last executing test programs: 5.669898742s ago: executing program 0 (id=237): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xca0, &(0x7f0000000600)=ANY=[@ANYRES16=0x0], 0x1, 0x280, &(0x7f0000001340)="$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") (async) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xca0, &(0x7f0000000600)=ANY=[@ANYRES16=0x0], 0x1, 0x280, &(0x7f0000001340)="$eJzs289OE10Yx/Ef0PcFQZgqioIxPtGNbiZQr6AhkBibaJAa/yQmg0y1aWlJp8HUGGHn1ptwQ1y6MzHeABuvwIU7Ni5ZEMcw00CLNcQoDNrvZzNP5vTXnNPntDmLzua910ulQuAWvLp6e0wpaU1bUlq96lOsp3ntjer/1WpN10Zzny/euf/gZjaXm5kzm83OX8+Y2cilD89evL38sT50993I+35tpB9tfs182RjbGN/8Nv+0GFgxsEq1bp4tVKt1b6Hs22IxKLlmt8u+F/hWrAR+rW28UK4uLzfMqywODy7X/CAwr9Kwkt+wetXqtYZ5T7xixVzXteFB4SD59bk5L5v0LHC4arWsNy1p4oeR/HoiEwIAAIk6rPP/dhjj/H+ccf7vBjvn/4fN7287zv8AAAAAAAAAAAAAAAAAAAAAAPwNtsLQCcPQia/9u/fD5v0TkgYlDUk6KWlY0ogkR1Ja0ilJpyWNSjoj6aykMUnnJJ2XNN7yXokuFB219z90/pOiJ7zof3eg/92N/ne3lgd3B6SlVyv5lXx8jcezBRVVlq9JOdqOetkU17M3cjOTFknrwtJqM7+6ku9rz0/J2dkwnfJTcd7a8/3RvtvNZ+TsbLBO+UzH/ICuXmnJu3L06bGqKmsx2pN7+ZdTZtO3cvvyE9Hr/nWu7erYP9f92Xicb9kfqQP2x77PN6WJVLJrhxQ0npe8ctmvUfx28eZ4TIOC4g8USf8y4SjsNT3pmQAAAAAAAAAAAAAAAAAAfsVR/J0w6TUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDf9wAAAP//Uxpkjg==") syz_clone(0x21000400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_clone(0x21000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) ptrace(0x4207, r0) (async) ptrace(0x4207, r0) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)) (async) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)) prctl$PR_SET_UNALIGN(0x6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8205, &(0x7f0000000180)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x7}}, {@errors_remount}, {@lazytime}, {@data_err_ignore}, {@noblock_validity}, {@minixdf}, {@orlov}]}, 0x1, 0x60a, &(0x7f0000000b00)="$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") (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8205, &(0x7f0000000180)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x7}}, {@errors_remount}, {@lazytime}, {@data_err_ignore}, {@noblock_validity}, {@minixdf}, {@orlov}]}, 0x1, 0x60a, &(0x7f0000000b00)="$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") socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_bp={0x0, 0x9}, 0x6000, 0x10428f, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_TSC(0x1a, 0x0) (async) prctl$PR_SET_TSC(0x1a, 0x0) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x8, 0x4080011, r2, 0x6d96c000) sendmsg$NFT_BATCH(r1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0xc, &(0x7f0000000300)='c', 0x1) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @rand_addr=0x64010101}, 0xc) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xfffffffffffffffe, 0x0) setreuid(0xee01, 0xee01) (async) setreuid(0xee01, 0xee01) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x890) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x40000000000d18, 0x12) 5.584123354s ago: executing program 0 (id=239): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x88000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0x100, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) write(r1, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mlockall(0x0) 3.384375718s ago: executing program 0 (id=252): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x38) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000024000000030a010400000000000000000100ffff040004800900010073797a310000000038000000050a01020000000000000000010020000c0002400000000000000001090001007379880bd38300000c0004800800014000000004140000001100010000000000000000"], 0xa4}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x8, 0x200, &(0x7f0000000200)="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"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket(0x400000000010, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SG_BLKTRACESTART(r1, 0x1274, 0x0) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r3, &(0x7f0000000040), 0x27, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x100000, @loopback}, 0x1c) (fail_nth: 3) sendmmsg$sock(r3, 0x0, 0x0, 0x20004081) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000180)) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000ac0)=[{{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000680)="b87e383fb9b3c4c3d6d6b826abc85adc88733ddf895e919c2a3562de2768eb30c8bf850adade5c28e601282112e68ad92b85a36065534dbd4c9eeaf81ff07a6a97c40716c338cafaad1f65b16c9bbfae11541679f0d85d3a847a48f68d31354d338ea1bb388feaa04ff6c5fd291efbcab89a456265b64f4701660a09da1f2a20c2819434f36c6478c7fb57882103676ea4662371c55979d2ef357a34f81a989ca6735413ff527bf10248230f5f3fa1236679c82057fcd0d2eac3f3", 0xbb}, {&(0x7f0000000840)="efd1fd9b4662c7858936bdea383f4ac5a259f4e414d9b48b60180b7c42f842b7b44ec2593ba9f9361ec6408f8a46dc7f3c63d6813d930eb94d983f03a12be8f27c638637a71ab72349eb645f68d532ff0d56d0400f9ca6552a232a65a7feae4fdac6524f9bbb17ee6aa01f87ab9a6d74f2087b1fd40baf8d894fed06e6f166f9412c7ccab4d31044e1b6840bdad0e6f822140f21c7539dca463f9d9e68209bac29161ad7a4246054c13ea7fb884a3a270c7abc9539dc586db2d47e758fa6fb220bbd763a961b925676f4", 0xca}, {&(0x7f0000000940)="d85b6d50e67724fa7cbb0c1705a3aad4a7a7c500f8810b1e3d477c7a0857d12aab6fd8977eed86aa9f9b0236b2421aec53369855e72e65d0341740c2f6c809ffdc01ece7ce16945eead8875b5f2fdc8d797f316406cdcf15bd5925c70e18db4026b0ba5d3adc256b3249fcbbf6dd01b17c3660b37d806e08576eba54683c51c5084bc3a1055d5ac802bc7ad3052824288f101d16bbf6b7e5055b7a6eb166dbcf0951205eb72ce9ba2421d67ac7c421b40dbf2fd0b68892e3a0a1aebf0a3cee70f45ee65768df8e916c5149839a6a48ceb0", 0xd1}], 0x3, &(0x7f0000000a80), 0x0, 0x4004000}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 2.667749206s ago: executing program 3 (id=257): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf25000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e000014000280060001"], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.579443537s ago: executing program 2 (id=258): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2.376067522s ago: executing program 2 (id=259): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f00000000c0)=""/209, 0xd1, 0x0, &(0x7f0000000200)=""/98, 0x62}}, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000000)={0x24, 0x14, 0x201, 0x70bd25, 0x25dfdbfb, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "38bd1e77461bc52dca"}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20008010) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYBLOB="e18284af80c70e9113c63224dfa33f38ce20a753d0a26a800c1047a49bc19037239c2bd131c2d2ba022c7b892cd3ed438124e6d70ad8fb642fa1f4170e0276ed0ec783a65bc107a21c9faa27af02cc5d8b0fd7927179f6f9b6df84f55bf8c07573b5392627b1270c43deac59f98faa6d42f44c9cb2ee44eb7829fbc877226115a63da003bb2d04018e7a905ece8f85d0d96d4c8e90ef470623b8218283112033315127", @ANYBLOB="7e60deecdc11f0ee9ef5930fdd0e869abc03ab4f612c180369c3b779dbd2364be5ab21c0f3757f8b35dc75af27817577731a8521517a35e829f1e8688abe6e2498500c0109d3babf4c084fa23b3389984638175aa97ba1bf4565af516b5e544cb9ccad76ffefbe50e92d6f23461303085d65c8658985841614368bcda207a5f65a4a491029b40fbb587c271c4e22eea33d1949de35b2f933346af29a6be680311d42ad17f44cb6dd471b1adcadd045ca48ca0636bbef72a2374052cd372d0d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) 2.366222653s ago: executing program 0 (id=261): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x20000040) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000010000000000000000fba85e7d918750f2c640e4064b670000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = timerfd_create(0x7, 0x800) timerfd_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000040)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x8, 0xc80) connect$802154_dgram(r3, &(0x7f0000000080)={0x24, @short}, 0x14) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4100844, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@dax_never}, {@norecovery}, {@commit}]}, 0x1, 0x4bf, &(0x7f0000000e00)="$eJzs3ctvG9UaAPBv7DhNe29vcnt7gZaWBgqi4pE06YMu2IBA6gIkJFgUsQp5VKFpg5og0aoqgUVZokrsEf8CK8QKNgjYgITYwR5VqlA3LbAZNJ5xkzq24zQPt/HvJ7k+M2fsc76ZOeMz5zhuAF1rMPsnifh3RPwaEf354p0bDOZPt25cGv/zxqXxJNL09T+S6nY3b1war21ae92/8oU0LZa3NSj3ylsRYzMzk+eL5eH5s+8Oz124+Oz02bHTk6cnz42eOHH0yP7e46PH1iXOLK6bey/P7ttz8s2rr46fuvr290lP5HFHXRzrZTDfuw09sd6FddjOJenqjs1Unw/8uJjT6Eygk8rFYapU239/lGP77bz+ePmj+u37NruCwIZJ0zRtcVVeSIEtLImVt+krrhTAVlLcAlTvf2uPTex+dNz1F/IboCzuW8Ujz+mJUp44UKm7v11PgxFxauGvz7JHtDcO0btBVQEAusTXWf/nmUb9v1JtOqfa3/hPMYcyEBH/jYhdEfG/iNgdEf+PiAci4sGIeKhBGQstyq+fIVne/yldW0t8K8n6f88Xc1t39v9KtU0GysXSzmr8lWRqembycLFPDkVl29R0MjnSooxvXvr5k2Z5S/t/2SMrv9YXLOpxbXvdqPvE2PzYmoJe4vqHEXt7Im5Voi7+JGrTONmJsCci9t5lGdNP9TTNWzn+Fpq/bdvSzyOezI//QtTFX5M0nZ8cee746LHhvpiZPDxcOyuW++GnK6/VrSrXEmuKfx1kx39Hw/P/dvwDSV/E3IWLZ6rztXOrL+PKbx/n71lentfO+d+zOEB9cmdx/vcmb1RX1G6G3h+bnz8/EtGbvLJ8/ejiu9WWs+eBIv5DBxu3/12xuCcejoh9EbE/Ih7JbgqLuj8aEY9FxMEW8X/34uPvNMtrHv/mzJVm8U+sdPxj6fFffaJ85tuvVo4/u8Y1O/5Hq6lDxZoVr3+ViHYruMbdBwAAAPeFUvU78ElpKOkp0qXS0FD+Hf7dsaM0Mzs3//TU7HvnJvLvyg9EpVQb6epfMh46UowNDyx574El+UeKceNPy9uTqek0TdPZmYkOxg3k7bza/m9fC/L2n/m9wXgtsMXk82ilTlcD6IB1mEcH7lPaP3SnpGX7r7R87RcbUB9gc/n8h+7VqP1/0HTroS83tDLApvL5D92rjfZf/A1n814BcH/y+Q/dS/uHrtT0b+NLTbOyy8Uafg1gYxJ/F79neK/Up71E+d6oxl0lonRPVOMuEr9cLv7viY6UnsQqX9XT9o9ZrCKR9uftP1uzrXEzBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2BL+CQAA//8AOd5m") r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x7195c0, 0x49) r5 = syz_open_dev$evdev(&(0x7f00000001c0), 0x5, 0x2400) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f0000000440)=""/187) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020660b, &(0x7f0000000000)={0x47, 0xffffffffffffffff, 0x4, 0x9}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x40002, &(0x7f0000000180)) socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) ptrace$cont(0x21, r6, 0x80000001, 0x4) fcntl$getown(r3, 0x9) 2.342960754s ago: executing program 2 (id=262): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x88000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0x100, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) write(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mlockall(0x0) 2.116165399s ago: executing program 0 (id=263): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a0016000900142603600e1208001e0000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14) (fail_nth: 1) 1.593842821s ago: executing program 2 (id=264): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xcd9, 0x10}, 0xc) ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, &(0x7f0000000180)) memfd_create(0x0, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x1, 0x96fa, 0xffff, 0x11080, 0xffffffffffffffff, 0x51f, '\x00', 0x0, r0, 0x0, 0x1, 0x0, 0xc, @void, @value, @value=r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1c, 0x16, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) 1.583240452s ago: executing program 0 (id=265): mlockall(0x2) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4080, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f0000000380)}, 0x0, 0xffffffffffffffff, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x1, 0x0, 0x4a28861e}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, r0, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="13d173a6", @ANYRES16=r0, @ANYBLOB="040825bd7000ffdbdf25270000000c009900000000006f0000000a00340001010101010100000a0034000202020202020000060036000a0000009a002a00823b0107042f0900000802110000010900000016d900000600000003040802110000000400000001ffffffffffffe7ba00000108021100000101000000831f0009060802110000010900000004000000080000000802110000010400000072060303030303036512505050505050080211000000ffffffffffff0105a4c80983027206030303030303bd06ffffffffffff2503012c06000004005f000a0034000101010101010000"], 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x8011) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x7, 0x80, 0x3, 0x2457, {{0x7, 0x4, 0x1, 0x3f, 0x1c, 0x68, 0x0, 0x8, 0x29, 0x0, @empty, @empty, {[@ra={0x94, 0x4, 0x1}, @noop]}}}}}) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x810) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e2c, 0x10, @private2, 0xc}, 0x1c) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x207, &(0x7f0000000640)={[{@usrjquota}, {@jqfmt_vfsv1}, {@noblock_validity}, {@nodiscard}, {@noquota}]}, 0x5, 0x476, &(0x7f00000000c0)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$cont(0x21, r5, 0x80000001, 0x4) sendmsg$inet(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x6e1f, @private=0xa010102}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)="c4", 0x1}], 0x1}, 0x24000001) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98"], 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x4094) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x6, 0x20, 0x7, 0x8000000000000000}, &(0x7f00000001c0)=0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="18000000101400"/24], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) 1.500065574s ago: executing program 2 (id=266): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd}, 0x94) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000380)=""/250, 0xfa}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/63, 0x3f}, {&(0x7f00000014c0)=""/195, 0xc3}, {0x0}, {&(0x7f0000001680)=""/90, 0x5a}, {&(0x7f0000001700)=""/121, 0x79}, {&(0x7f0000001780)=""/189, 0xbd}, {&(0x7f0000001840)=""/85, 0x55}, {&(0x7f00000018c0)=""/8, 0x8}], 0xa, &(0x7f00000019c0)=""/70, 0x46}, 0x10020) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x4) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfeed, 0xffffffffffffffff) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r1, 0x236bd4336e4642df, &(0x7f0000000300)={{r3, r4+60000000}}, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) rt_sigtimedwait(&(0x7f0000000140)={[0x400]}, &(0x7f0000000200), &(0x7f0000001a80)={0x77359400}, 0x8) read(r6, &(0x7f0000000080)=""/1, 0x1) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) socket$inet(0x2, 0x2, 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) close_range(r5, 0xffffffffffffffff, 0x0) 1.499531714s ago: executing program 3 (id=276): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0xa001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000000)=0x5, 0x9, 0x1) (fail_nth: 2) 1.208092411s ago: executing program 3 (id=268): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0xa001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000000)=0x5, 0x9, 0x1) 1.107218684s ago: executing program 4 (id=270): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd}, 0x94) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000380)=""/250, 0xfa}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/63, 0x3f}, {&(0x7f00000014c0)=""/195, 0xc3}, {0x0}, {&(0x7f0000001680)=""/90, 0x5a}, {&(0x7f0000001700)=""/121, 0x79}, {&(0x7f0000001780)=""/189, 0xbd}, {&(0x7f0000001840)=""/85, 0x55}, {&(0x7f00000018c0)=""/8, 0x8}], 0xa, &(0x7f00000019c0)=""/70, 0x46}, 0x10020) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) timer_settime(r1, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) rt_sigtimedwait(&(0x7f0000000140)={[0x400]}, &(0x7f0000000200), &(0x7f0000001a80)={0x77359400}, 0x8) read(r3, &(0x7f0000000080)=""/1, 0x1) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) socket$inet(0x2, 0x2, 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) close_range(r2, 0xffffffffffffffff, 0x1000000) 1.105447553s ago: executing program 3 (id=271): ioperm(0x6, 0x9, 0x824) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETS(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x80084, 0x12f6, 0x11, 0x6, "0060730000efbc8901000000008de190faf600"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 760.116552ms ago: executing program 1 (id=273): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x20, 0x0, 0xfffff034}, {0x50, 0x1, 0x0, 0x80000000}, {0x6, 0x80, 0xfd, 0xfffffffd}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 718.851533ms ago: executing program 1 (id=274): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x1b, 0x5, 0x4a0, 0x330, 0x330, 0xffffffff, 0x218, 0x0, 0x408, 0x408, 0xffffffff, 0x408, 0x408, 0x5, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@icmp={{0x28}, {0x8, "2782"}}, @common=@set={{0x40}, {{0x4, [0x9, 0x5, 0x1, 0x0, 0x1, 0x3], 0x4, 0x7}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x7, @empty, @dev={0xac, 0x14, 0x14, 0x2f}, @port=0x4e20, @port=0x4e21}}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x5, 0x2}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0xa, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4=@dev={0xac, 0x14, 0x14, 0x44}, @icmp_id=0x66, @port=0x4e23}}}, {{@ip={@empty, @rand_addr=0x64010101, 0x0, 0x0, 'veth1_to_batadv\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x3, 0x5}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x5, 0x0, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xf, @empty, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key, @gre_key=0x3}}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@inet=@ipcomp={{0x30}, {[0x4d6, 0x4d4], 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @private=0xa010102, @multicast1, @icmp_id=0x64, @gre_key=0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) 700.915594ms ago: executing program 1 (id=275): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x88000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0x100, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mlockall(0x0) 511.851248ms ago: executing program 2 (id=277): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed5de7e91cd360a136ce6203c23c00fe82000000000400875a65969f7e750701810000000000000029"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x800, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000ffdbdf252e000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) read$ptp(r3, &(0x7f0000001240)=""/4096, 0x1000) r4 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="010000000500b758fd090000840000000501000028e660c634c7a66a42c4ad944aa916cf4454eb398ade48b3ea1495ba61d4efd247e46730d19274709301d68c8a2258b9c5de04d3dafea0f52723e42f06a26f2ddca79bda16f9ed566b7f918c74fc9d1714aa08812db7252b5779bc4c6d9346000b8745482e6068825670414b13459a2849948de2b533ee6bddbcd8000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x6c, r6}, 0x38) write(r3, &(0x7f0000000080)='4', 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000001180)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@errors_continue}, {@noload}, {@bh}]}, 0x3, 0x440, &(0x7f0000000280)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68080, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x90, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xf, 0xffffffffffffffff, 0x1) futex(&(0x7f0000000080)=0x2, 0x1, 0x0, &(0x7f00000000c0), 0x0, 0x2) r9 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r9, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 495.715519ms ago: executing program 1 (id=278): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='lo\x00', 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0xff010000, 0x2, 0x0, 0x0) 258.022665ms ago: executing program 1 (id=279): syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000140)={[{@nogrpid}, {@nomblk_io_submit}, {@nouid32}]}, 0xfe, 0x244, &(0x7f0000000840)="$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") 207.993476ms ago: executing program 3 (id=280): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c000380"], 0x50}}, 0x0) r5 = socket(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc) r6 = socket(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000028c0)=@newtaction={0x2c4, 0x31, 0x1, 0x20000040, 0x0, {}, [{0x4}, {0x2ac, 0x1, [@m_mirred={0x12c, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0xfe, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0xbc, 0x15, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_LABEL={0x8, 0x5, 0x708bf}, @TCA_MPLS_LABEL={0x8, 0x5, 0x5d0a2}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x3, 0x10000000, 0x3, 0x8}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0xa3}]}, {0x49, 0x6, "208bbc59569f50b342946ba401971afd7a2ca25533d15cdb3277c6449fb3716b452052c5200fc3a0f1d804141b7f915aad8137c2dcdbd924893881bc42a619153fda1e5703"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xc0, 0xb, 0x0, 0x0, {{0x9}, {0x4}, {0x91, 