007ee000/0x3000)=nil, 0x3000, 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000100)={'pimreg0\x00', {0x2, 0x0, @remote}}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_procfs(0x0, &(0x7f00000002c0)='net/tcp\x00') 496.525483ms ago: executing program 0 (id=301): unshare(0x6a060000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x200}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x4}]}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x54, 0xa, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x54, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_TEST(r0, 0x0, 0x0) 489.181254ms ago: executing program 3 (id=302): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad10102030109022400010000000009042902"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3bc5, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x17}, 0x180, 0xc8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3fc00000, 0x0, 0x400000001000}, 0xffffffffffffffff, 0x4000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10040) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e48864"], 0xfdef) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x801}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x108810, &(0x7f0000000180)={[{@journal_checksum}, {@grpquota}, {@auto_da_alloc}, {@delalloc}, {@dioread_lock}]}, 0x48, 0x4fe, &(0x7f0000000a40)="$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") r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="380000000b14010000000000fbdbdf2509000200"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2008080}, 0x24008805) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x50, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xe0b}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x50}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) 432.399497ms ago: executing program 4 (id=303): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 431.424217ms ago: executing program 0 (id=304): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001300010000000000000000", @ANYRES32=r1, @ANYBLOB="000000000000000034001a8006000000020000002800058024000180080001000100000008000200000000000800030000000000080004"], 0x54}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000d2}, 0x0) 342.905896ms ago: executing program 0 (id=306): sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd27, &(0x7f0000000040)=[{&(0x7f0000000080)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100070000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd1b642383656d4d2449155037", 0x55}], 0x1}, 0x4000080) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000840) 276.16059ms ago: executing program 0 (id=307): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad10102030109022400010000000009042902"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3bc5, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x17}, 0x180, 0xc8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3fc00000, 0x0, 0x400000001000}, 0xffffffffffffffff, 0x4000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10040) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e48864"], 0xfdef) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f00000000c0)={0x1, 0x6, 0x8}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x801}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x108810, &(0x7f0000000180)={[{@journal_checksum}, {@grpquota}, {@auto_da_alloc}, {@delalloc}, {@dioread_lock}]}, 0x48, 0x4fe, &(0x7f0000000a40)="$eJzs3c9vG1kdAPDvTOImm3U3XdgDIGDLslDQqs6P7kYrONC9gNBqJcSKE4duSNwoil1HcVKa0ENy5I5EJU7wJ3DjgNQTB27c4MalHJAqqEANUg9GM54mJoljs03iJv58pPHMe+P4+57t957nJc4LYGhdjYjtiLgUEZ9ExGSRnxRb3Gxv2f2ePrm/sPvk/kISrdbH/0jy81ledPxM5tXiMccj4offi/hJcjhuc3NrZb5Wq64V6an1+upUc3Pr+nJa5MzOzcxNv3/jvdkTq+ub9d8+/u7yhz/6/e++9OhP29/8WVas8s8v5+c663GS2lUvRbkjbzQiPjyNYAMyWrx/OH+y1vaZiHgrb/+TMZK/mv05olkDAOdAqzUZrcnONABw0WXX/+VI0koxF1CONK1U2nN4b8REWms019+ZbGzcWYx8DutKlNLby7XqdDFXeCVKSZaeyY/307MH0jci4vWI+MXYK3m6stCoLQ7ygw8ADLFXD4z//x5rj/8AwAU3PugCAABnzvgPAMPH+A8Aw+f/GP/7/3YgAPBSc/0PAMPH+A8Aw6fn+L9zNuUAAM7EDz76KNtau8X/v168u7nx7fLd64vV5kqlvrFQWWisrVaWGo2lWrWy0Gr1erxao7E68+5esrm5dave2Lizfmu5Pr9UvVUtnXJ9AIDeXn/z4V+SiNj+1iv5Fh1rORir4WJLB10AYGBGBl0AYGB8nweGVx/X+KYB4ILrtZZn1z8RemDxVzivrn3e/D8MK/P/MLw+3fz/d068HMDZM/8Pw6vVSqz5DwBDxhw/8EK//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAhVc63JK3ka4FvZ7dppRJxOSKuRCm5vVyrTkfEaxHx57HSWJaeGXShAYAXlP49Kdb/ujb5dvng2UvJf8byfUT89Fcf//Le/Pr62kyW/8+9/PUHRf7spUFUAADodPNwVnucLvYdF/JPn9xfeL6dZREff9BeXDSLu1ts7TOjMZrvx6MUERP/Sop0W/Z5ZeQE4m/vRMTn9ut/ryNCOZ8Daa98ejB+FvvyKcTff/4Pxk//J36an8v2pfy5+OwJlAWGzcMP2v1k0fayJla0vzSu5vuj2/943kO9uOf93+6h/i/d6/9GDsVP8jZ/dS99fEkev/uH7x/KbE22z+1EfGH0qPjJXvykS//7dp91/OsXv/xWt3OtX0dci6Pjt9XzbnZqvb461dzcur5cn1+qLlXvzM7OzcxNv3/jvdmpfI66ffvHAw//rFjm/rWuz81OxESX+OM96v+1Puv/m2ef/Pgrx8T/xlePfv3fOCZ+NiZ+vc/48xM3uy7fncVf7FL/Xq//O33Gf/S3rcU+7woAnIHm5tbKfK1WXetxkH3W7HUfB+fzILYjXoJi9DpIi7fsy1KeC35wTKeRnlHnBJyq/UY/6JIAAAAAAAAAAAAAAADdNDe3VsbidL9ONOg6AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9NwAA//8tM9Id") r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="380000000b14010000000000fbdbdf2509000200"], 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2008080}, 0x24008805) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x50, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xe0b}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x50}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) 270.025092ms ago: executing program 4 (id=308): socket$inet_sctp(0x2, 0x1, 0x84) read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 154.110527ms ago: executing program 1 (id=310): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000003000000000000010000000400048008000200010000000800010000ee8f00040008"], 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 106.672427ms ago: executing program 4 (id=311): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000d2}, 0x0) 105.583647ms ago: executing program 2 (id=312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xa, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) fsopen(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='atkbd', 0x5) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) flock(0xffffffffffffffff, 0x2) open(0x0, 0x30000, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x2) flock(r1, 0xe1) 104.459297ms ago: executing program 4 (id=313): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000029a000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x24004045) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x40000, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) rename(0x0, &(0x7f0000000180)='./file1\x00') io_uring_enter(r1, 0x2219, 0x771d, 0xf, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="26210000b261b2f961119c0000000000218980909ca00944ed464400010000009500000000000000c9fb1358e176ffc98ab366d48b3f9e0f5ed92afad5f064c18eafa46382770affacaaeba5536121de23642995909276d9584fd5f45cda59781de015300e8e1ed5882b70f03d5737a08156ad8890a841661c1d33755f257fb51470fb72e5ae0abd5647b3e03bfbf66935fd8787b8673d9b4ea29d6787d25d8d8405801a816c67df594e2207f17dbd12babb2b43746179a72d5b65d6081a4e68fdec2568a2d44c838882a0ecffc4fd4c1cc6883748cb7e92e12ff7ecefb9cc41290a449a3c2fa95080d41121c87452055f6a3af0ade4c8adfcd191ef7076d1e6b759da8a9a6d0c3f03f259ec1a65859d5bf3498d0736d9eaf1382f814436390196f37a62895f8ff337c9f2ad8b398b1035566606ad747ae8a1ca707ed60a75718d124c42cc8d006b0f5e45bfd36494617dcc573d053f606891573e8b37a5ee8e7645e0396393ef820b8a7dcbdbb06490e961306cf2e976c3084777e6a01b740cb6eaa6081706d07dcefb7c851df96d896d04f3ab4ae0ac68730771ae80b3171801783c94a36319df8348971ce9c10e88e87ccbfd956b3ca3"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0xe, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)="3d4077e50823a7746c0ee30dd0afdfb5ff2a258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db17901", 0x2a}, {&(0x7f0000000080)="b28231adddba8ed6f23bf98ca8caa015ab797f57", 0x14}], 0x2, 0x0) recvmmsg(r6, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) 98.278059ms ago: executing program 1 (id=314): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a00000001801000076cd2e3e2ad47d0a002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000004000000e00000020000000000000000000000000000000000000000000000000000000000000000100000000a0020"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) 77.739973ms ago: executing program 1 (id=315): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) fsopen(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000200)='atkbd', 0x5) 41.843611ms ago: executing program 1 (id=316): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001300010000000000000000000700", @ANYRES32=r1, @ANYBLOB="000000000000000034001a8006000000020000002800058024000180080001000100000008000200000000000800030000000000080004"], 0x54}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000d2}, 0x0) 26.139355ms ago: executing program 1 (id=317): sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd27, &(0x7f0000000040)=[{&(0x7f0000000080)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100070000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd1b642383656d4d2449155037", 0x55}], 0x1}, 0x4000080) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000840) 0s ago: executing program 1 (id=318): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x103) r0 = getpgrp(0xffffffffffffffff) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x0, 0x0, 0x0}, 0x94) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r1, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xb, &(0x7f00000004c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x6, 0xde, &(0x7f0000003e40)=""/222, 0x41100, 0x73}, 0x94) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/sem\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='20', 0x2) write$P9_RLCREATE(r5, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x80, 0x3, 0x6}, 0x10001}}, 0x18) kernel console output (not intermixed with test programs): [ 20.434443][ T29] audit: type=1400 audit(1790471000.891:106): avc: denied { write } for pid=3224 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.465849][ T29] audit: type=1400 audit(1790471000.931:107): avc: denied { write } for pid=3235 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.560323][ T29] audit: type=1400 audit(1790471001.021:108): avc: denied { write } for pid=3238 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.569483][ T29] audit: type=1400 audit(1790471001.031:109): avc: denied { write } for pid=3249 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.900196][ T29] audit: type=1400 audit(1790471001.361:110): avc: denied { write } for pid=3252 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.909556][ T29] audit: type=1400 audit(1790471001.371:111): avc: denied { write } for pid=3263 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.291840][ T29] audit: type=1400 audit(1790471001.751:112): avc: denied { transition } for pid=3269 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.291933][ T29] audit: type=1400 audit(1790471001.751:113): avc: denied { noatsecure } for pid=3269 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.292253][ T29] audit: type=1400 audit(1790471001.751:114): avc: denied { write } for pid=3269 comm="sh" path="pipe:[2566]" dev="pipefs" ino=2566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 21.740917][ T3278] scp (3278) used greatest stack depth: 11216 bytes left Warning: Permanently added '10.128.0.114' (ED25519) to the list of known hosts. [ 28.583415][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 28.583430][ T29] audit: type=1400 audit(1790471009.041:117): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.583642][ T29] audit: type=1400 audit(1790471009.041:118): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.584072][ T3287] cgroup: Unknown subsys name 'net' [ 28.584277][ T29] audit: type=1400 audit(1790471009.041:119): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.719591][ T3287] cgroup: Unknown subsys name 'cpuset' [ 28.720120][ T3287] cgroup: Unknown subsys name 'rlimit' [ 28.805543][ T29] audit: type=1400 audit(1790471009.261:120): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.806489][ T29] audit: type=1400 audit(1790471009.261:121): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.806556][ T29] audit: type=1400 audit(1790471009.261:122): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.806909][ T29] audit: type=1400 audit(1790471009.261:123): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.812413][ T29] audit: type=1400 audit(1790471009.271:124): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.812440][ T29] audit: type=1400 audit(1790471009.271:125): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.862043][ T3290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.862218][ T29] audit: type=1400 audit(1790471009.321:126): avc: denied { relabelto } for pid=3290 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.921695][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.304665][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.304701][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.304805][ T3299] bridge_slave_0: entered allmulticast mode [ 30.305268][ T3299] bridge_slave_0: entered promiscuous mode [ 30.305704][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.305735][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.305855][ T3298] bridge_slave_0: entered allmulticast mode [ 30.306325][ T3298] bridge_slave_0: entered promiscuous mode [ 30.321030][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.321059][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.321143][ T3298] bridge_slave_1: entered allmulticast mode [ 30.321569][ T3298] bridge_slave_1: entered promiscuous mode [ 30.342547][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.342583][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.342633][ T3304] bridge_slave_0: entered allmulticast mode [ 30.343162][ T3304] bridge_slave_0: entered promiscuous mode [ 30.344065][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.344093][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.344144][ T3299] bridge_slave_1: entered allmulticast mode [ 30.344642][ T3299] bridge_slave_1: entered promiscuous mode [ 30.366590][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.366620][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.366670][ T3304] bridge_slave_1: entered allmulticast mode [ 30.367078][ T3304] bridge_slave_1: entered promiscuous mode [ 30.373153][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.374587][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.375901][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.377197][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.386427][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.386463][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.386647][ T3303] bridge_slave_0: entered allmulticast mode [ 30.387111][ T3303] bridge_slave_0: entered promiscuous mode [ 30.400797][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.400826][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.400915][ T3303] bridge_slave_1: entered allmulticast mode [ 30.401525][ T3303] bridge_slave_1: entered promiscuous mode [ 30.415568][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.415597][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.415725][ T3305] bridge_slave_0: entered allmulticast mode [ 30.416206][ T3305] bridge_slave_0: entered promiscuous mode [ 30.423089][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.424328][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.425160][ T3299] team0: Port device team_slave_0 added [ 30.425743][ T3298] team0: Port device team_slave_0 added [ 30.426524][ T3298] team0: Port device team_slave_1 added [ 30.426653][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.426761][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.426810][ T3305] bridge_slave_1: entered allmulticast mode [ 30.427250][ T3305] bridge_slave_1: entered promiscuous mode [ 30.437890][ T3299] team0: Port device team_slave_1 added [ 30.448131][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.449637][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.455416][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.470497][ T3304] team0: Port device team_slave_0 added [ 30.479742][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.479754][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.479781][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.480368][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.480380][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.480468][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.481349][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.481664][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.481675][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.481702][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.482415][ T3304] team0: Port device team_slave_1 added [ 30.487512][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.487524][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.487552][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.508905][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.508918][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.508946][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.516257][ T3303] team0: Port device team_slave_0 added [ 30.517252][ T3303] team0: Port device team_slave_1 added [ 30.519091][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.519125][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.519152][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.542581][ T3305] team0: Port device team_slave_0 added [ 30.543481][ T3305] team0: Port device team_slave_1 added [ 30.545946][ T3298] hsr_slave_0: entered promiscuous mode [ 30.546436][ T3298] hsr_slave_1: entered promiscuous mode [ 30.560683][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.560695][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.560760][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.561350][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.561361][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.561423][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.584837][ T3299] hsr_slave_0: entered promiscuous mode [ 30.585181][ T3299] hsr_slave_1: entered promiscuous mode [ 30.585387][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 30.585406][ T3299] Cannot create hsr debugfs directory [ 30.587744][ T3304] hsr_slave_0: entered promiscuous mode [ 30.588197][ T3304] hsr_slave_1: entered promiscuous mode [ 30.588549][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 30.588561][ T3304] Cannot create hsr debugfs directory [ 30.596189][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.596201][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.596228][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.596678][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.596688][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.596732][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.653825][ T3303] hsr_slave_0: entered promiscuous mode [ 30.654225][ T3303] hsr_slave_1: entered promiscuous mode [ 30.654415][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 30.654428][ T3303] Cannot create hsr debugfs directory [ 30.656521][ T3305] hsr_slave_0: entered promiscuous mode [ 30.656854][ T3305] hsr_slave_1: entered promiscuous mode [ 30.657167][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 30.657180][ T3305] Cannot create hsr debugfs directory [ 30.890478][ T3298] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.908499][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.919931][ T3298] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.924367][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.935987][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.963280][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.963707][ T3298] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.973044][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.973694][ T3298] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.978855][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.985813][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.990630][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.995866][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.002538][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.011117][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.011148][ T3298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.011319][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.011367][ T3298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.015788][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.028918][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.030316][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.040109][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.048428][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.072068][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.081012][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.087934][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.094402][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.098894][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.121281][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.126727][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.133465][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.133496][ T3304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.133573][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.133685][ T3304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.147740][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.160844][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.167197][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.167227][ T3305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.167319][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.167368][ T3305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.169770][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.173791][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.177300][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.181079][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.203216][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.211150][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.213373][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.223280][ T140] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.228921][ T140] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.240136][ T140] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.245721][ T140] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.291096][ T140] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.314604][ T140] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.389604][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.397895][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.419907][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.428854][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.430044][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.435241][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.444562][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.543145][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.543177][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.544493][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.544557][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.564422][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.578960][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.602621][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.618920][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.618951][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.625293][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.633959][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.633989][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.635739][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.635768][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.645183][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.645213][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.679581][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.705588][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.717683][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.717714][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.721605][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.726142][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.726178][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.746478][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.771526][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.771557][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.787386][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.787417][ T342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.983399][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.050796][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.057094][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.088325][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.092578][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.138195][ T3304] veth0_vlan: entered promiscuous mode [ 32.141136][ T3304] veth1_vlan: entered promiscuous mode [ 32.151024][ T3304] veth0_macvtap: entered promiscuous mode [ 32.152496][ T3304] veth1_macvtap: entered promiscuous mode [ 32.157764][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.163489][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.182568][ T140] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.182608][ T140] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.182644][ T140] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.182677][ T140] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.271474][ T3304] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.275816][ T3299] veth0_vlan: entered promiscuous mode [ 32.296246][ T3299] veth1_vlan: entered promiscuous mode [ 32.322710][ T3500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.322896][ T3500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.323875][ T3299] veth0_macvtap: entered promiscuous mode [ 32.338072][ T3305] veth0_vlan: entered promiscuous mode [ 32.339226][ T3299] veth1_macvtap: entered promiscuous mode [ 32.361830][ T3298] veth0_vlan: entered promiscuous mode [ 32.362616][ T3305] veth1_vlan: entered promiscuous mode [ 32.368910][ T3298] veth1_vlan: entered promiscuous mode [ 32.379635][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.385301][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.395064][ T3298] veth0_macvtap: entered promiscuous mode [ 32.396713][ T3298] veth1_macvtap: entered promiscuous mode [ 32.404437][ T3483] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.404539][ T3483] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.404604][ T3483] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.405616][ T3305] veth0_macvtap: entered promiscuous mode [ 32.412421][ T3305] veth1_macvtap: entered promiscuous mode [ 32.460836][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.469853][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.476027][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.482030][ T3483] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.482221][ T3483] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.482259][ T3483] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.482369][ T3483] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.483739][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.485387][ T3303] veth0_vlan: entered promiscuous mode [ 32.492005][ T3303] veth1_vlan: entered promiscuous mode [ 32.499930][ T3500] loop0: detected capacity change from 0 to 512 [ 32.565095][ T3500] lo: entered promiscuous mode [ 32.577544][ T3500] tunl0: entered promiscuous mode [ 32.578439][ T3500] gre0: entered promiscuous mode [ 32.585983][ T3500] gretap0: entered promiscuous mode [ 32.589482][ T3500] erspan0: entered promiscuous mode [ 32.591287][ T3500] ip_vti0: entered promiscuous mode [ 32.592523][ T3500] ip6_vti0: entered promiscuous mode [ 32.593862][ T3500] sit0: entered promiscuous mode [ 32.595603][ T3500] ip6tnl0: entered promiscuous mode [ 32.596973][ T3500] ip6gre0: entered promiscuous mode [ 32.600495][ T3500] syz_tun: entered promiscuous mode [ 32.605667][ T3500] ip6gretap0: entered promiscuous mode [ 