last executing test programs: 8.407743309s ago: executing program 1 (id=371): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200, 0x2f2}, 0x0, &(0x7f0000000200)=0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0x1e4e, &(0x7f0000000480)={0x0, 0x9900, 0x1080, 0x0, 0x2c3}) r3 = syz_io_uring_setup(0x3a78, &(0x7f00000005c0)={0x0, 0xdca6, 0x40, 0x0, 0x3e}, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_SYMLINKAT={0x26, 0x27, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x1, {0x0, r4}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44084}, 0x20000041) r6 = syz_io_uring_setup(0x892, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xc, 0x48000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800001, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYRESHEX=r6], 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = gettid() sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r7, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r9], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001000000000000000000000000000000004e2100000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000009cc5b1cc000000000000f8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000b00"/96], 0xb8}}, 0x0) 6.765168985s ago: executing program 1 (id=399): r0 = socket(0x2, 0x80805, 0x0) syz_open_dev$evdev(&(0x7f00000010c0), 0x2, 0x181842) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000001080)=[@in6={0xa, 0x4e24, 0xffffffff, @local, 0xb69d}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000180)=0xf) r1 = socket$inet(0x2, 0x2, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 6.645082653s ago: executing program 1 (id=403): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@dev}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000080)={@remote, r3}, 0x14) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff30, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e0000d81500010084c06fb300000000080005007a010401a80016002000034004000000035c0461c9ab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798aeaa73e2fad95667e0fcd4c306dcdf63951f215ce3bb9ad809d5e1cace81000cffece0b494566d05f3d1269f0dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4000, 0x140, 0x10}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r4 = getpgid(0x0) r5 = syz_pidfd_open(r4, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r4, 0x2, 0x5002) pidfd_send_signal(r5, 0x40011, 0x0, 0x4) mq_timedsend(0xffffffffffffffff, &(0x7f0000000600)="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", 0x359, 0x6, 0x0) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005000000"], 0x310) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) listen(r0, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f00000009c0)=0x10001, 0x4) 6.549561768s ago: executing program 1 (id=405): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000240)='./bus\x00', 0x21) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mknodat(r0, &(0x7f0000000200)='./file0\x00', 0x8000, 0x80000000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0xd4d, 0x8, 0x8, 0x1f54}, {0xe5cd, 0xf, 0x6a, 0x5}, {0x6, 0x3, 0x10, 0x18}, {0x7, 0x1, 0x3c, 0x80000001}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x9, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r7, r8, 0x25, 0x0, @void}, 0x10) r10 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r10, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$inet(r10, &(0x7f00000002c0)={0x2, 0x4e22, @broadcast}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r9, r11, 0x4, r7}, 0x10) mount_setattr(r5, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20) r12 = open(&(0x7f00000000c0)='./bus\x00', 0x1c113e, 0x40) mount_setattr(r12, &(0x7f0000000040)='./bus\x00', 0x9100, &(0x7f0000000080)={0xb, 0x0, 0x80000, {r12}}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4, &(0x7f0000000240), 0x22, 0x4d5, &(0x7f0000000580)="$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") r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r13, &(0x7f0000000100)=ANY=[@ANYBLOB="1000000002"], 0x454680) 6.17523992s ago: executing program 1 (id=407): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 5.900003366s ago: executing program 1 (id=423): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000001c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@nouser_xattr}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) 5.885002486s ago: executing program 32 (id=423): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000001c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@nouser_xattr}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$eJzs3M9rHFUcAPDvTH70d5PW+qM/tKtVDFaTJq3ag4cqCr0Igh7qMaax1KatNBFsKTaK1KP4F6hHQfDkxZOCiHpSvOpdhCK9NHqQyOzOJJNkN91sfqx2Px/YzXszb/a978y83bfzMhtAx6pkT0nE9oj4NSL6IqJrcYFK7c/Mzatjf928OpbE7OzLfybZZnHr5tWxomiS/92WZwbSiPT9JPbXqXfy8pVzoxMT45fy/NDU+TeHJi9feeLs+dEz42fGL4wcP37s6PDTT408uSZxZnHd2vfOxQN7T7760Ytjs/HaD59n7d2ery/HUdO/6jorUYnZ3PzS3urzI6t+9f+WHaV00t3GhrAiWV/PDldPtf/3RVfMH7y+eOG9ucy3bWogsG6yz6ZdS5YWI4B07vMLuBMl+jh0qOITP/v+Wzw2cvzRbjeezZ7Hq/HP5I/amu5Is++y/bVv7F0Ntj+xyvq3R8Sp6b8/zh5R9zoEAMDa+job/zxeb/yXxj2lcjvzOZT+iDgcEbsj4q6I2BMRd0dUy94bEfetsP7KovzS8c/PW1oKrEnZ+O+ZfG5r4fgvzUskc7kd1fh7ktfPTowfyffJQPRsyvLDy9TxzfO/fNhoXaU0/sseWf3FWDBvxx/dmxZuc3p0anQVIS9w492Ifd314k/mZgKyPbA3Iva18PrZPjv72GcHsvTObUvX3z7+ZazBPNPspxGP1o7/dCyKv5DUamo0Pzm0OSbGjwwVZ8VSP/50/aVyvqeUXhD/5uZi2txqsHVkx39r3fM/j7/oBsV87eTK67j+2wcNv9MsPf5JnJoul6id/2lpSXb+9yavVNO9+bK3R6emLg1H9OYLFiwfmd+2yBfls/gHDtXv/7sj/vkk325/RGQn8f0R8UBEHMzb/mBEPBQRh5aJ//vnHn5j+T3U4vm/BrL4Ty93/CP6k/J8fQuJrnPffdWo/ube/45VUwP5kmbe/5pt4Gr2HQAAAPxfpNU56CQdLNKli1N7Yms6cXFy6nAl3rpwujZX3R89aXGlq690PXQ4vzZc5EcW5Y9GxK7qfxptqeYHxy5O7Ghn4ED1Xp0F/T/SdHCwtu73Rv/0Atw5VjSPlpTSX3y59o0BNpT7NaFz6f/QufR/6Fz6P3Suev3/WsRMG5oCbDCf/9C59H/oXPo/dC79HzrS0lvii59baeVO//nE7pOr2nzdE7N96/LK0yvfqmudIo3yj3Y0TCQR0VoVkS5fpreJ2tuWSG9b5kSLu2UFiYN5YlNENLvVtQ3bq+19XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFgr/wYAAP//hXXc9g==") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) 5.008081018s ago: executing program 3 (id=441): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000000c0)) 4.994724578s ago: executing program 3 (id=443): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff881ff00000100000000000400080003000b000000", 0x24) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ttyS3(0xffffffffffffff9c, 0x0, 0xed627f2964a53a03, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0xfffffffb, 0x2, 0xe31762b1, 0xa2, 0x101}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x40) syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000600)={{0x0, 0x2, 0xe, 0x2, 0xd764}, 0x3e92, 0x1000, 'id0\x00', 'timer1\x00', 0x0, 0x3, 0x2, 0x1, 0x2}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) lchown(0x0, 0x0, 0xee01) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x1, 0x9, 0x7, 0x600, 0xda85, 0x9, 0x3, 0x9d}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r6, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, r6}) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x280080) write$sndseq(r7, &(0x7f0000000440)=[{0x1, 0x2, 0x1, 0x36, @tick=0xe, {0x8, 0x80}, {0x80, 0xec}, @ext={0x0, &(0x7f0000000240)}}, {0xc, 0x6, 0xa7, 0xd, @tick=0x1, {0x1, 0x6}, {0x8, 0x10}, @connect={{0x5}, {0x1, 0x9}}}], 0x38) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x1a, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="70eb8071bf427266a16e579e5ea8b64ad2239f67813a8b4db28eb9e9093ba9b3dd15a9c69a463f65", @ANYRES16=r9, @ANYBLOB="080000000000fbdbdf25010000000800020006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40080) 4.723997805s ago: executing program 3 (id=446): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@enum64={0x3, 0x1, 0x0, 0x13, 0x0, 0x8, [{0xd, 0x6, 0x5}]}]}, {0x0, [0x30]}}, &(0x7f0000000640)=""/233, 0x33, 0xe9, 0x1, 0x7, 0x10000}, 0x28) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={0x0}, 0x18) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x2000000) 4.704306786s ago: executing program 3 (id=447): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3a0af83a) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) listen(r0, 0x28) poll(&(0x7f0000000340)=[{r0, 0x629}], 0x1, 0x400) io_uring_setup(0x70c3, &(0x7f00000002c0)={0x0, 0x2c42, 0x1, 0x20003, 0x1d7}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="280000002d0001"], 0x28}], 0x1}, 0x0) shutdown(r0, 0x0) 1.256150427s ago: executing program 5 (id=490): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) set_tid_address(0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000032c0), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000009c0)={[{@nojournal_checksum}, {@noblock_validity}, {@discard}, {@errors_remount}, {@data_writeback, 0x0}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@nodiscard}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@abort}, {@dax_never}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}], [{@audit}, {@fowner_lt}], 0x2c}, 0xa, 0x532, &(0x7f0000000480)="$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") openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000003300)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1003}, {0x6, 0x16, 0x973c}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004804) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) (async) set_tid_address(0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000032c0), 0xffffffffffffffff) (async) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000009c0)={[{@nojournal_checksum}, {@noblock_validity}, {@discard}, {@errors_remount}, {@data_writeback, 0x0}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@nodiscard}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@abort}, {@dax_never}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}], [{@audit}, {@fowner_lt}], 0x2c}, 0xa, 0x532, &(0x7f0000000480)="$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") (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000003300)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1003}, {0x6, 0x16, 0x973c}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004804) (async) 1.088842266s ago: executing program 5 (id=494): openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 959.814634ms ago: executing program 5 (id=497): r0 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000200)='./file0\x00', 0x18004, &(0x7f0000000080)=ANY=[], 0x1, 0x2fd, &(0x7f00000002c0)="$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") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x4, 0x8006, 0x4, 0x31a, 0x0}, &(0x7f0000000680)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000140)={r2, 0xd, 0x0, 0x3}, &(0x7f0000000180)=0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) faccessat(r0, &(0x7f0000000100)='./file0\x00', 0x84) setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=0x9731, 0x8, 0x1) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x11, &(0x7f0000000040)=0x8001, 0x4) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) ftruncate(r3, 0x401) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f00000005c0)=""/137) 836.427861ms ago: executing program 5 (id=498): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x12}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x8}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000003c0)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x5, 0xb}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) 835.972121ms ago: executing program 5 (id=499): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e9b230963ff7fc6e5539b9b3b09719b711b5d52101b080d29428f0e1ac6e7049b3468959b189a242a9b45f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae11a973735b36d5b1b63e91c00305d9be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c580263093ca9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6fa94fc488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c766000a5e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1386abdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060fb30e900caab415db6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3c901cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ffffff7f000000007f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca405d8c5f64fdb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb40800000077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e5e2c664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53dc10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fa6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf475bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c02b5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadbb25c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d060000008926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa800000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x2cbfb000) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) write$P9_RREADLINK(r8, 0x0, 0x0) sendmsg$inet(r8, 0x0, 0x48804) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40840) 757.749736ms ago: executing program 5 (id=500): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) shutdown(r0, 0x0) kexec_load(0x8, 0x1, &(0x7f0000000500)=[{&(0x7f0000000480)="a3", 0x1, 0x0, 0x10000}], 0x3e0000) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000080)={0x20080522}, 0xfffffffffffffffc) ioctl$GIO_UNIMAP(r2, 