0x6, "4596903abc35e21133e03db4e237e548e569510a57ce7bbf2c3dfa75d0b9a97bb26bb9773af983c9bb24408746bf3f9d96c457dc4610e8b11d90f279b3a7de5fd4b482ff196b87ea5f5416962cfa1100bd02bce986dc23f0705d5be0946d1d0fef173f1d45f4e0a1de7df0b0ae29e163223d64c9230664dfdcb18acfcc829de4f90a5ddf96db726bbd14d06069"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x2c4}}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028008000200"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=ANY=[@ANYBLOB="100100001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000040c0000e00012800c0001006d6163766c616e00d0000280400005800a000400ffffffffffff00000a000400ffffffffffff00000a000400aaaaaaaaaaaa00000a00040000000000000000000a000400e643b70cfa30000008000100180000007c0005800a000400bbbbbbbbbbbb00000a000400ffffffffffff00000a0004001f6da31e49db00000a0004000abbf15f8bd100000a000400ffffffffffff00000a0004005fc9fe2e483f00000a0004000180c200000100000a000400bbbbbbbbbbbb00000a000400aaaaaaaaaaaa00000a000400986e26dd16fa000006000200"], 0x110}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000090) 207.778266ms ago: executing program 4 (id=281): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000180)=0x7, 0x4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x1, 'macvtap0\x00', {}, 0x80}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) recvmmsg(r0, &(0x7f0000001180)=[{{&(0x7f0000001240)=@generic, 0x80, &(0x7f0000000740)=[{&(0x7f0000000380)=""/137, 0x89}, {&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000000500)=""/123, 0x7b}, {&(0x7f0000000580)=""/179, 0xb3}, {&(0x7f0000000640)=""/242, 0xf2}], 0x5, &(0x7f00000007c0)=""/215, 0xd7}, 0x1}, {{&(0x7f00000008c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000940), 0x0, &(0x7f0000000980)=""/184, 0xb8}, 0x200}, {{&(0x7f00000001c0)=@can, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/107, 0x6b}, {&(0x7f0000000b40)=""/101, 0x65}, {&(0x7f0000000bc0)=""/89, 0x59}, {&(0x7f0000000c40)=""/114, 0x72}, {&(0x7f0000000cc0)=""/203, 0xcb}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000f00)=""/56, 0x38}, {&(0x7f0000000f40)=""/110, 0x6e}], 0x9, &(0x7f0000001080)=""/241, 0xf1}, 0xfff}], 0x3, 0x40002142, 0x0) 205.767895ms ago: executing program 4 (id=282): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e2c, 0xfffffffc, @local, 0xfffffffe}, 0x1c) 184.689486ms ago: executing program 4 (id=283): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0xa001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000000)=0x5, 0x9, 0x1) 152.937457ms ago: executing program 4 (id=284): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x1b, 0x5, 0x4a0, 0x330, 0x330, 0xffffffff, 0x218, 0x0, 0x408, 0x408, 0xffffffff, 0x408, 0x408, 0x5, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@icmp={{0x28}, {0x8, "2782"}}, @common=@set={{0x40}, {{0x4, [0x9, 0x5, 0x1, 0x0, 0x1, 0x3], 0x4, 0x7}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x7, @empty, @dev={0xac, 0x14, 0x14, 0x2f}, @port=0x4e20, @port=0x4e21}}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x5, 0x2}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0xa, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4=@dev={0xac, 0x14, 0x14, 0x44}, @icmp_id=0x66, @port=0x4e23}}}, {{@ip={@empty, @rand_addr=0x64010101, 0x0, 0x0, 'veth1_to_batadv\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x3, 0x5}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x5, 0x0, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xf, @empty, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key, @gre_key=0x3}}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@inet=@ipcomp={{0x30}, {[0x4d6, 0x4d4], 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @private=0xa010102, @multicast1, @icmp_id=0x64, @gre_key=0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) 133.970768ms ago: executing program 4 (id=285): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0xff2e) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10045, 0x7, r3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) accept4$bt_l2cap(r1, 0x0, &(0x7f0000000080), 0x80000) recvmmsg(r0, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) r5 = open(&(0x7f0000000080)='./bus\x00', 0x40000, 0xa27b734c1a0bc17) fgetxattr(r5, &(0x7f0000000100)=@random={'security.', 'ext4\x00'}, 0x0, 0x0) 50.11487ms ago: executing program 1 (id=286): socket$unix(0x1, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r1, &(0x7f0000001900)=[{&(0x7f00000006c0)=""/14, 0xe}, {0x0}], 0x2, 0x44, 0xe5) socket(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000740), 0x0) r2 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r2, 0x0) ftruncate(r2, 0x3) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001440), r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0x10000000002}, 0x20084, 0x0, 0x7, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000002c0), &(0x7f0000000400)={'enc=', 'pkcs1', ' hash=', {'blake2b-384-generic\x00'}}, 0x0, 0x0) madvise(&(0x7f0000eb3000/0x1000)=nil, 0x1000, 0x12) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2c4, &(0x7f0000000280)="$eJzs3U9rY1UUAPDz0uQ1QxftwpUIvsUs3Fims3VhB6kgdqVk4R/QwenA0IaBBAKjYpiVn8CFC7+HO/eCG7+B4MKlOwcpXHnvpUkmybzajmml/H6bXs495917c1+bQng3n7/WP37wePjw6de/RbebRWs/9uNZFjvRijNpIgCAG+FZSvHnpd7f2611zQkAWK+59//OC1I2l0Nvr3taAMAaffjRx+/fOzw8+KAouhH9b0e9LOqfdf+9h/EoTuIo7sR2nM4+C0ipbr/73uFBtIvSTtzuj0e9srL/2S/T1Dyq+r3Yjp3V9XtFba5+PGpX/3lkWcSj/XIidyParyzVl/0Hd1fURy+PN7qTRZbj78Z2/PpFPI6TeFB9pjEb/5s8infSd3999UmZXNZn41Fvs8qbSRtXvTcAAAAAAAAAAAAAAAAAAAAAANxcu8XUTtzul6H6/J3exmnVv/tcf3W+Tqvqr+uziLxqLJwPNE7xw9n5OneKokhZnT893+dWO15tR/vaFg4AAAAAAAAAAAAAAAAAAAD/I8MnXx7fPzk5GvwnjclD/tPH+i97nf25yOvRnLx5obFiY5JeznUxZ+/nT/vTSLmIy0x+1CkimubcWYrcKufTeOVqqn+nlFKWRbzcNnXOGau5UW7x0WCrObl8gX/6fuvN4/vZea9h92zjfpzvymMwfLKwp5E1D3r6XCRd6PbLG3LyyR3zr66z9ZK/RG/9Xg82iWTnrKIzF+lMGvGi2697ofv56v4GAQAAAAAAAAAAAAAAAAAAtdlDvys6nzaWttY2KQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4YrPv/581Yimy0BjHH1Xx6pyU0ngayWMwnA7WusaFAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcKP9EwAA///ipWum") r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x1a000}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) 0s ago: executing program 3 (id=287): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffd}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x9}, 0x10acc8, 0x1224, 0x2, 0x0, 0x0, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x805}, 0x0, 0x7, 0xffffffffffffffff, 0x8) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x14, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=""/173, 0xad}, 0x8}], 0x1, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x8, 0x0, 0x5, 0xffffff99}, {0x200, 0x81, 0x7, 0x7}, {0x3, 0x1, 0xa, 0x7}, {0x1, 0x67, 0x81, 0x7}, {0xfff, 0x6, 0x2, 0x8}, {0x4e7, 0x1, 0xc}, {0x3, 0xd, 0x1, 0x6}]}, 0x10) r3 = socket(0x15, 0x80005, 0x0) accept4$x25(r3, 0x0, 0x0, 0x80000) sendto$inet6(r1, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) perf_event_open(&(0x7f0000000000)={0x1, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000300)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/679, 0x6) fallocate(r4, 0x0, 0x8000000000000, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@dax}, {@resuid}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f5, &(0x7f0000001340)="$eJzs3M9rHGUfAPDvTJof/Zm0b3nftz+00SoGq0mTVu3Bg4pCL4qgh3qMaSy1aStNBFuKTUXqsfgXqEdB8KQHvSioqBcVr3oXoUgvrQoSmd2ZZJPsbiabNjHu5wOTPM/MszPzfWae2Wf22Z0A2lZ/RFyNiC0R8VNE9EZEsrBAf/XfzesXx36/fnEsiZmZ535LKuVuXL84VhQtXrc5zwykEembSeyps93J8xdOjU5MjJ/L80NTp18Zmjx/4cGTp0dPjJ8YPzNy5MjhQ8OPPDzyUKk4Li2xPIvrxu7Xz+7ddfSFt58em4kXv/kgyeOOBXFU9ZXabjP90R8zubm5XZW/96547f8sWyOiO08nG9Z4ZyitIyKyw9VZaf+90RFzB683nnpjNvPFGu0gcNtk703bF83tyP+ns+9fwL9Roo1Dmyre8bP732Jazf7HWrv2ePZ3vBL/zXz67plq3aTZvWxf9Y690S3tf+vM65lLzvQusf0tEXFs+o93sinqfg7RRFK6JADArM+y/s8D9fp/6by+zbZ8DKUvIg5ExI6I+E9E7Ix0tsz/IuL/y9x+/4L84v7PDxuXucplyfp/j+ZjW8VUXVLElczmtlbi70xeOjkxfjCvk4Ho7M7yw0228fmTP15ttKy/pv+XTdn2i75gvh+/buie/5rjo1OjKwh5nmuXI8k6t4vjT2b7vFkN7IqI3S2sP6uzk/e/vzdLb9u8ePnS8TdxC8aZZt6LuK96/KdjQfyFpLqlRuOTQz0xMX5wqDgrFvv2+yvP1uY7a9Lz4u8pF1NPq8HWce1yxKa6538ef9EMivHayTz/5ZbS27jy81sN72kWH/8kjk3XlsjP/41z1Zad/13J85V0Vz7vtdGpqXPDEZ/mM+bNH5lbW5EvymfxD+yfH3/1vjjNrnF/vZu/bk9EZCfxHRFxZ0Tsy/f9roi4OyL2N4n/6yfuebl5DbV4/t8CWfzHmx3/iL6kdry+hUTHqa8+abT9cte/w5XUQD6n9vrX1WC9ZXdwpfUHAAAA60FaGYNO0sGa728XdsamdOLs5NSB/nj1zPHqWHVfdKbFJ129NZ+HDuefDRf5kQX5QxGxvfJNo42V/ODY2YmtaxQzULW5pv1XrwVpOjhYXfZLx1rvHXDbLWscrfZLZx9+dOt3BlhVfq8J7Uv7h/al/UP70v6hfdVr/5cibq7BrgCrrNX3/4VfGADWodrnU87zcflfeQHrkvt/aF/aP7SlxT+Jzx+3kl0TWv/J/8SOoyt5YsDtT8z0tv7yaLxoevkr7ChXuHj6Rek1lyucRBThpE3iqpOIdG7On/nTJCtzOqtlusrv6uon0iXLPLZUbXQu65kYPXVqY1+e6I6Isuu5tGq1WlwhEk+ZBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1rW/AwAA//82E+pH") setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0xf4e) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000002c0)={'dvmrp1\x00'}) r6 = open(&(0x7f00000001c0)='./file1\x00', 0x4000, 0xd7) preadv2(r6, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) write$P9_RWSTAT(r6, &(0x7f0000000100)={0x7, 0x7f, 0x2}, 0x7) kernel console output (not intermixed with test programs): [ 19.337625][ T28] audit: type=1400 audit(1785462173.240:103): avc: denied { search } for pid=3175 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.359904][ T28] audit: type=1400 audit(1785462173.240:104): avc: denied { search } for pid=3175 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.383063][ T28] audit: type=1400 audit(1785462173.240:105): avc: denied { search } for pid=3175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.406496][ T28] audit: type=1400 audit(1785462173.240:106): avc: denied { search } for pid=3175 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.429583][ T28] audit: type=1400 audit(1785462173.240:107): avc: denied { read } for pid=3176 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.452455][ T28] audit: type=1400 audit(1785462173.240:108): avc: denied { read open } for pid=3176 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.477768][ T28] audit: type=1400 audit(1785462173.240:109): avc: denied { getattr } for pid=3176 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.502916][ T28] audit: type=1400 audit(1785462173.280:110): avc: denied { write } for pid=3175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.525801][ T28] audit: type=1400 audit(1785462173.280:111): avc: denied { add_name } for pid=3175 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.548578][ T28] audit: type=1400 audit(1785462173.300:112): avc: denied { write } for pid=3186 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.42' (ED25519) to the list of known hosts. [ 22.311343][ T3234] cgroup: Unknown subsys name 'net' [ 22.432998][ T3234] cgroup: Unknown subsys name 'cpuset' [ 22.439116][ T3234] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 22.599044][ T3283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.636722][ T3234] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.883062][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.890167][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.897301][ T3298] bridge_slave_0: entered allmulticast mode [ 23.903774][ T3298] bridge_slave_0: entered promiscuous mode [ 23.929821][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.936952][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.944058][ T3298] bridge_slave_1: entered allmulticast mode [ 23.950447][ T3298] bridge_slave_1: entered promiscuous mode [ 23.973456][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.980635][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.987766][ T3295] bridge_slave_0: entered allmulticast mode [ 23.994246][ T3295] bridge_slave_0: entered promiscuous mode [ 24.013169][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.020278][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.027378][ T3296] bridge_slave_0: entered allmulticast mode [ 24.033797][ T3296] bridge_slave_0: entered promiscuous mode [ 24.040098][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.047179][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.054341][ T3295] bridge_slave_1: entered allmulticast mode [ 24.060688][ T3295] bridge_slave_1: entered promiscuous mode [ 24.075063][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.082343][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.089472][ T3296] bridge_slave_1: entered allmulticast mode [ 24.095791][ T3296] bridge_slave_1: entered promiscuous mode [ 24.107286][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.133651][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.156363][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.172850][ T3292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.180078][ T3292] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.187255][ T3292] bridge_slave_0: entered allmulticast mode [ 24.193608][ T3292] bridge_slave_0: entered promiscuous mode [ 24.201000][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.211245][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.221408][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.235255][ T3291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.242363][ T3291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.249519][ T3291] bridge_slave_0: entered allmulticast mode [ 24.255877][ T3291] bridge_slave_0: entered promiscuous mode [ 24.262560][ T3292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.269645][ T3292] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.277007][ T3292] bridge_slave_1: entered allmulticast mode [ 24.283416][ T3292] bridge_slave_1: entered promiscuous mode [ 24.298595][ T3298] team0: Port device team_slave_0 added [ 24.304308][ T3291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.311371][ T3291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.318560][ T3291] bridge_slave_1: entered allmulticast mode [ 24.324982][ T3291] bridge_slave_1: entered promiscuous mode [ 24.343793][ T3298] team0: Port device team_slave_1 added [ 24.363227][ T3296] team0: Port device team_slave_0 added [ 24.369781][ T3295] team0: Port device team_slave_0 added [ 24.384752][ T3292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.394433][ T3296] team0: Port device team_slave_1 added [ 24.400745][ T3295] team0: Port device team_slave_1 added [ 24.406613][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.413605][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.439683][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.451568][ T3291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.461610][ T3292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.483897][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.491005][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.517069][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.528792][ T3291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.552710][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.559678][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.585618][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.600508][ T3292] team0: Port device team_slave_0 added [ 24.606517][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.613557][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.639713][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.651113][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.658091][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.684100][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.697266][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.704304][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.730288][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.745841][ T3292] team0: Port device team_slave_1 added [ 24.761165][ T3292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.768211][ T3292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.794400][ T3292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.808087][ T3292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.815099][ T3292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.841178][ T3292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.852696][ T3291] team0: Port device team_slave_0 added [ 24.879172][ T3291] team0: Port device team_slave_1 added [ 24.890574][ T3298] hsr_slave_0: entered promiscuous mode [ 24.896634][ T3298] hsr_slave_1: entered promiscuous mode [ 24.922995][ T3296] hsr_slave_0: entered promiscuous mode [ 24.929005][ T3296] hsr_slave_1: entered promiscuous mode [ 24.934842][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 24.940557][ T3296] Cannot create hsr debugfs directory [ 24.952642][ T3295] hsr_slave_0: entered promiscuous mode [ 24.958573][ T3295] hsr_slave_1: entered promiscuous mode [ 24.964520][ T3295] debugfs: 'hsr0' already exists in 'hsr' [ 24.970240][ T3295] Cannot create hsr debugfs directory [ 24.980726][ T3291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.987713][ T3291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.013661][ T3291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.040000][ T3291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.047106][ T3291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.073071][ T3291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.088508][ T3292] hsr_slave_0: entered promiscuous mode [ 25.094574][ T3292] hsr_slave_1: entered promiscuous mode [ 25.100382][ T3292] debugfs: 'hsr0' already exists in 'hsr' [ 25.106168][ T3292] Cannot create hsr debugfs directory [ 25.163167][ T3291] hsr_slave_0: entered promiscuous mode [ 25.169288][ T3291] hsr_slave_1: entered promiscuous mode [ 25.175390][ T3291] debugfs: 'hsr0' already exists in 'hsr' [ 25.181130][ T3291] Cannot create hsr debugfs directory [ 25.335263][ T3296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.343866][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 25.351455][ T3296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.360133][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 25.370161][ T3296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.378892][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 25.388770][ T3296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.397518][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 25.414870][ T3298] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.423443][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 25.431031][ T3298] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.439694][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 25.447695][ T3298] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.456691][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 25.468507][ T3298] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.477017][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 25.501205][ T3295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.509959][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 25.517569][ T3295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.526375][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 25.534228][ T3295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.542697][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 25.550300][ T3295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.559164][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 25.589719][ T3291] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.598450][ T3291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 25.610838][ T3291] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.619942][ T3291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 25.627806][ T3291] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.636458][ T3291] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 25.644723][ T3291] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.653341][ T3291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 25.697673][ T3292] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.706460][ T3292] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 25.714759][ T3292] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.723404][ T3292] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 25.731502][ T3292] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.740189][ T3292] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 25.748287][ T3292] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.757306][ T3292] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 