32.606960][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.607240][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.607610][ T3500] bridge0: entered promiscuous mode [ 32.609730][ T3500] vcan0: entered promiscuous mode [ 32.610972][ T3500] bond0: entered promiscuous mode [ 32.611008][ T3500] bond_slave_0: entered promiscuous mode [ 32.611139][ T3500] bond_slave_1: entered promiscuous mode [ 32.612757][ T3500] team0: entered promiscuous mode [ 32.612853][ T3500] team_slave_0: entered promiscuous mode [ 32.612953][ T3500] team_slave_1: entered promiscuous mode [ 32.614292][ T3500] dummy0: entered promiscuous mode [ 32.615940][ T3500] nlmon0: entered promiscuous mode [ 32.616878][ T3500] batadv0: entered promiscuous mode [ 32.618212][ T3500] vxcan0: entered promiscuous mode [ 32.618943][ T3500] vxcan1: entered promiscuous mode [ 32.622038][ T3500] veth0: entered promiscuous mode [ 32.623536][ T3500] veth1: entered promiscuous mode [ 32.626577][ T3500] wg0: entered promiscuous mode [ 32.631772][ T3500] wg1: entered promiscuous mode [ 32.637341][ T3500] wg2: entered promiscuous mode [ 32.638322][ T3500] veth0_to_bridge: entered promiscuous mode [ 32.642312][ T3500] veth1_to_bridge: entered promiscuous mode [ 32.645222][ T3500] veth0_to_bond: entered promiscuous mode [ 32.647099][ T3500] veth1_to_bond: entered promiscuous mode [ 32.648671][ T3500] veth0_to_team: entered promiscuous mode [ 32.651373][ T3500] veth1_to_team: entered promiscuous mode [ 32.653532][ T3500] veth0_to_batadv: entered promiscuous mode [ 32.654849][ T3500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.654971][ T3500] batadv_slave_0: entered promiscuous mode [ 32.656128][ T3500] veth1_to_batadv: entered promiscuous mode [ 32.657611][ T3500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.657643][ T3500] batadv_slave_1: entered promiscuous mode [ 32.658843][ T3500] xfrm0: entered promiscuous mode [ 32.660989][ T3500] veth0_to_hsr: entered promiscuous mode [ 32.662833][ T3500] veth1_to_hsr: entered promiscuous mode [ 32.665163][ T3500] hsr0: entered promiscuous mode [ 32.666277][ T3500] veth1_virt_wifi: entered promiscuous mode [ 32.667526][ T3500] veth0_virt_wifi: entered promiscuous mode [ 32.674034][ T3500] vlan0: entered promiscuous mode [ 32.675269][ T3500] vlan1: entered promiscuous mode [ 32.678299][ T3500] macvlan0: entered promiscuous mode [ 32.683333][ T3500] macvlan1: entered promiscuous mode [ 32.684503][ T3500] ipvlan0: entered promiscuous mode [ 32.684641][ T3500] ipvlan1: entered promiscuous mode [ 32.694940][ T3500] macvtap0: entered promiscuous mode [ 32.696173][ T3500] macsec0: entered promiscuous mode [ 32.697500][ T3500] geneve0: entered promiscuous mode [ 32.698553][ T3500] geneve1: entered promiscuous mode [ 32.710437][ T3500] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 32.720726][ T3500] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 32.730917][ T3500] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 32.740685][ T3500] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 32.748252][ T3303] veth0_macvtap: entered promiscuous mode [ 32.751573][ T3303] veth1_macvtap: entered promiscuous mode [ 32.764447][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.768865][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.780295][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.780344][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.780527][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.780610][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.780723][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.780759][ T31] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.780922][ T31] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.780956][ T31] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.781059][ T31] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.819217][ T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.819255][ T42] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.819345][ T42] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.819376][ T42] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.158074][ T3526] syz.2.3(3526): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 33.204515][ T3525] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6'. [ 33.310884][ T3520] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 33.371549][ T3528] loop4: detected capacity change from 0 to 2048 [ 33.374227][ T3532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9'. [ 33.411297][ T3528] loop4: p1 p3 < > p4 < p5 > [ 33.411386][ T3528] loop4: partition table partially beyond EOD, truncated [ 33.411657][ T3528] loop4: p1 size 196608 extends beyond EOD, truncated [ 33.416697][ T3528] loop4: p3 start 614273 is beyond EOD, truncated [ 33.429651][ T3500] syz.0.1 (3500) used greatest stack depth: 10248 bytes left [ 33.464866][ T3528] loop4: p5 size 196608 extends beyond EOD, truncated [ 33.498519][ T3542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 33.562281][ T3521] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 33.589614][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 33.589639][ T29] audit: type=1400 audit(1790471014.051:182): avc: denied { create } for pid=3551 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.590159][ T29] audit: type=1400 audit(1790471014.051:183): avc: denied { bind } for pid=3551 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.590333][ T29] audit: type=1400 audit(1790471014.051:184): avc: denied { setopt } for pid=3551 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.592776][ T29] audit: type=1400 audit(1790471014.051:185): avc: denied { listen } for pid=3551 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.592826][ T29] audit: type=1400 audit(1790471014.051:186): avc: denied { connect } for pid=3551 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.592850][ T29] audit: type=1400 audit(1790471014.051:187): avc: denied { accept } for pid=3551 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.592869][ T29] audit: type=1400 audit(1790471014.051:188): avc: denied { write } for pid=3551 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.683728][ T29] audit: type=1400 audit(1790471014.151:189): avc: denied { read } for pid=3551 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.791264][ T3561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.791416][ T3561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.815921][ T3561] loop3: detected capacity change from 0 to 512 [ 33.830269][ T29] audit: type=1400 audit(1790471014.291:190): avc: denied { create } for pid=3560 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 33.831568][ T29] audit: type=1400 audit(1790471014.291:191): avc: denied { write } for pid=3560 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 33.832519][ T3561] lo: entered promiscuous mode [ 33.834486][ T3561] tunl0: entered promiscuous mode [ 33.836186][ T3561] gre0: entered promiscuous mode [ 33.850455][ T3561] gretap0: entered promiscuous mode [ 33.870729][ T3561] erspan0: entered promiscuous mode [ 33.872885][ T3561] ip_vti0: entered promiscuous mode [ 33.874152][ T3561] ip6_vti0: entered promiscuous mode [ 33.876994][ T3561] sit0: entered promiscuous mode [ 33.892482][ T3561] ip6tnl0: entered promiscuous mode [ 33.903629][ T3561] ip6gre0: entered promiscuous mode [ 33.923399][ T3561] syz_tun: entered promiscuous mode [ 33.925282][ T3561] ip6gretap0: entered promiscuous mode [ 33.927205][ T3561] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.927397][ T3561] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.927697][ T3561] bridge0: entered promiscuous mode [ 33.960400][ T3561] vcan0: entered promiscuous mode [ 33.961896][ T3561] bond0: entered promiscuous mode [ 33.961999][ T3561] bond_slave_0: entered promiscuous mode [ 33.962188][ T3561] bond_slave_1: entered promiscuous mode [ 33.964295][ T3561] team0: entered promiscuous mode [ 33.964323][ T3561] team_slave_0: entered promiscuous mode [ 33.964481][ T3561] team_slave_1: entered promiscuous mode [ 33.966803][ T3561] dummy0: entered promiscuous mode [ 33.968371][ T3561] nlmon0: entered promiscuous mode [ 34.020308][ T3561] batadv0: entered promiscuous mode [ 34.022148][ T3561] vxcan0: entered promiscuous mode [ 34.022968][ T3561] vxcan1: entered promiscuous mode [ 34.023870][ T3561] veth0: entered promiscuous mode [ 34.025727][ T3561] veth1: entered promiscuous mode [ 34.028018][ T3540] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 34.028764][ T3561] wg0: entered promiscuous mode [ 34.039623][ T3561] wg1: entered promiscuous mode [ 34.050362][ T3561] wg2: entered promiscuous mode [ 34.051526][ T3561] veth0_to_bridge: entered promiscuous mode [ 34.067462][ T3561] veth1_to_bridge: entered promiscuous mode [ 34.090863][ T3561] veth0_to_bond: entered promiscuous mode [ 34.093138][ T3561] veth1_to_bond: entered promiscuous mode [ 34.095284][ T3561] veth0_to_team: entered promiscuous mode [ 34.098196][ T3561] veth1_to_team: entered promiscuous mode [ 34.101888][ T3561] veth0_to_batadv: entered promiscuous mode [ 34.103504][ T3561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.103553][ T3561] batadv_slave_0: entered promiscuous mode [ 34.104895][ T3561] veth1_to_batadv: entered promiscuous mode [ 34.106257][ T3561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.106289][ T3561] batadv_slave_1: entered promiscuous mode [ 34.107774][ T3561] xfrm0: entered promiscuous mode [ 34.110482][ T3561] veth0_to_hsr: entered promiscuous mode [ 34.112914][ T3561] veth1_to_hsr: entered promiscuous mode [ 34.148307][ T3561] hsr0: entered promiscuous mode [ 34.164587][ T3561] veth1_virt_wifi: entered promiscuous mode [ 34.165588][ T3561] veth0_virt_wifi: entered promiscuous mode [ 34.184032][ T3561] vlan0: entered promiscuous mode [ 34.185133][ T3561] vlan1: entered promiscuous mode [ 34.198270][ T3561] macvlan0: entered promiscuous mode [ 34.205267][ T3561] macvlan1: entered promiscuous mode [ 34.206295][ T3561] ipvlan0: entered promiscuous mode [ 34.206405][ T3561] ipvlan1: entered promiscuous mode [ 34.225503][ T3561] macvtap0: entered promiscuous mode [ 34.226687][ T3561] macsec0: entered promiscuous mode [ 34.228955][ T3561] geneve0: entered promiscuous mode [ 34.232061][ T3561] geneve1: entered promiscuous mode [ 34.240150][ T3561] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 34.251108][ T3561] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 34.265796][ T3561] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 34.267022][ T3561] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 34.267930][ T3561] macvlan2: entered promiscuous mode [ 34.289364][ T31] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.289399][ T31] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.289428][ T31] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.295880][ T3559] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 34.389868][ T3483] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.430206][ T3574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 34.544218][ T3583] netlink: 'syz.0.26': attribute type 10 has an invalid length. [ 34.544244][ T3583] netdevsim netdevsim0 netdevsim2: left promiscuous mode [ 34.544516][ T3583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.545166][ T3583] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 34.547162][ T3583] team0: Port device netdevsim2 added [ 34.552088][ T3583] netlink: 'syz.0.26': attribute type 10 has an invalid length. [ 34.552315][ T3583] netdevsim netdevsim0 netdevsim2: left promiscuous mode [ 34.599421][ T3583] team0: Port device netdevsim2 removed [ 34.599837][ T3583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.600840][ T3583] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 34.601137][ T3583] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 34.672364][ T3576] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 34.742073][ T3588] process 'syz.4.28' launched './file0' with NULL argv: empty string added [ 34.762903][ T3588] batman_adv: batadv0: Adding interface: syzkaller0 [ 34.762914][ T3588] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.762977][ T3588] batman_adv: batadv0: Interface activated: syzkaller0 [ 34.779819][ T3586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.27'. [ 34.847022][ T3591] loop1: detected capacity change from 0 to 512 [ 34.863622][ T3591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.863769][ T3591] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.864239][ T3591] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.946479][ T3587] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 34.957417][ T3587] batman_adv: batadv0: Removing interface: syzkaller0 [ 34.958957][ T3599] loop3: detected capacity change from 0 to 512 [ 34.983307][ T3599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.983497][ T3599] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.984656][ T3599] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.064525][ T3610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.068036][ T3610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.092267][ T3610] lo: entered promiscuous mode [ 35.099738][ T3610] tunl0: entered promiscuous mode [ 35.104158][ T3610] gre0: entered promiscuous mode [ 35.127937][ T3610] gretap0: entered promiscuous mode [ 35.136848][ T3610] erspan0: entered promiscuous mode [ 35.150125][ T3610] ip_vti0: entered promiscuous mode [ 35.152113][ T3610] ip6_vti0: entered promiscuous mode [ 35.154317][ T3610] sit0: entered promiscuous mode [ 35.158281][ T3610] ip6tnl0: entered promiscuous mode [ 35.181593][ T3610] ip6gre0: entered promiscuous mode [ 35.184069][ T3610] syz_tun: entered promiscuous mode [ 35.186857][ T3610] ip6gretap0: entered promiscuous mode [ 35.192102][ T3610] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.192316][ T3610] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.201479][ T3610] bridge0: entered promiscuous mode [ 35.207297][ T3610] vcan0: entered promiscuous mode [ 35.222393][ T3619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.36'. [ 35.232464][ T3610] bond0: entered promiscuous mode [ 35.232491][ T3610] bond_slave_0: entered promiscuous mode [ 35.232630][ T3610] bond_slave_1: entered promiscuous mode [ 35.249402][ T3610] team0: entered promiscuous mode [ 35.249430][ T3610] team_slave_0: entered promiscuous mode [ 