last executing test programs: 4.535446935s ago: executing program 3 (id=235): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp=0xb3f31c90c98aa6e2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffffff00002e72c18dc5e2ec590000000086dd6000000000283afffe800000000000000000000000000000fe8000000000000000000000000000aa890090780000000000000000000000000000ffffac1e000100000000000000000000ffff64010100"], 0x0) r4 = socket$isdn(0x22, 0x2, 0x10) r5 = socket$isdn(0x22, 0x2, 0x2) r6 = dup3(r5, r4, 0x0) ioctl$IMGETCOUNT(r6, 0x80044943, &(0x7f0000000300)) write$cgroup_subtree(r6, 0x0, 0xfe33) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fcdbdf251b00000008000100", @ANYRES32=0x0, @ANYBLOB="080015000100000004001900"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4409e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8000000000000000}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r10 = syz_io_uring_setup(0x44eb, &(0x7f0000000400)={0x0, 0x7f39, 0x4, 0x3, 0x34f, 0x0, r9}, &(0x7f00000003c0)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x31, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r10, 0x47bc, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r10, 0x18, &(0x7f00000001c0)={0x79c, r8, 0x32, {0xb, 0x100004000}, 0x2}, 0x1) openat$cgroup_ro(r6, &(0x7f0000000340)='cpuset.effective_mems\x00', 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0x1160b4000, 0x41000000}], 0x0) r13 = syz_open_dev$vcsu(&(0x7f0000000000), 0x101, 0x8581) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0xbf, 0x9, 0x0, 0x3, @mcast1, @mcast2, 0x700, 0x700, 0xf37, 0x1}}) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x6, 0x8, 0x8, 0x10200, r13, 0x0, '\x00', r14, r15, 0x2, 0x4, 0x2, 0x0, @void, @value, @value=r16}, 0x50) syz_open_dev$vcsu(&(0x7f00000002c0), 0x7fff, 0xa0000) 3.488291546s ago: executing program 3 (id=253): r0 = socket(0x25, 0x80005, 0x0) sendmsg$inet6(r0, 0x0, 0x0) 3.437489639s ago: executing program 3 (id=255): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r0, &(0x7f0000000040)="9993e4f8d49647189f2aab2f9eeb6e82b7e423c819ef5b203544e334892beb362cf3620378567500b78eeffb23d7f34bc0c2f7ac9412c76d30020dc5b07af20f53e0729795d033", 0x47) 3.394010182s ago: executing program 3 (id=257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000700)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="1b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="ba", 0x1}], 0x1}}], 0x3, 0x2400c0a2) writev(r0, &(0x7f0000002c40), 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_rxnfc={0x2f, 0xc, 0x8, {0x5, @sctp_ip4_spec={@rand_addr=0x64010102, @multicast2, 0x4e23, 0x4e22, 0x1}, {0x0, @random="a73776e39528", 0x4, 0xfffe, [0xfffffffa, 0xd]}, @tcp_ip4_spec={@rand_addr=0x64010100, @local, 0x4e21, 0x4e24, 0xe}, {0x0, @empty, 0xfffc, 0xfffb, [0x9, 0x5]}, 0x9, 0x5}}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002"], 0xa4}}, 0x0) 3.348445074s ago: executing program 0 (id=258): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.348149465s ago: executing program 3 (id=259): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000800)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@data_writeback}]}, 0x1, 0x546, &(0x7f0000000180)="$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") bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x5, 0x8, 0x3}, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x8) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x400c6615, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) futex(&(0x7f0000004000), 0x3, 0x0, 0x0, &(0x7f0000004000)=0x400, 0x2) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd29, 0xfffffffe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x2, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x800002, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1040020, &(0x7f0000000580)=ANY=[@ANYBLOB='mode=1']) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000040)="7a3354d10ed2523f950000200000", 0x0, 0x1008, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x9, 0x1}, 0x50) setxattr$security_ima(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=@md5={0x1, "a92d18181e39d64f73b7f8c3f61c94b4"}, 0x11, 0x0) r8 = semget(0x2, 0x4, 0x5) semctl$SETVAL(r8, 0x0, 0x10, &(0x7f0000000940)) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x4) 3.176402644s ago: executing program 0 (id=262): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) getgroups(0xffffffffffffff3c, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) ptrace(0x8, r1) ptrace(0x4207, r1) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x550, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x108b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xab, 0x0, 0x0, 0x0, 0x20000006}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000540)={0x3, &(0x7f0000000500)=[{0x9, 0x0, 0x0, 0x7fff0004}, {0x3c, 0x6, 0xc, 0x7ffc}, {0xf, 0xe, 0x7, 0x8}]}) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) lstat(&(0x7f0000000180)='.\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./file0\x00', r6, 0xee00) socket$inet6_tcp(0xa, 0x1, 0x0) 3.176173804s ago: executing program 3 (id=263): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x80, 0x6db, 0x1ff}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) write$P9_RCLUNK(r1, &(0x7f00000004c0)={0x7, 0x79, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000440)={r4, 0x4e, "442ded95ccff1026fc69b185f6aef75371dcc7ee50f59d7b51762d747fb8c8b6936cb485db21bb28e5ce13d86a7b501e90bf0d8111e8670e2922df68e37e37745263a056b3cba82da26829ec0749"}, &(0x7f0000000340)=0x56) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000003c0)={r5}, 0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000001c0)='F', 0x1}, {0x0}], 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="00280000000b00000200000000000000000010000000000000", @ANYRES32=r4], 0x20, 0x2400e044}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={r4, 0x3c, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x8ae7}, @in={0x2, 0x4e20, @rand_addr=0x64010100}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) listen(r0, 0x1) accept4$x25(r0, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x80000) 2.292927166s ago: executing program 0 (id=281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf2502000000180001801400020064756d6d7930000000000000000000007e3d2bad55e5963305"], 0x2c}, 0x1, 0x0, 0x0, 0x4004824}, 0x4000) 2.292415446s ago: executing program 0 (id=282): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x0, 0x1, 0x5, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x110140, 0x32, 0x6, 0x7, 0x9, 0x6, 0x2, 0x0, 0x3ff, 0x0, 0x2009}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) nanosleep(&(0x7f0000000000), 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xaad80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f00000000c0)={0x0, 0x7a120, 0x7}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000002c0)={0x0, {{0xa, 0xfffd, 0x1005, @mcast1, 0x8676}}}, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x2f, &(0x7f0000000040)=0xd, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x8, &(0x7f0000000040), 0x21, 0x4f3, &(0x7f00000012c0)="$eJzs3c9vVEUcAPDvbru0lEJBOahRQUTRELY/gIZwES4aQ0iMxJMHqO3SNN1lm26JtHIoR+8kknjSP8GbBxNOHrx505sXPJigEg018bDmvV3apb+1P9Z2P5/k9b2ZWfY702Vm9g3sTgAt62hEzEbEnoi4FhE99fxM/YgLtSN53ONHt4fnHt0ezkS1euW3TFqe5EXDn0nsqz9nZ0S8/07ER5mlcSvTM+NDxWJhsp7unSpN9FamZ06NZes5A4P9g33nTp8d2LS2Hil99fDtsUsffPP1Sw++n33zk6Ra3Z/uT8sa27GZak3PRXdDXntEXNqKYE3SXv/7w86T9LZnIuJY2v97oi19NQGA3axa7YlqT2MaANjtkvv/7shk8/W1gO7IZvP52hre4ejKFsuVqZM95Zs3RiJdwzoYuez1sWKhr75WeDBymSTdn14vpAeeSt8tnI6IQxFxt2NvWp4fLhdHmvnGBwBa2L5F8/+fHbX5HwDY5TqbXQEAYNuZ/wGg9Zj/AaD1/Iv536cDAWCXcP8PAK3H/A8ArWfN+f/O9tQDANgW712+nBzVudr3Xz/5pu5TI4XKeL50czg/XJ6cyI+Wy6PFQn64Wl3r+Yrl8kT/mflkZXrmaql888bU1bHS0GjhaiG3lY0BANbl0JH7PyaT/uz5vekRDXs5mKthd8s2uwJA07Q1uwJA0/g8D7SuddzjWwaAXW6ZLXqfsuJ/Ebpn81fYqU48b/0fWtVG1v+tHcDO9t/W/9/a9HoA288cDq2rWs3Y8x8AWow1fmBD//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALao7PTLZfLoX+GzyM5vPR+yPiIORy1wfKxb6IuJARPzQketI0v3NrjQAsEHZXzL1/b9O9BzvXly6J/NXR3qOiI8/v/LZraGpqcn+JP/3+fype/X8gT3NaAAA0OjC0qzaPF0/N9zIP350e/jJsZ1VfHixtrloEneuftRK2qM9PXdGLiK6/sjU0zXJ+5W2TYg/eycinlto/62GCN3pGkht59PF8ZPY+7cg/sLvf3H87FPxs2lZcs6lv4tnN6Eu0GruX6yNk/W+l3Sxev/LxtH0vHz/70xHqI1Lxr9kLJlbMv5l58e/tiXxM2mfPzqfXr0mD898++6SzGpPrexOxAvty8XPzMfPLD/+5o6vs40/vfjysZXKql9EnFi2/U92pC6lw2zvVGmitzI9c2qsNDRaGC3cGBgY7B/sO3f67EBvukZd+/ndcjF+PX/ywErxk/Z3rRC/c/X2x2vrbP+Xf1/78JVV4r/x6vKv/+FV4idz4uvrjD/UdWHF7buT+CMrtH+N1z9OrjP+g59nRtb5UABgG1SmZ8aHisXC5BoXyXvNtR7jYmdexGzEZj1huigREf+HdrnYyEWzRyZgqy10+mbXBAAAAAAAAAAAAAAAWEllema8Y4s/rdXsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB7/RMAAP//TwTJNg==") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) write$char_usb(r6, &(0x7f0000001100)="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", 0x801) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000140)) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000005c0)) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "807fdf", 0x8, 0x11, 0x0, @private1, @mcast2, {[], {0xfffe, 0xe22, 0x8}}}}}}, 0x0) 1.975224555s ago: executing program 0 (id=285): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) write$cgroup_int(r7, &(0x7f00000001c0), 0xfffffdef) 1.53909393s ago: executing program 1 (id=295): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000001000/0x2000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x809a1ff6090d930f, 0x7, 0x2, 0x6, 0x2, @empty, @private2={0xfc, 0x2, '\x00', 0x20}, 0x1, 0x700, 0xffffffff, 0x200}}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRESHEX=0x0, @ANYBLOB="4400028040000100240001006d6f646500000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365000000000000000000129c2eda25db74eb540be3f8defe74c9146f3be685357935b6335c9e17f249f8c8c5b31f96deac58aa61a5d35e3708f0383621e2d7d41d8fce763e23d86107d9556aada6437e"], 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x10010, r2, 0xb3a2e000) getuid() sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r4, @ANYRES32=0x0, @ANYRES16=r0, @ANYRES64=r4], 0xcc}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4000) 1.317808863s ago: executing program 0 (id=296): socket$pppoe(0x18, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x4000, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r2, &(0x7f0000000100), 0x4, 0x200, 0x0, 0x0) r3 = gettid() r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000480)=@security={'security\x00', 0x4, 0x4, 0x418, 0xffffffff, 0xd0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xfffa, 0x8}}}, {{@ipv6={@private1, @private2, [], [0xffffff00, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x2, 0x3, 0x5}, 0x0, 0x138, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x16, 0xb7, 0xe, 0x8, 0x7, @local, @private2, @private1={0xfc, 0x1, '\x00', 0xfd}, [0xff000000, 0xff000000, 0xff, 0xff], [0xff, 0xffffffff, 0xff000000, 0xffffff00], [0xffffffff, 0xff000000, 0xffffffff, 0xff], 0x604, 0x208}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x3, 0x8, 0x0, 0x0, "cf3523f6abea0ac59f38e4cee2d4e02b4433ada4369fbb16cedc9b2a2cbc46c2804dc8c41ce7aba48504d24e8bc4e7d304000000db2882bc827158e95f1a87e8"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$inet6_sctp(0xa, 0x58b038489c779570, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000400)=0xfe1b) 1.266139906s ago: executing program 1 (id=298): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/45, 0x2e}, {&(0x7f0000000c40)=""/4093, 0xffd}], 0x2, 0x0, 0x4}, 0x40000022) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe2(&(0x7f0000000000), 0x800) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}, 0x2, 0x4005, 0xb, 0x1, 0x1, 0x3000, 0xf, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x200, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029"], 0x108}}], 0x1, 0xc040) 1.158076692s ago: executing program 4 (id=301): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./bus\x00', 0x0, &(0x7f0000000200)={[{@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x1b}}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@norecovery}]}, 0xfe, 0x27e, &(0x7f00000002c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="081b0000020003000b"], 0x0) 1.02837042s ago: executing program 4 (id=302): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9001, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x401, 0x20004, 0x572, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x5e, &(0x7f0000000240)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@errors_remount}, {@nodiscard}]}, 0x3, 0x44a, &(0x7f00000006c0)="$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") 919.049436ms ago: executing program 1 (id=304): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) setsockopt(0xffffffffffffffff, 0x11b, 0x9, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f00000048c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000680)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x4, 0x2}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000400)="4a71cec45709838e2aff9483ad95dd4a652f4caeeb3ab0320a85e2e55cf17c918a2dbe3f9a8c4158b4412ccc8cad40a1689ed66db7d58b60388cf8acd2", 0x3d}], 0x1, &(0x7f0000000740)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x200}}, @mark={{0x14, 0x1, 0x24, 