25.804693][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.813306][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.821871][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.843688][ T3292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.852154][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.870540][ T3291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.882640][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.889716][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.898345][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.908778][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.919505][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.926688][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.935224][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.942470][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.955043][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.962228][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.972589][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.979687][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.995994][ T3292] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.008168][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.015311][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.024222][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.031275][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.040578][ T3291] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.054136][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.061199][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.074945][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.082037][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.099352][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.106639][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.386664][ T3292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.416241][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.429844][ T3291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.451467][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.465759][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.628798][ T3295] veth0_vlan: entered promiscuous mode [ 26.643884][ T3292] veth0_vlan: entered promiscuous mode [ 26.654850][ T3292] veth1_vlan: entered promiscuous mode [ 26.662084][ T3295] veth1_vlan: entered promiscuous mode [ 26.675800][ T3298] veth0_vlan: entered promiscuous mode [ 26.691153][ T3291] veth0_vlan: entered promiscuous mode [ 26.705198][ T3292] veth0_macvtap: entered promiscuous mode [ 26.716019][ T3296] veth0_vlan: entered promiscuous mode [ 26.724615][ T3296] veth1_vlan: entered promiscuous mode [ 26.731164][ T3298] veth1_vlan: entered promiscuous mode [ 26.741121][ T3291] veth1_vlan: entered promiscuous mode [ 26.749466][ T3292] veth1_macvtap: entered promiscuous mode [ 26.765714][ T3292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.774466][ T3292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.792052][ T3295] veth0_macvtap: entered promiscuous mode [ 26.805088][ T3298] veth0_macvtap: entered promiscuous mode [ 26.815911][ T3298] veth1_macvtap: entered promiscuous mode [ 26.822414][ T3296] veth0_macvtap: entered promiscuous mode [ 26.829237][ T3295] veth1_macvtap: entered promiscuous mode [ 26.839425][ T3291] veth0_macvtap: entered promiscuous mode [ 26.846824][ T3296] veth1_macvtap: entered promiscuous mode [ 26.856836][ T3291] veth1_macvtap: entered promiscuous mode [ 26.869950][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.882816][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 26.882830][ T28] audit: type=1400 audit(1785462180.790:146): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/root/syzkaller.2JXe8m/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 26.890398][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.924448][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.932184][ T28] audit: type=1400 audit(1785462180.790:147): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 26.939020][ T3291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.956084][ T28] audit: type=1400 audit(1785462180.820:148): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/root/syzkaller.2JXe8m/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 26.970309][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.987762][ T28] audit: type=1400 audit(1785462180.820:149): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 27.018775][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.018904][ T3292] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.031355][ T28] audit: type=1400 audit(1785462180.820:150): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/root/syzkaller.2JXe8m/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 27.067938][ T28] audit: type=1400 audit(1785462180.820:151): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/root/syzkaller.2JXe8m/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 27.095581][ T28] audit: type=1400 audit(1785462180.820:152): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.097627][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.117764][ T28] audit: type=1400 audit(1785462180.830:153): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 27.145848][ T28] audit: type=1400 audit(1785462180.830:154): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="gadgetfs" ino=3866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 27.153605][ T3291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.183564][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.195390][ T28] audit: type=1400 audit(1785462181.090:155): avc: denied { read write } for pid=3292 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.202497][ T3499] loop3: detected capacity change from 0 to 512 [ 27.226460][ T3499] EXT4-fs: inline encryption not supported [ 27.237287][ T3499] EXT4-fs (loop3): inodes count not valid: 0 vs 32 [ 27.254093][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.293250][ T68] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.332653][ T68] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.375120][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.429300][ T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.621098][ T3525] FAULT_INJECTION: forcing a failure. [ 27.621098][ T3525] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 27.668488][ T3525] CPU: 1 UID: 0 PID: 3525 Comm: syz.2.10 Not tainted syzkaller #0 PREEMPT(lazy) [ 27.668558][ T3525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.668569][ T3525] Call Trace: [ 27.668574][ T3525] [ 27.668581][ T3525] __dump_stack+0x1d/0x30 [ 27.668604][ T3525] dump_stack_lvl+0x95/0xd0 [ 27.668704][ T3525] dump_stack+0x15/0x1b [ 27.668721][ T3525] should_fail_ex+0x25e/0x270 [ 27.668750][ T3525] should_fail+0xb/0x20 [ 27.668775][ T3525] should_fail_usercopy+0x1a/0x20 [ 27.668930][ T3525] _copy_to_user+0x20/0xa0 [ 27.668954][ T3525] simple_read_from_buffer+0xb5/0x130 [ 27.668983][ T3525] proc_fail_nth_read+0x10e/0x150 [ 27.669008][ T3525] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 27.669066][ T3525] vfs_read+0x18e/0x7c0 [ 27.669082][ T3525] ? vt_ioctl+0x1091/0x1900 [ 27.669170][ T3525] ? __rcu_read_unlock+0x4e/0x70 [ 27.669192][ T3525] ? __fget_files+0x184/0x1c0 [ 27.669214][ T3525] ? tty_jobctrl_ioctl+0x294/0x800 [ 27.669237][ T3525] ? mutex_lock+0x57/0x90 [ 27.669269][ T3525] ksys_read+0xdc/0x1a0 [ 27.669291][ T3525] __x64_sys_read+0x40/0x50 [ 27.669382][ T3525] x64_sys_call+0x2886/0x3020 [ 27.669407][ T3525] do_syscall_64+0x136/0x3c0 [ 27.669435][ T3525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 27.669460][ T3525] RIP: 0033:0x7f8da065e84e [ 27.669478][ T3525] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 27.669509][ T3525] RSP: 002b:00007f8d9f0f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 27.669528][ T3525] RAX: ffffffffffffffda RBX: 00007f8d9f0f76c0 RCX: 00007f8da065e84e [ 27.669541][ T3525] RDX: 000000000000000f RSI: 00007f8d9f0f70a0 RDI: 0000000000000004 [ 27.669554][ T3525] RBP: 00007f8d9f0f7090 R08: 0000000000000000 R09: 0000000000000000 [ 27.669569][ T3525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 27.669602][ T3525] R13: 00007f8da0926038 R14: 00007f8da0925fa0 R15: 00007ffd767f1098 [ 27.669622][ T3525] [ 27.892523][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.901380][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.910323][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.919247][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.931540][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.944736][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.953582][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.962515][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.015919][ T3532] netlink: 76 bytes leftover after parsing attributes in process `syz.2.12'. [ 28.313097][ T398] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.914664][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.923695][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.933440][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.947343][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.957150][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.233564][ T3547] loop0: detected capacity change from 0 to 1764 [ 29.301560][ T3552] netlink: 'syz.4.18': attribute type 12 has an invalid length. [ 29.374385][ T3555] Zero length message leads to an empty skb [ 29.391596][ T3558] loop4: detected capacity change from 0 to 512 [ 29.416960][ T3558] ======================================================= [ 29.416960][ T3558] WARNING: The mand mount option has been deprecated and [ 29.416960][ T3558] and is ignored by this kernel. Remove the mand [ 29.416960][ T3558] option from the mount to silence this warning. [ 29.416960][ T3558] ======================================================= [ 29.486586][ T3558] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 29.553440][ T3564] tipc: Started in network mode [ 29.570496][ T3564] tipc: Node identity 2007ff, cluster identity 4711 [ 29.596363][ T3564] tipc: Node