35.249626][ T3610] team_slave_1: entered promiscuous mode [ 35.256294][ T3610] dummy0: entered promiscuous mode [ 35.279836][ T3610] nlmon0: entered promiscuous mode [ 35.283545][ T3610] batadv0: entered promiscuous mode [ 35.300746][ T3610] vxcan0: entered promiscuous mode [ 35.301696][ T3610] vxcan1: entered promiscuous mode [ 35.302698][ T3610] veth0: entered promiscuous mode [ 35.304591][ T3610] veth1: entered promiscuous mode [ 35.320350][ T3610] wg0: entered promiscuous mode [ 35.332425][ T3625] loop0: detected capacity change from 0 to 1024 [ 35.343179][ T3625] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 35.343849][ T3625] JBD2: no valid journal superblock found [ 35.343938][ T3625] EXT4-fs (loop0): Could not load journal inode [ 35.345255][ T3610] wg1: entered promiscuous mode [ 35.359072][ T3610] wg2: entered promiscuous mode [ 35.372272][ T3610] veth0_to_bridge: entered promiscuous mode [ 35.391360][ T3610] veth1_to_bridge: entered promiscuous mode [ 35.395552][ T3610] veth0_to_bond: entered promiscuous mode [ 35.398460][ T3610] veth1_to_bond: entered promiscuous mode [ 35.418582][ T3610] veth0_to_team: entered promiscuous mode [ 35.428241][ T3610] veth1_to_team: entered promiscuous mode [ 35.437329][ T3610] veth0_to_batadv: entered promiscuous mode [ 35.474282][ T3610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.474332][ T3610] batadv_slave_0: entered promiscuous mode [ 35.475977][ T3610] veth1_to_batadv: entered promiscuous mode [ 35.478071][ T3610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.478115][ T3610] batadv_slave_1: entered promiscuous mode [ 35.480153][ T3610] xfrm0: entered promiscuous mode [ 35.481810][ T3610] veth0_to_hsr: entered promiscuous mode [ 35.484665][ T3610] veth1_to_hsr: entered promiscuous mode [ 35.488176][ T3610] hsr0: entered promiscuous mode [ 35.489794][ T3610] veth1_virt_wifi: entered promiscuous mode [ 35.491496][ T3610] veth0_virt_wifi: entered promiscuous mode [ 35.497105][ T3610] vlan0: entered promiscuous mode [ 35.499651][ T3610] vlan1: entered promiscuous mode [ 35.618340][ T3629] loop0: detected capacity change from 0 to 512 [ 35.705359][ T3629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.705463][ T3629] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.715700][ T3629] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.38: iget: bad i_size value: 2533274857506816 [ 35.971881][ T3610] macvlan0: entered promiscuous mode [ 35.973735][ T3610] macvlan1: entered promiscuous mode [ 35.975071][ T3610] ipvlan0: entered promiscuous mode [ 35.975228][ T3610] ipvlan1: entered promiscuous mode [ 35.978385][ T3610] macvtap0: entered promiscuous mode [ 35.979915][ T3610] macsec0: entered promiscuous mode [ 35.982494][ T3610] geneve0: entered promiscuous mode [ 35.983970][ T3610] geneve1: entered promiscuous mode [ 35.990768][ T3610] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 36.032599][ T3610] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 36.042070][ T3610] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 36.043370][ T3610] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 36.044282][ T3613] geneve1: left promiscuous mode [ 36.079997][ T3483] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.080033][ T3483] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.080119][ T3483] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.080153][ T3483] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.224406][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.450538][ T3641] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 36.633568][ T3662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'. [ 36.695604][ T3645] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 36.829783][ T3666] Zero length message leads to an empty skb [ 36.829913][ T3666] netlink: 16 bytes leftover after parsing attributes in process `syz.3.50'. [ 36.879078][ T3671] loop3: detected capacity change from 0 to 512 [ 36.897355][ T3671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.897488][ T3671] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.912693][ T3671] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.977277][ T3647] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 36.987281][ T3675] loop4: detected capacity change from 0 to 164 [ 37.061011][ T3680] netlink: 16 bytes leftover after parsing attributes in process `syz.3.54'. [ 37.066422][ T3682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.56'. [ 37.234891][ T3692] loop2: detected capacity change from 0 to 2048 [ 37.256323][ T3652] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 37.472694][ T3713] FAULT_INJECTION: forcing a failure. [ 37.472694][ T3713] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 37.472728][ T3713] CPU: 1 UID: 0 PID: 3713 Comm: syz.2.61 Not tainted syzkaller #0 PREEMPT(lazy) [ 37.472806][ T3713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.472824][ T3713] Call Trace: [ 37.472831][ T3713] [ 37.472840][ T3713] __dump_stack+0x1d/0x30 [ 37.472866][ T3713] dump_stack_lvl+0x95/0xd0 [ 37.472889][ T3713] dump_stack+0x15/0x1b [ 37.472985][ T3713] should_fail_ex+0x262/0x280 [ 37.473011][ T3713] should_fail_alloc_page+0xf2/0x100 [ 37.473123][ T3713] __alloc_frozen_pages_noprof+0x157/0x400 [ 37.473211][ T3713] alloc_pages_mpol+0xaf/0x1d0 [ 37.473234][ T3713] alloc_pages_noprof+0x94/0x140 [ 37.473259][ T3713] __pmd_alloc+0x47/0x430 [ 37.473339][ T3713] ? security_inode_alloc+0x37/0x100 [ 37.473432][ T3713] handle_mm_fault+0x2bba/0x3bb0 [ 37.473461][ T3713] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 37.473488][ T3713] do_user_addr_fault+0x404/0x1060 [ 37.473560][ T3713] exc_page_fault+0x62/0xa0 [ 37.473590][ T3713] asm_exc_page_fault+0x26/0x30 [ 37.473613][ T3713] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 37.473641][ T3713] Code: c4 10 e9 44 23 02 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 23 02 00 66 2e [ 37.473723][ T3713] RSP: 0018:ffffc9000555fc78 EFLAGS: 00050202 [ 37.473741][ T3713] RAX: ffff888100a90b40 RBX: 0000000000000004 RCX: 0000000000000004 [ 37.473808][ T3713] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc9000555fd60 [ 37.473823][ T3713] RBP: ffffc9000555fe90 R08: 000000000000045b R09: 0000000000000000 [ 37.473911][ T3713] R10: 0001c9000555fd60 R11: 0001c9000555fd63 R12: ffff888100542988 [ 37.473927][ T3713] R13: 000000004004662b R14: ffffc9000555fd60 R15: 0000000000000000 [ 37.473979][ T3713] _copy_from_user+0x6f/0xb0 [ 37.474008][ T3713] ext4_ioctl+0x79c/0x3210 [ 37.474043][ T3713] ? do_vfs_ioctl+0x848/0xe50 [ 37.474129][ T3713] ? selinux_file_ioctl+0x33c/0x3c0 [ 37.474152][ T3713] ? __fget_files+0x184/0x1c0 [ 37.474174][ T3713] ? mutex_lock+0x57/0x90 [ 37.474261][ T3713] ? __pfx_ext4_ioctl+0x10/0x10 [ 37.474295][ T3713] __se_sys_ioctl+0xce/0x140 [ 37.474326][ T3713] __x64_sys_ioctl+0x43/0x50 [ 37.474352][ T3713] x64_sys_call+0x239d/0x2550 [ 37.474544][ T3713] do_syscall_64+0x112/0x360 [ 37.474571][ T3713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.474731][ T3713] RIP: 0033:0x7fc7799ae159 [ 37.474752][ T3713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.474841][ T3713] RSP: 002b:00007fc778407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 37.474862][ T3713] RAX: ffffffffffffffda RBX: 00007fc779c35fa0 RCX: 00007fc7799ae159 [ 37.474878][ T3713] RDX: 0000000000000000 RSI: 000000004004662b RDI: 0000000000000003 [ 37.474892][ T3713] RBP: 00007fc778407090 R08: 0000000000000000 R09: 0000000000000000 [ 37.474906][ T3713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.474920][ T3713] R13: 00007fc779c36038 R14: 00007fc779c35fa0 R15: 00007ffe7e24fff8 [ 37.474983][ T3713] [ 37.642283][ T3718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.642398][ T3718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.707371][ T3718] loop0: detected capacity change from 0 to 512 [ 37.770612][ T3718] macvlan2: entered promiscuous mode [ 38.256130][ T3735] loop4: detected capacity change from 0 to 512 [ 38.288096][ T3735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.288230][ T3735] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.293896][ T3735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.396628][ T3733] loop3: detected capacity change from 0 to 2048 [ 38.421377][ T3733] loop3: p1 p3 < > p4 < p5 > [ 38.421395][ T3733] loop3: partition table partially beyond EOD, truncated [ 38.421906][ T3733] loop3: p1 size 196608 extends beyond EOD, truncated [ 38.430006][ T3733] loop3: p3 start 614273 is beyond EOD, truncated [ 38.435550][ T3733] loop3: p5 size 196608 extends beyond EOD, truncated [ 38.570838][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 38.573556][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 38.574012][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 38.770012][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 38.770028][ T29] audit: type=1400 audit(1790471019.231:238): avc: denied { getopt } for pid=3758 comm="syz.0.76" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.811670][ T29] audit: type=1400 audit(1790471019.271:239): avc: denied { tracepoint } for pid=3765 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.818457][ T29] audit: type=1400 audit(1790471019.271:240): avc: denied { create } for pid=3765 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.822817][ T29] audit: type=1400 audit(1790471019.281:241): avc: denied { mount } for pid=3760 comm="syz.2.78" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 38.826639][ T29] audit: type=1400 audit(1790471019.281:242): avc: denied { setopt } for pid=3765 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.827118][ T29] audit: type=1400 audit(1790471019.281:243): avc: denied { write } for pid=3765 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.827426][ T29] audit: type=1400 audit(1790471019.281:244): avc: denied { watch } for pid=3765 comm="syz.1.79" path="/18" dev="tmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.833772][ T29] audit: type=1400 audit(1790471019.291:245): avc: denied { mounton } for pid=3765 comm="syz.1.79" path="/18/file0" dev="tmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 38.833798][ T29] audit: type=1400 audit(1790471019.291:246): avc: denied { mount } for pid=3765 comm="syz.1.79" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 38.838503][ T3766] ======================================================= [ 38.838503][ T3766] WARNING: The mand mount option has been deprecated and [ 38.838503][ T3766] and is ignored by this kernel. Remove the mand [ 38.838503][ T3766] option from the mount to silence this warning. [ 38.838503][ T3766] ======================================================= [ 38.838567][ T29] audit: type=1400 audit(1790471019.291:247): avc: denied { remount } for pid=3765 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.931057][ T3768] loop4: detected capacity change from 0 to 2048 [ 39.041669][ T3768] loop4: p1 p3 < > p4 < p5 > [ 39.041680][ T3768] loop4: partition table partially beyond EOD, truncated [ 39.041762][ T3768] loop4: p1 size 196608 extends beyond EOD, truncated [ 39.042360][ T3768] loop4: p3 start 614273 is beyond EOD, truncated [ 39.042932][ T3768] loop4: p5 size 196608 extends beyond EOD, truncated [ 39.082737][ T3772] loop1: detected capacity change from 0 to 4096 [ 39.088442][ T3772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.107365][ T3778] loop3: detected capacity change from 0 to 512 [ 39.107679][ T3778] EXT4-fs: Ignoring removed bh option [ 39.123792][ T3778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.123840][ T3778] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.127210][ T3759] FAULT_INJECTION: forcing a failure. [ 39.127210][ T3759] name failslab, interval 1, probability 0, space 0, times 0 [ 39.127337][ T3759] CPU: 0 UID: 0 PID: 3759 Comm: syz.0.76 Not tainted syzkaller #0 PREEMPT(lazy) [ 39.127471][ T3759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.127483][ T3759] Call Trace: [ 39.127489][ T3759] [ 39.127496][ T3759] __dump_stack+0x1d/0x30 [ 39.127587][ T3759] dump_stack_lvl+0x95/0xd0 [ 39.127647][ T3759] dump_stack+0x15/0x1b [ 39.127669][ T3759] should_fail_ex+0x262/0x280 [ 39.127698][ T3759] ? alloc_empty_file+0x70/0x1e0 [ 39.127730][ T3759] should_failslab+0x8c/0xb0 [ 39.127825][ T3759] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 39.127931][ T3759] ? alloc_empty_file+0x70/0x1e0 [ 39.127958][ T3759] alloc_empty_file+0x70/0x1e0 [ 39.128011][ T3759] alloc_file_pseudo+0x92/0x120 [ 39.128033][ T3759] sock_alloc_file+0x9c/0x1e0 [ 39.128071][ T3759] __sys_socket+0x118/0x180 [ 39.128105][ T3759] __x64_sys_socket+0x3f/0x50 [ 39.128133][ T3759] x64_sys_call+0x246e/0x2550 [ 39.128162][ T3759] do_syscall_64+0x112/0x360 [ 39.128232][ T3759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.128256][ T3759] RIP: 0033:0x7fbfcd1de159 [ 39.128274][ T3759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.128300][ T3759] RSP: 002b:00007fbfcbc37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 39.128324][ T3759] RAX: ffffffffffffffda RBX: 00007fbfcd465fa0 RCX: 00007fbfcd1de159 [ 39.128341][ T3759] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e [ 39.128353][ T3759] RBP: 00007fbfcd27506b R08: 0000000000000000 R09: 0000000000000000 [ 39.128365][ T3759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.128377][ T3759] R13: 00007fbfcd466038 R14: 00007fbfcd465fa0 R15: 00007ffcb33e2418 [ 39.128399][ T3759] [ 39.229404][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.312539][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.385915][ T3801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.385991][ T3801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.409571][ T3801] loop4: detected capacity change from 0 to 512 [ 39.428648][ T3801] lo: entered promiscuous mode [ 39.483225][ T3801] tunl0: entered promiscuous mode [ 39.491845][ T3801] gre0: entered promiscuous mode [ 39.511723][ T3801] gretap0: entered promiscuous mode [ 39.517130][ T3801] erspan0: entered promiscuous mode [ 39.531715][ T3801] ip_vti0: entered promiscuous mode [ 39.535969][ T3801] ip6_vti0: entered promiscuous mode [ 39.538469][ T3801] sit0: entered promiscuous mode [ 39.557734][ T3801] ip6tnl0: entered promiscuous mode [ 39.565143][ T3801] ip6gre0: entered promiscuous mode [ 39.568856][ T3801] syz_tun: entered promiscuous mode [ 39.584061][ T3801] ip6gretap0: entered