0x560b, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpgrp(0xffffffffffffffff) ptrace$setopts(0x4206, r5, 0x0, 0x20004f) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r3, @ANYRES16=r0], 0x18}, 0xc801) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001440)=@raw={'raw\x00', 0x3c1, 0x3, 0x13c0, 0x12f0, 0xc8, 0x8, 0x4000000, 0x5803, 0x12f0, 0x2e8, 0x2e8, 0x12f0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11e0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x81, 0x8, 0xe, 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1420) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) kexec_load(0x8, 0x4, &(0x7f0000000540)=[{&(0x7f00000001c0)="12d3a9445df4998d549592dc0ee330f9a6f3339c8c5bed89b39c8a3ff5f11eafecfcd8f59e02f0ffbf8bddab6e346c62928bc50feb38f1315026a29013bc294fd8e04c719234929bceac06666a6942c8a1b44815f93baee8727c61f211d7978151bf5bb9afa27dfd334b7196d8bc6416fc88bdd814a266367e7432e5c1b8d3e3bd8f00f10358bf9edfeeecb8071efb", 0x8f, 0xffffffffffffff80, 0x6}, {&(0x7f0000000280), 0x0, 0x9, 0x5}, {&(0x7f0000000300)="033dd7157b717b47e9f15625779206976187cdf95b2a4ab5a1f747c0dc54615d927b919b61c8ae58a053b0584cf8d9e920692f424b88a8120c4e71a5b46422ef15d5dfcebdd43b247fc13e0babcfec31db35af38", 0x54, 0x2, 0x2}, {&(0x7f0000000380)="bc7d1f863f779dc79e54e3ab1c02b7b5f984047ef64488b72be27e89b9a3b908b40e42c887d575400f114e2496fa7f46eacae67fc36d9f5b5cb30ff362124ddc8777028360131cbe82da12fa882ca2f08a81586ee889b1c22bc4ddbbfd889733e1750bf8d2257b7ece9af18f511515c2019af07e8964dc052eb5ee44473bbee5dc818e6aae99e4a4667ed82ceaad1723cfa7b29d131a60c09fc72593069e68ab35dec6876eecf02948bca7deba466c1271726284", 0xb4, 0x5, 0xffff}], 0xa0000) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=r3], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000280)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r9, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) sendmsg$tipc(r9, &(0x7f0000000740)={&(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x3, 0x4}}, 0x10, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x20000804}, 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) socket(0x10, 0x3, 0x0) 656.992862ms ago: executing program 0 (id=501): socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) pipe(&(0x7f0000000540)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 596.515075ms ago: executing program 3 (id=502): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000880)='./file0\x00', 0x100c404, &(0x7f0000000340)=ANY=[@ANYBLOB='dmask=00000000000000000002001,flush,uid=', @ANYRESHEX=0x0, @ANYBLOB="0004074443", @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodots,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',nodots,nodots,dots,nodots,nodots,nodots,check=relaxed,nodots,sys_immutable,nodots,showexec,flush,umask=00000000000000000000007,nodots,dots,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='quiet,dots,errorsmount-ro,flush,nodots,\x00\x00\x00\x00'], 0x1, 0x245, &(0x7f0000000c80)="$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") setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff010}]}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f0000000080)=r0}, 0x20) close(r0) unshare(0x20000400) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x40, r3, 0x1, 0xffffff80, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) r5 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=ANY=[@ANYBLOB="1400000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00.\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="020000000100"/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r5, &(0x7f0000001600), 0x0}, 0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 596.144785ms ago: executing program 0 (id=503): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000240)='./bus\x00', 0x21) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mknodat(r0, &(0x7f0000000200)='./file0\x00', 0x8000, 0x80000000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0xd4d, 0x8, 0x8, 0x1f54}, {0xe5cd, 0xf, 0x6a, 0x5}, {0x6, 0x3, 0x10, 0x18}, {0x7, 0x1, 0x3c, 0x80000001}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x9, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r7, r8, 0x25, 0x0, @void}, 0x10) r10 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r10, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$inet(r10, &(0x7f00000002c0)={0x2, 0x4e22, @broadcast}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r9, r11, 0x4, r7}, 0x10) mount_setattr(r5, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20) r12 = open(&(0x7f00000000c0)='./bus\x00', 0x1c113e, 0x40) mount_setattr(r12, &(0x7f0000000040)='./bus\x00', 0x9100, &(0x7f0000000080)={0xb, 0x0, 0x80000, {r12}}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4, &(0x7f0000000240), 0x22, 0x4d5, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 572.630527ms ago: executing program 3 (id=504): epoll_create1(0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) r1 = io_uring_setup(0x6005, &(0x7f0000000080)={0x0, 0xb720, 0x800, 0x0, 0x100135}) close_range(r1, r1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x6}, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x88219, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x8, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2518"], 0x60}}, 0x4024000) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000003540)=""/4093, 0xffd}, {&(0x7f0000004540)=""/4132, 0x1024}], 0x2}, 0x100) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) dup3(0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000040)={[{@grpquota}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) pwritev2(r5, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) 480.383032ms ago: executing program 0 (id=507): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getitimer(0x2, &(0x7f0000000400)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') readv(r0, &(0x7f0000000500)=[{&(0x7f00000005c0)=""/156, 0x9c}, {0x0, 0x300}], 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={&(0x7f0000000080)="79b29a8367db55a1a6125138edb19fd17cf2e93ff110cb9fd74a3fccbfbee772fcde0770ef39eb851ca6a8ebd38e63e282682f4457f4ffef68ed91e0bedd79eb8b64bad68d01631bde1e7d290f54462d698e26d2c4ef30633466f98c3f14b47f4e7153b40cce0bb5138124d74fb79b40c8511216da173b5eb4475112df69cc5054e8e26e7fe4139c9402a146c563cfbd51f08951ef14d51c73d1f42f496a64f11ed7cd45aea4eeb1", &(0x7f00000001c0)=""/172, &(0x7f0000000280)="c83dc846b8fa39b9fa2860633f7f298d9cb2754ae11df7417b73f27686577f9c1179cfc0e346093b0f3c32486c27e3b7ca548560ada470afaba6b682535ab116b197aeea0f9606b5434ae5e98887110a942dc3fa931126143dfb6bd97e7cb73ff7771207e37e6cffaed9c6d080025a53f83f4c310b0917f1f387f0be34e6b110acb8344e234c632cf586ea38c3a232e4566126c3edf6e6fbfc6f932d3f63213c8985098f3947b95e1ee2c6a9a484642e190c0b0d8723301db2edfa3c0a8e1788a15b17fb64762c4fa34ef534a816d7b72d2f5a2c736953c675e71457007ae6aa67ef4692c18f", &(0x7f0000000140)="713e7ded471beb6eb6a40fd82b46dba4865a21dc6921148363988e08765cba1ea074bd3acccdadb58b9e877e82607074ba3c", 0x9}, 0x38) mkdir(&(0x7f00000003c0)='./file0\x00', 0x68a61d5504af80b8) 415.566936ms ago: executing program 0 (id=509): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x12}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x8}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000003c0)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x5, 0xb}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) 415.243786ms ago: executing program 4 (id=510): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r2) sendmmsg(r1, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000080)="ef", 0x1}], 0x1, &(0x7f0000000380)=ANY=[], 0x1e0}}], 0x1, 0x5d2dd0c54751f8e3) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010001fff2ebd70000200000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000300012800845d16d1298e495cf000280050005000100000008000300270f000005000600030000000800030006000000"], 0x50}}, 0x8000) 414.968706ms ago: executing program 2 (id=511): clock_adjtime(0x0, &(0x7f0000000580)={0x3ff, 0x6a255a8b, 0x4100, 0xd, 0x0, 0x3, 0xfffffffffffffffe, 0x800000000006, 0x0, 0x100, 0x3, 0x4000000000000, 0x80, 0x0, 0x9f, 0x2, 0x4000000000014, 0x9, 0x2ffffffffffd, 0x3, 0x8001, 0x1, 0x4, 0x6, 0x0, 0xe}) 408.607206ms ago: executing program 0 (id=512): syz_emit_ethernet(0xfed7, &(0x7f0000000140)=ANY=[], 0x0) 399.338267ms ago: executing program 2 (id=513): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000300)={'bond0\x00', @ifru_names='ip6_vti0\x00'}) fcntl$notify(r0, 0x402, 0x80000020) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x800, &(0x7f00000003c0)) socket$inet6_mptcp(0xa, 0x1, 0x106) 375.039848ms ago: executing program 0 (id=514): r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) io_uring_setup(0x6005, &(0x7f0000000280)={0x0, 0xb720, 0x800, 0xfffffffe, 0x100135}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r2 = syz_open_pts(r1, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xef, 0x4, 0x40, 0xec, 0x0, 0x6042, 0xcfe90, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x5}, 0x4805, 0x1f, 0xffffffff, 0x1, 0x51, 0x0, 0x1, 0x0, 0x4000000, 0x0, 0x80000001}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) write$binfmt_misc(r3, &(0x7f0000000340), 0x2000011a) dup3(r2, r1, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000005c0)) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) 345.60113ms ago: executing program 4 (id=515): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18b000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 276.210214ms ago: executing program 2 (id=516): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x800, &(0x7f0000000640)={[{@bsdgroups}, {@usrjquota}, {@lazytime}, {@norecovery}, {@bsdgroups}, {@grpquota}, {@minixdf}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@grpquota}]}, 0x1, 0x774, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) preadv2(r0, &(0x7f0000000200)=[{&(0x7f0000002540)=""/4089, 0xff9}], 0x1, 0x7b, 0xfffffbfe, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x60, r4, 0x1, 0x50bd29, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10}}, {0x8}}}]}}]}, 0x60}, 0x1, 0xf000, 0x0, 0x4008000}, 0x4800) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@newpolicy={0xc0, 0x13, 0x40c, 0x70bd2a, 0x25dfdbfc, {{@in6=@mcast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0x4e20, 0x101, 0x2, 0x0, 0x0, 0x0, r3, 0xee00}, {0x5, 0x1, 0x10, 0x5, 0x2811, 0x8, 0x5, 0x9}, {0x8, 0x2, 0x81, 0x2174}, 0xb, 0x6e6bb7, 0x0, 0x0, 0x2, 0x2}, [@replay_thresh={0x8, 0xb, 0x39}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 275.800864ms ago: executing program 4 (id=517): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000240)='./bus\x00', 0x21) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mknodat(r0, &(0x7f0000000200)='./file0\x00', 0x8000, 0x80000000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0xd4d, 0x8, 0x8, 0x1f54}, {0xe5cd, 0xf, 0x6a, 0x5}, {0x6, 0x3, 0x10, 0x18}, {0x7, 0x1, 0x3c, 0x80000001}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x9, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r7, r8, 0x25, 0x0, @void}, 0x10) r10 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r10, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$inet(r10, &(0x7f00000002c0)={0x2, 0x4e22, @broadcast}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r9, r11, 0x4, r7}, 0x10) mount_setattr(r5, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20) r12 = open(&(0x7f00000000c0)='./bus\x00', 0x1c113e, 0x40) mount_setattr(r12, &(0x7f0000000040)='./bus\x00', 0x9100, &(0x7f0000000080)={0xb, 0x0, 0x80000, {r12}}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4, &(0x7f0000000240), 0x22, 0x4d5, &(0x7f0000000580)="$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") 248.119895ms ago: executing program 2 (id=518): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x320, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [0x4000000], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 227.039237ms ago: executing program 4 (id=519): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0xffffff7f, 0x130, 0x130, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty=0xffffff7f, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff03, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 84.189295ms ago: executing program 4 (id=520): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000880)=0x3, 0x4) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x80000008, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x4}, 0x109001, 0x801, 0x800043, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000080)=0x40) pwritev(r3, &(0x7f0000000240)=[{&(0x7f00000002c0)="80fd02000040", 0x6}], 0x1, 0x0, 0x0) (async) pwritev(r3, &(0x7f0000000240)=[{&(0x7f00000002c0)="80fd02000040", 0x6}], 0x1, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r2, r1, 0x0, 0x0, 0x0}, 0x30) 74.831396ms ago: executing program 2 (id=521): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 56.132667ms ago: executing program 4 (id=522): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = io_uring_setup(0x3442, &(0x7f00000001c0)={0x0, 0xddae, 0x8, 0x2, 0x31a}) close_range(r1, 0xffffffffffffffff, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000}) r2 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0x801e7}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001c80)='/sys/power/disk', 