0xb900}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xf}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0xd8}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)}}, {{&(0x7f00000010c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(cbc(aes-arm),aes,xxhash64)\x00'}, 0x80, &(0x7f0000004680)=[{0x0}, {0x0}, {&(0x7f0000001280)="11272d411138a470b9fa", 0xa}, {&(0x7f00000001c0)="66e6183c40fc751aa08b64e4c439ec30d8746f634fc6e3f2a0f3d731994485105b6a92", 0x23}, {&(0x7f0000004480)="8979452ca7860a1c6c22898550d84d0bdb5ffa28c69123f487510bf754850c459c805e9e7e08c6a01545dbceb91028d504e1265b36c4bf8164466efece01507a6ad0e51e32125ef518155f99d3beff55c251aee1b8ce886093f59e11be0bea2d14da2a64dffa40d738b7b98c1967cae4b6bfeaa7c8ca23919c1946619dc5d8b7dd748a95e87b15342b7844d87da0314c124a7d24346ee6327fc18c68483ede3855affb5f452ad368a6847da6", 0xac}, {&(0x7f0000004540)="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", 0xfa}, {&(0x7f0000004640)="45cf14601b3c61792ed0acbad3251e89e0ea88e2fb5658", 0x17}], 0x7}}, {{&(0x7f0000004740)=@sco={0x1f, @none}, 0x80, &(0x7f0000004880)=[{&(0x7f00000047c0)="6d420d9eb303695ddc1a6c91a1215b7ed4a6aec8d753bd9fffff8dd398ef3e518ad52a8ccdbcd037bb1d7c592c70972b552f6c1a4d737f714dc880256a89ab31be90fb1d7ef54faaea81a8e46629b4e33db6a7f8e93bc0ede371c72bbdc8e88be6baca84f1b674167a5acc169ddfa1c434ffa57680077463327e8418a6802cadee1162bc3943d5c8d2b8f99799dbbb4d12f0e97685c14d267b18e9673673ad44faf8e4cafeb7", 0xa6}], 0x1}}], 0x5, 0x20040040) epoll_create1(0x80000) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000240), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4891a, 0xa}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x6000000) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x4c, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffff94}}, {0x69, 0xb, 0x8}, {0x6, 0x11, 0xa}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) sendto$unix(r6, &(0x7f0000000080)="2d2ba39f5921bb103ebf9135c2737298cbf34431271d0ff5483aab739b1f99f8f324a73d591e25d2a4dc04c8564a20a6b157107c0e6233fb356a74ea3373e7eb700671689d8bf02a4a53c151bb27f212e56c9da412991a08ffeea76fa6fd71aafa9d22083ca6ae", 0x67, 0x40000, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 662.572601ms ago: executing program 4 (id=306): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300a8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sigaltstack(&(0x7f0000000100)={&(0x7f00000000c0)=""/51, 0x0, 0x33}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x9, 0x6, 0x9, 0x4fb, 0x2000000}, &(0x7f0000000100)=0x98) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5f21df7aec8d40fb, 0x0, 0x0, 0x5}, 0x0, 0x0, r0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x812, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, r0, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r4, @ANYBLOB="21042abd7000fedbdf251a00000007002100626200000500920001000000f8002280f4"], 0x11c}, 0x1, 0x0, 0x0, 0x4088}, 0x44840) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB="00000000400000000000000000000000000000008b0a9b19595c2de87913a023f6d81b74f0ac8566e7d8925b347f936f9f0078c323373e2692127efe11cb2d75df6a9b516da93d5f87c34ea2a0b132a0c110a5a1a3e72849d277c71593c1ade54868b5fca622de40fe50731b47d8cd", @ANYRES32=0x0, @ANYRES32, @ANYRES8=r6], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f0000000040)={0x10, 0x0, "54f4e4e6a8d2339e306204979218abca"}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) r9 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) execveat(r9, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r10 = socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800000, &(0x7f0000000680)=ANY=[@ANYBLOB="73686f72746e616d657265eb1d3d6f697865642c696f63c70c727365743d63703737352c696f236861ebdf6f468042faba36352c73686f72746e616d653d77696e6e742c636f64657061fca023af60c904a41ecd2b79b6916452a00020b049f013fbf3821e3d3934392c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c756e695f786c617465b1e2aa9e603d302c756e6957786c6174653d312c73686f72746e616d000000"], 0x26, 0x34c, &(0x7f0000001740)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000180)={0x1, 0x8202, 0x0, 0x200101}, &(0x7f00000001c0)=0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 568.545867ms ago: executing program 4 (id=307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x1, 0x80, 0x473, 0xffff, {{0xf, 0x4, 0x3, 0x10, 0x3c, 0x66, 0x0, 0x0, 0x2b, 0x0, @remote, @broadcast, {[@timestamp={0x44, 0x18, 0xa0, 0x0, 0x6, [0x4, 0x80000000, 0xf, 0x2, 0x8]}, @generic={0x44, 0xe, "a7764382684d75ecd1b91287"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_macvtap\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x20, 0x7, 0x1, 0x3, {{0x1e, 0x4, 0x0, 0x1, 0x78, 0x65, 0x0, 0xa, 0x0, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x1b, 0x14, [@loopback, @private=0xa010102, @broadcast, @dev={0xac, 0x14, 0x14, 0x17}, @rand_addr=0x64010101, @local]}, @cipso={0x86, 0x16, 0x3, [{0x5, 0x3, '?'}, {0x6, 0x7, "b427d5fd44"}, {0x2, 0x6, 'rvBZ'}]}, @cipso={0x86, 0x26, 0x2, [{0x3, 0x10, "ce22ddba8fcebf06ba312ef4174f"}, {0x0, 0xa, "223b38c87006dd45"}, {0x6, 0x6, "432b8281"}]}, @timestamp_addr={0x44, 0xc, 0x2c, 0x1, 0xc, [{@multicast1, 0x6}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x60, 0x2, 0x0, @mcast1, @empty, 0x10, 0x1, 0x7fffffff, 0xffff6e8b}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0x4, 0x45de, {{0x25, 0x4, 0x3, 0x2, 0x94, 0x68, 0x0, 0x23, 0x2f, 0x0, @loopback, @rand_addr=0x64010102, {[@timestamp={0x44, 0x18, 0x25, 0x0, 0x5, [0x2, 0x9, 0x4, 0x4, 0xb]}, @ra={0x94, 0x4}, @generic={0x44, 0x10, "fdccf51fd54ea6603f658a293ecb"}, @timestamp={0x44, 0x18, 0xad, 0x0, 0xa, [0xf420, 0x1, 0x3d, 0x0, 0x4]}, @ssrr={0x89, 0xf, 0x71, [@empty, @rand_addr=0x64010101, @rand_addr=0x64010101]}, @timestamp={0x44, 0x2c, 0xf0, 0x0, 0x2, [0x192, 0x5, 0x0, 0x7, 0x1, 0x5, 0x3, 0x10000, 0x0, 0x9]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000680)={0x43c, r2, 0x730, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x10c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8000, 0xb, 0x1, 0x6}, {0xc97c, 0x1, 0x8, 0x2}, {0x9, 0x80, 0x3}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xdc, 0x97, 0x83, 0xfffff801}]}}}]}}, {{0x8, 0x1, r10}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x450}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x20004090}, 0x40) r14 = accept4$x25(0xffffffffffffffff, &(0x7f0000000b40)={0x9, @remote}, &(0x7f0000000b80)=0x12, 0x80000) sendto$x25(r14, &(0x7f0000000bc0)="339f46fa7a72768b9434de6941ff520fa5ef6f848af7c354c6fb84a05d944a728f0b476bab7452e26f678b50e3b9750905bd27df0403cfb256cb108b719aa86a8aa52d6c72557c356fd709739948ad85429ee7ea5c889302bba0ba6814a0ecacad466d90e7db4bfc3bbd96710322524a845bd81c38fac7612363330dceae17a0e6db54db4a81be61c11042c795a3a391c0f030d9694ffc19025a577adc81c695ce56f2739fd2645aa3bd5f056804ddd74398ca9e63f39595858ebaf00f44c1cc60db769d5b93", 0xc6, 0x0, &(0x7f0000000cc0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000d00)=0x7) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000dc0)={'veth1_to_batadv\x00', &(0x7f0000000d40)=@ethtool_regs={0x4, 0x0, 0x71, "a934dcb96d344efca5fb497873657e958e88518e6cddde4daa4a8a1fc38df3fd463c9e1e0bcc99159f0834d2cff12093f709c603c79fae07d4d956056f6d7c867f14571f38c13ff97330a637c39c0eb830cc451a5319dc1af7a19983d2e6fc84c489ed4df55a365b18c20a53c361c48fa4"}}) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000e80)={{r14}, 0x9, &(0x7f0000000e00)=[0x1, 0x400000000000000, 0xff, 0x6, 0x66a, 0x4, 0x9a0, 0x93ce, 0x3], 0x8, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)=@getnexthop={0x1c, 0x6a, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x400) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001040), r1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001100)={'syztnl0\x00', &(0x7f0000001080)={'ip_vti0\x00', r8, 0x8, 0x700, 0x4, 0x6, {{0x17, 0x4, 0x3, 0x2, 0x5c, 0x64, 0x0, 0x5, 0x29, 0x0, @private=0xa010100, @multicast2, {[@timestamp_prespec={0x44, 0x44, 0x9a, 0x3, 0x8, [{@private=0xa010100, 0x10}, {@multicast1, 0x101}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@multicast1, 0x9}, {@broadcast, 0x3}, {@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x1}, {@multicast2, 0x8}]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000001280)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)={0xe4, r15, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0x880) syz_genetlink_get_family_id$SEG6(&(0x7f00000012c0), r1) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000001300)={'caif0\x00'}) r17 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r17, &(0x7f0000001340)={0x27, 0x0, 0x1, 0x7}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r17, 0x8983, &(0x7f0000001380)={0x3, 'veth0_to_hsr\x00', {0xce0}, 0xff45}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001400)='cgroup.stat\x00', 0x0, 0x0) 292.295373ms ago: executing program 4 (id=308): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x14}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge_slave_1\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) socket$inet6_sctp(0xa, 0x0, 0x84) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "1b8100", 0x4d, 0x11, 0x0, @empty, @mcast2, {[], {0x4e25, 0x4e20, 0x4d, 0x0, @wg=@data={0x4, 0x5, 0x9, "9fb1cba8c0b994ad02f7e6dcc1a0ab99075401bda695d35604593efad6f18184b28c4098e3b31d2b989c27fb57ff93ea56b4089582"}}}}}}}, 0x0) 291.675393ms ago: executing program 1 (id=309): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x8000000, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0x7ff}]}}, &(0x7f0000000f40)=""/4089, 0x26, 0xff9, 0x1, 0x32e}, 0x28) 229.751147ms ago: executing program 2 (id=310): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 229.446156ms ago: executing program 1 (id=311): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 228.762847ms ago: executing program 2 (id=312): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x38, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c045}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=@setlink={0x30, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x50601}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_NET_NS_FD={0x8}]}, 0x30}}, 0x48000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') lseek(r3, 0x5, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x301, 0x5, 0xa, 0x110c}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) 228.542887ms ago: executing program 4 (id=313): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) getgroups(0xffffffffffffff3c, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) ptrace(0x8, r1) ptrace(0x4207, r1) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x550, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x108b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xab, 0x0, 0x0, 0x0, 0x20000006}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000540)={0x3, &(0x7f0000000500)=[{0x9, 0x0, 0x0, 0x7fff0004}, {0x3c, 0x6, 0xc, 0x7ffc}, {0xf, 0xe, 0x7, 0x8}]}) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) lstat(&(0x7f0000000180)='.\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./file0\x00', r6, 0xee00) socket$inet6_tcp(0xa, 0x1, 0x0) 210.188478ms ago: executing program 1 (id=314): timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) 152.164861ms ago: executing program 2 (id=315): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@setneightbl={0x24, 0x43, 0x1, 0xffff7ffe, 0x0, {0xa}, [@NDTA_NAME={0xf, 0x1, '\xaa\xaa\xaa\xaa\xaa\xc47\xa5m\"0'}]}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001e00000000000000000000007a02500003ffffff95"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000440)=""/181, 0xb5}], 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="940000001000030400000000ffffffff00000000", @ANYRES32, @ANYBLOB="00010200000000006c00128009000100766c616e"], 0x94}, 0x1, 0xba01}, 0x810) 75.850356ms ago: executing program 2 (id=316): r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r1 = socket$pptp(0x18, 0x1, 0x2) select(0x40, &(0x7f0000000000)={0x9, 0x6, 0x81, 0x2, 0x0, 0x93, 0x1, 0x5}, &(0x7f0000000040)={0x4, 0x3, 0x0, 0x6, 0x6, 0x38000000, 0x3, 0x2}, &(0x7f0000000080)={0xffffffffffffffff, 0x6, 0xdfdb, 0x1, 0x7ff, 0xffffffffffffffc0, 0x9, 0xf7d}, &(0x7f00000000c0)={0x0, 0x2710}) connect$pptp(r1, &(0x7f00000019c0)={0x18, 0x2, {0x2, @empty}}, 0x1e) 58.908217ms ago: executing program 2 (id=317): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 0s ago: executing program 2 (id=318): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.95' (ED25519) to the list of known hosts. [ 35.531803][ T29] audit: type=1400 audit(1770163711.305:62): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 35.554842][ T29] audit: type=1400 audit(1770163711.325:63): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.557045][ T3302] cgroup: Unknown subsys name 'net' [ 35.582611][ T29] audit: type=1400 audit(1770163711.355:64): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.710409][ T3302] cgroup: Unknown subsys name 'cpuset' [ 35.716626][ T3302] cgroup: Unknown subsys name 'rlimit' [ 35.888256][ T29] audit: type=1400 audit(1770163711.655:65): avc: denied { setattr } for pid=3302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.911668][ T29] audit: type=1400 