promiscuous mode [ 39.586119][ T3801] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.586354][ T3801] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.586573][ T3801] bridge0: entered promiscuous mode [ 39.588738][ T3801] vcan0: entered promiscuous mode [ 39.620182][ T3801] bond0: entered promiscuous mode [ 39.620286][ T3801] bond_slave_0: entered promiscuous mode [ 39.620365][ T3801] bond_slave_1: entered promiscuous mode [ 39.622974][ T3801] team0: entered promiscuous mode [ 39.623012][ T3801] team_slave_0: entered promiscuous mode [ 39.623223][ T3801] team_slave_1: entered promiscuous mode [ 39.625359][ T3801] dummy0: entered promiscuous mode [ 39.627401][ T3801] nlmon0: entered promiscuous mode [ 39.628694][ T3801] batadv0: entered promiscuous mode [ 39.685490][ T3801] vxcan0: entered promiscuous mode [ 39.686654][ T3801] vxcan1: entered promiscuous mode [ 39.687568][ T3801] veth0: entered promiscuous mode [ 39.705271][ T3801] veth1: entered promiscuous mode [ 39.711963][ T3815] FAULT_INJECTION: forcing a failure. [ 39.711963][ T3815] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 39.712011][ T3815] CPU: 0 UID: 0 PID: 3815 Comm: syz.2.92 Not tainted syzkaller #0 PREEMPT(lazy) [ 39.712077][ T3815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.712089][ T3815] Call Trace: [ 39.712096][ T3815] [ 39.712103][ T3815] __dump_stack+0x1d/0x30 [ 39.712128][ T3815] dump_stack_lvl+0x95/0xd0 [ 39.712151][ T3815] dump_stack+0x15/0x1b [ 39.712206][ T3815] should_fail_ex+0x262/0x280 [ 39.712232][ T3815] should_fail_alloc_page+0xf2/0x100 [ 39.712264][ T3815] alloc_pages_bulk_noprof+0xf5/0x550 [ 39.712318][ T3815] copy_splice_read+0xf3/0x6b0 [ 39.712337][ T3815] ? irqentry_exit+0x58f/0x610 [ 39.712379][ T3815] ? __pfx_copy_splice_read+0x10/0x10 [ 39.712398][ T3815] splice_file_to_pipe+0x23f/0x390 [ 39.712484][ T3815] do_sendfile+0x331/0x640 [ 39.712508][ T3815] __x64_sys_sendfile64+0x105/0x150 [ 39.712529][ T3815] x64_sys_call+0x1015/0x2550 [ 39.712574][ T3815] do_syscall_64+0x112/0x360 [ 39.712597][ T3815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.712661][ T3815] RIP: 0033:0x7fc7799ae159 [ 39.712677][ T3815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.712696][ T3815] RSP: 002b:00007fc778407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 39.712780][ T3815] RAX: ffffffffffffffda RBX: 00007fc779c35fa0 RCX: 00007fc7799ae159 [ 39.712794][ T3815] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 39.712807][ T3815] RBP: 00007fc778407090 R08: 0000000000000000 R09: 0000000000000000 [ 39.712821][ T3815] R10: 00000002000007ff R11: 0000000000000246 R12: 0000000000000001 [ 39.712887][ T3815] R13: 00007fc779c36038 R14: 00007fc779c35fa0 R15: 00007ffe7e24fff8 [ 39.712907][ T3815] [ 39.739221][ T3801] wg0: entered promiscuous mode [ 39.816210][ T3801] wg1: entered promiscuous mode [ 39.821210][ T3801] wg2: entered promiscuous mode [ 39.822649][ T3801] veth0_to_bridge: entered promiscuous mode [ 39.837798][ T3801] veth1_to_bridge: entered promiscuous mode [ 39.860237][ T3801] veth0_to_bond: entered promiscuous mode [ 39.878935][ T3801] veth1_to_bond: entered promiscuous mode [ 39.886482][ T3801] veth0_to_team: entered promiscuous mode [ 39.897061][ T3801] veth1_to_team: entered promiscuous mode [ 39.900578][ T3801] veth0_to_batadv: entered promiscuous mode [ 39.902183][ T3801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.902258][ T3801] batadv_slave_0: entered promiscuous mode [ 39.904379][ T3801] veth1_to_batadv: entered promiscuous mode [ 39.906030][ T3801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.906108][ T3801] batadv_slave_1: entered promiscuous mode [ 39.907721][ T3801] xfrm0: entered promiscuous mode [ 39.910234][ T3801] veth0_to_hsr: entered promiscuous mode [ 39.913374][ T3801] veth1_to_hsr: entered promiscuous mode [ 39.916864][ T3801] hsr0: entered promiscuous mode [ 39.918090][ T3801] veth1_virt_wifi: entered promiscuous mode [ 39.945339][ T3801] veth0_virt_wifi: entered promiscuous mode [ 39.950337][ T3801] vlan0: entered promiscuous mode [ 39.952297][ T3801] vlan1: entered promiscuous mode [ 39.954659][ T3801] macvlan1: entered promiscuous mode [ 39.955958][ T3801] ipvlan0: entered promiscuous mode [ 39.957428][ T3801] ipvlan1: entered promiscuous mode [ 39.992164][ T3801] macvtap0: entered promiscuous mode [ 39.993469][ T3801] macsec0: entered promiscuous mode [ 39.994994][ T3801] geneve0: entered promiscuous mode [ 39.996459][ T3801] geneve1: entered promiscuous mode [ 40.004846][ T3801] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 40.016423][ T3801] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 40.028318][ T3801] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 40.037324][ T3801] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 40.038006][ T3801] macvlan2: entered promiscuous mode [ 40.069593][ T3697] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.069682][ T3697] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.069780][ T3697] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.069877][ T3697] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.099882][ T3827] netlink: 32 bytes leftover after parsing attributes in process `syz.2.97'. [ 40.188961][ T3831] FAULT_INJECTION: forcing a failure. [ 40.188961][ T3831] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 40.188985][ T3831] CPU: 1 UID: 0 PID: 3831 Comm: syz.1.99 Not tainted syzkaller #0 PREEMPT(lazy) [ 40.189061][ T3831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.189074][ T3831] Call Trace: [ 40.189079][ T3831] [ 40.189085][ T3831] __dump_stack+0x1d/0x30 [ 40.189142][ T3831] dump_stack_lvl+0x95/0xd0 [ 40.189166][ T3831] dump_stack+0x15/0x1b [ 40.189188][ T3831] should_fail_ex+0x262/0x280 [ 40.189214][ T3831] should_fail+0xb/0x20 [ 40.189265][ T3831] should_fail_usercopy+0x1a/0x20 [ 40.189290][ T3831] _copy_from_user+0x1c/0xb0 [ 40.189328][ T3831] kstrtouint_from_user+0x69/0xf0 [ 40.189362][ T3831] ? 0xffffffff81000000 [ 40.189377][ T3831] ? avc_policy_seqno+0x15/0x30 [ 40.189427][ T3831] proc_fail_nth_write+0x50/0x160 [ 40.189448][ T3831] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 40.189467][ T3831] vfs_write+0x254/0x9a0 [ 40.189496][ T3831] ? __fget_files+0x184/0x1c0 [ 40.189545][ T3831] ? mutex_lock+0x57/0x90 [ 40.189664][ T3831] ksys_write+0xdc/0x1a0 [ 40.189692][ T3831] __x64_sys_write+0x40/0x50 [ 40.189722][ T3831] x64_sys_call+0x154e/0x2550 [ 40.189783][ T3831] do_syscall_64+0x112/0x360 [ 40.189837][ T3831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.189860][ T3831] RIP: 0033:0x7fe4c094e98e [ 40.189877][ T3831] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 40.189897][ T3831] RSP: 002b:00007fe4bf3e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 40.189926][ T3831] RAX: ffffffffffffffda RBX: 00007fe4bf3e76c0 RCX: 00007fe4c094e98e [ 40.189942][ T3831] RDX: 0000000000000001 RSI: 00007fe4bf3e70a0 RDI: 0000000000000004 [ 40.189986][ T3831] RBP: 00007fe4bf3e7090 R08: 0000000000000000 R09: 0000000000000000 [ 40.189998][ T3831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.190009][ T3831] R13: 00007fe4c0c16038 R14: 00007fe4c0c15fa0 R15: 00007ffdc1aeaef8 [ 40.190027][ T3831] [ 40.269502][ T3483] IPVS: starting estimator thread 0... [ 40.358044][ T3847] loop3: detected capacity change from 0 to 512 [ 40.359160][ T3842] IPVS: using max 2208 ests per chain, 110400 per kthread [ 40.370434][ T3847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.591619][ T3859] netlink: 24 bytes leftover after parsing attributes in process `syz.2.109'. [ 40.614374][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.873139][ T3882] FAULT_INJECTION: forcing a failure. [ 40.873139][ T3882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.873166][ T3882] CPU: 1 UID: 0 PID: 3882 Comm: syz.2.116 Not tainted syzkaller #0 PREEMPT(lazy) [ 40.873192][ T3882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.873259][ T3882] Call Trace: [ 40.873265][ T3882] [ 40.873272][ T3882] __dump_stack+0x1d/0x30 [ 40.873298][ T3882] dump_stack_lvl+0x95/0xd0 [ 40.873321][ T3882] dump_stack+0x15/0x1b [ 40.873340][ T3882] should_fail_ex+0x262/0x280 [ 40.873386][ T3882] should_fail+0xb/0x20 [ 40.873405][ T3882] should_fail_usercopy+0x1a/0x20 [ 40.873433][ T3882] _copy_to_iter+0x248/0xea0 [ 40.873461][ T3882] ? __rcu_read_unlock+0x4e/0x70 [ 40.873560][ T3882] ? traverse+0x385/0x3b0 [ 40.873588][ T3882] seq_read_iter+0x1c5/0x8f0 [ 40.873616][ T3882] seq_read+0x279/0x2c0 [ 40.873696][ T3882] ? __pfx_seq_read+0x10/0x10 [ 40.873721][ T3882] vfs_read+0x18e/0x7c0 [ 40.873750][ T3882] ? __fget_files+0x184/0x1c0 [ 40.873774][ T3882] ? __rcu_read_unlock+0x4e/0x70 [ 40.873869][ T3882] ? __fget_files+0x184/0x1c0 [ 40.873961][ T3882] ? mutex_unlock+0x4e/0x90 [ 40.874019][ T3882] __x64_sys_pread64+0xfd/0x150 [ 40.874051][ T3882] x64_sys_call+0xd2e/0x2550 [ 40.874080][ T3882] do_syscall_64+0x112/0x360 [ 40.874111][ T3882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.874132][ T3882] RIP: 0033:0x7fc7799ae159 [ 40.874146][ T3882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.874234][ T3882] RSP: 002b:00007fc778407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 40.874253][ T3882] RAX: ffffffffffffffda RBX: 00007fc779c35fa0 RCX: 00007fc7799ae159 [ 40.874353][ T3882] RDX: 000000000000100c RSI: 0000200000001c00 RDI: 0000000000000003 [ 40.874368][ T3882] RBP: 00007fc778407090 R08: 0000000000000000 R09: 0000000000000000 [ 40.874380][ T3882] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 40.874392][ T3882] R13: 00007fc779c36038 R14: 00007fc779c35fa0 R15: 00007ffe7e24fff8 [ 40.874477][ T3882] [ 40.945988][ T3885] FAULT_INJECTION: forcing a failure. [ 40.945988][ T3885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.946097][ T3885] CPU: 0 UID: 0 PID: 3885 Comm: syz.4.117 Not tainted syzkaller #0 PREEMPT(lazy) [ 40.946123][ T3885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.946135][ T3885] Call Trace: [ 40.946141][ T3885] [ 40.946149][ T3885] __dump_stack+0x1d/0x30 [ 40.946174][ T3885] dump_stack_lvl+0x95/0xd0 [ 40.946197][ T3885] dump_stack+0x15/0x1b [ 40.946283][ T3885] should_fail_ex+0x262/0x280 [ 40.946377][ T3885] should_fail+0xb/0x20 [ 40.946399][ T3885] should_fail_usercopy+0x1a/0x20 [ 40.946426][ T3885] _copy_from_iter+0xcc/0xe70 [ 40.946453][ T3885] ? alloc_pages_mpol+0xdf/0x1d0 [ 40.946513][ T3885] copy_page_from_iter+0x15d/0x1f0 [ 40.946566][ T3885] tun_get_user+0x612/0x2870 [ 40.946637][ T3885] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 40.946672][ T3885] tun_chr_write_iter+0x15a/0x210 [ 40.946745][ T3885] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 40.946771][ T3885] vfs_write+0x57f/0x9a0 [ 40.946804][ T3885] ksys_write+0xdc/0x1a0 [ 40.946835][ T3885] __x64_sys_write+0x40/0x50 [ 40.946864][ T3885] x64_sys_call+0x154e/0x2550 [ 40.946889][ T3885] do_syscall_64+0x112/0x360 [ 40.946912][ T3885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.947018][ T3885] RIP: 0033:0x7ff2bb4ce98e [ 40.947034][ T3885] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 40.947056][ T3885] RSP: 002b:00007ff2b9f66fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 40.947076][ T3885] RAX: ffffffffffffffda RBX: 00007ff2b9f676c0 RCX: 00007ff2bb4ce98e [ 40.947133][ T3885] RDX: 0000000000000042 RSI: 00002000000002c0 RDI: 00000000000000c8 [ 40.947146][ T3885] RBP: 00007ff2b9f67090 R08: 0000000000000000 R09: 0000000000000000 [ 40.947160][ T3885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.947174][ T3885] R13: 00007ff2bb796038 R14: 00007ff2bb795fa0 R15: 00007ffe62d04e98 [ 40.947194][ T3885] [ 41.008342][ T3889] loop4: detected capacity change from 0 to 512 [ 41.115899][ T3901] FAULT_INJECTION: forcing a failure. [ 41.115899][ T3901] name failslab, interval 1, probability 0, space 0, times 0 [ 41.115950][ T3901] CPU: 1 UID: 0 PID: 3901 Comm: syz.2.120 Not tainted syzkaller #0 PREEMPT(lazy) [ 41.115975][ T3901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.115986][ T3901] Call Trace: [ 41.115992][ T3901] [ 41.115998][ T3901] __dump_stack+0x1d/0x30 [ 41.116043][ T3901] dump_stack_lvl+0x95/0xd0 [ 41.116066][ T3901] dump_stack+0x15/0x1b [ 41.116089][ T3901] should_fail_ex+0x262/0x280 [ 41.116149][ T3901] ? __alloc_skb+0x2e0/0x6f0 [ 41.116178][ T3901] should_failslab+0x8c/0xb0 [ 41.116224][ T3901] kmem_cache_alloc_node_noprof+0x82/0x400 [ 41.116257][ T3901] ? netlink_insert+0x684/0x900 [ 41.116352][ T3901] ? __alloc_skb+0x2e0/0x6f0 [ 41.116382][ T3901] __alloc_skb+0x2e0/0x6f0 [ 41.116457][ T3901] ? __alloc_skb+0x209/0x6f0 [ 41.116486][ T3901] netlink_alloc_large_skb+0xbf/0xf0 [ 41.116528][ T3901] netlink_sendmsg+0x40c/0x6f0 [ 41.116605][ T3901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 41.116639][ T3901] ____sys_sendmsg+0x532/0x580 [ 41.116660][ T3901] ___sys_sendmsg+0x195/0x1e0 [ 41.116734][ T3901] __x64_sys_sendmsg+0xd4/0x160 [ 41.116759][ T3901] x64_sys_call+0x22ab/0x2550 [ 41.116782][ T3901] do_syscall_64+0x112/0x360 [ 41.116802][ T3901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.116831][ T3901] RIP: 0033:0x7fc7799ae159 [ 41.116848][ T3901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.116868][ T3901] RSP: 002b:00007fc7783e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.116889][ T3901] RAX: ffffffffffffffda RBX: 00007fc779c36090 RCX: 00007fc7799ae159 [ 41.116922][ T3901] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 41.116934][ T3901] RBP: 00007fc7783e6090 R08: 0000000000000000 R09: 0000000000000000 [ 41.116946][ T3901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.116958][ T3901] R13: 00007fc779c36128 R14: 00007fc779c36090 R15: 00007ffe7e24fff8 [ 41.116977][ T3901] [ 41.135666][ T3880] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 41.585823][ T3910] lo: left promiscuous mode [ 41.587886][ T3910] tunl0: left promiscuous mode [ 41.588899][ T3910] gre0: left promiscuous mode [ 41.592179][ T3910] gretap0: left promiscuous mode [ 41.593926][ T3910] erspan0: left promiscuous mode [ 41.595540][ T3910] ip_vti0: left promiscuous mode [ 41.597166][ T3910] ip6_vti0: left promiscuous mode [ 41.599129][ T3910] sit0: left promiscuous mode [ 41.604790][ T3910] ip6tnl0: left promiscuous mode [ 41.606701][ T3910] ip6gre0: left promiscuous mode [ 41.608526][ T3910] syz_tun: left promiscuous mode [ 41.611106][ T3910] ip6gretap0: left promiscuous mode [ 41.613690][ T3910] bridge0: left promiscuous mode [ 41.614951][ T3910] vcan0: left promiscuous mode [ 41.616320][ T3910] bond0: left promiscuous mode [ 41.618361][ T3910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.622214][ T3910] team0: left promiscuous mode [ 41.622862][ T3910] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.626854][ T3910] dummy0: left promiscuous mode [ 41.629217][ T3910] nlmon0: left promiscuous mode [ 41.631099][ T3910] batadv0: left promiscuous mode [ 41.632917][ T3910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.636033][ T3910] vxcan0: left promiscuous mode [ 41.637721][ T3910] vxcan1: left promiscuous mode [ 41.639128][ T3910] veth0: left promiscuous mode [ 41.641036][ T3910] veth1: left promiscuous mode [ 41.871701][ T3910] wg0: left promiscuous mode [ 41.908416][ T3910] wg1: left promiscuous mode [ 41.954813][ T3910] wg2: left promiscuous mode [ 41.955503][ T3910] veth0_to_bridge: left promiscuous mode [ 41.957802][ T3910] veth1_to_bridge: left promiscuous mode [ 41.960026][ T3910] veth0_to_bond: left promiscuous mode [ 41.960733][ T3910] bond_slave_0: left promiscuous mode [ 41.962500][ T3910] veth1_to_bond: left promiscuous mode [ 41.963008][ T3910] bond_slave_1: left promiscuous mode [ 41.964228][ T3910] veth0_to_team: left promiscuous mode [ 41.964854][ T3910] team_slave_0: left promiscuous mode [ 41.966341][ T3910] veth1_to_team: left promiscuous mode [ 41.967097][ T3910] team_slave_1: left promiscuous mode [ 41.968260][ T3910] veth0_to_batadv: left promiscuous mode [ 41.968859][ T3910] batadv_slave_0: left promiscuous mode [ 41.969225][ T3910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.969431][ T3910] veth1_to_batadv: left promiscuous mode [ 41.970018][ T3910] batadv_slave_1: left promiscuous mode [ 41.970321][ T3910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.970707][ T3910] xfrm0: left promiscuous mode [ 41.971528][ T3910] veth0_to_hsr: left promiscuous mode [ 41.972550][ T3910] veth1_to_hsr: left promiscuous mode [ 41.973456][ T3910] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.973476][ T3910] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.973585][ T3910] hsr0: left promiscuous mode [ 41.974322][ T3910] veth1_virt_wifi: left promiscuous mode [ 41.975102][ T3910] veth0_virt_wifi: left promiscuous mode [ 41.975525][ T3910] veth1_vlan: left promiscuous mode [ 41.978108][ T3910] vlan0: left promiscuous mode [ 41.978886][ T3910] vlan1: left promiscuous mode [ 41.979679][ T3910] veth1_vlan: entered promiscuous mode [ 41.979743][ T3910] macvlan0: left promiscuous mode [ 41.980665][ T3910] macvlan1: left promiscuous mode [ 41.981428][ T3910] ipvlan0: left promiscuous mode [ 41.982113][ T3910] ipvlan1: left promiscuous mode [ 41.982901][ T3910] veth1_macvtap: left promiscuous mode [ 41.983482][ T3910] veth0_macvtap: left promiscuous mode [ 41.984099][ T3910] veth0_macvtap: entered promiscuous mode [ 41.984157][ T3910] macvtap0: left promiscuous mode [ 41.984871][ T3910] veth1_macvtap: entered promiscuous mode [ 41.984967][ T3910] macsec0: left promiscuous mode [ 41.985824][ T3910] geneve0: left promiscuous mode [ 41.987781][ T3910] macvlan2: left promiscuous mode [ 41.988743][ T3910] 8021q: adding VLAN 0 to HW filter on device eth0 [ 41.990947][ T3910] 8021q: adding VLAN 0 to HW filter on device eth1 [ 41.992900][ T3910] 8021q: adding VLAN 0 to HW filter on device eth2 [ 41.995079][ T3910] 8021q: adding VLAN 0 to HW filter on device eth3 [ 42.054274][ T3703] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.056189][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.056220][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.058906][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.058937][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.081841][ T3916] loop0: detected capacity change from 0 to 512 [ 42.090460][ T3916] EXT4-fs: Mount option(s) incompatible with ext2 [ 42.194017][ T3910] syz.3.121 (3910) used greatest stack depth: 9528 bytes left [ 42.281868][ T3483] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.282757][ T3708] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.282801][ T3708] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.457466][ T3941] batman_adv: batadv0: Adding interface: syzkaller0 [ 42.457482][ T3941] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.457530][ T3941] batman_adv: batadv0: Interface activated: syzkaller0 [ 42.655561][ T3944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55656 sclass=netlink_route_socket pid=3944 comm=syz.1.130 [ 42.683573][ T3951] iso9660: Unknown parameter 'ÿÿÿÿ00000000000000000000004 .ÃNÛBþO' [ 42.707784][ T3940] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 42.724598][ T3940] batman_adv: batadv0: Removing interface: syzkaller0 [ 42.753009][ T3951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.131'. [ 42.947332][ T3967] IPv6: Can't replace route, no match found [ 43.050851][ T3957] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 43.114088][ T3976] netlink: 104 bytes leftover after parsing attributes in process `syz.1.138'. [ 43.335717][ T3961] set_capacity_and_notify: 2 callbacks suppressed [ 43.335753][ T3961] loop0: detected capacity change from 0 to 2048 [ 43.374219][ T3984] loop2: detected capacity change from 0 to 512 [ 43.374506][ T3984] EXT4-fs: Ignoring removed bh option [ 43.395060][ T3984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.395160][ T3984] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.424751][ T3961] loop0: p1 p3 < > p4 < p5 > [ 43.424768][ T3961] loop0: partition table partially beyond EOD, truncated [ 43.425710][ T3961] loop0: p1 size 196608 extends beyond EOD, truncated [ 43.444183][ T3990] batman_adv: batadv0: Adding interface: syzkaller0 [ 43.444262][ T3990] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.444325][ T3990] batman_adv: batadv0: Interface activated: syzkaller0 [ 43.489826][ T3961] loop0: p3 start 614273 is beyond EOD, truncated [ 43.493903][ T3961] loop0: p5 size 196608 extends beyond EOD, truncated [ 43.558389][ T3991] FAULT_INJECTION: forcing a failure. [ 43.558389][ T3991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.558412][ T3991] CPU: 1 UID: 0 PID: 3991 Comm: syz.1.142 Not tainted syzkaller #0 PREEMPT(lazy) [ 43.558487][ T3991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.558499][ T3991] Call Trace: [ 43.558504][ T3991] [ 43.558511][ T3991] __dump_stack+0x1d/0x30 [ 43.558534][ T3991] dump_stack_lvl+0x95/0xd0 [ 43.558556][ T3991] dump_stack+0x15/0x1b [ 43.558598][ T3991] should_fail_ex+0x262/0x280 [ 43.558623][ T3991] should_fail+0xb/0x20 [ 43.558644][ T3991] should_fail_usercopy+0x1a/0x20 [ 43.558670][ T3991] _copy_to_user+0x20/0xa0 [ 43.558775][ T3991] simple_read_from_buffer+0xb5/0x130 [ 43.558820][ T3991] proc_fail_nth_read+0x10e/0x150 [ 43.558840][ T3991] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 43.558862][ T3991] vfs_read+0x18e/0x7c0 [ 43.558915][ T3991] ? __rcu_read_unlock+0x4e/0x70 [ 43.558943][ T3991] ? __fget_files+0x184/0x1c0 [ 43.558967][ T3991] ? mutex_lock+0x57/0x90 [ 43.559098][ T3991] ksys_read+0xdc/0x1a0 [ 43.559128][ T3991] __x64_sys_read+0x40/0x50 [ 43.559159][ T3991] x64_sys_call+0x2135/0x2550 [ 43.559254][ T3991] do_syscall_64+0x112/0x360 [ 43.559324][ T3991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.559349][ T3991] RIP: 0033:0x7fe4c094e98e [ 43.559366][ T3991] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 43.559386][ T3991] RSP: 002b:00007fe4bf3c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 43.559450][ T3991] RAX: ffffffffffffffda RBX: 00007fe4bf3c66c0 RCX: 00007fe4c094e98e [ 43.559463][ T3991] RDX: 000000000000000f RSI: 00007fe4bf3c60a0 RDI: 0000000000000004 [ 43.559475][ T3991] RBP: 00007fe4bf3c6090 R08: 0000000000000000 R09: 0000000000000000 [ 43.559487][ T3991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.559580][ T3991] R13: 00007fe4c0c16128 R14: 00007fe4c0c16090 R15: 00007ffdc1aeaef8 [ 43.559597][ T3991] [ 43.573255][ T2983] loop0: p1 p3 < > p4 < p5 > [ 43.573262][ T2983] loop0: partition table partially beyond EOD, truncated [ 43.573312][ T2983] loop0: p1 size 196608 extends beyond EOD, truncated [ 43.626479][ T2983] loop0: p3 start 614273 is beyond EOD, truncated [ 43.631385][ T2983] loop0: p5 size 196608 extends beyond EOD, truncated [ 43.635849][ T3995] FAULT_INJECTION: forcing a failure. [ 43.635849][ T3995] name failslab, interval 1, probability 0, space 0, times 0 [ 43.635908][ T3995] CPU: 1 UID: 0 PID: 3995 Comm: syz.1.145 Not tainted syzkaller #0 PREEMPT(lazy) [ 43.635979][ T3995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.635992][ T3995] Call Trace: [ 43.635999][ T3995] [ 43.636006][ T3995] __dump_stack+0x1d/0x30 [ 43.636031][ T3995] dump_stack_lvl+0x95/0xd0 [ 43.636053][ T3995] dump_stack+0x15/0x1b [ 43.636073][ T3995] should_fail_ex+0x262/0x280 [ 43.636143][ T3995] ? alloc_fs_context+0x41/0x570 [ 43.636166][ T3995] should_failslab+0x8c/0xb0 [ 43.636197][ T3995] __kmalloc_cache_noprof+0x7a/0x400 [ 43.636255][ T3995] ? alloc_fs_context+0x41/0x570 [ 43.636320][ T3995] alloc_fs_context+0x41/0x570 [ 43.636341][ T3995] ? fs_context_for_mount+0x11/0x30 [ 43.636435][ T3995] fs_context_for_mount+0x22/0x30 [ 43.636458][ T3995] do_new_mount+0xe7/0x8d0 [ 43.636477][ T3995] ? security_capable+0x7b/0x90 [ 43.636502][ T3995] path_mount+0x4ad/0xb90 [ 43.636535][ T3995] __se_sys_mount+0x28c/0x2e0 [ 43.636607][ T3995] ? fput+0x91/0xc0 [ 43.636630][ T3995] __x64_sys_mount+0x67/0x80 [ 43.636650][ T3995] x64_sys_call+0xc3b/0x2550 [ 43.636791][ T3995] do_syscall_64+0x112/0x360 [ 43.636814][ T3995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.636836][ T3995] RIP: 0033:0x7fe4c098e159 [ 43.636883][ T3995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.636902][ T3995] RSP: 002b:00007fe4bf3e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 43.636922][ T3995] RAX: ffffffffffffffda RBX: 00007fe4c0c15fa0 RCX: 00007fe4c098e159 [ 43.636938][ T3995] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000 [ 43.636952][ T3995] RBP: 00007fe4bf3e7090 R08: 0000200000000140 R09: 0000000000000000 [ 43.636966][ T3995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.637055][ T3995] R13: 00007fe4c0c16038 R14: 00007fe4c0c15fa0 R15: 00007ffdc1aeaef8 [ 43.637117][ T3995] [ 43.655121][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.676463][ T4001] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 43.684464][ T3989] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 43.687173][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 43.694075][ T3989] batman_adv: batadv0: Removing interface: syzkaller0 [ 43.694677][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 43.728286][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 43.747470][ T4003] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 43.765964][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 43.767410][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 43.769884][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 43.777715][ T4003] FAULT_INJECTION: forcing a failure. [ 43.777715][ T4003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.777803][ T4003] CPU: 1 UID: 0 PID: 4003 Comm: syz.1.148 Not tainted syzkaller #0 PREEMPT(lazy) [ 43.777829][ T4003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.777841][ T4003] Call Trace: [ 43.777848][ T4003] [ 43.777856][ T4003] __dump_stack+0x1d/0x30 [ 43.777880][ T4003] dump_stack_lvl+0x95/0xd0 [ 43.777955][ T4003] dump_stack+0x15/0x1b [ 43.777976][ T4003] should_fail_ex+0x262/0x280 [ 43.778003][ T4003] should_fail+0xb/0x20 [ 43.778028][ T4003] should_fail_usercopy+0x1a/0x20 [ 43.778055][ T4003] _copy_from_user+0x1c/0xb0 [ 43.778110][ T4003] ___sys_sendmsg+0xc1/0x1e0 [ 43.778143][ T4003] __sys_sendmmsg+0x185/0x320 [ 43.778172][ T4003] __x64_sys_sendmmsg+0x57/0x70 [ 43.778227][ T4003] x64_sys_call+0x1fb4/0x2550 [ 43.778252][ T4003] do_syscall_64+0x112/0x360 [ 43.778275][ T4003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.778298][ T4003] RIP: 0033:0x7fe4c098e159 [ 43.778319][ T4003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.778413][ T4003] RSP: 002b:00007fe4bf3e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 43.778459][ T4003] RAX: ffffffffffffffda RBX: 00007fe4c0c15fa0 RCX: 00007fe4c098e159 [ 43.778487][ T4003] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000004 [ 43.778501][ T4003] RBP: 00007fe4bf3e7090 R08: 0000000000000000 R09: 0000000000000000 [ 43.778534][ T4003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.778552][ T4003] R13: 00007fe4c0c16038 R14: 00007fe4c0c15fa0 R15: 00007ffdc1aeaef8 [ 43.778572][ T4003] [ 43.826577][ T3997] loop0: detected capacity change from 0 to 512 [ 43.853520][ T3997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.853668][ T3997] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.854629][ T3997] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.902783][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 43.902795][ T29] audit: type=1400 audit(1790471024.361:408): avc: denied { getopt } for pid=4008 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.923664][ T4007] netlink: 104 bytes leftover after parsing attributes in process `syz.1.149'. [ 44.438092][ T29] audit: type=1400 audit(1790471024.891:409): avc: denied { ioctl } for pid=4027 comm="syz.2.155" path="socket:[5904]" dev="sockfs" ino=5904 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.463844][ T29] audit: type=1400 audit(1790471024.901:410): avc: denied { append } for pid=4027 comm="syz.2.155" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.492296][ T4030] 9p: Bad value for 'rfdno' [ 44.497013][ T29] audit: type=1400 audit(1790471024.951:411): avc: denied { read } for pid=4027 comm="syz.2.155" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 44.527986][ T29] audit: type=1400 audit(1790471024.961:412): avc: denied { ioctl } for pid=4027 comm="syz.2.155" path="/dev/ptp0" dev="devtmpfs" ino=245 ioctlcmd=0x3d12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 44.552840][ T29] audit: type=1400 audit(1790471024.991:413): avc: denied { setopt } for pid=4027 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.609087][ T4038] batman_adv: batadv0: Adding interface: syzkaller0 [ 44.611496][ T4038] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.611529][ T4038] batman_adv: batadv0: Interface activated: syzkaller0 [ 44.775574][ T4037] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 