number set to 2099199 [ 29.684090][ T3568] x_tables: duplicate underflow at hook 3 [ 29.692361][ T3553] loop3: detected capacity change from 0 to 512 [ 29.719136][ T3553] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 29.761160][ T3572] bond1: entered promiscuous mode [ 29.784651][ T3553] EXT4-fs: error: could not find journal device path [ 29.787496][ T3572] bond1: entered allmulticast mode [ 29.805149][ T3572] 8021q: adding VLAN 0 to HW filter on device bond1 [ 29.847113][ T68] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 29.859601][ T3561] xt_hashlimit: size too large, truncated to 1048576 [ 30.294222][ T3544] syz.3.16 (3544) used greatest stack depth: 8704 bytes left [ 30.547030][ T3606] xt_CT: No such helper "netbios-ns" [ 30.654767][ T3609] GUP no longer grows the stack in syz.3.33 (3609): 200000004000-20000000a000 (200000002000) [ 30.788798][ T3609] CPU: 1 UID: 0 PID: 3609 Comm: syz.3.33 Not tainted syzkaller #0 PREEMPT(lazy) [ 30.788890][ T3609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.788904][ T3609] Call Trace: [ 30.788912][ T3609] [ 30.788921][ T3609] __dump_stack+0x1d/0x30 [ 30.788948][ T3609] dump_stack_lvl+0x95/0xd0 [ 30.788979][ T3609] dump_stack+0x15/0x1b [ 30.789033][ T3609] __get_user_pages+0x1b27/0x1f10 [ 30.789105][ T3609] ? __tsan_memset+0xd6/0x1f0 [ 30.789132][ T3609] ? __rcu_read_unlock+0x4e/0x70 [ 30.789156][ T3609] get_user_pages_remote+0x1d5/0x6b0 [ 30.789204][ T3609] __access_remote_vm+0x156/0x4d0 [ 30.789241][ T3609] access_remote_vm+0x32/0x40 [ 30.789268][ T3609] proc_pid_cmdline_read+0x334/0x710 [ 30.789286][ T3609] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 30.789365][ T3609] vfs_readv+0x417/0x6d0 [ 30.789396][ T3609] __x64_sys_preadv+0xfd/0x1c0 [ 30.789416][ T3609] x64_sys_call+0x2915/0x3020 [ 30.789472][ T3609] do_syscall_64+0x136/0x3c0 [ 30.789496][ T3609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.789536][ T3609] RIP: 0033:0x7f0c4e1ce019 [ 30.789555][ T3609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.789574][ T3609] RSP: 002b:00007f0c4cc06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 30.789596][ T3609] RAX: ffffffffffffffda RBX: 00007f0c4e456090 RCX: 00007f0c4e1ce019 [ 30.789609][ T3609] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000009 [ 30.789649][ T3609] RBP: 00007f0c4e26500c R08: 00000000fffffff9 R09: 0000000000000000 [ 30.789664][ T3609] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 30.789679][ T3609] R13: 00007f0c4e456128 R14: 00007f0c4e456090 R15: 00007ffe6dbea368 [ 30.789700][ T3609] [ 30.993366][ T3585] 9pnet_fd: p9_fd_create_tcp (3585): problem connecting socket to 127.0.0.1 [ 31.291501][ T3631] netlink: 'syz.1.43': attribute type 12 has an invalid length. [ 31.417107][ T3645] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 31.446132][ T3645] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 31.830326][ T3655] xt_hashlimit: size too large, truncated to 1048576 [ 31.955131][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 31.955185][ T28] audit: type=1400 audit(1785462185.860:242): avc: denied { setopt } for pid=3642 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.997217][ T28] audit: type=1400 audit(1785462185.900:243): avc: denied { write } for pid=3642 comm="syz.0.48" path="socket:[5058]" dev="sockfs" ino=5058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.037612][ T3654] netlink: 24 bytes leftover after parsing attributes in process `syz.4.52'. [ 32.145111][ T28] audit: type=1400 audit(1785462186.050:244): avc: denied { name_connect } for pid=3658 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 32.200167][ T28] audit: type=1400 audit(1785462186.100:245): avc: denied { create } for pid=3660 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 32.247333][ T3666] netlink: 'syz.1.56': attribute type 12 has an invalid length. [ 32.378850][ T28] audit: type=1400 audit(1785462186.280:246): avc: denied { shutdown } for pid=3667 comm="syz.1.58" laddr=fe80::11 lport=54193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.648650][ T28] audit: type=1400 audit(1785462186.550:247): avc: denied { read } for pid=3667 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.269799][ T3691] tmpfs: Bad value for 'mpol' [ 33.269856][ T28] audit: type=1400 audit(1785462187.170:248): avc: denied { mounton } for pid=3684 comm="syz.2.61" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 35.272064][ T3697] FAULT_INJECTION: forcing a failure. [ 35.272064][ T3697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 35.329433][ T3697] CPU: 0 UID: 0 PID: 3697 Comm: syz.0.64 Not tainted syzkaller #0 PREEMPT(lazy) [ 35.329462][ T3697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.329547][ T3697] Call Trace: [ 35.329554][ T3697] [ 35.329563][ T3697] __dump_stack+0x1d/0x30 [ 35.329620][ T3697] dump_stack_lvl+0x95/0xd0 [ 35.329642][ T3697] dump_stack+0x15/0x1b [ 35.329663][ T3697] should_fail_ex+0x25e/0x270 [ 35.329760][ T3697] should_fail+0xb/0x20 [ 35.329781][ T3697] should_fail_usercopy+0x1a/0x20 [ 35.329837][ T3697] _copy_from_user+0x1c/0xb0 [ 35.329868][ T3697] ___sys_sendmsg+0xc1/0x1e0 [ 35.329978][ T3697] __x64_sys_sendmsg+0xd4/0x160 [ 35.330008][ T3697] x64_sys_call+0x194c/0x3020 [ 35.330143][ T3697] do_syscall_64+0x136/0x3c0 [ 35.330166][ T3697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.330185][ T3697] RIP: 0033:0x7f0088c2e019 [ 35.330268][ T3697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.330311][ T3697] RSP: 002b:00007f0087687028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.330333][ T3697] RAX: ffffffffffffffda RBX: 00007f0088eb5fa0 RCX: 00007f0088c2e019 [ 35.330345][ T3697] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 35.330357][ T3697] RBP: 00007f0087687090 R08: 0000000000000000 R09: 0000000000000000 [ 35.330383][ T3697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.330395][ T3697] R13: 00007f0088eb6038 R14: 00007f0088eb5fa0 R15: 00007fffe721f8c8 [ 35.330414][ T3697] [ 35.623184][ T28] audit: type=1400 audit(1785462189.530:249): avc: denied { listen } for pid=3703 comm="syz.2.67" lport=44880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 35.741105][ T3712] ÿÿÿÿ: renamed from bridge_slave_1 (while UP) [ 35.919339][ T28] audit: type=1400 audit(1785462189.810:250): avc: denied { sqpoll } for pid=3723 comm="syz.4.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 36.126948][ T3731] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 36.170636][ T28] audit: type=1400 audit(1785462189.810:251): avc: denied { map } for pid=3723 comm="syz.4.72" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.205339][ T3731] loop3: detected capacity change from 0 to 256 [ 36.212634][ T3731] vfat: Unknown parameter '' [ 36.219334][ T3732] loop1: detected capacity change from 0 to 1024 [ 36.226810][ T3732] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29845!=20869) [ 36.236929][ T3732] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 36.240845][ T3724] netlink: 128 bytes leftover after parsing attributes in process `syz.4.72'. [ 36.247248][ T3732] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.73: Invalid inode table block 0 in block_group 0 [ 36.247279][ T3732] loop1: lost filesystem error report for type 5 error -117 [ 36.252304][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 36.283590][ C1] EXT4-fs (loop1): initial error at time 1785462190: __ext4_get_inode_loc:4886 [ 36.292609][ C1] EXT4-fs (loop1): last error at time 1785462190: __ext4_get_inode_loc:4886 [ 36.301862][ T3732] EXT4-fs (loop1): Remounting filesystem read-only [ 36.310932][ T3732] EXT4-fs (loop1): no journal found [ 36.319612][ T3724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 36.335052][ T3732] EXT4-fs (loop1): can't get journal size [ 36.354474][ T3732] EXT4-fs (loop1): get root inode failed [ 36.362329][ T3732] EXT4-fs (loop1): mount failed [ 36.499368][ T3745] Illegal XDP return value 4294967274 on prog (id 29) dev N/A, expect packet loss! [ 36.527852][ T3748] loop3: detected capacity change from 0 to 1024 [ 36.582649][ T3756] loop2: detected capacity change from 0 to 1024 [ 36.630882][ T3756] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 36.666010][ T3754] loop1: detected capacity change from 0 to 8192 [ 36.676689][ T3756] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 36.687170][ T3764] FAULT_INJECTION: forcing a failure. [ 36.687170][ T3764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.705018][ T3765] syz.0.84 uses obsolete (PF_INET,SOCK_PACKET) [ 36.713105][ T3764] CPU: 1 UID: 0 PID: 3764 Comm: syz.4.85 Not tainted syzkaller #0 PREEMPT(lazy) [ 36.713134][ T3764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.713146][ T3764] Call Trace: [ 36.713154][ T3764] [ 36.713164][ T3764] __dump_stack+0x1d/0x30 [ 36.713200][ T3764] dump_stack_lvl+0x95/0xd0 [ 36.713284][ T3764] dump_stack+0x15/0x1b [ 36.713305][ T3764] should_fail_ex+0x25e/0x270 [ 36.713334][ T3764] should_fail+0xb/0x20 [ 36.713358][ T3764] should_fail_usercopy+0x1a/0x20 [ 36.713457][ T3764] strncpy_from_user+0x27/0x250 [ 36.713482][ T3764] ? __rcu_read_unlock+0x4e/0x70 [ 36.713544][ T3764] path_removexattrat+0x82/0x590 [ 36.713574][ T3764] ? proc_fail_nth_write+0x13b/0x160 [ 36.713595][ T3764] ? __seccomp_filter+0x29c/0x1370 [ 36.713625][ T3764] __x64_sys_fremovexattr+0x35/0x40 [ 36.713782][ T3764] x64_sys_call+0x2ed7/0x3020 [ 36.713853][ T3764] do_syscall_64+0x136/0x3c0 [ 36.713880][ T3764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.713978][ T3764] RIP: 0033:0x7fd0871ae019 [ 36.714054][ T3764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.714070][ T3764] RSP: 002b:00007fd085c07028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c7 [ 36.714199][ T3764] RAX: ffffffffffffffda RBX: 00007fd087435fa0 RCX: 00007fd0871ae019 [ 36.714214][ T3764] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 36.714226][ T3764] RBP: 00007fd085c07090 R08: 0000000000000000 R09: 0000000000000000 [ 36.714275][ T3764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.714288][ T3764] R13: 00007fd087436038 R14: 00007fd087435fa0 R15: 00007ffd3af0dcb8 [ 36.714309][ T3764] [ 36.714793][ T3756] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 