audit(1770163711.665:66): avc: denied { create } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.932306][ T29] audit: type=1400 audit(1770163711.665:67): avc: denied { write } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.952712][ T29] audit: type=1400 audit(1770163711.665:68): avc: denied { read } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.973200][ T29] audit: type=1400 audit(1770163711.675:69): avc: denied { read } for pid=3041 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 35.994144][ T29] audit: type=1400 audit(1770163711.685:70): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 36.014293][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 36.019044][ T29] audit: type=1400 audit(1770163711.695:71): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 36.084399][ T3302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.285316][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 37.406678][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.413809][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.421504][ T3314] bridge_slave_0: entered allmulticast mode [ 37.428222][ T3314] bridge_slave_0: entered promiscuous mode [ 37.448811][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.455932][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.463276][ T3314] bridge_slave_1: entered allmulticast mode [ 37.469659][ T3314] bridge_slave_1: entered promiscuous mode [ 37.481164][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 37.524615][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.537043][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.569959][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 37.580650][ T3314] team0: Port device team_slave_0 added [ 37.589592][ T3314] team0: Port device team_slave_1 added [ 37.608118][ T3327] chnl_net:caif_netlink_parms(): no params data found [ 37.645110][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.652122][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.678202][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.689091][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.696506][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.703847][ T3319] bridge_slave_0: entered allmulticast mode [ 37.710507][ T3319] bridge_slave_0: entered promiscuous mode [ 37.731898][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.738870][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.764917][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.775893][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.782987][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.790295][ T3319] bridge_slave_1: entered allmulticast mode [ 37.796910][ T3319] bridge_slave_1: entered promiscuous mode [ 37.851660][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.867090][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.891288][ T3326] chnl_net:caif_netlink_parms(): no params data found [ 37.900427][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.907517][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.914694][ T3316] bridge_slave_0: entered allmulticast mode [ 37.921216][ T3316] bridge_slave_0: entered promiscuous mode [ 37.942664][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.949869][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.957028][ T3327] bridge_slave_0: entered allmulticast mode [ 37.963601][ T3327] bridge_slave_0: entered promiscuous mode [ 37.973905][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.981099][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.988254][ T3316] bridge_slave_1: entered allmulticast mode [ 37.994714][ T3316] bridge_slave_1: entered promiscuous mode [ 38.003733][ T3314] hsr_slave_0: entered promiscuous mode [ 38.009989][ T3314] hsr_slave_1: entered promiscuous mode [ 38.016777][ T3319] team0: Port device team_slave_0 added [ 38.022716][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.029877][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.037280][ T3327] bridge_slave_1: entered allmulticast mode [ 38.043774][ T3327] bridge_slave_1: entered promiscuous mode [ 38.065547][ T3319] team0: Port device team_slave_1 added [ 38.098839][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.117386][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.131311][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.140711][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.147677][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.173693][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.190481][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.212949][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.219961][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.245911][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.287210][ T3316] team0: Port device team_slave_0 added [ 38.298402][ T3316] team0: Port device team_slave_1 added [ 38.304905][ T3327] team0: Port device team_slave_0 added [ 38.325599][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.332899][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.340410][ T3326] bridge_slave_0: entered allmulticast mode [ 38.347176][ T3326] bridge_slave_0: entered promiscuous mode [ 38.358754][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.365939][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.375811][ T3326] bridge_slave_1: entered allmulticast mode [ 38.382189][ T3326] bridge_slave_1: entered promiscuous mode [ 38.394043][ T3327] team0: Port device team_slave_1 added [ 38.402925][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.409948][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.435888][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.454162][ T3319] hsr_slave_0: entered promiscuous mode [ 38.460154][ T3319] hsr_slave_1: entered promiscuous mode [ 38.466012][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 38.471848][ T3319] Cannot create hsr debugfs directory [ 38.490551][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.497540][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.523626][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.539480][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.546483][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.572465][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.586375][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.593375][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.619341][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.635287][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.650448][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.695823][ T3316] hsr_slave_0: entered promiscuous mode [ 38.701862][ T3316] hsr_slave_1: entered promiscuous mode [ 38.707770][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 38.713545][ T3316] Cannot create hsr debugfs directory [ 38.738881][ T3326] team0: Port device team_slave_0 added [ 38.760267][ T3326] team0: Port device team_slave_1 added [ 38.768004][ T3327] hsr_slave_0: entered promiscuous mode [ 38.774366][ T3327] hsr_slave_1: entered promiscuous mode [ 38.780455][ T3327] debugfs: 'hsr0' already exists in 'hsr' [ 38.786394][ T3327] Cannot create hsr debugfs directory [ 38.841815][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.848963][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.876385][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.911359][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.918700][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.944923][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.017567][ T3326] hsr_slave_0: entered promiscuous mode [ 39.023667][ T3326] hsr_slave_1: entered promiscuous mode [ 39.030011][ T3326] debugfs: 'hsr0' already exists in 'hsr' [ 39.035734][ T3326] Cannot create hsr debugfs directory [ 39.044151][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.053059][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.072637][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.082676][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.134599][ T3319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.143556][ T3319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.155414][ T3319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.164545][ T3319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.198834][ T3327] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.216679][ T3327] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.225979][ T3327] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.243587][ T3327] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.282493][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.289490][ T3316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.300956][ T3316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.314866][ T3316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.326100][ T3316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.349317][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.377860][ T3326] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.386824][ T3326] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.397163][ T3326] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.406951][ T3326] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.420913][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.428042][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.447353][ T2570] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.454527][ T2570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.491474][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.501145][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.520108][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.554290][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.561383][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.571324][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.578393][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.600344][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.612909][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.629481][ T2570] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.636645][ T2570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.657328][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.666453][ T2570] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.673571][ T2570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.689348][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.706348][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.713459][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.722601][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.729858][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.748571][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.767542][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.774724][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.796936][ T3316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.807492][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.822082][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.829233][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.853143][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.866264][ T3326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.876720][ T3326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.991569][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.003596][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.044429][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.056655][ T3314] veth0_vlan: entered promiscuous mode [ 40.066542][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.083867][ T3314] veth1_vlan: entered promiscuous mode [ 40.150668][ T3314] veth0_macvtap: entered promiscuous mode [ 40.162804][ T3314] veth1_macvtap: entered promiscuous mode [ 40.207161][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.223814][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.249850][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.271415][ T3326] veth0_vlan: entered promiscuous mode [ 40.277601][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.305781][ T3319] veth0_vlan: entered promiscuous mode [ 40.312393][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.324296][ T3326] veth1_vlan: entered promiscuous mode [ 40.335338][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.353962][ T3319] veth1_vlan: entered promiscuous mode [ 40.362846][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.397073][ T3326] veth0_macvtap: entered promiscuous mode [ 40.418039][ T3327] veth0_vlan: entered promiscuous mode [ 40.425990][ T3326] veth1_macvtap: entered promiscuous mode [ 40.445805][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.461813][ T3327] veth1_vlan: entered promiscuous mode [ 40.470678][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.481851][ T3316] veth0_vlan: entered promiscuous mode [ 40.488817][ T3484] loop0: detected capacity change from 0 to 8192 [ 40.495980][ T3484] ======================================================= [ 40.495980][ T3484] WARNING: The mand mount option has been deprecated and [ 40.495980][ T3484] and is