0x800, 0x48) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000001cc0)=0x8000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r2}) io_uring_enter(r2, 0xd12, 0xd9bd, 0x9, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = epoll_create1(0x0) epoll_pwait2(r6, &(0x7f0000000440)=[{}], 0x1, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af5a4cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe0900"/190], 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x48c0) readv(r7, &(0x7f0000000600)=[{&(0x7f0000000200)=""/41, 0x29}], 0x1) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f00000017c0)=""/130, 0x82}], 0x1}, 0xa1}], 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=523): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000280)={0x77359400}, 0xfffffffffffffffe) r0 = socket$kcm(0xa, 0x922000000003, 0x11) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8002, &(0x7f0000000040), 0x0, 0x62c, &(0x7f00000000c0)="$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") sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8000) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x5, 0x0, 0x0, 0x0, 0xd, 0x652d0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0xc, 0x0, 0x2009}, r1, 0x0, 0xffffffffffffffff, 0x6) syz_pidfd_open(r1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="2e000e008000fd00ffffffffffffffffffffffff50505050505000010000000000000000070001004ca4"], 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendto$inet6(r3, &(0x7f0000000900)="a4", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='yeah', 0x4) shutdown(r3, 0x1) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000207000000000000000000000005001a"], 0x38}}, 0x40000) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @loopback, 0x9}, 0x18, &(0x7f0000000080)=[{&(0x7f0000000140)="f4000900062b2c25fe", 0x9}], 0x1}, 0x0) kernel console output (not intermixed with test programs): [ 18.478369][ T29] audit: type=1400 audit(1769482010.798:62): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.500316][ T29] audit: type=1400 audit(1769482010.798:63): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.522842][ T29] audit: type=1400 audit(1769482010.798:64): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.545751][ T29] audit: type=1400 audit(1769482010.798:65): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.568761][ T29] audit: type=1400 audit(1769482010.798:66): avc: denied { read open } for pid=3194 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.170' (ED25519) to the list of known hosts. [ 24.140826][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 24.140841][ T29] audit: type=1400 audit(1769482016.468:70): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.169757][ T29] audit: type=1400 audit(1769482016.488:71): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.170518][ T3299] cgroup: Unknown subsys name 'net' [ 24.197659][ T29] audit: type=1400 audit(1769482016.518:72): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.390745][ T3299] cgroup: Unknown subsys name 'cpuset' [ 24.396754][ T3299] cgroup: Unknown subsys name 'rlimit' [ 24.506369][ T29] audit: type=1400 audit(1769482016.828:73): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.529851][ T29] audit: type=1400 audit(1769482016.828:74): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.539510][ T3301] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.550303][ T29] audit: type=1400 audit(1769482016.828:75): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.579183][ T29] audit: type=1400 audit(1769482016.828:76): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.599613][ T29] audit: type=1400 audit(1769482016.838:77): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.624373][ T29] audit: type=1400 audit(1769482016.838:78): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.639530][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.648245][ T29] audit: type=1400 audit(1769482016.888:79): avc: denied { relabelto } for pid=3301 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.839000][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 25.882933][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 25.918888][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 25.943999][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.951072][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.958178][ T3312] bridge_slave_0: entered allmulticast mode [ 25.964508][ T3312] bridge_slave_0: entered promiscuous mode [ 25.975149][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.982235][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.989309][ T3312] bridge_slave_1: entered allmulticast mode [ 25.995706][ T3312] bridge_slave_1: entered promiscuous mode [ 26.049831][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.061391][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 26.069785][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.076908][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.084061][ T3311] bridge_slave_0: entered allmulticast mode [ 26.090541][ T3311] bridge_slave_0: entered promiscuous mode [ 26.102230][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.118500][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.125631][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.132807][ T3311] bridge_slave_1: entered allmulticast mode [ 26.139300][ T3311] bridge_slave_1: entered promiscuous mode [ 26.168135][ T3312] team0: Port device team_slave_0 added [ 26.175743][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 26.187252][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.194405][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.201567][ T3316] bridge_slave_0: entered allmulticast mode [ 26.207936][ T3316] bridge_slave_0: entered promiscuous mode [ 26.218507][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.225682][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.232851][ T3316] bridge_slave_1: entered allmulticast mode [ 26.239381][ T3316] bridge_slave_1: entered promiscuous mode [ 26.248651][ T3312] team0: Port device team_slave_1 added [ 26.266168][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.273155][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.299056][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.311041][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.330834][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.337795][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.363752][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.378383][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.410825][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.431581][ T3312] hsr_slave_0: entered promiscuous mode [ 26.437560][ T3312] hsr_slave_1: entered promiscuous mode [ 26.444561][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.461415][ T3311] team0: Port device team_slave_0 added [ 26.484891][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.491999][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.499160][ T3318] bridge_slave_0: entered allmulticast mode [ 26.505729][ T3318] bridge_slave_0: entered promiscuous mode [ 26.512921][ T3311] team0: Port device team_slave_1 added [ 26.518502][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.525597][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.532776][ T3318] bridge_slave_1: entered allmulticast mode [ 26.539223][ T3318] bridge_slave_1: entered promiscuous mode [ 26.554235][ T3316] team0: Port device team_slave_0 added [ 26.563649][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.570711][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.577883][ T3317] bridge_slave_0: entered allmulticast mode [ 26.584228][ T3317] bridge_slave_0: entered promiscuous mode [ 26.594982][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.602170][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.609297][ T3317] bridge_slave_1: entered allmulticast mode [ 26.615732][ T3317] bridge_slave_1: entered promiscuous mode [ 26.630668][ T3316] team0: Port device team_slave_1 added [ 26.645347][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.657528][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.673412][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.680413][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.706736][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.718283][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.727596][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.734549][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.760621][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.772142][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.801441][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.808414][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.834324][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.849753][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.856742][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.882710][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.913239][ T3317] team0: Port device team_slave_0 added [ 26.921723][ T3318] team0: Port device team_slave_0 added [ 26.944199][ T3317] team0: Port device team_slave_1 added [ 26.952019][ T3311] hsr_slave_0: entered promiscuous mode [ 26.957948][ T3311] hsr_slave_1: entered promiscuous mode [ 26.963802][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 26.969555][ T3311] Cannot create hsr debugfs directory [ 26.975899][ T3318] team0: Port device team_slave_1 added [ 27.000761][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.007780][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.033697][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.044809][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.051760][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.077641][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.103554][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.110723][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.136682][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.147570][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.154528][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.180470][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.193318][ T3316] hsr_slave_0: entered promiscuous mode [ 27.199373][ T3316] hsr_slave_1: entered promiscuous mode [ 27.205307][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 27.211083][ T3316] Cannot create hsr debugfs directory [ 27.246326][ T3317] hsr_slave_0: entered promiscuous mode [ 27.252169][ T3317] hsr_slave_1: entered promiscuous mode [ 27.257992][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 27.263834][ T3317] Cannot create hsr debugfs directory [ 27.291609][ T3318] hsr_slave_0: entered promiscuous mode [ 27.297611][ T3318] hsr_slave_1: entered promiscuous mode [ 27.303511][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 27.309225][ T3318] Cannot create hsr debugfs directory [ 27.329438][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.350496][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.372472][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.383903][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.503848][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.514638][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.523352][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.532158][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.569688][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.578353][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.587148][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.597592][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.609132][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.643448][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.656316][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.666997][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.675476][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.684233][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.694307][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.701421][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.729117][ T3317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.743697][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.750755][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.759015][ T3317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.768114][ T3317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.778481][ T3317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.788339][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.827345][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.845763][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.859407][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.866506][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.885811][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.892886][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.902184][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.930689][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.937723][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.946553][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.953603][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.970989][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.988278][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.008206][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.033807][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.042187][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.061385][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.068453][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.078806][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.086025][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.098362][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.105433][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.123548][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.143526][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.150619][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.174883][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.185319][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.208697][ T3312] veth0_vlan: entered promiscuous mode [ 28.221611][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.232025][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.252360][ T3312] veth1_vlan: entered promiscuous mode [ 28.279462][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.306537][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.315806][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.337716][ T3312] veth0_macvtap: entered promiscuous mode [ 28.359284][ T3312] veth1_macvtap: entered promiscuous mode [ 28.388953][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.406130][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.418425][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.429253][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.447510][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.468698][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.497641][ T3316] veth0_vlan: entered promiscuous mode [ 28.514028][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.529938][ T3311] veth0_vlan: entered promiscuous mode [ 28.538265][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.555631][ T3316] veth1_vlan: entered promiscuous mode [ 28.564533][ T3311] veth1_vlan: entered promiscuous mode [ 28.587453][ T3316] veth0_macvtap: entered promiscuous mode [ 28.605771][ T3311] veth0_macvtap: entered promiscuous mode [ 28.632668][ T3316] veth1_macvtap: entered promiscuous mode [ 28.640040][ T3311] veth1_macvtap: entered promiscuous mode [ 28.668463][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.676687][ C1] hrtimer: interrupt took 57769 ns [ 28.683464][ T3317] veth0_vlan: entered promiscuous mode [ 28.689742][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.698263][ T3318] veth0_vlan: entered promiscuous mode [ 28.712692][ T3317] veth1_vlan: entered promiscuous mode [ 28.713266][ T3479] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.720387][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.742831][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.752343][ T3318] veth1_vlan: entered promiscuous mode [ 28.764776][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.801507][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.818225][ T3317] veth0_macvtap: entered promiscuous mode [ 28.833715][ T3484] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=3484 comm=syz.3.6 [ 28.836485][ T3317] veth1_macvtap: entered promiscuous mode [ 28.862506][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.877234][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.891344][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.902818][ T3318] veth0_macvtap: entered promiscuous mode [ 28.922400][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.932245][ T3318] veth1_macvtap: entered promiscuous mode [ 28.942637][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.953809][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.969775][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.983143][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.001001][ T3488] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7'. [ 29.012343][ T3488] Zero length message leads to an empty skb [ 29.022216][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.039314][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.062030][ T3488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 29.071207][ T3488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 29.092471][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.115054][ T3499] netlink: 'syz.3.7': attribute type 10 has an invalid length. [ 29.149028][ T3345] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.165015][ T3499] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.172321][ T3499] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.193259][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 29.193273][ T29] audit: type=1400 audit(1769482021.518:144): avc: denied { mount } for pid=3487 comm="syz.3.7" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 29.198097][ T3499] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.199431][ T29] audit: type=1400 audit(1769482021.518:145): avc: denied { unlink } for pid=3316 comm="syz-executor" name="file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 29.221340][ T3499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.258086][ T3499] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.265234][ T3499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.274986][ T29] audit: type=1400 audit(1769482021.598:146): avc: denied { mount } for pid=3503 comm="syz.0.1" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.278000][ T3499] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 29.320529][ T3345] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.321752][ T3505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 29.332962][ T3345] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.352579][ T3508] loop2: detected capacity change from 0 to 512 [ 29.360585][ T29] audit: type=1400 audit(1769482021.638:147): avc: denied { create } for pid=3501 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 29.371416][ T3508] /dev/loop2: Can't open blockdev [ 29.379728][ T29] audit: type=1400 audit(1769482021.668:148): avc: denied { ioctl } for pid=3506 comm="syz.2.10" path="socket:[4078]" dev="sockfs" ino=4078 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.393308][ T3345] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.440605][ T3488] syz.3.7 (3488) used greatest stack depth: 10312 bytes left [ 29.463139][ T3345] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.480064][ T3345] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.517660][ T29] audit: type=1400 audit(1769482021.748:149): avc: denied { read write } for pid=3506 comm="syz.2.10" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 29.541723][ T29] audit: type=1400 audit(1769482021.748:150): avc: denied { open } for pid=3506 comm="syz.2.10" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 29.566564][ T29] audit: type=1400 audit(1769482021.798:151): avc: denied { create } for pid=3501 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.586233][ T29] audit: type=1400 audit(1769482021.818:152): avc: denied { connect } for pid=3506 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.606911][ T29] audit: type=1400 audit(1769482021.838:153): avc: denied { append } for pid=3513 comm="syz.0.12" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 29.608003][ T3345] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.653584][ T3518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.689579][ T3518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.777035][ T3532] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.801645][ T3537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 29.806113][ T3532] team0: Port device bridge1 added [ 29.810435][ T3537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 29.824676][ T3532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 29.833416][ T3532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'. [ 29.851624][ T3537] team_slave_0: entered promiscuous mode [ 29.857298][ T3537] team_slave_1: entered promiscuous mode [ 29.871067][ T3537] macsec1: entered promiscuous mode [ 29.876322][ T3537] team0: entered promiscuous mode [ 29.881608][ T3537] macsec1: entered allmulticast mode [ 29.886935][ T3537] team0: entered allmulticast mode [ 29.892209][ T3537] team_slave_0: entered allmulticast mode [ 29.897925][ T3537] team_slave_1: entered allmulticast mode [ 29.944862][ T3542] loop3: detected capacity change from 0 to 1024 [ 29.959472][ T3542] ext4: Unknown parameter 'nouser_xattr' [ 30.418571][ T3577] capability: warning: `syz.3.36' uses deprecated v2 capabilities in a way that may be insecure [ 30.433012][ T3577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.36'. [ 30.442030][ T3577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.36'. [ 30.694768][ T3603] batadv0: entered promiscuous mode [ 30.710607][ T3603] macvtap1: entered promiscuous mode [ 30.717078][ T3603] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 30.729897][ T3603] batadv0: left promiscuous mode [ 30.740854][ T3605] FAULT_INJECTION: forcing a failure. [ 30.740854][ T3605] name failslab, interval 1, probability 0, space 0, times 0 [ 30.753704][ T3605] CPU: 0 UID: 0 PID: 3605 Comm: syz.1.48 Not tainted syzkaller #0 PREEMPT(voluntary) [ 30.753732][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 30.753745][ T3605] Call Trace: [ 30.753753][ T3605] [ 30.753759][ T3605] __dump_stack+0x1d/0x30 [ 30.753782][ T3605] dump_stack_lvl+0x95/0xd0 [ 30.753806][ T3605] dump_stack+0x15/0x1b [ 30.753823][ T3605] should_fail_ex+0x263/0x280 [ 30.753850][ T3605] should_failslab+0x8c/0xb0 [ 30.753876][ T3605] kmem_cache_alloc_noprof+0x68/0x490 [ 30.753900][ T3605] ? vm_area_dup+0x33/0x2c0 [ 30.753922][ T3605] vm_area_dup+0x33/0x2c0 [ 30.753943][ T3605] __split_vma+0xe9/0x660 [ 30.753961][ T3605] ? obj_cgroup_charge_account+0x159/0x1a0 [ 30.753995][ T3605] ? obj_cgroup_charge_account+0x122/0x1a0 [ 30.754023][ T3605] vms_gather_munmap_vmas+0x17a/0x7b0 [ 30.754054][ T3605] ? avc_has_perm_noaudit+0xab/0x130 [ 30.754084][ T3605] ? avc_has_perm+0x101/0x190 [ 30.754115][ T3605] do_vmi_align_munmap+0x1e1/0x400 [ 30.754156][ T3605] do_vmi_munmap+0x1da/0x220 [ 30.754176][ T3605] do_munmap+0x8d/0xc0 [ 30.754203][ T3605] mremap_to+0x1a3/0x440 [ 30.754222][ T3605] ? check_prep_vma+0x49b/0x660 [ 30.754243][ T3605] __se_sys_mremap+0x667/0xb50 [ 30.754271][ T3605] ? mutex_lock+0x57/0x90 [ 30.754290][ T3605] ? mutex_unlock+0x4e/0x90 [ 30.754308][ T3605] ? fput+0x8f/0xc0 [ 30.754332][ T3605] ? ksys_write+0x194/0x1a0 [ 30.754349][ T3605] __x64_sys_mremap+0x67/0x80 [ 30.754369][ T3605] x64_sys_call+0x2944/0x3000 [ 30.754393][ T3605] do_syscall_64+0xc0/0x2a0 [ 30.754421][ T3605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.754442][ T3605] RIP: 0033:0x7f3eef7aaeb9 [ 30.754464][ T3605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.754482][ T3605] RSP: 002b:00007f3eee1e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 30.754513][ T3605] RAX: ffffffffffffffda RBX: 00007f3eefa26090 RCX: 00007f3eef7aaeb9 [ 30.754528][ T3605] RDX: 0000000000400000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 30.754542][ T3605] RBP: 00007f3eee1e6090 R08: 0000200000c00000 R09: 0000000000000000 [ 30.754556][ T3605] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 30.754566][ T3605] R13: 00007f3eefa26128 R14: 00007f3eefa26090 R15: 00007ffd17836eb8 [ 30.754583][ T3605] [ 30.917847][ T3616] loop2: detected capacity change from 0 to 512 [ 30.925012][ T3616] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 30.925464][ T3616] EXT4-fs warning (device loop2): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop2. [ 30.954305][ T3623] loop2: detected capacity change from 0 to 512 [ 30.955176][ T3623] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.955193][ T3623] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 30.970286][ T3623] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 31.173141][ T3623] EXT4-fs (loop2): 1 truncate cleaned up [ 31.192742][ T3623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.249887][ T3636] Process accounting resumed [ 31.264041][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.436261][ T3667] loop1: detected capacity change from 0 to 512 [ 31.448338][ T3667] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 31.465284][ T3667] EXT4-fs (loop1): 1 truncate cleaned up [ 31.472887][ T3667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.486006][ T3670] Process accounting resumed [ 31.509484][ T3673] loop0: detected capacity change from 0 to 2048 [ 31.521141][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.618878][ T3688] ------------[ cut here ]------------ [ 31.624471][ T3688] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x4000000, 0x0] s64=[0x4000000, 0x0] u32=[0x4000000, 0x0] s32=[0x4000000, 0x0] var_off=(0x0, 0x0) [ 31.642448][ T3688] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.0.81/3688 [ 31.653275][ T3688] Modules linked in: [ 31.657221][ T3688] CPU: 1 UID: 0 PID: 3688 Comm: syz.0.81 