36.735381][ T3765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=3765 comm=syz.0.84 [ 36.762812][ T3756] EXT4-fs (loop2): orphan cleanup on readonly fs [ 36.923224][ T3756] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.77: Invalid inode table block 0 in block_group 0 [ 37.034149][ T3756] loop2: lost filesystem error report for type 5 error -117 [ 37.044016][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 37.063346][ C1] EXT4-fs (loop2): initial error at time 1785462190: __ext4_get_inode_loc:4886 [ 37.075281][ C1] EXT4-fs (loop2): last error at time 1785462190: __ext4_get_inode_loc:4886 [ 37.090048][ T3756] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 37.101387][ T3756] loop2: lost filesystem error report for type 5 error -117 [ 37.101582][ T3756] EXT4-fs error (device loop2): ext4_quota_write:7430: inode #3: comm syz.2.77: mark_inode_dirty error [ 37.124068][ T3754] loop1: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 37.151512][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 37.151530][ T28] audit: type=1400 audit(1785462191.050:280): avc: denied { watch } for pid=3773 comm="syz.0.87" path="/16" dev="tmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 37.152400][ T3756] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 37.278725][ T3756] Quota error (device loop2): write_blk: dquota write failed [ 37.295807][ T28] audit: type=1400 audit(1785462191.190:281): avc: denied { watch_reads } for pid=3773 comm="syz.0.87" path="/16" dev="tmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 37.318541][ T28] audit: type=1400 audit(1785462191.190:282): avc: denied { perfmon } for pid=3773 comm="syz.0.87" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.339502][ T3756] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 37.358568][ T28] audit: type=1400 audit(1785462191.260:283): avc: denied { write } for pid=3773 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 37.372541][ T3756] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.77: Failed to acquire dquot type 0 [ 37.404728][ T3783] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 37.413066][ T28] audit: type=1400 audit(1785462191.260:284): avc: denied { create } for pid=3773 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.436508][ T3783] syzkaller1: linktype set to 768 [ 37.451836][ T3756] loop2: lost filesystem error report for type 5 error -117 [ 37.454926][ T3756] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.77: Invalid inode table block 0 in block_group 0 [ 37.464195][ T28] audit: type=1400 audit(1785462191.260:285): avc: denied { bpf } for pid=3773 comm="syz.0.87" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.477708][ T3787] loop4: detected capacity change from 0 to 1024 [ 37.501776][ T3380] IPVS: starting estimator thread 0... [ 37.501979][ T3756] loop2: lost filesystem error report for type 5 error -117 [ 37.508203][ T28] audit: type=1400 audit(1785462191.260:286): avc: denied { module_request } for pid=3775 comm="syz.4.88" kmod="netdev-aaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 37.538613][ T3787] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29845!=20869) [ 37.548427][ T3756] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 37.552413][ T3787] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 37.558038][ T3756] loop2: lost filesystem error report for type 5 error -117 [ 37.567919][ T3756] EXT4-fs error (device loop2): ext4_ext_truncate:4557: inode #15: comm syz.2.77: mark_inode_dirty error [ 37.570137][ T3787] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.91: Invalid inode table block 0 in block_group 0 [ 37.575889][ T3756] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 37.587886][ T3787] loop4: lost filesystem error report for type 5 error -117 [ 37.612439][ T3756] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.77: Invalid inode table block 0 in block_group 0 [ 37.632470][ T3789] IPVS: using max 2688 ests per chain, 134400 per kthread [ 37.632497][ T3787] EXT4-fs (loop4): Remounting filesystem read-only [ 37.646344][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 37.646362][ C1] EXT4-fs (loop4): initial error at time 1785462191: __ext4_get_inode_loc:4886 [ 37.646386][ C1] EXT4-fs (loop4): last error at time 1785462191: __ext4_get_inode_loc:4886 [ 37.671493][ T3756] loop2: lost filesystem error report for type 5 error -117 [ 37.672431][ T3756] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 37.690808][ T3787] EXT4-fs (loop4): no journal found [ 37.696138][ T3756] loop2: lost filesystem error report for type 5 error -117 [ 37.696276][ T3756] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 37.712544][ T3787] EXT4-fs (loop4): can't get journal size [ 37.718640][ T3787] EXT4-fs (loop4): get root inode failed [ 37.726533][ T3756] loop2: lost filesystem error report for type 5 error -117 [ 37.726664][ T3756] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.77: Invalid inode table block 0 in block_group 0 [ 37.732405][ T3787] EXT4-fs (loop4): mount failed [ 37.753632][ T3756] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 37.763389][ T3756] EXT4-fs error (device loop2): ext4_truncate:4691: inode #15: comm syz.2.77: mark_inode_dirty error [ 37.784626][ T3756] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 37.831458][ T3756] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 37.868294][ T28] audit: type=1400 audit(1785462191.770:287): avc: denied { create } for pid=3798 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 37.893239][ T3756] EXT4-fs (loop2): 1 truncate cleaned up [ 37.936955][ T3756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.093070][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.111157][ T3820] loop0: detected capacity change from 0 to 512 [ 38.132821][ T3820] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.135455][ T3823] loop2: detected capacity change from 0 to 164 [ 38.167249][ T3820] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.179054][ T3823] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 38.205837][ T3820] EXT4-fs (loop0): 1 truncate cleaned up [ 38.215780][ T3823] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 38.286685][ T3820] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.304036][ T3823] rock: directory entry would overflow storage [ 38.325775][ T3823] rock: sig=0x4f50, size=4, remaining=3 [ 38.344720][ T3823] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 38.360831][ T3820] EXT4-fs error (device loop0): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.0.99: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 38.395522][ T3820] EXT4-fs (loop0): Remounting filesystem read-only [ 38.403452][ T3828] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 38.414554][ T3820] EXT4-fs warning (device loop0): ext4_rename_delete:3739: inode #2: comm syz.0.99: Deleting old file: nlink 5, error=-117 [ 38.443688][ T3828] rock: directory entry would overflow storage [ 38.461251][ T3828] rock: sig=0x4f50, size=4, remaining=3 [ 38.480054][ T3820] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 38.486699][ T3820] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 38.492358][ T3828] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 38.545504][ T3820] vhci_hcd vhci_hcd.0: Device attached [ 38.571655][ T3830] vhci_hcd: connection closed [ 38.572015][ T12] vhci_hcd vhci_hcd.0: stop threads [ 38.583582][ T12] vhci_hcd vhci_hcd.0: release socket [ 38.603718][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 38.692615][ T3804] udevd[3804]: inotify_add_watch(7, /dev/loop1p17, 10) failed: No such file or directory [ 38.706808][ T3801] udevd[3801]: inotify_add_watch(7, /dev/loop1p19, 10) failed: No such file or directory [ 38.709657][ T3806] udevd[3806]: inotify_add_watch(7, /dev/loop1p20, 10) failed: No such file or directory [ 38.719388][ T3269] udevd[3269]: inotify_add_watch(7, /dev/loop1p22, 10) failed: No such file or directory [ 38.729668][ T3282] udevd[3282]: inotify_add_watch(7, /dev/loop1p25, 10) failed: No such file or directory [ 38.739471][ T3807] udevd[3807]: inotify_add_watch(7, /dev/loop1p23, 10) failed: No such file or directory [ 38.748958][ T3800] udevd[3800]: inotify_add_watch(7, /dev/loop1p28, 10) failed: No such file or directory [ 38.765440][ T3284] udevd[3284]: inotify_add_watch(7, /dev/loop1p18, 10) failed: No such file or directory [ 38.778869][ T3281] udevd[3281]: inotify_add_watch(7, /dev/loop1p27, 10) failed: No such file or directory [ 38.790894][ T3799] udevd[3799]: inotify_add_watch(7, /dev/loop1p21, 10) failed: No such file or directory [ 38.805432][ T3838] loop2: detected capacity change from 0 to 1024 [ 38.826767][ T3838] EXT4-fs: Ignoring removed bh option [ 38.853994][ T3838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.915201][ T3837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.102'. [ 39.003061][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.408005][ T3851] loop2: detected capacity change from 0 to 4096 [ 40.437276][ T3851] EXT4-fs: Ignoring removed orlov option [ 40.465132][ T3851] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.540450][ T3851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.740527][ T3291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.120299][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.383398][ T3881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.111'. [ 42.344364][ T28] kauditd_printk_skb: 141 callbacks suppressed [ 42.344382][ T28] audit: type=1400 audit(1785462196.250:429): avc: denied { read write } for pid=3909 comm="syz.1.118" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 42.420978][ T3914] tipc: Started in network mode [ 42.440349][ T28] audit: type=1400 audit(1785462196.250:430): avc: denied { open } for pid=3909 comm="syz.1.118" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 42.443447][ T3914] tipc: Node identity 2ede4ae303fd, cluster identity 4711 [ 42.472925][ T3914] tipc: Enabled bearer , priority 0 [ 42.479810][ T28] audit: type=1326 audit(1785462196.300:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3907 comm="syz.2.117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8da069e019 