44.782618][ T4037] batman_adv: batadv0: Removing interface: syzkaller0 [ 44.808737][ T4028] loop2: detected capacity change from 0 to 1024 [ 44.845143][ T4028] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 44.881026][ T4028] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 2: comm syz.2.155: lblock 2 mapped to illegal pblock 2 (length 1) [ 44.881164][ T4028] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 44.882269][ T4028] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 44.882319][ T4028] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 48: comm syz.2.155: lblock 0 mapped to illegal pblock 48 (length 1) [ 44.882398][ T4028] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 44.882704][ T4028] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 44.882734][ T4028] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.155: Failed to acquire dquot type 0 [ 44.882812][ T4028] loop2: lost filesystem error report for type 5 error -117 [ 44.883248][ T4028] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 44.883277][ T4028] loop2: lost filesystem error report for type 5 error -117 [ 44.883808][ T4028] EXT4-fs error (device loop2): ext4_evict_inode:269: inode #11: comm syz.2.155: mark_inode_dirty error [ 44.883901][ T4028] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 44.884281][ T4028] EXT4-fs warning (device loop2): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 44.884472][ T4028] EXT4-fs (loop2): 1 orphan inode deleted [ 44.904139][ T3703] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 44.904203][ T3703] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 44.913398][ T3703] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 44.913483][ T3703] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:11: Failed to release dquot type 0 [ 44.913504][ T3703] loop2: lost filesystem error report for type 5 error -117 [ 44.955957][ T4050] loop0: detected capacity change from 0 to 512 [ 44.981764][ T29] audit: type=1400 audit(1790471025.441:414): avc: denied { read write } for pid=4042 comm="syz.1.162" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 44.982934][ T4028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.004918][ T4028] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm syz.2.155: lblock 1 mapped to illegal pblock 1 (length 1) [ 45.005398][ T4028] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.155: Failed to acquire dquot type 0 [ 45.011906][ T4050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.012009][ T4050] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.025545][ T4050] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.105238][ T4060] netlink: 68 bytes leftover after parsing attributes in process `syz.1.166'. [ 45.180516][ T4056] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 45.217972][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.218172][ T3305] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 45.218261][ T3305] loop2: lost filesystem error report for type 5 error -117 [ 45.218322][ T3305] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 45.218377][ T3305] loop2: lost filesystem error report for type 5 error -117 [ 45.218450][ T3305] EXT4-fs error (device loop2): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 45.218469][ T3305] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 45.218527][ T3305] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 45.218670][ T3305] loop2: lost filesystem error report for type 5 error -117 [ 45.351127][ T4076] loop3: detected capacity change from 0 to 1024 [ 45.366674][ T4074] futex_wake_op: syz.2.171 tries to shift op by 144; fix this program [ 45.371081][ T4076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.376972][ T4074] futex_wake_op: syz.2.171 tries to shift op by 144; fix this program [ 45.402522][ T4071] pimreg9: entered allmulticast mode [ 45.462815][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.513616][ T4080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.173'. [ 45.670088][ T4097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.181'. [ 45.744868][ T4107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.744950][ T4107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.802310][ T4107] loop3: detected capacity change from 0 to 512 [ 45.870994][ T4107] lo: entered promiscuous mode [ 45.887053][ T4105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'. [ 45.904290][ T4107] tunl0: entered promiscuous mode [ 45.904941][ T4107] gre0: entered promiscuous mode [ 45.907530][ T4107] gretap0: entered promiscuous mode [ 45.908583][ T4107] erspan0: entered promiscuous mode [ 45.909526][ T4107] ip_vti0: entered promiscuous mode [ 45.910641][ T4107] ip6_vti0: entered promiscuous mode [ 45.911343][ T4107] sit0: entered promiscuous mode [ 45.914405][ T4107] ip6tnl0: entered promiscuous mode [ 45.916458][ T4116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.188'. [ 45.916876][ T4107] ip6gre0: entered promiscuous mode [ 45.940839][ T4107] syz_tun: entered promiscuous mode [ 45.946707][ T4107] ip6gretap0: entered promiscuous mode [ 45.947485][ T4107] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.947632][ T4107] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.947780][ T4107] bridge0: entered promiscuous mode [ 45.957850][ T4107] vcan0: entered promiscuous mode [ 45.964932][ T4107] bond0: entered promiscuous mode [ 45.964948][ T4107] bond_slave_0: entered promiscuous mode [ 45.965044][ T4107] bond_slave_1: entered promiscuous mode [ 45.966000][ T4107] team0: entered promiscuous mode [ 45.966015][ T4107] team_slave_0: entered promiscuous mode [ 45.966139][ T4107] team_slave_1: entered promiscuous mode [ 45.967058][ T4107] dummy0: entered promiscuous mode [ 45.975666][ T4107] nlmon0: entered promiscuous mode [ 45.976160][ T4107] batadv0: entered promiscuous mode [ 45.984792][ T4107] vxcan0: entered promiscuous mode [ 45.985313][ T4107] vxcan1: entered promiscuous mode [ 45.985921][ T4107] veth0: entered promiscuous mode [ 45.995231][ T4107] veth1: entered promiscuous mode [ 46.019210][ T4107] wg0: entered promiscuous mode [ 46.023803][ T4107] wg1: entered promiscuous mode [ 46.030391][ T4107] wg2: entered promiscuous mode [ 46.031115][ T4107] veth0_to_bridge: entered promiscuous mode [ 46.036928][ T4107] veth1_to_bridge: entered promiscuous mode [ 46.075361][ T4107] veth0_to_bond: entered promiscuous mode [ 46.085549][ T4107] veth1_to_bond: entered promiscuous mode [ 46.093056][ T4107] veth0_to_team: entered promiscuous mode [ 46.097951][ T4107] veth1_to_team: entered promiscuous mode [ 46.124261][ T4107] veth0_to_batadv: entered promiscuous mode [ 46.124939][ T4107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.124962][ T4107] batadv_slave_0: entered promiscuous mode [ 46.125747][ T4107] veth1_to_batadv: entered promiscuous mode [ 46.131486][ T4107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.131511][ T4107] batadv_slave_1: entered promiscuous mode [ 46.132331][ T4107] xfrm0: entered promiscuous mode [ 46.133477][ T4107] veth0_to_hsr: entered promiscuous mode [ 46.135074][ T4107] veth1_to_hsr: entered promiscuous mode [ 46.136928][ T4107] hsr0: entered promiscuous mode [ 46.137699][ T4107] veth1_virt_wifi: entered promiscuous mode [ 46.138457][ T4107] veth0_virt_wifi: entered promiscuous mode [ 46.142091][ T4107] vlan0: entered promiscuous mode [ 46.142997][ T4107] vlan1: entered promiscuous mode [ 46.150344][ T4107] macvlan0: entered promiscuous mode [ 46.157760][ T4107] macvlan1: entered promiscuous mode [ 46.158368][ T4107] ipvlan0: entered promiscuous mode [ 46.159043][ T4107] ipvlan1: entered promiscuous mode [ 46.174281][ T4107] macvtap0: entered promiscuous mode [ 46.174860][ T4107] macsec0: entered promiscuous mode [ 46.175647][ T4107] geneve0: entered promiscuous mode [ 46.176735][ T4107] geneve1: entered promiscuous mode [ 46.184900][ T4107] macvlan2: entered promiscuous mode [ 46.196793][ T4107] netdevsim netdevsim3 eth0: entered promiscuous mode [ 46.206840][ T4107] netdevsim netdevsim3 eth1: entered promiscuous mode [ 46.217441][ T4107] netdevsim netdevsim3 eth2: entered promiscuous mode [ 46.227801][ T4107] netdevsim netdevsim3 eth3: entered promiscuous mode [ 46.280258][ T3483] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.280294][ T3483] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.280325][ T3483] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.280358][ T3483] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.393776][ T4124] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 46.397505][ T4136] loop4: detected capacity change from 0 to 512 [ 46.417230][ T4136] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 46.417253][ T4136] EXT4-fs (loop4): group descriptors corrupted! [ 46.486030][ T4138] netlink: 28 bytes leftover after parsing attributes in process `syz.2.196'. [ 46.555325][ T4142] loop2: detected capacity change from 0 to 512 [ 46.555608][ T4142] EXT4-fs: Ignoring removed i_version option [ 46.556120][ T4142] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.557114][ T4142] EXT4-fs (loop2): orphan cleanup on readonly fs [ 46.557558][ T4142] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 46.557635][ T4142] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.198: Failed to acquire dquot type 1 [ 46.557657][ T4142] loop2: lost filesystem error report for type 5 error -28 [ 46.558007][ T4142] EXT4-fs (loop2): 1 truncate cleaned up [ 46.563235][ T4142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.681258][ T4132] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 46.886348][ T4159] loop3: detected capacity change from 0 to 512 [ 46.888889][ T4157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.204'. [ 46.947979][ T4159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.948205][ T4159] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.951081][ T4159] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.961006][ T4165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.207'. [ 47.065494][ T4176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.065641][ T4176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.096312][ T4176] macvlan2: entered promiscuous mode [ 47.235417][ T4191] gretap1: entered promiscuous mode [ 47.255835][ T4188] netlink: 16 bytes leftover after parsing attributes in process `syz.3.216'. [ 47.310142][ T4196] netlink: 28 bytes leftover after parsing attributes in process `syz.4.219'. [ 47.318809][ T4200] FAULT_INJECTION: forcing a failure. [ 47.318809][ T4200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.318857][ T4200] CPU: 1 UID: 0 PID: 4200 Comm: syz.3.221 Not tainted syzkaller #0 PREEMPT(lazy) [ 47.318884][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.318896][ T4200] Call Trace: [ 47.318903][ T4200] [ 47.318910][ T4200] __dump_stack+0x1d/0x30 [ 47.318983][ T4200] dump_stack_lvl+0x95/0xd0 [ 47.319006][ T4200] dump_stack+0x15/0x1b [ 47.319026][ T4200] should_fail_ex+0x262/0x280 [ 47.319052][ T4200] should_fail+0xb/0x20 [ 47.319127][ T4200] should_fail_usercopy+0x1a/0x20 [ 47.319153][ T4200] _copy_from_user+0x1c/0xb0 [ 47.319181][ T4200] __sys_connect+0xd0/0x2a0 [ 47.319284][ T4200] __x64_sys_connect+0x3f/0x50 [ 47.319387][ T4200] x64_sys_call+0x1c0b/0x2550 [ 47.319413][ T4200] do_syscall_64+0x112/0x360 [ 47.319437][ T4200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.319519][ T4200] RIP: 0033:0x7fc3111be159 [ 47.319536][ T4200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.319623][ T4200] RSP: 002b:00007fc30fc17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 47.319643][ T4200] RAX: ffffffffffffffda RBX: 00007fc311445fa0 RCX: 00007fc3111be159 [ 47.319658][ T4200] RDX: 000000000000001e RSI: 0000200000000000 RDI: 0000000000000006 [ 47.319671][ T4200] RBP: 00007fc30fc17090 R08: 0000000000000000 R09: 0000000000000000 [ 47.319684][ T4200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.319697][ T4200] R13: 00007fc311446038 R14: 00007fc311445fa0 R15: 00007ffe65a7f4e8 [ 47.319717][ T4200] [ 47.447807][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.527153][ T4206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.527285][ T4206] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.529995][ T4206] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.560112][ T4208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.560278][ T4208] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.563967][ T4208] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.717859][ T4232] EXT4-fs: Ignoring removed bh option [ 47.731963][ T4232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.732104][ T4232] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.743915][ T4230] batman_adv: batadv0: Adding interface: syzkaller0 [ 47.743938][ T4230] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.743981][ T4230] batman_adv: batadv0: Interface activated: syzkaller0 [ 47.811805][ T4237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.230'. [ 47.883181][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.902564][ T4248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.904195][ T4229] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 47.904428][ T4248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.909637][ T4229] batman_adv: batadv0: Removing interface: syzkaller0 [ 48.022198][ T4267] capability: warning: `syz.0.246' uses deprecated v2 capabilities in a way that may be insecure [ 48.023542][ T4265] No such timeout policy "syz1" [ 48.043988][ T4265] netlink: 'syz.3.247': attribute type 1 has an invalid length. [ 48.044068][ T4265] netlink: 'syz.3.247': attribute type 2 has an invalid length. [ 48.093150][ T4261] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ .ÃNÛBþO' [ 48.139695][ T4255] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.242: iget: bad i_size value: 38620345925642 [ 48.139738][ T4255] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.140203][ T4255] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.242: couldn't read orphan inode 15 (err -117) [ 48.140242][ T4255] loop4: lost filesystem error report for type 5 error -117 [ 48.143748][ T4255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.215046][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.237594][ T4279] EXT4-fs: Ignoring removed bh option [ 48.254415][ T4279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.254468][ T4279] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.342399][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.418069][ T4294] batman_adv: batadv0: Adding interface: syzkaller0 [ 48.418083][ T4294] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.418111][ T4294] batman_adv: batadv0: Interface activated: syzkaller0 [ 48.542721][ T4306] set_capacity_and_notify: 8 callbacks suppressed [ 48.542737][ T4306] loop4: detected capacity change from 0 to 1024 [ 48.543397][ T4306] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 48.544080][ T4306] JBD2: no valid journal superblock found [ 48.544090][ T4306] EXT4-fs (loop4): Could not load journal inode [ 48.546831][ T4305] loop1: detected capacity change from 0 to 512 [ 48.587492][ T4293] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 48.588745][ T4305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.588937][ T4305] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.622225][ T4293] batman_adv: batadv0: Removing interface: syzkaller0 [ 48.638877][ T4305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.719870][ T4313] loop4: detected capacity change from 0 to 512 [ 48.761596][ T4313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.761650][ T4313] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.763219][ T4313] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 48.918192][ T4322] loop1: detected capacity change from 0 to 512 [ 48.921094][ T4322] EXT4-fs: Ignoring removed bh option [ 48.944319][ T4322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.944373][ T4322] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.974171][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 48.974185][ T29] audit: type=1400 audit(1790471029.431:443): avc: denied { write } for pid=4321 comm="syz.1.263" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.002912][ T29] audit: type=1400 audit(1790471029.441:444): avc: denied { write } for pid=4321 comm="syz.1.263" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.108521][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.167850][ T4340] loop3: detected capacity change from 0 to 1024 [ 49.195421][ T4340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 49.195617][ T4340] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.222187][ T4339] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: comm syz.3.270: lblock 0 mapped to illegal pblock 0 (length 1) [ 49.222398][ T4339] EXT4-fs (loop3): Remounting filesystem read-only [ 49.236493][ T29] audit: type=1400 audit(1790471029.661:445): avc: denied { write } for pid=4339 comm="syz.3.270" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.236592][ T29] audit: type=1400 audit(1790471029.671:446): avc: denied { map } for pid=4339 comm="syz.3.270" path="/59/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.303894][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 49.354536][ T4352] FAULT_INJECTION: forcing a failure. [ 49.354536][ T4352] name failslab, interval 1, probability 0, space 0, times 0 [ 49.354566][ T4352] CPU: 0 UID: 0 PID: 4352 Comm: syz.3.274 Not tainted syzkaller #0 PREEMPT(lazy) [ 49.354661][ T4352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.354675][ T4352] Call Trace: [ 49.354682][ T4352] [ 49.354690][ T4352] __dump_stack+0x1d/0x30 [ 49.354719][ T4352] dump_stack_lvl+0x95/0xd0 [ 49.354740][ T4352] dump_stack+0x15/0x1b [ 49.354810][ T4352] should_fail_ex+0x262/0x280 [ 49.354833][ T4352] ? alloc_fs_context+0x41/0x570 [ 49.354886][ T4352] should_failslab+0x8c/0xb0 [ 49.354942][ T4352] __kmalloc_cache_noprof+0x7a/0x400 [ 49.355090][ T4352] ? ida_alloc_range+0x6f4/0x730 [ 49.355116][ T4352] ? alloc_fs_context+0x41/0x570 [ 49.355141][ T4352] alloc_fs_context+0x41/0x570 [ 49.355166][ T4352] ? fs_context_for_mount+0x11/0x30 [ 49.355191][ T4352] fs_context_for_mount+0x22/0x30 [ 49.355216][ T4352] mq_init_ns+0xac/0x370 [ 49.355293][ T4352] copy_ipcs+0x26d/0x460 [ 49.355317][ T4352] create_new_namespaces+0x121/0x420 [ 49.355347][ T4352] unshare_nsproxy_namespaces+0x115/0x150 [ 49.355404][ T4352] ksys_unshare+0x42b/0x710 [ 49.355504][ T4352] __x64_sys_unshare+0x1f/0x30 [ 49.355535][ T4352] x64_sys_call+0x1e33/0x2550 [ 49.355561][ T4352] do_syscall_64+0x112/0x360 [ 49.355581][ T4352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.355663][ T4352] RIP: 0033:0x7fc3111be159 [ 49.355682][ T4352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.355759][ T4352] RSP: 002b:00007fc30fc17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 49.355851][ T4352] RAX: ffffffffffffffda RBX: 00007fc311445fa0 RCX: 00007fc3111be159 [ 49.355868][ T4352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 49.355922][ T4352] RBP: 00007fc31125506b R08: 0000000000000000 R09: 0000000000000000 [ 49.355935][ T4352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.355947][ T4352] R13: 00007fc311446038 R14: 00007fc311445fa0 R15: 00007ffe65a7f4e8 [ 49.356033][ T4352] [ 49.383278][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.596798][ T4337] loop0: detected capacity change from 0 to 2048 [ 49.616805][ T4351] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 49.635805][ T4370] loop3: detected capacity change from 0 to 512 [ 49.636174][ T4337] loop0: p1 p3 < > p4 < p5 > [ 49.636269][ T4337] loop0: partition table partially beyond EOD, truncated [ 49.636832][ T4370] EXT4-fs: Ignoring removed bh option [ 49.645415][ T4337] loop0: p1 size 196608 extends beyond EOD, truncated [ 49.666921][ T4337] loop0: p3 start 614273 is beyond EOD, truncated [ 49.704066][ T4337] loop0: p5 size 196608 extends beyond EOD, truncated [ 49.780257][ T4370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.780348][ T4370] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.783968][ T29] audit: type=1400 audit(1790471030.241:447): avc: denied { write } for pid=4369 comm="syz.3.281" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.899700][ T29] audit: type=1400 audit(1790471030.331:448): avc: denied { write } for pid=4369 comm="syz.3.281" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.999286][ T4385] loop2: detected capacity change from 0 to 512 [ 50.052103][ T4385] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 50.054485][ T4385] EXT4-fs (loop2): orphan cleanup on readonly fs [ 50.056135][ T4385] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 50.057276][ T4385] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 50.058627][ T4385] EXT4-fs error (device loop2): __ext4_iget:5592: inode #16: block 127754: comm syz.2.282: invalid block [ 50.058870][ T4385] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 50.059319][ C0] EXT4-fs (loop2): initial error at time 1790471030: __ext4_iget:5592: inode 16: block 127754 [ 50.059676][ C0] EXT4-fs (loop2): last error at time 1790471030: __ext4_iget:5592: inode 16: block 127754 [ 50.060874][ T4385] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.282: couldn't read orphan inode 16 (err -117) [ 50.061217][ T4385] loop2: lost filesystem error report for type 5 error -117 [ 50.068306][ T4385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.236880][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.255418][ T4392] FAULT_INJECTION: forcing a failure. [ 50.255418][ T4392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.255471][ T4392] CPU: 0 UID: 0 PID: 4392 Comm: syz.0.286 Not tainted syzkaller #0 PREEMPT(lazy) [ 50.255493][ T4392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.255552][ T4392] Call Trace: [ 50.255559][ T4392] [ 50.255568][ T4392] __dump_stack+0x1d/0x30 [ 50.255591][ T4392] dump_stack_lvl+0x95/0xd0 [ 50.255664][ T4392] dump_stack+0x15/0x1b [ 50.255687][ T4392] should_fail_ex+0x262/0x280 [ 50.255772][ T4392] should_fail+0xb/0x20 [ 50.255791][ T4392] should_fail_usercopy+0x1a/0x20 [ 50.255814][ T4392] copy_folio_from_iter_atomic+0x24b/0x10a0 [ 50.255909][ T4392] ? shmem_write_begin+0xfc/0x1f0 [ 50.255938][ T4392] ? shmem_write_begin+0x135/0x1f0 [ 50.256096][ T4392] generic_perform_write+0x2c4/0x490 [ 50.256124][ T4392] shmem_file_write_iter+0xc5/0xf0 [ 50.256143][ T4392] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 50.256163][ T4392] vfs_write+0x57f/0x9a0 [ 50.256243][ T4392] ksys_write+0xdc/0x1a0 [ 50.256308][ T4392] __x64_sys_write+0x40/0x50 [ 50.256407][ T4392] x64_sys_call+0x154e/0x2550 [ 50.256434][ T4392] do_syscall_64+0x112/0x360 [ 50.256455][ T4392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.256494][ T4392] RIP: 0033:0x7fbfcd1de159 [ 50.256508][ T4392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.256529][ T4392] RSP: 002b:00007fbfcbc37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.256551][ T4392] RAX: ffffffffffffffda RBX: 00007fbfcd465fa0 RCX: 00007fbfcd1de159 [ 50.256589][ T4392] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000006 [ 50.256602][ T4392] RBP: 00007fbfcbc37090 R08: 0000000000000000 R09: 0000000000000000 [ 50.256614][ T4392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.256625][ T4392] R13: 00007fbfcd466038 R14: 00007fbfcd465fa0 R15: 00007ffcb33e2418 [ 50.256646][ T4392] [ 50.324760][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 50.325168][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 50.357257][ T4396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.357395][ T4396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.416223][ T4396] loop3: detected capacity change from 0 to 512 [ 50.449603][ T4396] vti60: entered promiscuous mode [ 50.678217][ T4403] netlink: 'syz.4.288': attribute type 4 has an invalid length. [ 50.678652][ T4404] netlink: 'syz.4.288': attribute type 4 has an invalid length. [ 50.730777][ T29] audit: type=1400 audit(1790471031.131:449): avc: denied { create } for pid=4397 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.730825][ T29] audit: type=1400 audit(1790471031.131:450): avc: denied { setopt } for pid=4397 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.803786][ T4402] __nla_validate_parse: 15 callbacks suppressed [ 50.803830][ T4402] netlink: 16 bytes leftover after parsing attributes in process `syz.1.289'. [ 50.823431][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.978630][ T4407] netlink: 52 bytes leftover after parsing attributes in process `syz.2.290'. [ 50.998247][ T4413] netlink: 28 bytes leftover after parsing attributes in process `syz.1.293'. [ 51.000592][ T4407] netlink: 52 bytes leftover after parsing attributes in process `syz.2.290'. [ 51.063626][ T29] audit: type=1400 audit(1790471031.521:451): avc: denied { mount } for pid=4419 comm="syz.1.296" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 51.064281][ T4420] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 51.101895][ T4422] loop3: detected capacity change from 0 to 512 [ 51.102213][ T4422] EXT4-fs: Ignoring removed bh option [ 51.111341][ T4422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.111441][ T4422] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.127674][ T29] audit: type=1400 audit(1790471031.581:452): avc: denied { write } for pid=4421 comm="syz.3.297" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.161976][ T4426] netlink: 20 bytes leftover after parsing attributes in process `syz.2.298'. [ 51.162275][ T4420] netlink: 'syz.1.296': attribute type 6 has an invalid length. [ 51.187066][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.241372][ T4411] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 51.338938][ T4439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.339044][ T4439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.369765][ T4442] netlink: 52 bytes leftover after parsing attributes in process `syz.0.304'. [ 51.396155][ T4442] netlink: 52 bytes leftover after parsing attributes in process `syz.0.304'. [ 51.445264][ T4446] netlink: 'syz.0.306': attribute type 15 has an invalid length. [ 51.462127][ T4447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.305'. [ 51.508012][ T4450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.508083][ T4450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.541325][ T4452] EXT4-fs: Ignoring removed bh option [ 51.553674][ T4452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.553787][ T4452] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.582938][ T4450] pimreg9: entered promiscuous mode [ 51.619043][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.646757][ T4460] netlink: 24 bytes leftover after parsing attributes in process `syz.1.310'. [ 51.680620][ T4466] netlink: 104 bytes leftover after parsing attributes in process `syz.1.314'. [ 51.730250][ T3291] ================================================================== [ 51.730279][ T3291] BUG: KCSAN: data-race in dentry_kill / fast_dput [ 51.730314][ T3291] [ 51.730320][ T3291] write to 0xffff8881007b6010 of 8 bytes by task 2983 on cpu 0: [ 51.730335][ T3291] dentry_kill+0x139/0x500 [ 51.730361][ T3291] finish_dput+0x16/0x1d0 [ 51.730381][ T3291] dput+0x48/0x50 [ 51.730401][ T3291] lookup_one_qstr_excl+0x156/0x240 [ 51.730428][ T3291] filename_unlinkat+0x149/0x410 [ 51.730463][ T3291] __se_sys_unlink+0x2b/0xe0 [ 51.730481][ T3291] __x64_sys_unlink+0x1f/0x30 [ 51.730498][ T3291] x64_sys_call+0x18ee/0x2550 [ 51.730526][ T3291] do_syscall_64+0x112/0x360 [ 51.730546][ T3291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.730565][ T3291] [ 51.730571][ T3291] read to 0xffff8881007b6010 of 8 bytes by task 3291 on cpu 1: [ 51.730588][ T3291] fast_dput+0x64/0x300 [ 51.730609][ T3291] dput+0x1f/0x50 [ 51.730628][ T3291] filename_unlinkat+0x217/0x410 [ 51.730661][ T3291] __se_sys_unlink+0x2b/0xe0 [ 51.730678][ T3291] __x64_sys_unlink+0x1f/0x30 [ 51.730696][ T3291] x64_sys_call+0x18ee/0x2550 [ 51.730719][ T3291] do_syscall_64+0x112/0x360 [ 51.730736][ T3291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.730757][ T3291] [ 51.730762][ T3291] value changed: 0xffff8882376c10e0 -> 0x0000000000000000 [ 51.730774][ T3291] [ 51.730779][ T3291] Reported by Kernel Concurrency Sanitizer on: [ 51.730790][ T3291] CPU: 1 UID: 0 PID: 3291 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 51.730817][ T3291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.730830][ T3291] ================================================================== [ 51.753752][ T4474] netlink: 'syz.1.317': attribute type 15 has an invalid length. [ 51.913865][ T4464] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21