Not tainted syzkaller #0 PREEMPT(voluntary) [ 31.666889][ T3688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 31.672133][ T3692] loop1: detected capacity change from 0 to 256 [ 31.677104][ T3688] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 31.689559][ T3688] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 31.709372][ T3688] RSP: 0018:ffffc9000191f388 EFLAGS: 00010246 [ 31.715529][ T3688] RAX: ffff888103a2cc90 RBX: 0000000000000000 RCX: 0000000004000000 [ 31.723582][ T3688] RDX: ffffffff867f0650 RSI: ffffffff867c51e1 RDI: ffffffff86fb96f0 [ 31.731764][ T3688] RBP: ffff88811b8492e0 R08: 0000000000000000 R09: 0000000004000000 [ 31.734524][ T3692] FAT-fs (loop1): error, clusters badly computed (0 != 128) [ 31.739914][ T3688] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88811b8492a0 [ 31.747257][ T3692] FAT-fs (loop1): Filesystem has been set read-only [ 31.755216][ T3688] R13: 0000000000000000 R14: ffff88811b8492ec R15: ffff88811b8492d8 [ 31.770093][ T3688] FS: 00007f6458df76c0(0000) GS:ffff8882aec57000(0000) knlGS:0000000000000000 [ 31.779048][ T3688] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.785792][ T3688] CR2: 000055dbe5480ad8 CR3: 000000011b6c8000 CR4: 00000000003506f0 [ 31.793810][ T3688] Call Trace: [ 31.797088][ T3688] [ 31.800078][ T3688] reg_set_min_max+0x21c/0x260 [ 31.804939][ T3688] check_cond_jmp_op+0x1367/0x1a80 [ 31.810280][ T3688] do_check+0x440c/0x9060 [ 31.812016][ T3693] loop0: detected capacity change from 0 to 1024 [ 31.814669][ T3688] do_check_common+0xd0f/0x1630 [ 31.825109][ T3692] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 31.825827][ T3688] bpf_check+0x2f6d/0xc7e0 [ 31.838727][ T3688] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 31.844909][ T3688] ? alloc_pages_bulk_noprof+0x4a1/0x520 [ 31.850639][ T3688] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 31.856575][ T3688] ? css_rstat_updated+0xbb/0x280 [ 31.861679][ T3688] ? try_charge_memcg+0x215/0xa10 [ 31.866737][ T3688] ? _find_next_zero_bit+0x29/0xa0 [ 31.871907][ T3688] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 31.877972][ T3693] ======================================================= [ 31.877972][ T3693] WARNING: The mand mount option has been deprecated and [ 31.877972][ T3693] and is ignored by this kernel. Remove the mand [ 31.877972][ T3693] option from the mount to silence this warning. [ 31.877972][ T3693] ======================================================= [ 31.878020][ T3688] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 31.915575][ T3657] syz.4.68 (3657) used greatest stack depth: 10224 bytes left [ 31.919060][ T3688] ? css_rstat_updated+0xbb/0x280 [ 31.931977][ T3688] ? mod_memcg_state+0x182/0x260 [ 31.936992][ T3688] ? __rcu_read_unlock+0x4e/0x70 [ 31.942040][ T3688] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 31.947878][ T3688] ? pcpu_alloc_noprof+0xb08/0x1010 [ 31.953137][ T3688] ? should_fail_ex+0x30/0x280 [ 31.957921][ T3688] ? __kmalloc_noprof+0x2a3/0x580 [ 31.963032][ T3688] ? security_bpf_prog_load+0x60/0x140 [ 31.966959][ T3693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.968578][ T3688] ? selinux_bpf_prog_load+0xac/0xd0 [ 31.985835][ T3688] ? security_bpf_prog_load+0x9e/0x140 [ 31.991527][ T3688] bpf_prog_load+0xf76/0x1140 [ 31.996233][ T3688] ? security_bpf+0x2b/0x90 [ 32.000868][ T3688] __sys_bpf+0x469/0x7b0 [ 32.005122][ T3688] __x64_sys_bpf+0x41/0x50 [ 32.009673][ T3688] x64_sys_call+0x28e1/0x3000 [ 32.014422][ T3688] do_syscall_64+0xc0/0x2a0 [ 32.018948][ T3688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.024929][ T3688] RIP: 0033:0x7f645a39aeb9 [ 32.029353][ T3688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.032552][ T3710] loop4: detected capacity change from 0 to 512 [ 32.049011][ T3688] RSP: 002b:00007f6458df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 32.049045][ T3688] RAX: ffffffffffffffda RBX: 00007f645a615fa0 RCX: 00007f645a39aeb9 [ 32.049074][ T3688] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 32.049088][ T3688] RBP: 00007f645a408c1f R08: 0000000000000000 R09: 0000000000000000 [ 32.049103][ T3688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.049116][ T3688] R13: 00007f645a616038 R14: 00007f645a615fa0 R15: 00007ffcda4f9198 [ 32.081881][ T3710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.087894][ T3688] [ 32.096408][ T3710] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.103904][ T3688] ---[ end trace 0000000000000000 ]--- [ 32.165394][ T3688] syz.0.81 (3688) used greatest stack depth: 10008 bytes left [ 32.165984][ T3714] loop1: detected capacity change from 0 to 512 [ 32.183940][ T3714] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 32.201545][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.211836][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.222854][ T3714] EXT4-fs (loop1): 1 truncate cleaned up [ 32.228921][ T3714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.281847][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.313237][ T3729] ext4: Unknown parameter 'nouser_xattr' [ 32.349703][ T3735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.378468][ T3740] batadv0: entered promiscuous mode [ 32.378720][ T3735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.384589][ T3738] netlink: 'syz.3.95': attribute type 1 has an invalid length. [ 32.400435][ T3740] macvtap1: entered promiscuous mode [ 32.423564][ T3740] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 32.435505][ T3740] batadv0: left promiscuous mode [ 32.508148][ T3742] bridge_slave_0: left allmulticast mode [ 32.513893][ T3742] bridge_slave_0: left promiscuous mode [ 32.519610][ T3742] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.583541][ T3742] bridge_slave_1: left allmulticast mode [ 32.589231][ T3742] bridge_slave_1: left promiscuous mode [ 32.594955][ T3742] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.614317][ T3742] bond0: (slave bond_slave_0): Releasing backup interface [ 32.624357][ T3742] bond0: (slave bond_slave_1): Releasing backup interface [ 32.636351][ T3742] team0: Port device team_slave_0 removed [ 32.645946][ T3742] team0: Port device team_slave_1 removed [ 32.652887][ T3742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.660344][ T3742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.669272][ T3742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.676782][ T3742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 32.687154][ T3742] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 32.776305][ T3743] Process accounting resumed [ 32.806028][ T3765] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 32.828839][ T3765] EXT4-fs (loop1): 1 truncate cleaned up [ 32.835021][ T3765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.845430][ T3772] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 32.887371][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.949328][ T3781] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 32.970306][ T3784] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 32.978557][ T3784] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 33.435919][ T3805] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 33.472828][ T3805] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 33.479383][ T3805] EXT4-fs (loop0): mount failed [ 33.688427][ T3834] ipt_ECN: cannot use operation on non-tcp rule [ 33.840143][ T3846] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 33.847380][ T3846] IPv6: NLM_F_CREATE should be set when creating new route [ 33.968777][ T3863] FAT-fs (loop0): error, clusters badly computed (0 != 128) [ 33.976200][ T3863] FAT-fs (loop0): Filesystem has been set read-only [ 34.013981][ T3863] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 34.047611][ T3874] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 34.082462][ T3869] __nla_validate_parse: 12 callbacks suppressed [ 34.082555][ T3869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.137'. [ 34.160046][ T3880] SELinux: failed to load policy [ 34.201769][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 34.201852][ T29] audit: type=1400 audit(1769484605.525:324): avc: denied { perfmon } for pid=3891 comm="syz.0.148" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.236125][ T29] audit: type=1400 audit(1769484605.525:325): avc: denied { write } for pid=3882 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.255527][ T3892] SELinux: truncated policydb string identifier [ 34.263178][ T3892] SELinux: failed to load policy [ 34.265107][ T3896] FAULT_INJECTION: forcing a failure. [ 34.265107][ T3896] name failslab, interval 1, probability 0, space 0, times 0 [ 34.269284][ T29] audit: type=1400 audit(1769484605.585:326): avc: denied { create } for pid=3891 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 34.280861][ T3896] CPU: 1 UID: 0 PID: 3896 Comm: syz.2.149 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 34.280919][ T3896] Tainted: [W]=WARN [ 34.280926][ T3896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 34.280968][ T3896] Call Trace: [ 34.280975][ T3896] [ 34.280984][ T3896] __dump_stack+0x1d/0x30 [ 34.281010][ T3896] dump_stack_lvl+0x95/0xd0 [ 34.281032][ T3896] dump_stack+0x15/0x1b [ 34.281053][ T3896] should_fail_ex+0x263/0x280 [ 34.281152][ T3896] should_failslab+0x8c/0xb0 [ 34.281176][ T3896] __kmalloc_node_noprof+0xbd/0x590 [ 34.281203][ T3896] ? qdisc_alloc+0x65/0x410 [ 34.281276][ T3896] qdisc_alloc+0x65/0x410 [ 34.281342][ T3896] ? nla_strcmp+0xc3/0xe0 [ 34.281361][ T3896] qdisc_create+0xf5/0x9d0 [ 34.281387][ T3896] tc_modify_qdisc+0xffc/0x14f0 [ 34.281494][ T3896] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 34.281519][ T3896] rtnetlink_rcv_msg+0x6a7/0x720 [ 34.281547][ T3896] netlink_rcv_skb+0x123/0x220 [ 34.281700][ T3896] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 34.281727][ T3896] rtnetlink_rcv+0x1c/0x30 [ 34.281778][ T3896] netlink_unicast+0x5c0/0x690 [ 34.281846][ T3896] netlink_sendmsg+0x5c8/0x6f0 [ 34.281868][ T3896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 34.281888][ T3896] ____sys_sendmsg+0x5af/0x600 [ 34.282016][ T3896] ___sys_sendmsg+0x195/0x1e0 [ 34.282045][ T3896] __x64_sys_sendmsg+0xd4/0x160 [ 34.282073][ T3896] x64_sys_call+0x17ba/0x3000 [ 34.282142][ T3896] do_syscall_64+0xc0/0x2a0 [ 34.282174][ T3896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.282246][ T3896] RIP: 0033:0x7f611147aeb9 [ 34.282264][ T3896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.282282][ T3896] RSP: 002b:00007f610fed7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 34.282303][ T3896] RAX: ffffffffffffffda RBX: 00007f61116f5fa0 RCX: 00007f611147aeb9 [ 34.282326][ T3896] RDX: 0000000024008004 RSI: 0000200000000180 RDI: 0000000000000004 [ 34.282340][ T3896] RBP: 00007f610fed7090 R08: 0000000000000000 R09: 0000000000000000 [ 34.282355][ T3896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.282368][ T3896] R13: 00007f61116f6038 R14: 00007f61116f5fa0 R15: 00007ffe5d3ebe38 [ 34.282388][ T3896] [ 34.604659][ T29] audit: type=1400 audit(1769484605.925:327): avc: denied { bpf } for pid=3905 comm="syz.3.152" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.627174][ T3892] mmap: syz.0.148 (3892) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.640671][ T29] audit: type=1400 audit(1769484605.965:328): avc: denied { module_request } for pid=3905 comm="syz.3.152" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 34.692881][ T3909] set_capacity_and_notify: 7 callbacks suppressed [ 34.692915][ T3909] loop2: detected capacity change from 0 to 128 [ 34.731880][ T3909] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.745320][ T3909] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 34.848238][ T29] audit: type=1400 audit(1769484606.165:329): avc: denied { nlmsg_write } for pid=3916 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 34.980867][ T3928] netlink: 76 bytes leftover after parsing attributes in process `syz.0.157'. [ 34.993491][ T29] audit: type=1400 audit(1769484606.315:330): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 35.017736][ T3928] loop0: detected capacity change from 0 to 512 [ 35.018021][ T3929] netlink: 76 bytes leftover after parsing attributes in process `syz.3.159'. [ 35.064021][ T3928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.099764][ T3928] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.112027][ T3937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 35.119251][ T3937] IPv6: NLM_F_CREATE should be set when creating new route [ 35.149976][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.194911][ T29] audit: type=1326 audit(1769484606.515:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.2.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611147aeb9 code=0x7ffc0000 [ 35.218188][ T29] audit: type=1326 audit(1769484606.515:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.2.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611147aeb9 code=0x7ffc0000 [ 35.241805][ T29] audit: type=1326 audit(1769484606.515:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.2.