ignored by this kernel. Remove the mand [ 40.495980][ T3484] option from the mount to silence this warning. [ 40.495980][ T3484] ======================================================= [ 40.499158][ T3316] veth1_vlan: entered promiscuous mode [ 40.550380][ T55] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.560183][ T3319] veth0_macvtap: entered promiscuous mode [ 40.568867][ T3319] veth1_macvtap: entered promiscuous mode [ 40.576321][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 40.576346][ T29] audit: type=1400 audit(1770163716.345:105): avc: denied { mount } for pid=3483 comm="syz.0.1" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 40.607748][ T29] audit: type=1400 audit(1770163716.375:106): avc: denied { mounton } for pid=3483 comm="syz.0.1" path="/0/file2/bus" dev="loop0" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 40.624142][ T3316] veth0_macvtap: entered promiscuous mode [ 40.642269][ T3327] veth0_macvtap: entered promiscuous mode [ 40.649141][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.658121][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.668252][ T3316] veth1_macvtap: entered promiscuous mode [ 40.684743][ T29] audit: type=1400 audit(1770163716.455:107): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 40.702622][ T3314] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 40.710315][ T3327] veth1_macvtap: entered promiscuous mode [ 40.713053][ T3314] FAT-fs (loop0): Filesystem has been set read-only [ 40.727291][ T29] audit: type=1400 audit(1770163716.495:108): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 40.733597][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.755665][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.784800][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.803444][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.811991][ T2570] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.829504][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.841617][ T3487] FAULT_INJECTION: forcing a failure. [ 40.841617][ T3487] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 40.854753][ T3487] CPU: 1 UID: 0 PID: 3487 Comm: syz.0.6 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.854785][ T3487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 40.854804][ T3487] Call Trace: [ 40.854815][ T3487] [ 40.854825][ T3487] __dump_stack+0x1d/0x30 [ 40.854854][ T3487] dump_stack_lvl+0x95/0xd0 [ 40.854909][ T3487] dump_stack+0x15/0x1b [ 40.854930][ T3487] should_fail_ex+0x263/0x280 [ 40.854963][ T3487] should_fail+0xb/0x20 [ 40.854998][ T3487] should_fail_usercopy+0x1a/0x20 [ 40.855068][ T3487] _copy_from_iter+0xcf/0xea0 [ 40.855168][ T3487] ? __alloc_skb+0x397/0x4b0 [ 40.855198][ T3487] ? __alloc_skb+0x219/0x4b0 [ 40.855229][ T3487] netlink_sendmsg+0x4ae/0x6f0 [ 40.855254][ T3487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 40.855301][ T3487] ____sys_sendmsg+0x5af/0x600 [ 40.855324][ T3487] ___sys_sendmsg+0x195/0x1e0 [ 40.855414][ T3487] __x64_sys_sendmsg+0xd4/0x160 [ 40.855440][ T3487] x64_sys_call+0x17ba/0x3000 [ 40.855469][ T3487] do_syscall_64+0xc0/0x2a0 [ 40.855508][ T3487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.855606][ T3487] RIP: 0033:0x7ff086d3aeb9 [ 40.855635][ T3487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.855657][ T3487] RSP: 002b:00007ff085797028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.855685][ T3487] RAX: ffffffffffffffda RBX: 00007ff086fb5fa0 RCX: 00007ff086d3aeb9 [ 40.855702][ T3487] RDX: 0000000000000814 RSI: 00002000000003c0 RDI: 0000000000000004 [ 40.855716][ T3487] RBP: 00007ff085797090 R08: 0000000000000000 R09: 0000000000000000 [ 40.855814][ T3487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.855828][ T3487] R13: 00007ff086fb6038 R14: 00007ff086fb5fa0 R15: 00007ffc8472ee78 [ 40.855847][ T3487] [ 40.858808][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.051286][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.058597][ T2570] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.067518][ T2570] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.102117][ T2570] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.102253][ T2570] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.102383][ T2570] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.102483][ T2570] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.102870][ T2570] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.102965][ T2570] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.109803][ T2570] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.109850][ T2570] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.110119][ T2570] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.118076][ T29] audit: type=1400 audit(1770163716.885:109): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 41.134758][ T29] audit: type=1400 audit(1770163716.905:110): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.134793][ T29] audit: type=1400 audit(1770163716.905:111): avc: denied { open } for pid=3314 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.134861][ T29] audit: type=1400 audit(1770163716.905:112): avc: denied { ioctl } for pid=3314 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.165567][ T3494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 41.166732][ T3496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 41.167723][ T29] audit: type=1400 audit(1770163716.935:113): avc: denied { create } for pid=3493 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.167772][ T29] audit: type=1400 audit(1770163716.935:114): avc: denied { ioctl } for pid=3493 comm="syz.0.8" path="socket:[4720]" dev="sockfs" ino=4720 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.416280][ T3505] loop4: detected capacity change from 0 to 512 [ 41.416867][ T3505] ext4: Unknown parameter 'fsname' [ 41.536464][ T3505] loop4: detected capacity change from 0 to 512 [ 41.536739][ T3505] ext4: Unknown parameter 'fsname' [ 41.612964][ T3516] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.659989][ T3516] loop4: detected capacity change from 0 to 256 [ 41.759534][ T3519] loop1: detected capacity change from 0 to 2048 [ 41.761889][ T3521] xt_hashlimit: size too large, truncated to 1048576 [ 41.898337][ T3519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.977076][ T3416] hid (null): invalid report_size 41405 [ 41.983583][ T3534] FAULT_INJECTION: forcing a failure. [ 41.983583][ T3534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.986642][ T3416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x7 [ 41.996724][ T3534] CPU: 1 UID: 0 PID: 3534 Comm: syz.0.14 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.996820][ T3534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.996937][ T3534] Call Trace: [ 41.997000][ T3534] [ 41.997029][ T3534] __dump_stack+0x1d/0x30 [ 41.997113][ T3534] dump_stack_lvl+0x95/0xd0 [ 41.997185][ T3534] dump_stack+0x15/0x1b [ 41.997328][ T3534] should_fail_ex+0x263/0x280 [ 41.997432][ T3534] should_fail+0xb/0x20 [ 41.997525][ T3534] should_fail_usercopy+0x1a/0x20 [ 41.997659][ T3534] _copy_to_user+0x20/0xa0 [ 41.997730][ T3534] virtual_ncidev_read+0x1bf/0x2b0 [ 41.997768][ T3534] ? __pfx_virtual_ncidev_read+0x10/0x10 [ 41.997805][ T3534] vfs_read+0x1ab/0x7f0 [ 41.997861][ T3534] ? __rcu_read_unlock+0x4e/0x70 [ 41.997985][ T3534] ? __fget_files+0x184/0x1c0 [ 41.998070][ T3534] ksys_read+0xdc/0x1a0 [ 41.998271][ T3534] __x64_sys_read+0x40/0x50 [ 41.998362][ T3534] x64_sys_call+0x2889/0x3000 [ 41.998431][ T3534] do_syscall_64+0xc0/0x2a0 [ 41.998684][ T3534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.998815][ T3534] RIP: 0033:0x7ff086d3aeb9 [ 41.998867][ T3534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.998949][ T3534] RSP: 002b:00007ff085776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 41.998974][ T3534] RAX: ffffffffffffffda RBX: 00007ff086fb6090 RCX: 00007ff086d3aeb9 [ 41.998988][ T3534] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 41.999008][ T3534] RBP: 00007ff085776090 R08: 0000000000000000 R09: 0000000000000000 [ 41.999050][ T3534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.999119][ T3534] R13: 00007ff086fb6128 R14: 00007ff086fb6090 R15: 00007ffc8472ee78 [ 41.999183][ T3534] [ 42.040902][ T3536] 9p: Bad value for 'rfdno' [ 42.043863][ T3416] hid-generic 0000:0000:0000.0001: ignoring exceeding usage max [ 42.203922][ T3416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.215352][ T3416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.222834][ T3416] hid-generic 0000:0000:0000.0001: invalid report_size 41405 [ 42.230380][ T3416] hid-generic 0000:0000:0000.0001: item 0 2 1 7 parsing failed [ 42.238322][ T3416] hid-generic 0000:0000:0000.0001: probe with driver hid-generic failed with error -22 [ 42.277537][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.339353][ T3557] loop1: detected capacity change from 0 to 256 [ 43.122134][ T3664] loop2: detected capacity change from 0 to 164 [ 43.136384][ C1] hrtimer: interrupt took 37593 ns [ 43.146117][ T3664] Unsupported NM flag settings (240) [ 43.217013][ T3665] netlink: 'syz.2.24': attribute type 2 has an invalid length. [ 43.522807][ T3668] netlink: 'syz.1.25': attribute type 1 has an invalid length. [ 43.530498][ T3668] netlink: 'syz.1.25': attribute type 3 has an invalid length. [ 43.538127][ T3668] netlink: 132 bytes leftover after parsing attributes in process `syz.1.25'. [ 43.606688][ T3672] loop1: detected capacity change from 0 to 8192 [ 43.759492][ T3678] Zero length message leads to an empty skb [ 43.829286][ T3680] netlink: 16 bytes leftover after parsing attributes in process `syz.1.30'. [ 43.938921][ T3688] atomic_op ffff88811abefd28 conn xmit_atomic 0000000000000000 [ 43.990735][ T3691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 43.999525][ T3691] netlink: 92 bytes leftover after parsing attributes in process `syz.3.35'. [ 44.143619][ T3697] loop3: detected capacity change from 0 to 8192 [ 44.254024][ T3700] tmpfs: Cannot retroactively limit inodes [ 44.816114][ T3524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 44.961567][ T3707] tipc: Started in network mode [ 44.966548][ T3707] tipc: Node identity ac14140f, cluster identity 4711 [ 44.982705][ T3707] tipc: New replicast peer: 255.255.255.255 [ 44.988916][ T3707] tipc: Enabled bearer , priority 10 [ 45.054787][ T3713] syz.3.44 uses obsolete (PF_INET,SOCK_PACKET) [ 45.084673][ T3713] tipc: Started in network mode [ 45.089673][ T3713] tipc: Node identity , cluster identity 4711 [ 45.095790][ T3713] tipc: Failed to obtain node identity [ 45.101295][ T3713] tipc: Enabling of bearer rejected, failed to enable media [ 45.318118][ T3723] loop4: detected capacity change from 0 to 8192 [ 45.392052][ T3727] FAULT_INJECTION: forcing a failure. [ 45.392052][ T3727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.405214][ T3727] CPU: 1 UID: 0 PID: 3727 Comm: syz.0.52 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.405244][ T3727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 45.405260][ T3727] Call Trace: [ 45.405268][ T3727] [ 45.405277][ T3727] __dump_stack+0x1d/0x30 [ 45.405360][ T3727] dump_stack_lvl+0x95/0xd0 [ 45.405383][ T3727] dump_stack+0x15/0x1b [ 45.405469][ T3727] should_fail_ex+0x263/0x280 [ 45.405509][ T3727] should_fail+0xb/0x20 [ 45.405554][ T3727] should_fail_usercopy+0x1a/0x20 [ 45.405631][ T3727] _copy_from_user+0x1c/0xb0 [ 45.405659][ T3727] ___sys_sendmsg+0xc1/0x1e0 [ 45.405698][ T3727] __x64_sys_sendmsg+0xd4/0x160 [ 45.405728][ T3727] x64_sys_call+0x17ba/0x3000 [ 45.405819][ T3727] do_syscall_64+0xc0/0x2a0 [ 45.405861][ T3727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.405902][ T3727] RIP: 0033:0x7ff086d3aeb9 [ 45.405919][ T3727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.406004][ T3727] RSP: 002b:00007ff085797028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.406031][ T3727] RAX: ffffffffffffffda RBX: 00007ff086fb5fa0 RCX: 00007ff086d3aeb9 [ 45.406049][ T3727] RDX: 0000000000040000 RSI: 00002000000035c0 RDI: 0000000000000003 [ 45.406063][ T3727] RBP: 00007ff085797090 R08: 0000000000000000 R09: 0000000000000000 [ 45.406075][ T3727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.406087][ T3727] R13: 00007ff086fb6038 R14: 00007ff086fb5fa0 R15: 00007ffc8472ee78 [ 45.406105][ T3727] [ 45.607014][ T3733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.55'. [ 45.687513][ T3733] bond_slave_0: entered promiscuous mode [ 45.693567][ T3733] bond_slave_1: entered promiscuous mode [ 45.760254][ T3733] vlan2: entered promiscuous mode [ 45.765393][ T3733] bond0: entered promiscuous mode [ 45.833906][ T3740] cgroup: No subsys list or none specified [ 45.871113][ T29] kauditd_printk_skb: 630 callbacks suppressed [ 45.871245][ T29] audit: type=1400 audit(1770163721.645:745): avc: denied { read append } for pid=3738 comm="syz.0.57" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 45.901754][ T29] audit: type=1400 audit(1770163721.645:746): avc: denied { open } for pid=3738 comm="syz.0.57" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 45.971951][ T3740] tmpfs: Bad value for 'mpol' [ 45.981158][ T3740] netlink: 'syz.0.57': attribute type 7 has an invalid