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f611147aeb9 code=0x7ffc0000 [ 35.303137][ T3946] syz.1.165 uses obsolete (PF_INET,SOCK_PACKET) [ 35.410242][ T3955] netlink: 76 bytes leftover after parsing attributes in process `syz.2.167'. [ 35.422191][ T3955] loop2: detected capacity change from 0 to 512 [ 35.450978][ T3955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.463673][ T3955] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.519605][ T3961] loop1: detected capacity change from 0 to 512 [ 35.526720][ T3961] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.538233][ T3961] EXT4-fs (loop1): 1 truncate cleaned up [ 35.544266][ T3961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.834204][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.024916][ T3976] netlink: 76 bytes leftover after parsing attributes in process `syz.4.173'. [ 36.121552][ T3978] netlink: 20 bytes leftover after parsing attributes in process `syz.3.176'. [ 36.126767][ T3982] loop0: detected capacity change from 0 to 1024 [ 36.145158][ T3982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.200745][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.290439][ T3991] loop2: detected capacity change from 0 to 256 [ 36.297313][ T3991] vfat: Unknown parameter 'dmaskÓ[Dª¥ã.0000000000177777' [ 36.380414][ T3994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 36.398365][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.413172][ T3996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'. [ 36.435266][ T3998] loop1: detected capacity change from 0 to 128 [ 36.455241][ T4000] Illegal XDP return value 4294967274 on prog (id 23) dev N/A, expect packet loss! [ 36.554923][ T4008] team_slave_0: entered promiscuous mode [ 36.560657][ T4008] team_slave_1: entered promiscuous mode [ 36.567257][ T4008] macvtap1: entered promiscuous mode [ 36.572641][ T4008] team0: entered promiscuous mode [ 36.579314][ T4008] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 36.620243][ T4011] loop1: detected capacity change from 0 to 512 [ 36.638801][ T4011] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.187: invalid indirect mapped block 4294967295 (level 1) [ 36.653467][ T4011] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.187: invalid indirect mapped block 4294967295 (level 1) [ 36.668106][ T4011] EXT4-fs (loop1): 2 truncates cleaned up [ 36.674298][ T4011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.688408][ T4011] EXT4-fs (loop1): Online defrag not supported for non-extent files [ 36.696577][ T4011] SELinux: truncated policydb string identifier [ 36.703352][ T4011] SELinux: failed to load policy [ 36.721568][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.772389][ T4018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.781565][ T4018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.791118][ T4018] random: crng reseeded on system resumption [ 36.897111][ T4024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.192'. [ 36.908503][ T4024] batman_adv: batadv0: Adding interface: macvtap1 [ 36.914960][ T4024] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.940568][ T4024] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 37.072976][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.087336][ T4034] netlink: 76 bytes leftover after parsing attributes in process `syz.3.195'. [ 37.147357][ T4040] loop0: detected capacity change from 0 to 512 [ 37.169963][ T4040] EXT4-fs: inline encryption not supported [ 37.199927][ T4040] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 37.208062][ T4040] EXT4-fs (loop0): orphan cleanup on readonly fs [ 37.219747][ T4040] EXT4-fs (loop0): 1 orphan inode deleted [ 37.226900][ T323] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 1 [ 37.248238][ T4040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.295607][ T4054] netlink: 'syz.3.202': attribute type 21 has an invalid length. [ 37.536443][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.624165][ T4074] loop0: detected capacity change from 0 to 512 [ 37.636097][ T4074] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 37.701406][ T4077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.704136][ T4068] Process accounting resumed [ 37.722464][ T4081] netlink: 'syz.0.211': attribute type 1 has an invalid length. [ 37.724229][ T4077] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.747618][ T4077] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #18: comm syz.2.208: corrupted inode contents [ 37.759648][ T4077] EXT4-fs (loop2): Remounting filesystem read-only [ 37.766167][ T4077] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 37.983142][ T4116] lo speed is unknown, defaulting to 1000 [ 37.989618][ T4116] lo speed is unknown, defaulting to 1000 [ 37.995856][ T4116] lo speed is unknown, defaulting to 1000 [ 38.002086][ T4116] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 38.009731][ T4116] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 38.043000][ T4121] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 38.064208][ T4121] EXT4-fs (loop1): 1 truncate cleaned up [ 38.066049][ T4116] lo speed is unknown, defaulting to 1000 [ 38.072416][ T4121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.076394][ T4116] lo speed is unknown, defaulting to 1000 [ 38.102687][ T4117] Process accounting resumed [ 38.108151][ T4116] lo speed is unknown, defaulting to 1000 [ 38.120356][ T4116] lo speed is unknown, defaulting to 1000 [ 38.126612][ T4116] lo speed is unknown, defaulting to 1000 [ 38.139483][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.209690][ T4137] usb usb1: usbfs: process 4137 (syz.1.228) did not claim interface 0 before use [ 38.452495][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.519243][ T4161] program syz.1.240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.608362][ T4167] EXT4-fs: Ignoring removed orlov option [ 38.671239][ T4167] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.243: corrupted in-inode xattr: bad e_name length [ 38.695421][ T4167] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.243: couldn't read orphan inode 15 (err -117) [ 38.709270][ T4167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.793128][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.914266][ T4185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.936869][ T4185] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.953331][ T4185] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #18: comm syz.0.248: corrupted inode contents [ 38.980863][ T4185] EXT4-fs (loop0): Remounting filesystem read-only [ 38.988175][ T4185] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 39.024719][ T4198] Process accounting resumed [ 39.214748][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 39.214765][ T29] audit: type=1400 audit(1769484866.531:416): avc: denied { setopt } for pid=4219 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 39.241443][ T4222] __nla_validate_parse: 12 callbacks suppressed [ 39.241518][ T4222] netlink: 24 bytes leftover after parsing attributes in process `syz.2.262'. [ 39.259584][ T4222] netlink: 28 bytes leftover after parsing attributes in process `syz.2.262'. [ 39.268570][ T4222] netlink: 28 bytes leftover after parsing attributes in process `syz.2.262'. [ 39.332015][ T4224] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1002 sclass=netlink_tcpdiag_socket pid=4224 comm=syz.2.264 [ 39.345510][ T4224] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1001 sclass=netlink_tcpdiag_socket pid=4224 comm=syz.2.264 [ 39.404246][ T4230] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 39.411472][ T4230] IPv6: NLM_F_CREATE should be set when creating new route [ 39.434732][ T4232] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 39.443508][ T4233] netlink: 76 bytes leftover after parsing attributes in process `syz.3.265'. [ 39.488898][ T4235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.501764][ T4235] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.677472][ T4241] netlink: 20 bytes leftover after parsing attributes in process `syz.1.270'. [ 39.686693][ T4241] netlink: 'syz.1.270': attribute type 1 has an invalid length. [ 39.701678][ T4241] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.711431][ T4241] netlink: 28 bytes leftover after parsing attributes in process `syz.1.270'. [ 39.724886][ T4241] bond1: (slave dummy0): making interface the new active one [ 39.734637][ T4241] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 39.753168][ T4241] bond1 (unregistering): (slave dummy0): Releasing active interface [ 39.763603][ T4241] bond1 (unregistering): Released all slaves [ 39.772856][ T4235] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.825157][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.862000][ T29] audit: type=1400 audit(1769484867.181:417): avc: denied { name_bind } for pid=4261 comm="syz.4.278" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 39.887107][ T4260] set_capacity_and_notify: 6 callbacks suppressed [ 39.887123][ T4260] loop0: detected capacity change from 0 to 512 [ 39.900303][ T29] audit: type=1400 audit(1769484867.211:418): avc: denied { ioctl } for pid=4261 comm="syz.4.278" path="socket:[7374]" dev="sockfs" ino=7374 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 39.926257][ T4260] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.941199][ T4260] EXT4-fs (loop0): 1 truncate cleaned up [ 39.967641][ T4260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.989927][ T29] audit: type=1400 audit(1769484867.311:419): avc: denied { lock } for pid=4257 comm="syz.1.277" path="socket:[7364]" dev="sockfs" ino=7364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 40.030939][ T4256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.275'. [ 40.041150][ T4263] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=4263 comm=syz.1.277 [ 40.101821][ T36] kernel write not supported for file bpf-prog (pid: 36 comm: kworker/1:1) [ 40.110891][ T29] audit: type=1400 audit(1769484867.421:420): avc: denied { mounton } for pid=4275 comm="syz.4.284" path="/36/file0" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 40.140233][ T4279] netlink: 28 bytes leftover after parsing attributes in process `syz.4.284'. [ 40.193245][ T29] audit: type=1400 audit(1769484867.491:421): avc: denied { write } for pid=4281 comm="syz.3.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 40.213318][ T29] audit: type=1400 audit(1769484867.501:422): avc: denied { write } for pid=4281 comm="syz.3.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 40.220861][ T4287] loop2: detected capacity change from 0 to 512 [ 40.233134][ T29] audit: type=1400 audit(1769484867.501:423): avc: denied { ioctl } for pid=4281 comm="syz.3.286" path="socket:[6998]" dev="sockfs" ino=6998 ioctlcmd=0x9410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 40.264204][ T29] audit: type=1400 audit(1769484867.501:424): avc: denied { ioctl } for pid=4281 comm="syz.3.286" path="socket:[7000]" dev="sockfs" ino=7000 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 40.289569][ T29] audit: type=1400 audit(1769484867.501:425): avc: denied { create } for pid=4281 comm="syz.3.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.352911][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.363914][ T4287] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.287: corrupted in-inode xattr: e_value size too large [ 40.388731][ T4287] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.287: couldn't read orphan inode 15 (err -117) [ 40.401743][ T4287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.499133][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.533448][ T4322] loop2: detected capacity change from 0 to 256 [ 40.556244][ T4317] netlink: 28 bytes leftover after parsing attributes in process `syz.3.293'. [ 40.601485][ T4325] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 40.636084][ T4327] loop2: detected capacity change from 0 to 764 [ 40.649533][ T4327] rock: directory entry would overflow storage [ 40.655796][ T4327] rock: sig=0x4f50, size=4, remaining=3 [ 40.661390][ T4327] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 40.699815][ T4331] loop1: detected capacity change from 0 to 256 [ 40.710228][ T4327] rock: directory entry would overflow storage [ 40.716405][ T4327] rock: sig=0x4f50, size=4, remaining=3 [ 40.721991][ T4327] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 40.723645][ T4331] FAULT_INJECTION: forcing a failure. [ 40.723645][ T4331] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 40.743204][ T4331] CPU: 0 UID: 0 PID: 4331 Comm: syz.1.300 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 40.743238][ T4331] Tainted: [W]=WARN [ 40.743244][ T4331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 40.743256][ T4331] Call Trace: [ 40.743262][ T4331] [ 40.743270][ T4331] __dump_stack+0x1d/0x30 [ 40.743351][ T4331] dump_stack_lvl+0x95/0xd0 [ 40.743374][ T4331] dump_stack+0x15/0x1b [ 40.743405][ T4331] should_fail_ex+0x263/0x280 [ 40.743513][ T4331] should_fail+0xb/0x20 [ 40.743542][ T4331] should_fail_usercopy+0x1a/0x20 [ 40.743575][ T4331] strncpy_from_user+0x27/0x250 [ 40.743620][ T4331] getname_flags+0xad/0x3b0 [ 40.743647][ T4331] io_openat_prep+0x12b/0x2c0 [ 40.743683][ T4331] io_submit_sqes+0x70e/0x11b0 [ 40.743864][ T4331] __se_sys_io_uring_enter+0x1bf/0x1c70 [ 40.743928][ T4331] ? __rcu_read_unlock+0x4e/0x70 [ 40.743958][ T4331] ? get_pid_task+0x96/0xd0 [ 40.744059][ T4331] ? proc_fail_nth_write+0x13b/0x160 [ 40.744087][ T4331] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 40.744195][ T4331] ? vfs_write+0x86e/0x9f0 [ 40.744215][ T4331] ? __rcu_read_unlock+0x4e/0x70 [ 40.744244][ T4331] ? __fget_files+0x184/0x1c0 [ 40.744274][ T4331] ? mutex_lock+0x57/0x90 [ 40.744296][ T4331] ? mutex_unlock+0x4e/0x90 [ 40.744318][ T4331] ? fput+0x8f/0xc0 [ 40.744345][ T4331] __x64_sys_io_uring_enter+0x78/0x90 [ 40.744435][ T4331] x64_sys_call+0x27e4/0x3000 [ 40.744461][ T4331] do_syscall_64+0xc0/0x2a0 [ 40.744557][ T4331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.744581][ T4331] RIP: 0033:0x7f3eef7aaeb9 [ 40.744598][ T4331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.744672][ T4331] RSP: 002b:00007f3eee207028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 40.744722][ T4331] RAX: ffffffffffffffda RBX: 00007f3eefa25fa0 RCX: 00007f3eef7aaeb9 [ 40.744737][ T4331] RDX: 000000000000addf RSI: 0000000000003516 RDI: 0000000000000004 [ 40.744751][ T4331] RBP: 00007f3eee207090 R08: 0000000000000000 R09: 000000000001517f [ 40.744765][ T4331] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 40.744798][ T4331] R13: 00007f3eefa26038 R14: 00007f3eefa25fa0 R15: 00007ffd17836eb8 [ 40.744884][ T4331] [ 40.863429][ T4334] process 'syz.4.302' launched './file1' with NULL argv: empty string added [ 40.918483][ T4337] netlink: 'syz.4.303': attribute type 8 has an invalid length. [ 40.927508][ T4327] rock: directory entry would overflow storage [ 40.991484][ T4327] rock: sig=0x4f50, size=4, remaining=3 [ 40.997065][ T4327] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 41.086040][ T4349] netlink: 76 bytes leftover after parsing attributes in process `syz.1.304'. [ 41.100098][ T4349] loop1: detected capacity change from 0 to 512 [ 41.119358][ T4349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.132606][ T4349] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.151080][ T4354] loop2: detected capacity change from 0 to 256 [ 41.160862][ T4354] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.349830][ T4367] loop0: detected capacity change from 0 to 2048 [ 41.404749][ T4367] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 41.414404][ T4367] FAT-fs (loop0): Filesystem has been set read-only [ 41.478136][ T4376] loop0: detected capacity change from 0 to 512 [ 41.539366][ T4376] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.317: bg 0: block 248: padding at end of block bitmap is not set [ 41.554634][ T4376] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.317: Failed to acquire dquot type 1 [ 41.570817][ T4376] EXT4-fs (loop0): 1 truncate cleaned up [ 41.577799][ T4376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.590942][ T4376] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.605668][ T4376] FAULT_INJECTION: forcing a failure. [ 41.605668][ T4376] name failslab, interval 1, probability 0, space 0, times 0 [ 41.619124][ T4376] CPU: 0 UID: 0 PID: 4376 Comm: syz.0.317 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 41.619158][ T4376] Tainted: [W]=WARN [ 41.619178][ T4376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.619189][ T4376] Call Trace: [ 41.619262][ T4376] [ 41.619270][ T4376] __dump_stack+0x1d/0x30 [ 41.619292][ T4376] dump_stack_lvl+0x95/0xd0 [ 41.619312][ T4376] dump_stack+0x15/0x1b [ 41.619340][ T4376] should_fail_ex+0x263/0x280 [ 41.619426][ T4376] should_failslab+0x8c/0xb0 [ 41.619453][ T4376] kmem_cache_alloc_noprof+0x68/0x490 [ 41.619507][ T4376] ? __es_insert_extent+0x508/0xee0 [ 41.619537][ T4376] __es_insert_extent+0x508/0xee0 [ 41.619569][ T4376] ext4_es_cache_extent+0x28d/0x390 [ 41.619656][ T4376] ext4_find_extent+0x336/0x7a0 [ 41.619685][ T4376] ext4_ext_map_blocks+0x128/0x38a0 [ 41.619785][ T4376] ? memchr+0x28/0x50 [ 41.619814][ T4376] ? panic_on_this_cpu+0x2d/0x40 [ 41.619892][ T4376] ? insn_get_prefixes+0xa75/0xca0 [ 41.619917][ T4376] ? trace_event_reg+0xe0/0x190 [ 41.620008][ T4376] ext4_map_query_blocks+0xae/0x550 [ 41.620034][ T4376] ? ext4_es_lookup_extent+0x3ac/0x540 [ 41.620063][ T4376] ? __account_obj_stock+0x211/0x350 [ 41.620089][ T4376] ext4_map_blocks+0x398/0xd70 [ 41.620261][ T4376] ? mls_compute_sid+0x139/0x580 [ 41.620279][ T4376] ? mls_context_isvalid+0x85/0x1f0 [ 41.620394][ T4376] ext4_getblk+0x128/0x530 [ 41.620426][ T4376] ext4_bread_batch+0x5c/0x320 [ 41.620454][ T4376] __ext4_find_entry+0x852/0xdf0 [ 41.620495][ T4376] ? avc_has_perm_noaudit+0xab/0x130 [ 41.620528][ T4376] ? may_create+0x455/0x4a0 [ 41.620569][ T4376] ext4_lookup+0xcd/0x3a0 [ 41.620591][ T4376] ? __pfx_ext4_lookup+0x10/0x10 [ 41.620612][ T4376] path_openat+0xee1/0x23c0 [ 41.620724][ T4376] do_filp_open+0x15d/0x280 [ 41.620766][ T4376] do_sys_openat2+0xa6/0x150 [ 41.620893][ T4376] __x64_sys_openat+0xf2/0x120 [ 41.620923][ T4376] x64_sys_call+0x2b07/0x3000 [ 41.620947][ T4376] do_syscall_64+0xc0/0x2a0 [ 41.621047][ T4376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.621067][ T4376] RIP: 0033:0x7f645a39aeb9 [ 41.621085][ T4376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.621103][ T4376] RSP: 002b:00007f6458df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 41.621121][ T4376] RAX: ffffffffffffffda RBX: 00007f645a615fa0 RCX: 00007f645a39aeb9 [ 41.621167][ T4376] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c [ 41.621180][ T4376] RBP: 00007f6458df7090 R08: 0000000000000000 R09: 0000000000000000 [ 41.621192][ T4376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.621204][ T4376] R13: 00007f645a616038 R14: 00007f645a615fa0 R15: 00007ffcda4f9198 [ 41.621221][ T4376] [ 41.929215][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.946865][ T4376] syz.0.317 (4376) used greatest stack depth: 9136 bytes left [ 41.961437][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.972332][ T41] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 1 [ 41.990173][ T4385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.024093][ T4385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.113337][ T4399] loop0: detected capacity change from 0 to 512 [ 42.147539][ T4399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.164808][ T4399] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.887569][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.932550][ T4430] Process accounting resumed [ 42.933118][ T4433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.961758][ T4433] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.980143][ T4433] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #18: comm syz.1.334: corrupted inode contents [ 42.992304][ T4433] EXT4-fs (loop1): Remounting filesystem read-only [ 42.998971][ T4433] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 43.153509][ T4446] team_slave_1 (unregistering): left allmulticast mode [ 43.161794][ T4446] team0: Port device team_slave_1 removed [ 43.318487][ T4464] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 43.325755][ T4464] IPv6: NLM_F_CREATE should be set when creating new route [ 43.422334][ T4467] Process accounting resumed [ 43.648151][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 43.700848][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.745493][ T4483] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 43.821210][ T4486] ext4: Unknown parameter 'nouser_xattr' [ 44.285302][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.461464][ T4519] ext4: Unknown parameter 'nouser_xattr' [ 44.665085][ T4530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.694448][ T4530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.702582][ T1000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.710682][ T4530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.715651][ T4533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.719697][ T4530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.734999][ T4533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.735476][ T4530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.751844][ T4530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.760181][ T4530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.798605][ T4536] __nla_validate_parse: 10 callbacks suppressed [ 44.798620][ T4536] netlink: 16 bytes leftover after parsing attributes in process `syz.0.374'. [ 44.839911][ T4537] netlink: 'syz.0.374': attribute type 13 has an invalid length. [ 44.904136][ T29] kauditd_printk_skb: 638 callbacks suppressed [ 44.904152][ T29] audit: type=1326 audit(1769484872.224:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510bafaeb9 code=0x7ffc0000 [ 44.934459][ T29] audit: type=1326 audit(1769484872.224:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510bafaeb9 code=0x7ffc0000 [ 45.051286][ T4537] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.058499][ T4537] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.071015][ T29] audit: type=1326 audit(1769484872.284:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510bafaeb9 code=0x7ffc0000 [ 45.095222][ T29] audit: type=1326 audit(1769484872.284:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510bafaeb9 code=0x7ffc0000 [ 45.118627][ T29] audit: type=1326 audit(1769484872.284:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f510bafaeb9 code=0x7ffc0000 [ 45.142547][ T29] audit: type=1326 audit(1769484872.284:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510bafaeb9 code=0x7ffc0000 [ 45.166681][ T29] audit: type=1326 audit(1769484872.284:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510bafaeb9 code=0x7ffc0000 [ 45.190025][ T29] audit: type=1326 audit(1769484872.284:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510bafaeb9 code=0x7ffc0000 [ 45.214059][ T29] audit: type=1326 audit(1769484872.284:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f510bafaeb9 code=0x7ffc0000 [ 45.238051][ T29] audit: type=1326 audit(1769484872.284:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510bafaeb9 code=0x7ffc0000 [ 45.324632][ T4558] 9p: Bad value for 'wfdno' [ 45.424978][ T4537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.461965][ T4537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.549112][ T4537] team0: left allmulticast mode [ 45.554014][ T4537] team_slave_0: left allmulticast mode [ 45.559544][ T4537] team0: left promiscuous mode [ 45.564312][ T4537] team_slave_0: left promiscuous mode [ 45.664524][ T4551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.380'. [ 45.704295][ T4583] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 45.704840][ T323] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.790482][ T323] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.823407][ T323] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.852823][ T323] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.941778][ T4597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'. [ 45.950830][ T4597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'. [ 45.959865][ T4597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'. [ 45.969026][ T4597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'. [ 45.977978][ T4597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'. [ 45.986916][ T4597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'. [ 45.995820][ T4597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'. [ 46.143052][ T4619] netlink: 'syz.2.394': attribute type 1 has an invalid length. [ 46.180510][ T4619] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.308758][ T4619] bond1: (slave veth3): Enslaving as an active interface with a down link [ 46.423277][ T4619] bond1: (slave dummy0): making interface the new active one [ 46.433338][ T4651] netlink: 'syz.1.403': attribute type 3 has an invalid length. [ 46.441719][ T4651] netlink: 132 bytes leftover after parsing attributes in process `syz.1.403'. [ 46.463831][ T4619] dummy0: entered promiscuous mode [ 46.478204][ T4619] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 46.543248][ T4654] bond1 (unregistering): (slave veth3): Releasing active interface [ 46.617433][ T4654] bond1 (unregistering): (slave dummy0): Releasing active interface [ 46.631457][ T4654] bond1 (unregistering): Released all slaves [ 47.027603][ T4684] netlink: 'syz.3.412': attribute type 83 has an invalid length. [ 47.089989][ T4695] netlink: 'syz.2.421': attribute type 4 has an invalid length. [ 47.100698][ T4695] netlink: 'syz.2.421': attribute type 4 has an invalid length. [ 47.127846][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.166261][ T4699] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 47.179431][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.248579][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.277655][ T4714] xt_hashlimit: max too large, truncated to 1048576 [ 47.306451][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.318877][ T4719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42496 sclass=netlink_route_socket pid=4719 comm=syz.4.431 [ 47.332061][ T4719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42496 sclass=netlink_route_socket pid=4719 comm=syz.4.431 [ 47.429322][ T49] bridge_slave_1: left allmulticast mode [ 47.435022][ T49] bridge_slave_1: left promiscuous mode [ 47.440863][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.449427][ T49] bridge_slave_0: left allmulticast mode [ 47.455135][ T49] bridge_slave_0: left promiscuous mode [ 47.460824][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.657107][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.667958][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.678670][ T49] bond0 (unregistering): Released all slaves [ 47.730352][ T4711] chnl_net:caif_netlink_parms(): no params data found [ 47.746918][ T49] hsr_slave_0: left promiscuous mode [ 47.752836][ T49] hsr_slave_1: left promiscuous mode [ 47.759806][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.767256][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.784861][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.792314][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.809367][ T49] team0: left promiscuous mode [ 47.814446][ T49] team_slave_0: left promiscuous mode [ 47.819834][ T49] team_slave_1: left promiscuous mode [ 47.838384][ T49] veth1_macvtap: left promiscuous mode [ 47.860732][ T49] veth0_macvtap: left promiscuous mode [ 47.869642][ T49] veth1_vlan: left promiscuous mode [ 47.879915][ T49] veth0_vlan: left promiscuous mode [ 48.042368][ T49] team0 (unregistering): Port device team_slave_1 removed [ 48.084028][ T49] team0 (unregistering): Port device team_slave_0 removed [ 48.198756][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.206236][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.220964][ T4711] bridge_slave_0: entered allmulticast mode [ 48.234316][ T4711] bridge_slave_0: entered promiscuous mode [ 48.250627][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.257802][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.325136][ T4711] bridge_slave_1: entered allmulticast mode [ 48.349703][ T4711] bridge_slave_1: entered promiscuous mode [ 48.377685][ T4783] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.462679][ T4787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.498445][ T4787] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.580155][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.697176][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.723713][ T4711] team0: Port device team_slave_0 added [ 48.734838][ T4711] team0: Port device team_slave_1 added [ 48.789778][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.796812][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.822782][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.835327][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.842429][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.868488][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.881762][ T36] net_ratelimit: 86 callbacks suppressed [ 48.881855][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.940461][ T4711] hsr_slave_0: entered promiscuous mode [ 48.970146][ T4711] hsr_slave_1: entered promiscuous mode [ 48.985195][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 48.990967][ T4711] Cannot create hsr debugfs directory [ 49.121096][ T4711] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 49.148475][ T4711] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 49.186929][ T4711] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 49.208026][ T4711] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 49.315453][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.339139][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.366580][ T4626] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.373671][ T4626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.384563][ T4622] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.391649][ T4622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.546798][ T4711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.557328][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.690429][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.733540][ T4868] RDS: rds_bind could not find a transport for ::ffff:172.20.20.23, load rds_tcp or rds_rdma? [ 49.886617][ T3422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.918312][ T4711] veth0_vlan: entered promiscuous mode [ 49.935964][ T4711] veth1_vlan: entered promiscuous mode [ 49.959079][ T4711] veth0_macvtap: entered promiscuous mode [ 49.986028][ T4711] veth1_macvtap: entered promiscuous mode [ 50.012466][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.048651][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.064079][ T4905] __nla_validate_parse: 4 callbacks suppressed [ 50.064164][ T4905] netlink: 76 bytes leftover after parsing attributes in process `syz.2.461'. [ 50.091756][ T4622] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.115177][ T4622] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.143242][ T4622] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.196519][ T4913] netlink: 'syz.4.463': attribute type 2 has an invalid length. [ 50.204902][ T4914] netlink: 112 bytes leftover after parsing attributes in process `syz.5.425'. [ 50.205552][ T4622] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.259334][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 50.259350][ T29] audit: type=1400 audit(1769485133.586:1276): avc: denied { cpu } for pid=4912 comm="syz.5.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 50.362649][ T4913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.463'. [ 50.371500][ T4913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.463'. [ 50.381012][ T4913] netlink: 'syz.4.463': attribute type 14 has an invalid length. [ 50.388893][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.511675][ T4922] FAULT_INJECTION: forcing a failure. [ 50.511675][ T4922] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 50.525740][ T4922] CPU: 0 UID: 0 PID: 4922 Comm: syz.5.466 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 50.525777][ T4922] Tainted: [W]=WARN [ 50.525784][ T4922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.525795][ T4922] Call Trace: [ 50.525800][ T4922] [ 50.525826][ T4922] __dump_stack+0x1d/0x30 [ 50.525912][ T4922] dump_stack_lvl+0x95/0xd0 [ 50.525932][ T4922] dump_stack+0x15/0x1b [ 50.525955][ T4922] should_fail_ex+0x263/0x280 [ 50.525990][ T4922] should_fail_alloc_page+0xf2/0x100 [ 50.526014][ T4922] __alloc_frozen_pages_noprof+0x108/0x350 [ 50.526153][ T4922] alloc_pages_mpol+0xb3/0x260 [ 50.526186][ T4922] folio_alloc_mpol_noprof+0x39/0x80 [ 50.526214][ T4922] shmem_get_folio_gfp+0x3da/0xd60 [ 50.526275][ T4922] shmem_write_begin+0xfc/0x1f0 [ 50.526303][ T4922] generic_perform_write+0x183/0x490 [ 50.526339][ T4922] shmem_file_write_iter+0xc5/0xf0 [ 50.526448][ T4922] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 50.526573][ T4922] vfs_write+0x5a6/0x9f0 [ 50.526599][ T4922] ksys_write+0xdc/0x1a0 [ 50.526621][ T4922] __x64_sys_write+0x40/0x50 [ 50.526644][ T4922] x64_sys_call+0x2847/0x3000 [ 50.526738][ T4922] do_syscall_64+0xc0/0x2a0 [ 50.526771][ T4922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.526796][ T4922] RIP: 0033:0x7fac0b14b78e [ 50.526845][ T4922] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 50.526862][ T4922] RSP: 002b:00007fac09be6da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.526881][ T4922] RAX: ffffffffffffffda RBX: 00007fac09be76c0 RCX: 00007fac0b14b78e [ 50.526898][ T4922] RDX: 0000000000040000 RSI: 00007fac017c7000 RDI: 0000000000000004 [ 50.526959][ T4922] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 50.527050][ T4922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 50.527161][ T4922] R13: 00007fac09be6ee0 R14: 00007fac09be6ea0 R15: 00007fac017c7000 [ 50.527234][ T4922] [ 50.546836][ T29] audit: type=1400 audit(1769485133.686:1277): avc: denied { listen } for pid=4911 comm="syz.4.463" lport=33381 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.756879][ T29] audit: type=1400 audit(1769485133.686:1278): avc: denied { accept } for pid=4911 comm="syz.4.463" lport=33381 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.779980][ T29] audit: type=1400 audit(1769485133.686:1279): avc: denied { write } for pid=4911 comm="syz.4.463" lport=33381 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 50.804201][ T29] audit: type=1400 audit(1769485133.686:1280): avc: denied { setopt } for pid=4911 comm="syz.4.463" lport=33381 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 50.846762][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.944994][ T29] audit: type=1400 audit(1769485134.176:1281): avc: denied { unlink } for pid=3317 comm="syz-executor" name="file0" dev="tmpfs" ino=432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 51.077932][ T4937] netlink: 12 bytes leftover after parsing attributes in process `syz.5.471'. [ 51.471300][ T4963] syz.5.480 (4963): attempted to duplicate a private mapping with mremap. This is not supported. [ 51.526967][ T29] audit: type=1400 audit(1769485134.856:1282): avc: denied { shutdown } for pid=4968 comm="syz.2.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.550678][ T29] audit: type=1400 audit(1769485134.876:1283): avc: denied { write } for pid=4968 comm="syz.2.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.571545][ T4971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4971 comm=syz.5.480 [ 51.625609][ T4975] random: crng reseeded on system resumption [ 51.647720][ T29] audit: type=1400 audit(1769485134.936:1284): avc: denied { create } for pid=4972 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.667303][ T29] audit: type=1400 audit(1769485134.946:1285): avc: denied { ioctl } for pid=4972 comm="syz.2.484" path="socket:[10558]" dev="sockfs" ino=10558 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.749248][ T4986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.489'. [ 51.794884][ T4988] set_capacity_and_notify: 3 callbacks suppressed [ 51.794897][ T4988] loop5: detected capacity change from 0 to 512 [ 51.812162][ T4988] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 51.832558][ T4988] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 51.849931][ T4988] EXT4-fs (loop5): orphan cleanup on readonly fs [ 51.856351][ T4988] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.490: bad orphan inode 3 [ 51.878251][ T4988] EXT4-fs (loop5): Remounting filesystem read-only [ 51.885347][ T4988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 51.898047][ T4988] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.490: dx entry: limit 0 != root limit 125 [ 51.909796][ T4988] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.490: Corrupt directory, running e2fsck is recommended [ 51.963232][ T4711] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 52.114597][ T5009] loop5: detected capacity change from 0 to 128 [ 52.132909][ T5006] wireguard0: entered promiscuous mode [ 52.139227][ T5006] wireguard0: entered allmulticast mode [ 52.414297][ T5000] netlink: 36 bytes leftover after parsing attributes in process `syz.2.493'. [ 52.424036][ T5019] xt_CT: You must specify a L4 protocol and not use inversions on it [ 52.614118][ T5038] netlink: 76 bytes leftover after parsing attributes in process `syz.3.504'. [ 52.635800][ T5040] netlink: 44 bytes leftover after parsing attributes in process `syz.4.510'. [ 52.672421][ T5048] bond0: (slave ip6_vti0): Error: Device can not be enslaved while up [ 52.837431][ T5060] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 52.942299][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 53.071791][ T5071] ================================================================== [ 53.080087][ T5071] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 53.087844][ T5071] [ 53.090174][ T5071] write to 0xffff888237c26468 of 1 bytes by task 5024 on cpu 0: [ 53.097810][ T5071] folios_put_refs+0x285/0x2d0 [ 53.102591][ T5071] folio_batch_move_lru+0x247/0x270 [ 53.107811][ T5071] folio_add_lru+0x149/0x1e0 [ 53.112412][ T5071] filemap_add_folio+0x267/0x350 [ 53.117368][ T5071] __filemap_get_folio_mpol+0x326/0x680 [ 53.122923][ T5071] simple_write_begin+0x48/0x370 [ 53.127890][ T5071] generic_perform_write+0x183/0x490 [ 53.133201][ T5071] __generic_file_write_iter+0x9e/0x120 [ 53.138783][ T5071] generic_file_write_iter+0x8d/0x310 [ 53.144183][ T5071] __kernel_write_iter+0x319/0x590 [ 53.149310][ T5071] dump_user_range+0xa7d/0xdb0 [ 53.154179][ T5071] elf_core_dump+0x21a2/0x2330 [ 53.158964][ T5071] coredump_write+0xacf/0xdf0 [ 53.163678][ T5071] vfs_coredump+0x26bc/0x3120 [ 53.168406][ T5071] get_signal+0xd7b/0xf60 [ 53.172752][ T5071] arch_do_signal_or_restart+0x96/0x450 [ 53.178321][ T5071] irqentry_exit+0xf7/0x510 [ 53.182841][ T5071] asm_exc_page_fault+0x26/0x30 [ 53.187703][ T5071] [ 53.190028][ T5071] read to 0xffff888237c26468 of 1 bytes by task 5071 on cpu 1: [ 53.197590][ T5071] __lru_add_drain_all+0x17e/0x450 [ 53.202717][ T5071] lru_cache_disable+0x1f/0x30 [ 53.207509][ T5071] __se_sys_move_pages+0x2c0/0x1420 [ 53.212726][ T5071] __x64_sys_move_pages+0x78/0x90 [ 53.217767][ T5071] x64_sys_call+0x27c3/0x3000 [ 53.222461][ T5071] do_syscall_64+0xc0/0x2a0 [ 53.226982][ T5071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.232881][ T5071] [ 53.235210][ T5071] value changed: 0x19 -> 0x00 [ 53.239912][ T5071] [ 53.242238][ T5071] Reported by Kernel Concurrency Sanitizer on: [ 53.248434][ T5071] CPU: 1 UID: 0 PID: 5071 Comm: syz.4.522 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 53.259659][ T5071] Tainted: [W]=WARN [ 53.263472][ T5071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.273535][ T5071] ==================================================================