length. [ 45.988751][ T3740] netlink: 'syz.0.57': attribute type 8 has an invalid length. [ 45.997163][ T1036] tipc: Node number set to 2886997007 [ 46.017706][ T29] audit: type=1400 audit(1770163721.745:747): avc: denied { mounton } for pid=3738 comm="syz.0.57" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 46.064225][ T3747] loop1: detected capacity change from 0 to 128 [ 46.086033][ T3744] netlink: 16 bytes leftover after parsing attributes in process `syz.2.58'. [ 46.120744][ T3747] netlink: 188 bytes leftover after parsing attributes in process `syz.1.48'. [ 46.125524][ T3744] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 46.145117][ T29] audit: type=1400 audit(1770163721.905:748): avc: denied { setopt } for pid=3743 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 46.164623][ T29] audit: type=1400 audit(1770163721.915:749): avc: denied { connect } for pid=3743 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.184001][ T29] audit: type=1400 audit(1770163721.915:750): avc: denied { write } for pid=3743 comm="syz.2.58" path="socket:[5039]" dev="sockfs" ino=5039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.211878][ T3744] batman_adv: batadv0: Adding interface: ip6gretap1 [ 46.218490][ T3744] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.245437][ T29] audit: type=1400 audit(1770163721.955:751): avc: denied { mounton } for pid=3743 comm="syz.2.58" path="/9/file0" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 46.312322][ T3744] batman_adv: batadv0: Interface activated: ip6gretap1 [ 46.421821][ T29] audit: type=1400 audit(1770163722.195:752): avc: denied { accept } for pid=3743 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 46.446221][ T3756] loop0: detected capacity change from 0 to 164 [ 46.492144][ T3744] loop2: detected capacity change from 0 to 128 [ 46.516100][ T3744] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 262163)! [ 46.526764][ T3744] EXT4-fs (loop2): group descriptors corrupted! [ 46.624299][ T29] audit: type=1400 audit(1770163722.395:753): avc: denied { mount } for pid=3768 comm="syz.4.65" name="/" dev="ramfs" ino=5067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 46.688130][ T3774] loop0: detected capacity change from 0 to 128 [ 46.688446][ T3774] msdos: Bad value for 'tz' [ 46.704766][ T3774] loop0: detected capacity change from 0 to 256 [ 46.776963][ T29] audit: type=1326 audit(1770163722.545:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5e21aeb9 code=0x7ffc0000 [ 46.791037][ T3777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'. [ 46.808947][ T3777] netlink: 92 bytes leftover after parsing attributes in process `syz.2.68'. [ 47.092700][ T3793] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.154438][ T3796] netlink: 'syz.1.77': attribute type 1 has an invalid length. [ 47.162202][ T3796] netlink: 224 bytes leftover after parsing attributes in process `syz.1.77'. [ 47.178188][ T3800] FAULT_INJECTION: forcing a failure. [ 47.178188][ T3800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.191311][ T3800] CPU: 1 UID: 0 PID: 3800 Comm: syz.0.76 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.191343][ T3800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 47.191360][ T3800] Call Trace: [ 47.191368][ T3800] [ 47.191445][ T3800] __dump_stack+0x1d/0x30 [ 47.191475][ T3800] dump_stack_lvl+0x95/0xd0 [ 47.191576][ T3800] dump_stack+0x15/0x1b [ 47.191599][ T3800] should_fail_ex+0x263/0x280 [ 47.191636][ T3800] should_fail+0xb/0x20 [ 47.191799][ T3800] should_fail_usercopy+0x1a/0x20 [ 47.191864][ T3800] _copy_from_user+0x1c/0xb0 [ 47.191937][ T3800] ___sys_sendmsg+0xc1/0x1e0 [ 47.191972][ T3800] __x64_sys_sendmsg+0xd4/0x160 [ 47.191998][ T3800] x64_sys_call+0x17ba/0x3000 [ 47.192063][ T3800] do_syscall_64+0xc0/0x2a0 [ 47.192098][ T3800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.192123][ T3800] RIP: 0033:0x7ff086d3aeb9 [ 47.192160][ T3800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.192190][ T3800] RSP: 002b:00007ff085797028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.192212][ T3800] RAX: ffffffffffffffda RBX: 00007ff086fb5fa0 RCX: 00007ff086d3aeb9 [ 47.192229][ T3800] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 47.192243][ T3800] RBP: 00007ff085797090 R08: 0000000000000000 R09: 0000000000000000 [ 47.192257][ T3800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.192319][ T3800] R13: 00007ff086fb6038 R14: 00007ff086fb5fa0 R15: 00007ffc8472ee78 [ 47.192364][ T3800] [ 47.391136][ T3807] loop3: detected capacity change from 0 to 512 [ 47.448936][ T3807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.468175][ T3807] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.490417][ T3815] 9pnet_fd: p9_fd_create_unix (3815): problem connecting socket: ./file1: -111 [ 47.519228][ T3805] loop2: detected capacity change from 0 to 8192 [ 47.548995][ T3820] netlink: 'syz.0.85': attribute type 32 has an invalid length. [ 47.625683][ T3832] loop4: detected capacity change from 0 to 512 [ 47.644213][ T3832] /dev/loop4: Can't open blockdev [ 47.652483][ T3833] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 47.733991][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.819465][ T3845] netlink: 112 bytes leftover after parsing attributes in process `syz.4.91'. [ 47.888417][ T3849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.93'. [ 47.968246][ T3856] netlink: 64 bytes leftover after parsing attributes in process `syz.0.92'. [ 48.070121][ T3859] ipt_REJECT: TCP_RESET invalid for non-tcp [ 48.100920][ T3859] process 'syz.3.96' launched '/dev/fd/3' with NULL argv: empty string added [ 48.115139][ T3861] loop0: detected capacity change from 0 to 512 [ 48.244608][ T3861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.301124][ T3861] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.382395][ T3869] loop3: detected capacity change from 0 to 2048 [ 48.416075][ T3869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.476348][ T3869] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.517758][ T3869] EXT4-fs (loop3): shut down requested (1) [ 48.528585][ T3869] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 48.539025][ T3869] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 48.550759][ T3861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.559754][ T3861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.600342][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.894656][ T3893] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.908613][ T3893] bridge_slave_0 (unregistering): left allmulticast mode [ 48.915884][ T3893] bridge_slave_0 (unregistering): left promiscuous mode [ 48.923053][ T3893] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.051533][ T3907] netlink: 188 bytes leftover after parsing attributes in process `syz.1.108'. [ 49.111993][ T3906] syzkaller0: entered promiscuous mode [ 49.117520][ T3906] syzkaller0: entered allmulticast mode [ 49.160606][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.851457][ T3944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.884119][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.948137][ T3954] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 49.958763][ T3954] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 49.975564][ T3954] jbd2_journal_init_inode: Cannot locate journal superblock [ 49.983021][ T3954] EXT4-fs (loop1): Could not load journal inode [ 50.035647][ T3967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.132'. [ 50.174640][ T3972] netlink: 188 bytes leftover after parsing attributes in process `syz.3.133'. [ 50.312522][ T3986] netlink: 'syz.0.137': attribute type 13 has an invalid length. [ 50.435779][ T3994] FAULT_INJECTION: forcing a failure. [ 50.435779][ T3994] name failslab, interval 1, probability 0, space 0, times 0 [ 50.448551][ T3994] CPU: 1 UID: 0 PID: 3994 Comm: syz.4.143 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.448575][ T3994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.448734][ T3994] Call Trace: [ 50.448739][ T3994] [ 50.448746][ T3994] __dump_stack+0x1d/0x30 [ 50.448768][ T3994] dump_stack_lvl+0x95/0xd0 [ 50.448802][ T3994] dump_stack+0x15/0x1b [ 50.448820][ T3994] should_fail_ex+0x263/0x280 [ 50.448891][ T3994] should_failslab+0x8c/0xb0 [ 50.448912][ T3994] __kmalloc_node_noprof+0xbd/0x590 [ 50.449010][ T3994] ? __vmalloc_node_range_noprof+0x428/0x12b0 [ 50.449063][ T3994] __vmalloc_node_range_noprof+0x428/0x12b0 [ 50.449113][ T3994] ? __rcu_read_unlock+0x4e/0x70 [ 50.449165][ T3994] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 50.449190][ T3994] __vmalloc_noprof+0xa4/0xf0 [ 50.449217][ T3994] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 50.449307][ T3994] bpf_prog_alloc_no_stats+0x47/0x380 [ 50.449329][ T3994] ? bpf_prog_alloc+0x2a/0x150 [ 50.449414][ T3994] bpf_prog_alloc+0x3c/0x150 [ 50.449449][ T3994] bpf_prog_load+0x506/0x1140 [ 50.449482][ T3994] ? security_bpf+0x2b/0x90 [ 50.449503][ T3994] __sys_bpf+0x469/0x7b0 [ 50.449635][ T3994] __x64_sys_bpf+0x41/0x50 [ 50.449668][ T3994] x64_sys_call+0x28e1/0x3000 [ 50.449702][ T3994] do_syscall_64+0xc0/0x2a0 [ 50.449739][ T3994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.449789][ T3994] RIP: 0033:0x7fa26f3baeb9 [ 50.449802][ T3994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.449818][ T3994] RSP: 002b:00007fa26de17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.449836][ T3994] RAX: ffffffffffffffda RBX: 00007fa26f635fa0 RCX: 00007fa26f3baeb9 [ 50.449848][ T3994] RDX: 0000000000000094 RSI: 00002000000018c0 RDI: 0000000000000005 [ 50.449860][ T3994] RBP: 00007fa26de17090 R08: 0000000000000000 R09: 0000000000000000 [ 50.449923][ T3994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.449934][ T3994] R13: 00007fa26f636038 R14: 00007fa26f635fa0 R15: 00007ffd501a8fe8 [ 50.450023][ T3994] [ 50.659446][ T3994] syz.4.143: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 50.676688][ T3994] CPU: 1 UID: 0 PID: 3994 Comm: syz.4.143 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.676722][ T3994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.676739][ T3994] Call Trace: [ 50.676747][ T3994] [ 50.676755][ T3994] __dump_stack+0x1d/0x30 [ 50.676781][ T3994] dump_stack_lvl+0x95/0xd0 [ 50.676803][ T3994] dump_stack+0x15/0x1b [ 50.676873][ T3994] warn_alloc+0x145/0x1c0 [ 50.676975][ T3994] __vmalloc_node_range_noprof+0x7d9/0x12b0 [ 50.677005][ T3994] ? __rcu_read_unlock+0x4e/0x70 [ 50.677037][ T3994] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 50.677061][ T3994] __vmalloc_noprof+0xa4/0xf0 [ 50.677094][ T3994] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 50.677117][ T3994] bpf_prog_alloc_no_stats+0x47/0x380 [ 50.677140][ T3994] ? bpf_prog_alloc+0x2a/0x150 [ 50.677172][ T3994] bpf_prog_alloc+0x3c/0x150 [ 50.677217][ T3994] bpf_prog_load+0x506/0x1140 [ 50.677250][ T3994] ? security_bpf+0x2b/0x90 [ 50.677271][ T3994] __sys_bpf+0x469/0x7b0 [ 50.677301][ T3994] __x64_sys_bpf+0x41/0x50 [ 50.677390][ T3994] x64_sys_call+0x28e1/0x3000 [ 50.677430][ T3994] do_syscall_64+0xc0/0x2a0 [ 50.677459][ T3994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.677494][ T3994] RIP: 0033:0x7fa26f3baeb9 [ 50.677508][ T3994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.677524][ T3994] RSP: 002b:00007fa26de17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.677541][ T3994] RAX: ffffffffffffffda RBX: 00007fa26f635fa0 RCX: 00007fa26f3baeb9 [ 50.677584][ T3994] RDX: 0000000000000094 RSI: 00002000000018c0 RDI: 0000000000000005 [ 50.677595][ T3994] RBP: 00007fa26de17090 R08: 0000000000000000 R09: 0000000000000000 [ 50.677607][ T3994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.677618][ T3994] R13: 00007fa26f636038 R14: 00007fa26f635fa0 R15: 00007ffd501a8fe8 [ 50.677636][ T3994] [ 50.677642][ T3994] Mem-Info: [ 50.875602][ T3994] active_anon:32155 inactive_anon:0 isolated_anon:0 [ 50.875602][ T3994] active_file:20741 inactive_file:2300 isolated_file:0 [ 50.875602][ T3994] unevictable:0 dirty:156 writeback:3 [ 50.875602][ T3994] slab_reclaimable:3186 slab_unreclaimable:14727 [ 50.875602][ T3994] mapped:29192 shmem:25503 pagetables:1218 [ 50.875602][ T3994] sec_pagetables:0 bounce:0 [ 50.875602][ T3994] kernel_misc_reclaimable:0 [ 50.875602][ T3994] free:1819154 free_pcp:8490 free_cma:0 [ 50.921099][ T3994] Node 0 active_anon:128620kB inactive_anon:0kB active_file:82964kB inactive_file:9200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116768kB dirty:624kB writeback:12kB shmem:102012kB kernel_stack:3584kB pagetables:4872kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 50.949045][ T3994] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 50.978769][ T3994] lowmem_reserve[]: 0 2879 7858 7858 [ 50.984263][ T3994] Node 0 DMA32 free:2944744kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948376kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 51.015731][ T3994] lowmem_reserve[]: 0 0 4978 4978 [ 51.020837][ T3994] Node 0 Normal free:4316512kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:128504kB inactive_anon:0kB active_file:82964kB inactive_file:9200kB unevictable:0kB writepending:636kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:30472kB local_pcp:9988kB free_cma:0kB [ 51.053906][ T3994] lowmem_reserve[]: 0 0 0 0 [ 51.058491][ T3994] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 51.071279][ T3994] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 3*16kB (M) 1*32kB (M) 2*64kB (M) 4*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944744kB [ 51.087472][ T3994] Node 0 Normal: 2*4kB (UM) 2*8kB (UE) 3*16kB (UME) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (U) 3*512kB (UME) 1*1024kB (M) 4*2048kB (UME) 1051*4096kB (M) = 4316392kB [ 51.104763][ T3994] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 51.114081][ T3994] 48535 total pagecache pages [ 51.118754][ T3994] 0 pages in swap cache [ 51.122962][ T3994] Free swap = 124996kB [ 51.127125][ T3994] Total swap = 124996kB [ 51.131327][ T3994] 2097051 pages RAM [ 51.135160][ T3994] 0 pages HighMem/MovableOnly [ 51.139916][ T3994] 81557 pages reserved [ 51.167255][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 51.167275][ T29] audit: type=1400 audit(1770163726.935:888): avc: denied { wake_alarm } for pid=3999 comm="syz.3.145" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 51.186944][ T4000] set_capacity_and_notify: 5 callbacks suppressed [ 51.187077][ T4000] loop3: detected capacity change from 0 to 512 [ 51.228752][ T4000] EXT4-fs (loop3): blocks per group (8192) and clusters per group (2304) inconsistent [ 51.483740][ T4010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.149'. [ 51.659835][ T29] audit: type=1400 audit(1770163727.435:889): avc: denied { create } for pid=4015 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.742202][ T29] audit: type=1400 audit(1770163727.465:890): avc: denied { write } for pid=4015 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.838459][ T4025] loop4: detected capacity change from 0 to 128 [ 51.930933][ T4025] netlink: 188 bytes leftover after parsing attributes in process `syz.4.155'. [ 52.676673][ T4041] loop1: detected capacity change from 0 to 8192 [ 52.683442][ T4041] vfat: Unknown parameter '' [ 52.780189][ T29] audit: type=1400 audit(1770163728.535:891): avc: denied { ioctl } for pid=4042 comm="syz.4.162" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 53.178316][ T4053] FAULT_INJECTION: forcing a failure. [ 53.178316][ T4053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.191872][ T4053] CPU: 1 UID: 0 PID: 4053 Comm: syz.4.166 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.192061][ T4053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.192171][ T4053] Call Trace: [ 53.192209][ T4053] [ 53.192306][ T4053] __dump_stack+0x1d/0x30 [ 53.192430][ T4053] dump_stack_lvl+0x95/0xd0 [ 53.192574][ T4053] dump_stack+0x15/0x1b [ 53.192670][ T4053] should_fail_ex+0x263/0x280 [ 53.192873][ T4053] should_fail+0xb/0x20 [ 53.193071][ T4053] should_fail_usercopy+0x1a/0x20 [ 53.193316][ T4053] _copy_to_user+0x20/0xa0 [ 53.193520][ T4053] simple_read_from_buffer+0xb5/0x130 [ 53.193815][ T4053] proc_fail_nth_read+0x10e/0x150 [ 53.194033][ T4053] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 53.194235][ T4053] vfs_read+0x1ab/0x7f0 [ 53.194304][ T4053] ? __rcu_read_unlock+0x4e/0x70 [ 53.194505][ T4053] ? __fget_files+0x184/0x1c0 [ 53.194610][ T4053] ? mutex_lock+0x57/0x90 [ 53.194732][ T4053] ksys_read+0xdc/0x1a0 [ 53.194913][ T4053] __x64_sys_read+0x40/0x50 [ 53.194961][ T4053] x64_sys_call+0x2889/0x3000 [ 53.195094][ T4053] do_syscall_64+0xc0/0x2a0 [ 53.195318][ T4053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.195439][ T4053] RIP: 0033:0x7fa26f37b78e [ 53.195467][ T4053] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 53.195533][ T4053] RSP: 002b:00007fa26de16fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 53.195604][ T4053] RAX: ffffffffffffffda RBX: 00007fa26de176c0 RCX: 00007fa26f37b78e [ 53.195654][ T4053] RDX: 000000000000000f RSI: 00007fa26de170a0 RDI: 0000000000000004 [ 53.195750][ T4053] RBP: 00007fa26de17090 R08: 0000000000000000 R09: 0000000000000000 [ 53.195887][ T4053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.195990][ T4053] R13: 00007fa26f636038 R14: 00007fa26f635fa0 R15: 00007ffd501a8fe8 [ 53.196068][ T4053] [ 53.686440][ T4060] loop3: detected capacity change from 0 to 1024 [ 53.910171][ T4060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.934209][ T29] audit: type=1326 audit(1770163729.705:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4059 comm="syz.3.169" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cb2e1aeb9 code=0x0 [ 54.035141][ T4071] FAULT_INJECTION: forcing a failure. [ 54.035141][ T4071] name failslab, interval 1, probability 0, space 0, times 0 [ 54.047946][ T4071] CPU: 1 UID: 0 PID: 4071 Comm: syz.3.169 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.047975][ T4071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 54.047992][ T4071] Call Trace: [ 54.048001][ T4071] [ 54.048012][ T4071] __dump_stack+0x1d/0x30 [ 54.048108][ T4071] dump_stack_lvl+0x95/0xd0 [ 54.048134][ T4071] dump_stack+0x15/0x1b [ 54.048160][ T4071] should_fail_ex+0x263/0x280 [ 54.048263][ T4071] should_failslab+0x8c/0xb0 [ 54.048291][ T4071] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 54.048322][ T4071] ? __d_alloc+0x37/0x340 [ 54.048352][ T4071] __d_alloc+0x37/0x340 [ 54.048472][ T4071] d_alloc_parallel+0x54/0xce0 [ 54.048509][ T4071] ? lockref_get_not_dead+0x120/0x1c0 [ 54.048540][ T4071] ? __rcu_read_unlock+0x4e/0x70 [ 54.048571][ T4071] ? try_to_unlazy+0x3c0/0x5b0 [ 54.048657][ T4071] __lookup_slow+0x96/0x260 [ 54.048692][ T4071] lookup_slow+0x3c/0x60 [ 54.048729][ T4071] path_lookupat+0x2f7/0x500 [ 54.048766][ T4071] filename_lookup+0x190/0x390 [ 54.048811][ T4071] path_listxattrat+0xd1/0x2b0 [ 54.048910][ T4071] __x64_sys_llistxattr+0x4d/0x60 [ 54.048943][ T4071] x64_sys_call+0xb12/0x3000 [ 54.049087][ T4071] do_syscall_64+0xc0/0x2a0 [ 54.049186][ T4071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.049227][ T4071] RIP: 0033:0x7f3cb2e1aeb9 [ 54.049247][ T4071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.049341][ T4071] RSP: 002b:00007f3cb1856028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 54.049367][ T4071] RAX: ffffffffffffffda RBX: 00007f3cb3096090 RCX: 00007f3cb2e1aeb9 [ 54.049389][ T4071] RDX: 0000000000000019 RSI: 00002000000000c0 RDI: 0000200000000080 [ 54.049402][ T4071] RBP: 00007f3cb1856090 R08: 0000000000000000 R09: 0000000000000000 [ 54.049456][ T4071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.049473][ T4071] R13: 00007f3cb3096128 R14: 00007f3cb3096090 R15: 00007ffcaf18ecb8 [ 54.049499][ T4071] [ 54.281637][ T29] audit: type=1400 audit(1770163730.055:893): avc: denied { override_creds } for pid=4073 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 54.301476][ T29] audit: type=1400 audit(1770163730.055:894): avc: denied { read } for pid=4073 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 54.394003][ T4080] loop4: detected capacity change from 0 to 128 [ 54.441985][ T4080] netlink: 188 bytes leftover after parsing attributes in process `syz.4.173'. [ 54.542847][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.256410][ T29] audit: type=1400 audit(1770163731.025:895): avc: denied { create } for pid=4084 comm="syz.1.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.280533][ T4085] loop1: detected capacity change from 0 to 512 [ 55.287523][ T4085] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 55.300629][ T4085] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.314109][ T29] audit: type=1400 audit(1770163731.045:896): avc: denied { watch watch_reads } for pid=4084 comm="syz.1.177" path="/43" dev="tmpfs" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 55.336792][ T29] audit: type=1400 audit(1770163731.045:897): avc: denied { ioctl } for pid=4084 comm="syz.1.177" path="socket:[5891]" dev="sockfs" ino=5891 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.379828][ T4085] EXT4-fs (loop1): 1 truncate cleaned up [ 55.386035][ T4085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.360292][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.391356][ T4096] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 56.407212][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 56.407245][ T29] audit: type=1400 audit(1770163732.175:899): avc: denied { read } for pid=4094 comm="syz.4.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 56.448698][ T29] audit: type=1400 audit(1770163732.215:900): avc: denied { append } for pid=4100 comm="syz.1.180" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 56.474432][ T4101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'. [ 56.524191][ T29] audit: type=1400 audit(1770163732.295:901): avc: denied { create } for pid=4100 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 56.536756][ T4101] loop1: detected capacity change from 0 to 512 [ 56.589002][ T4101] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.180: ea_inode with extended attributes [ 56.633095][ T4101] EXT4-fs (loop1): Remounting filesystem read-only [ 56.666485][ T4101] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 56.675660][ T4101] EXT4-fs (loop1): 1 orphan inode deleted [ 56.682130][ T4101] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.718459][ T29] audit: type=1400 audit(1770163732.485:902): avc: denied { ioctl } for pid=4110 comm="syz.3.185" path="socket:[5944]" dev="sockfs" ino=5944 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.763321][ T29] audit: type=1400 audit(1770163732.515:903): avc: denied { bind } for pid=4110 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 56.789008][ T3319] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 56.878724][ T4113] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 56.982008][ T29] audit: type=1400 audit(1770163732.755:904): avc: denied { lock } for pid=4122 comm="syz.1.188" path="socket:[5966]" dev="sockfs" ino=5966 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 57.017881][ T4133] loop0: detected capacity change from 0 to 128 [ 57.051790][ T4133] netlink: 188 bytes leftover after parsing attributes in process `syz.0.190'. [ 57.282226][ T4135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.191'. [ 57.291239][ T4135] 8021q: VLANs not supported on vcan0 [ 57.835988][ T1036] hid (null): invalid report_size 41405 [ 57.844507][ T1036] hid-generic 0000:0000:0000.0002: unknown main item tag 0x7 [ 57.852043][ T1036] hid-generic 0000:0000:0000.0002: ignoring exceeding usage max [ 57.863939][ T1036] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 57.872033][ T1036] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 57.879543][ T1036] hid-generic 0000:0000:0000.0002: invalid report_size 41405 [ 57.887083][ T1036] hid-generic 0000:0000:0000.0002: item 0 2 1 7 parsing failed [ 57.895085][ T1036] hid-generic 0000:0000:0000.0002: probe with driver hid-generic failed with error -22 [ 57.907143][ T29] audit: type=1400 audit(1770163733.675:905): avc: denied { create } for pid=4140 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 57.927615][ T29] audit: type=1400 audit(1770163733.695:906): avc: denied { sys_admin } for pid=4140 comm="syz.0.193" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 58.265516][ T1036] hid (null): invalid report_size 41405 [ 58.283220][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x7 [ 58.290819][ T1036] hid-generic 0000:0000:0000.0003: ignoring exceeding usage max [ 58.303177][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.319553][ T1036] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.327074][ T1036] hid-generic 0000:0000:0000.0003: invalid report_size 41405 [ 58.334598][ T1036] hid-generic 0000:0000:0000.0003: item 0 2 1 7 parsing failed [ 58.342944][ T1036] hid-generic 0000:0000:0000.0003: probe with driver hid-generic failed with error -22 [ 58.353856][ T29] audit: type=1400 audit(1770163733.985:907): avc: denied { unlink } for pid=3327 comm="syz-executor" name="file0" dev="tmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.464401][ T29] audit: type=1400 audit(1770163734.235:908): avc: denied { write } for pid=4158 comm="syz.2.198" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 58.725639][ T4165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.200'. [ 58.738452][ T4165] netlink: 148 bytes leftover after parsing attributes in process `syz.0.200'. [ 58.753492][ T4165] pim6reg: entered allmulticast mode [ 58.759514][ T4165] pim6reg: left allmulticast mode [ 58.850608][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.857865][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.907665][ T4168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.918215][ T4168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.942001][ T4170] loop0: detected capacity change from 0 to 8192 [ 58.955373][ T4173] loop1: detected capacity change from 0 to 128 [ 58.984424][ T4168] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 58.993160][ T4173] netlink: 188 bytes leftover after parsing attributes in process `syz.1.203'. [ 59.006301][ T2570] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.022407][ T2570] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.031468][ T2570] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.041104][ T980] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.258223][ T4176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.204'. [ 59.267457][ T4176] netlink: 92 bytes leftover after parsing attributes in process `syz.4.204'. [ 59.357326][ T4178] syz_tun: entered allmulticast mode [ 59.366383][ T4178] loop4: detected capacity change from 0 to 512 [ 59.373380][ T4178] EXT4-fs: Ignoring removed nobh option [ 59.395821][ T4178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.411832][ T4178] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.472018][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.636482][ T4183] loop4: detected capacity change from 0 to 512 [ 59.651508][ T4183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.664135][ T4183] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.676903][ T4183] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.206: Failed to acquire dquot type 1 [ 59.688321][ T4183] EXT4-fs (loop4): Remounting filesystem read-only [ 59.749039][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.820181][ T4193] netlink: 16 bytes leftover after parsing attributes in process `syz.3.210'. [ 59.873033][ T4196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'. [ 59.970069][ T4203] netlink: 56 bytes leftover after parsing attributes in process `syz.2.213'. [ 60.006521][ T4203] loop2: detected capacity change from 0 to 512 [ 60.044369][ T4205] SELinux: failed to load policy [ 60.053029][ T4203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.065641][ T4203] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.077100][ T4203] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.213: corrupted xattr block 33: overlapping e_value [ 60.091197][ T4203] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 60.098678][ T4205] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.111956][ T4203] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.213: corrupted xattr block 33: overlapping e_value [ 60.128389][ T4203] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 60.140094][ T4210] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.213: corrupted xattr block 33: overlapping e_value [ 60.159264][ T4189] syz.1.208 (4189) used greatest stack depth: 10296 bytes left [ 60.167011][ T4210] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 60.211024][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.226101][ T4205] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.255623][ T4214] FAULT_INJECTION: forcing a failure. [ 60.255623][ T4214] name failslab, interval 1, probability 0, space 0, times 0 [ 60.268375][ T4214] CPU: 0 UID: 0 PID: 4214 Comm: syz.1.217 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.268444][ T4214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 60.268456][ T4214] Call Trace: [ 60.268463][ T4214] [ 60.268470][ T4214] __dump_stack+0x1d/0x30 [ 60.268547][ T4214] dump_stack_lvl+0x95/0xd0 [ 60.268569][ T4214] dump_stack+0x15/0x1b [ 60.268629][ T4214] should_fail_ex+0x263/0x280 [ 60.268660][ T4214] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 60.268695][ T4214] should_failslab+0x8c/0xb0 [ 60.268720][ T4214] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 60.268791][ T4214] ? debugfs_alloc_inode+0x34/0x40 [ 60.268827][ T4214] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 60.268881][ T4214] debugfs_alloc_inode+0x34/0x40 [ 60.268915][ T4214] alloc_inode+0x40/0x170 [ 60.268935][ T4214] new_inode+0x1d/0xe0 [ 60.269015][ T4214] __debugfs_create_file+0x97/0x2b0 [ 60.269048][ T4214] debugfs_create_file_full+0x3f/0x60 [ 60.269117][ T4214] ? __pfx_ipip_tunnel_setup+0x10/0x10 [ 60.269218][ T4214] ref_tracker_dir_debugfs+0x10e/0x220 [ 60.269261][ T4214] alloc_netdev_mqs+0x1a7/0xa40 [ 60.269280][ T4214] ? sized_strscpy+0x121/0x1a0 [ 60.269311][ T4214] __ip_tunnel_create+0x2ad/0x430 [ 60.269437][ T4214] ip_tunnel_ctl+0x394/0x750 [ 60.269467][ T4214] ipip_tunnel_ctl+0xd2/0x160 [ 60.269516][ T4214] ip_tunnel_siocdevprivate+0x77/0xe0 [ 60.269549][ T4214] dev_ifsioc+0x923/0xf60 [ 60.269572][ T4214] dev_ioctl+0x78c/0x960 [ 60.269604][ T4214] sock_ioctl+0x593/0x610 [ 60.269635][ T4214] ? __pfx_sock_ioctl+0x10/0x10 [ 60.269705][ T4214] __se_sys_ioctl+0xce/0x140 [ 60.269767][ T4214] __x64_sys_ioctl+0x43/0x50 [ 60.269800][ T4214] x64_sys_call+0x14b0/0x3000 [ 60.269828][ T4214] do_syscall_64+0xc0/0x2a0 [ 60.269940][ T4214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.269963][ T4214] RIP: 0033:0x7f7a7e2faeb9 [ 60.269987][ T4214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.270080][ T4214] RSP: 002b:00007f7a7cd57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.270132][ T4214] RAX: ffffffffffffffda RBX: 00007f7a7e575fa0 RCX: 00007f7a7e2faeb9 [ 60.270146][ T4214] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 60.270160][ T4214] RBP: 00007f7a7cd57090 R08: 0000000000000000 R09: 0000000000000000 [ 60.270173][ T4214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.270186][ T4214] R13: 00007f7a7e576038 R14: 00007f7a7e575fa0 R15: 00007ffe208ab8f8 [ 60.270206][ T4214] [ 60.522465][ T4214] debugfs: out of free dentries, can not create file 'netdev@ffff888119b3a558' [ 60.625575][ T4205] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.676479][ T4221] loop2: detected capacity change from 0 to 8192 [ 60.714599][ T4205] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.742770][ T3327] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 60.750683][ T3327] FAT-fs (loop2): Filesystem has been set read-only [ 60.758325][ T4224] capability: warning: `syz.0.219' uses 32-bit capabilities (legacy support in use) [ 60.833131][ T4228] netlink: 'syz.2.220': attribute type 10 has an invalid length. [ 60.860666][ T3442] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.928908][ T3442] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.937379][ T3442] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.945873][ T4233] syzkaller1: entered promiscuous mode [ 60.951459][ T4233] syzkaller1: entered allmulticast mode [ 60.980055][ T3442] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.981537][ T4232] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 61.018765][ T4236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4236 comm=syz.2.225 [ 61.274946][ T4248] loop0: detected capacity change from 0 to 512 [ 61.295906][ T4248] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.321166][ T4248] EXT4-fs error (device loop0): ext4_init_orphan_info:620: comm syz.0.228: orphan file block 0: bad magic [ 61.332950][ T4248] EXT4-fs (loop0): Remounting filesystem read-only [ 61.339771][ T4248] EXT4-fs (loop0): mount failed [ 61.394430][ T4253] loop3: detected capacity change from 0 to 8192 [ 61.421898][ T3326] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 61.429826][ T3326] FAT-fs (loop3): Filesystem has been set read-only [ 61.529642][ T4266] Illegal XDP return value 4266 on prog (id 47) dev syz_tun, expect packet loss! [ 61.547845][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 61.547858][ T29] audit: type=1400 audit(1770163737.315:969): avc: denied { create } for pid=4265 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 61.574159][ T4266] delete_channel: no stack [ 61.599528][ T29] audit: type=1400 audit(1770163737.355:970): avc: denied { ioctl } for pid=4265 comm="syz.3.235" path="socket:[7249]" dev="sockfs" ino=7249 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 61.624269][ T29] audit: type=1400 audit(1770163737.355:971): avc: denied { write } for pid=4265 comm="syz.3.235" path="socket:[7249]" dev="sockfs" ino=7249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 61.682172][ T4275] mmap: syz.4.238 (4275) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 61.728669][ T29] audit: type=1400 audit(1770163737.495:972): avc: denied { accept } for pid=4276 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 61.888768][ T3437] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.907878][ T3437] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.929426][ T3437] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.944929][ T3437] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.958646][ T29] audit: type=1400 audit(1770163737.725:973): avc: denied { firmware_load } for pid=4291 comm="syz.0.246" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 62.014371][ T4292] syz.0.246 (4292) used greatest stack depth: 10224 bytes left [ 62.032155][ T29] audit: type=1400 audit(1770163737.805:974): avc: denied { getopt } for pid=4296 comm="syz.4.248" lport=51 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.073477][ T4297] __nla_validate_parse: 5 callbacks suppressed [ 62.073495][ T4297] netlink: 60 bytes leftover after parsing attributes in process `syz.4.248'. [ 62.078111][ T4300] loop0: detected capacity change from 0 to 256 [ 62.129701][ T4300] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.214000][ T4305] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 62.222003][ T4305] FAT-fs (loop0): Filesystem has been set read-only [ 62.228684][ T29] audit: type=1326 audit(1770163737.985:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4294 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5e21aeb9 code=0x7ffc0000 [ 62.252002][ T29] audit: type=1326 audit(1770163737.985:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4294 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5e21aeb9 code=0x7ffc0000 [ 62.290789][ T4305] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 62.315019][ T29] audit: type=1326 audit(1770163738.055:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4294 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f6f5e21aeb9 code=0x7ffc0000 [ 62.335390][ T4295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.338412][ T29] audit: type=1326 audit(1770163738.055:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4294 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5e21aeb9 code=0x7ffc0000 [ 62.402483][ T4309] loop4: detected capacity change from 0 to 512 [ 62.404913][ T4295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.436520][ T4309] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.251: invalid indirect mapped block 4294967295 (level 1) [ 62.453798][ T4309] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.251: invalid indirect mapped block 4294967295 (level 1) [ 62.469492][ T4309] EXT4-fs (loop4): 2 truncates cleaned up [ 62.475742][ T4309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.509868][ T4266] kexec: Could not allocate control_code_buffer [ 62.521126][ T4309] EXT4-fs error (device loop4): empty_inline_dir:1770: inode #12: block 7: comm syz.4.251: bad entry in directory: directory entry overrun - offset=4, inode=4278190093, rec_len=196860, size=60 fake=0 [ 62.549932][ T4309] EXT4-fs warning (device loop4): empty_inline_dir:1777: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 62.613710][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.623399][ T4318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.254'. [ 62.632396][ T4318] netlink: 92 bytes leftover after parsing attributes in process `syz.1.254'. [ 62.699646][ T4327] loop3: detected capacity change from 0 to 512 [ 62.710905][ T4327] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 62.718871][ T4327] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 62.727492][ T4327] EXT4-fs (loop3): orphan cleanup on readonly fs [ 62.734028][ T4327] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 62.748620][ T4327] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 62.755895][ T4327] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.259: bg 0: block 40: padding at end of block bitmap is not set [ 62.771511][ T4327] EXT4-fs (loop3): Remounting filesystem read-only [ 62.778125][ T4327] EXT4-fs (loop3): 1 truncate cleaned up [ 62.802906][ T4327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 62.812926][ T4332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.824041][ T4332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.832850][ T4327] debugfs: Bad value for 'mode' [ 62.879126][ T4334] loop4: detected capacity change from 0 to 8192 [ 62.983919][ T3753] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.020257][ T4343] loop4: detected capacity change from 0 to 512 [ 63.031032][ T4343] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.051993][ T4343] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 63.066700][ T4343] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.265: bg 0: block 248: padding at end of block bitmap is not set [ 63.083303][ T4343] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.265: Failed to acquire dquot type 1 [ 63.095390][ T4343] EXT4-fs (loop4): 1 truncate cleaned up [ 63.101539][ T4343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 63.140778][ T4343] syz.4.265 (4343) used greatest stack depth: 8976 bytes left [ 63.152179][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 63.219089][ T4356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 63.228073][ T4356] netlink: 92 bytes leftover after parsing attributes in process `syz.2.270'. [ 63.486506][ T4369] loop1: detected capacity change from 0 to 8192 [ 63.613891][ T4379] loop1: detected capacity change from 0 to 512 [ 63.632549][ T4379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.648353][ T4379] ext4 filesystem being mounted at /65/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.659564][ T4379] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #4: comm syz.1.280: corrupted inode contents [ 63.671553][ T4379] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #4: comm syz.1.280: mark_inode_dirty error [ 63.683303][ T4379] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #4: comm syz.1.280: corrupted inode contents [ 63.695288][ T4379] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.280: mark_inode_dirty error [ 63.706680][ T4379] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.280: Failed to acquire dquot type 1 [ 63.760861][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.771894][ T2570] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 1 [ 63.783781][ T4386] loop0: detected capacity change from 0 to 512 [ 63.807366][ T4386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.812883][ T4388] FAULT_INJECTION: forcing a failure. [ 63.812883][ T4388] name failslab, interval 1, probability 0, space 0, times 0 [ 63.829297][ T4386] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.832712][ T4388] CPU: 0 UID: 0 PID: 4388 Comm: syz.1.283 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.832809][ T4388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.832867][ T4388] Call Trace: [ 63.832902][ T4388] [ 63.832919][ T4388] __dump_stack+0x1d/0x30 [ 63.833007][ T4388] dump_stack_lvl+0x95/0xd0 [ 63.833078][ T4388] dump_stack+0x15/0x1b [ 63.833191][ T4388] should_fail_ex+0x263/0x280 [ 63.833287][ T4388] should_failslab+0x8c/0xb0 [ 63.833371][ T4388] __kmalloc_noprof+0xb8/0x580 [ 63.833595][ T4388] ? bitmap_alloc+0x23/0x30 [ 63.833679][ T4388] bitmap_alloc+0x23/0x30 [ 63.833746][ T4388] evdev_handle_get_val+0x35/0x4c0 [ 63.833881][ T4388] ? ioctl_has_perm+0x27e/0x2d0 [ 63.834024][ T4388] evdev_ioctl_handler+0xec9/0x16d0 [ 63.834233][ T4388] ? __fget_files+0x184/0x1c0 [ 63.834332][ T4388] ? mutex_lock+0x57/0x90 [ 63.834470][ T4388] ? __pfx_evdev_ioctl+0x10/0x10 [ 63.834564][ T4388] evdev_ioctl+0x24/0x30 [ 63.834657][ T4388] __se_sys_ioctl+0xce/0x140 [ 63.834759][ T4388] __x64_sys_ioctl+0x43/0x50 [ 63.834912][ T4388] x64_sys_call+0x14b0/0x3000 [ 63.834987][ T4388] do_syscall_64+0xc0/0x2a0 [ 63.835112][ T4388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.835204][ T4388] RIP: 0033:0x7f7a7e2faeb9 [ 63.835269][ T4388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.835328][ T4388] RSP: 002b:00007f7a7cd57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.835410][ T4388] RAX: ffffffffffffffda RBX: 00007f7a7e575fa0 RCX: 00007f7a7e2faeb9 [ 63.835488][ T4388] RDX: 0000200000001540 RSI: 0000000080404518 RDI: 0000000000000004 [ 63.835518][ T4388] RBP: 00007f7a7cd57090 R08: 0000000000000000 R09: 0000000000000000 [ 63.835657][ T4388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.835718][ T4388] R13: 00007f7a7e576038 R14: 00007f7a7e575fa0 R15: 00007ffe208ab8f8 [ 63.835783][ T4388] [ 64.069955][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.180356][ T4401] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.216597][ T4401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.289'. [ 64.461574][ T4418] FAULT_INJECTION: forcing a failure. [ 64.461574][ T4418] name failslab, interval 1, probability 0, space 0, times 0 [ 64.474330][ T4418] CPU: 1 UID: 0 PID: 4418 Comm: syz.4.294 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.474356][ T4418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.474368][ T4418] Call Trace: [ 64.474374][ T4418] [ 64.474381][ T4418] __dump_stack+0x1d/0x30 [ 64.474441][ T4418] dump_stack_lvl+0x95/0xd0 [ 64.474506][ T4418] dump_stack+0x15/0x1b [ 64.474524][ T4418] should_fail_ex+0x263/0x280 [ 64.474558][ T4418] should_failslab+0x8c/0xb0 [ 64.474579][ T4418] __kmalloc_cache_noprof+0x64/0x4a0 [ 64.474633][ T4418] ? sctp_add_bind_addr+0x71/0x1e0 [ 64.474716][ T4418] sctp_add_bind_addr+0x71/0x1e0 [ 64.474747][ T4418] sctp_copy_local_addr_list+0x1b3/0x250 [ 64.474778][ T4418] sctp_copy_one_addr+0x7f/0x280 [ 64.474810][ T4418] sctp_bind_addr_copy+0x79/0x290 [ 64.474969][ T4418] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 64.475060][ T4418] sctp_connect_new_asoc+0x1c3/0x3a0 [ 64.475138][ T4418] __sctp_connect+0x424/0x7a0 [ 64.475168][ T4418] ? selinux_sctp_bind_connect+0x20d/0x250 [ 64.475198][ T4418] sctp_getsockopt_connectx3+0x269/0x340 [ 64.475314][ T4418] sctp_getsockopt+0x910/0xaa0 [ 64.475335][ T4418] sock_common_getsockopt+0x60/0x70 [ 64.475368][ T4418] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 64.475398][ T4418] do_sock_getsockopt+0x1c4/0x210 [ 64.475611][ T4418] __x64_sys_getsockopt+0x11d/0x1a0 [ 64.475658][ T4418] x64_sys_call+0x2dc7/0x3000 [ 64.475686][ T4418] do_syscall_64+0xc0/0x2a0 [ 64.475722][ T4418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.475821][ T4418] RIP: 0033:0x7fa26f3baeb9 [ 64.475840][ T4418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.475860][ T4418] RSP: 002b:00007fa26de17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 64.475883][ T4418] RAX: ffffffffffffffda RBX: 00007fa26f635fa0 RCX: 00007fa26f3baeb9 [ 64.475899][ T4418] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 64.475914][ T4418] RBP: 00007fa26de17090 R08: 0000200000000240 R09: 0000000000000000 [ 64.475928][ T4418] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.475939][ T4418] R13: 00007fa26f636038 R14: 00007fa26f635fa0 R15: 00007ffd501a8fe8 [ 64.475957][ T4418] [ 64.548598][ T4420] netlink: 68 bytes leftover after parsing attributes in process `syz.1.295'. [ 64.799077][ T4432] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 64.834568][ T4431] loop4: detected capacity change from 0 to 8192 [ 64.883696][ T3316] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 64.891711][ T3316] FAT-fs (loop4): Filesystem has been set read-only [ 64.907594][ T4436] loop4: detected capacity change from 0 to 128 [ 64.926135][ T4436] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.941776][ T4436] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.970200][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.044901][ T4440] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.068227][ T4440] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.302: corrupted xattr entries [ 65.084148][ T4440] EXT4-fs (loop4): Remounting filesystem read-only [ 65.090800][ T4440] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 65.106590][ T4443] FAULT_INJECTION: forcing a failure. [ 65.106590][ T4443] name failslab, interval 1, probability 0, space 0, times 0 [ 65.119307][ T4443] CPU: 1 UID: 0 PID: 4443 Comm: syz.2.303 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.119336][ T4443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.119377][ T4443] Call Trace: [ 65.119385][ T4443] [ 65.119394][ T4443] __dump_stack+0x1d/0x30 [ 65.119417][ T4443] dump_stack_lvl+0x95/0xd0 [ 65.119514][ T4443] dump_stack+0x15/0x1b [ 65.119537][ T4443] should_fail_ex+0x263/0x280 [ 65.119569][ T4443] should_failslab+0x8c/0xb0 [ 65.119634][ T4443] __kmalloc_cache_noprof+0x64/0x4a0 [ 65.119666][ T4443] ? __se_sys_memfd_create+0x1df/0x3b0 [ 65.119743][ T4443] ? fput+0x8f/0xc0 [ 65.119772][ T4443] __se_sys_memfd_create+0x1df/0x3b0 [ 65.119813][ T4443] __x64_sys_memfd_create+0x31/0x40 [ 65.119914][ T4443] x64_sys_call+0x28cb/0x3000 [ 65.119949][ T4443] do_syscall_64+0xc0/0x2a0 [ 65.119988][ T4443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.120094][ T4443] RIP: 0033:0x7f6f5e21aeb9 [ 65.120114][ T4443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.120135][ T4443] RSP: 002b:00007f6f5cc76e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 65.120221][ T4443] RAX: ffffffffffffffda RBX: 000000000000044a RCX: 00007f6f5e21aeb9 [ 65.120236][ T4443] RDX: 00007f6f5cc76ee0 RSI: 0000000000000000 RDI: 00007f6f5e287333 [ 65.120326][ T4443] RBP: 00002000000006c0 R08: 00000000ffffffff R09: 0000000000000000 [ 65.120341][ T4443] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000 [ 65.120354][ T4443] R13: 00007f6f5cc76ee0 R14: 00007f6f5cc76ea0 R15: 0000200000000240 [ 65.120374][ T4443] [ 65.290743][ T4440] EXT4-fs (loop4): 1 truncate cleaned up [ 65.298438][ T4440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.378105][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.424621][ T4449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.304'. [ 65.454305][ T4449] netlink: 'syz.1.304': attribute type 6 has an invalid length. [ 65.790812][ T4468] netlink: 24 bytes leftover after parsing attributes in process `syz.1.311'. [ 65.873710][ T4478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.315'. [ 66.025470][ T980] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.047462][ T3002] ================================================================== [ 66.055589][ T3002] BUG: KCSAN: data-race in set_nlink / set_nlink [ 66.062190][ T3002] [ 66.064540][ T3002] read to 0xffff888107923388 of 4 bytes by task 3307 on cpu 1: [ 66.072106][ T3002] set_nlink+0x29/0xb0 [ 66.076207][ T3002] kernfs_iop_permission+0x1e2/0x220 [ 66.081515][ T3002] inode_permission+0x2de/0x3c0 [ 66.086396][ T3002] link_path_walk+0x779/0xe30 [ 66.091101][ T3002] path_openat+0x1bf/0x23c0 [ 66.095646][ T3002] do_filp_open+0x15d/0x280 [ 66.100179][ T3002] do_sys_openat2+0xa6/0x150 [ 66.104798][ T3002] __x64_sys_openat+0xf2/0x120 [ 66.109593][ T3002] x64_sys_call+0x2b07/0x3000 [ 66.114308][ T3002] do_syscall_64+0xc0/0x2a0 [ 66.118837][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.124780][ T3002] [ 66.127117][ T3002] write to 0xffff888107923388 of 4 bytes by task 3002 on cpu 0: [ 66.134762][ T3002] set_nlink+0x99/0xb0 [ 66.138860][ T3002] kernfs_iop_permission+0x1e2/0x220 [ 66.144188][ T3002] inode_permission+0x2de/0x3c0 [ 66.149087][ T3002] link_path_walk+0x779/0xe30 [ 66.153796][ T3002] path_lookupat+0x8c/0x500 [ 66.158328][ T3002] filename_lookup+0x190/0x390 [ 66.163128][ T3002] vfs_statx+0x96/0x170 [ 66.167327][ T3002] vfs_fstatat+0x115/0x170 [ 66.171772][ T3002] __se_sys_newfstatat+0x55/0x3e0 [ 66.176827][ T3002] __x64_sys_newfstatat+0x55/0x70 [ 66.181883][ T3002] x64_sys_call+0x111f/0x3000 [ 66.186672][ T3002] do_syscall_64+0xc0/0x2a0 [ 66.191207][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.197131][ T3002] [ 66.199480][ T3002] value changed: 0x00000008 -> 0x00000009 [ 66.205209][ T3002] [ 66.207542][ T3002] Reported by Kernel Concurrency Sanitizer on: [ 66.213712][ T3002] CPU: 0 UID: 0 PID: 3002 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.223025][ T3002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.233137][ T3002] ================================================================== [ 66.291516][ T980] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.351114][ T980] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.401315][ T980] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.497152][ T980] bridge_slave_1: left allmulticast mode [ 66.502913][ T980] bridge_slave_1: left promiscuous mode [ 66.508664][ T980] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.588619][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 66.588635][ T29] audit: type=1400 audit(1770163742.355:1169): avc: denied { add_name } for pid=4489 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.617439][ T29] audit: type=1400 audit(1770163742.355:1170): avc: denied { create } for pid=4489 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.643992][ T29] audit: type=1400 audit(1770163742.415:1171): avc: denied { write } for pid=4489 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=2673 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.670174][ T29] audit: type=1400 audit(1770163742.415:1172): avc: denied { append } for pid=4489 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=2673 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.726517][ T980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.740174][ T29] audit: type=1400 audit(1770163742.515:1173): avc: denied { remove_name } for pid=4500 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2673 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.789738][ T29] audit: type=1400 audit(1770163742.515:1174): avc: denied { unlink } for pid=4500 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2673 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.798792][ T980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.860995][ T980] bond0 (unregistering): Released all slaves [ 66.925505][ T980] hsr_slave_0: left promiscuous mode [ 66.931587][ T980] hsr_slave_1: left promiscuous mode [ 66.937269][ T980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.944791][ T980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.952732][ T980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.960265][ T980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.971279][ T980] veth1_macvtap: left promiscuous mode [ 66.976812][ T980] veth0_macvtap: left promiscuous mode [ 66.982539][ T980] veth1_vlan: left promiscuous mode [ 66.987811][ T980] veth0_vlan: left promiscuous mode [ 67.098165][ T980] team0 (unregistering): Port device team_slave_1 removed [ 67.110819][ T980] team0 (unregistering): Port device team_slave_0 removed