code=0x7ffc0000 [ 42.507707][ T28] audit: type=1326 audit(1785462196.340:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3915 comm="syz.2.122" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da069e019 code=0x7ffc0000 [ 42.516199][ T3914] syzkaller0: entered promiscuous mode [ 42.533054][ T28] audit: type=1326 audit(1785462196.340:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3915 comm="syz.2.122" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da069e019 code=0x7ffc0000 [ 42.565146][ T28] audit: type=1326 audit(1785462196.340:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3915 comm="syz.2.122" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da069e019 code=0x7ffc0000 [ 42.600110][ T28] audit: type=1326 audit(1785462196.340:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3915 comm="syz.2.122" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f8da069e019 code=0x7ffc0000 [ 42.636590][ T3914] syzkaller0: entered allmulticast mode [ 42.653760][ T3931] audit: audit_backlog=65 > audit_backlog_limit=64 [ 42.664442][ T3931] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 42.673570][ T3914] syzkaller0: mtu greater than device maximum [ 42.683222][ T28] audit: type=1326 audit(1785462196.340:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3915 comm="syz.2.122" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da069e019 code=0x7ffc0000 [ 42.719542][ T3913] tipc: Resetting bearer [ 42.739237][ T3913] tipc: Disabling bearer [ 42.874425][ T3943] serio: Serial port ptm1 [ 42.906837][ T3941] loop0: detected capacity change from 0 to 164 [ 42.928704][ T3941] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 43.320502][ T3955] loop3: detected capacity change from 0 to 512 [ 43.327275][ T3955] EXT4-fs: inline encryption not supported [ 43.334132][ T3955] EXT4-fs: Mount option(s) incompatible with ext2 [ 43.356806][ T3409] hid-generic 0006:0008:0008.0001: unknown main item tag 0x6 [ 43.364383][ T3409] hid-generic 0006:0008:0008.0001: unknown main item tag 0x6 [ 43.371833][ T3409] hid-generic 0006:0008:0008.0001: unknown main item tag 0x6 [ 43.379280][ T3409] hid-generic 0006:0008:0008.0001: unknown main item tag 0x6 [ 43.387229][ T3409] hid-generic 0006:0008:0008.0001: unknown main item tag 0x6 [ 43.394703][ T3409] hid-generic 0006:0008:0008.0001: unknown main item tag 0x6 [ 43.402228][ T3409] hid-generic 0006:0008:0008.0001: unknown main item tag 0x6 [ 43.409870][ T3409] hid-generic 0006:0008:0008.0001: unknown main item tag 0x6 [ 43.417351][ T3409] hid-generic 0006:0008:0008.0001: item fetching failed at offset 16/17 [ 43.425874][ T3409] hid-generic 0006:0008:0008.0001: probe with driver hid-generic failed with error -22 [ 43.992041][ T3964] loop3: detected capacity change from 0 to 128 [ 44.013009][ T3964] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.056306][ T3964] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 45.428194][ T3916] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 45.531880][ T3968] 0: reclassify loop, rule prio 0, protocol 03 [ 45.593827][ T3972] Cannot find set identified by id 0 to match [ 45.821068][ T3988] loop1: detected capacity change from 0 to 4096 [ 45.834306][ T3988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.876036][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.939319][ T3995] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 46.146082][ T4002] FAULT_INJECTION: forcing a failure. [ 46.146082][ T4002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.160211][ T4002] CPU: 0 UID: 0 PID: 4002 Comm: syz.1.147 Not tainted syzkaller #0 PREEMPT(lazy) [ 46.160303][ T4002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.160320][ T4002] Call Trace: [ 46.160327][ T4002] [ 46.160335][ T4002] __dump_stack+0x1d/0x30 [ 46.160361][ T4002] dump_stack_lvl+0x95/0xd0 [ 46.160382][ T4002] dump_stack+0x15/0x1b [ 46.160402][ T4002] should_fail_ex+0x25e/0x270 [ 46.160484][ T4002] should_fail+0xb/0x20 [ 46.160552][ T4002] should_fail_usercopy+0x1a/0x20 [ 46.160584][ T4002] _copy_from_user+0x1c/0xb0 [ 46.160604][ T4002] ___sys_sendmsg+0xc1/0x1e0 [ 46.160662][ T4002] __x64_sys_sendmsg+0xd4/0x160 [ 46.160696][ T4002] x64_sys_call+0x194c/0x3020 [ 46.160720][ T4002] do_syscall_64+0x136/0x3c0 [ 46.160747][ T4002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.160838][ T4002] RIP: 0033:0x7f5a4eeae019 [ 46.160854][ T4002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.160922][ T4002] RSP: 002b:00007f5a4d907028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.160944][ T4002] RAX: ffffffffffffffda RBX: 00007f5a4f135fa0 RCX: 00007f5a4eeae019 [ 46.160959][ T4002] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 46.160974][ T4002] RBP: 00007f5a4d907090 R08: 0000000000000000 R09: 0000000000000000 [ 46.160987][ T4002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.161103][ T4002] R13: 00007f5a4f136038 R14: 00007f5a4f135fa0 R15: 00007ffd5e0edf58 [ 46.161121][ T4002] [ 46.384733][ T4011] macvtap1: entered promiscuous mode [ 46.406459][ T4011] macvtap1: entered allmulticast mode [ 46.420874][ T4011] veth1_vlan: entered allmulticast mode [ 46.449104][ T4009] netlink: 4116 bytes leftover after parsing attributes in process `syz.3.151'. [ 46.871553][ T4040] netlink: 24 bytes leftover after parsing attributes in process `syz.0.161'. [ 46.931037][ T4049] loop4: detected capacity change from 0 to 164 [ 46.938451][ T4049] rock: directory entry would overflow storage [ 46.945047][ T4049] rock: sig=0x4543, size=28, remaining=18 [ 47.019516][ T4055] netlink: 'syz.4.167': attribute type 6 has an invalid length. [ 47.254951][ T4040] loop0: detected capacity change from 0 to 512 [ 47.257217][ T4059] netlink: 64 bytes leftover after parsing attributes in process `syz.4.168'. [ 47.282513][ T4059] tipc: Invalid UDP bearer configuration [ 47.282528][ T4059] tipc: Enabling of bearer rejected, failed to enable media [ 47.311478][ T4040] EXT4-fs (loop0): invalid inodes per group: 0 [ 47.311478][ T4040] [ 47.556768][ T4040] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4040 comm=syz.0.161 [ 47.595198][ T28] kauditd_printk_skb: 907 callbacks suppressed [ 47.595213][ T28] audit: type=1400 audit(1785462201.480:1343): avc: denied { setopt } for pid=4062 comm="syz.2.170" lport=38816 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 47.792396][ T4070] loop0: detected capacity change from 0 to 1764 [ 47.836031][ T28] audit: type=1400 audit(1785462201.740:1344): avc: denied { bind } for pid=4071 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.871671][ T28] audit: type=1400 audit(1785462201.740:1345): avc: denied { name_bind } for pid=4071 comm="syz.2.173" src=20012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 47.929177][ T28] audit: type=1400 audit(1785462201.740:1346): avc: denied { node_bind } for pid=4071 comm="syz.2.173" saddr=fe80::aa src=20012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 47.993409][ T28] audit: type=1400 audit(1785462201.900:1347): avc: denied { accept } for pid=4067 comm="syz.3.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 48.001614][ T4068] netlink: 'syz.3.171': attribute type 12 has an invalid length. [ 48.023237][ T4068] netlink: 'syz.3.171': attribute type 29 has an invalid length. [ 48.033168][ T4068] netlink: 148 bytes leftover after parsing attributes in process `syz.3.171'. [ 48.079578][ T4078] loop0: detected capacity change from 0 to 764 [ 48.108976][ T4078] iso9660: Unknown parameter ' [ 48.108976][ T4078] •Rhmpress' [ 48.135501][ T4081] netlink: 'syz.3.175': attribute type 1 has an invalid length. [ 48.170293][ T4081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.187594][ T4081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43673 sclass=netlink_route_socket pid=4081 comm=syz.3.175 [ 48.200522][ T28] audit: type=1400 audit(1785462202.090:1348): avc: denied { append } for pid=4082 comm="syz.4.176" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 48.212200][ T4081] macvlan2: entered promiscuous mode [ 48.229430][ T4081] macvlan2: entered allmulticast mode [ 48.235954][ T4081] bond1: entered allmulticast mode [ 48.241396][ T4081] bond1: entered promiscuous mode [ 48.248161][ T4081] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 48.260221][ T4081] team0: Port device macvlan2 added [ 48.274525][ T4086] bond1: (slave ip6gretap1): making interface the new active one [ 48.287019][ T4086] ip6gretap1: entered promiscuous mode [ 48.301348][ T4086] ip6gretap1: entered allmulticast mode [ 48.323162][ T4086] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 48.642812][ T4105] netlink: 5164 bytes leftover after parsing attributes in process `syz.0.183'. [ 48.658669][ T4107] netlink: 64 bytes leftover after parsing attributes in process `syz.3.184'. [ 48.667391][ T4109] netlink: 64 bytes leftover after parsing attributes in process `syz.0.185'. [ 48.676897][ T4109] tipc: Invalid UDP bearer configuration [ 48.676910][ T4109] tipc: Enabling of bearer rejected, failed to enable media [ 48.693639][ T4109] FAULT_INJECTION: forcing a failure. [ 48.693639][ T4109] name failslab, interval 1, probability 0, space 0, times 1 [ 48.704753][ T4107] netlink: 20 bytes leftover after parsing attributes in process `syz.3.184'. [ 48.706720][ T4109] CPU: 0 UID: 0 PID: 4109 Comm: syz.0.185 Not tainted syzkaller #0 PREEMPT(lazy) [ 48.706747][ T4109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.706758][ T4109] Call Trace: [ 48.706764][ T4109] [ 48.706772][ T4109] __dump_stack+0x1d/0x30 [ 48.706843][ T4109] dump_stack_lvl+0x95/0xd0 [ 48.706901][ T4109] dump_stack+0x15/0x1b [ 48.706919][ T4109] should_fail_ex+0x25e/0x270 [ 48.706946][ T4109] ? __xdp_reg_mem_model+0x17a/0x3f0 [ 48.707015][ T4109] should_failslab+0x8c/0xb0 [ 48.707037][ T4109] __kmalloc_cache_noprof+0x7b/0x3d0 [ 48.707061][ T4109] ? __xdp_reg_mem_model+0x17a/0x3f0 [ 48.707105][ T4109] __xdp_reg_mem_model+0x17a/0x3f0 [ 48.707169][ T4109] xdp_reg_mem_model+0x22/0x40 [ 48.707193][ T4109] bpf_test_run_xdp_live+0x1f1/0x1330 [ 48.707233][ T4109] ? __rcu_read_unlock+0x4e/0x70 [ 48.707276][ T4109] ? should_fail_ex+0x30/0x270 [ 48.707302][ T4109] ? should_failslab+0x8c/0xb0 [ 48.707396][ T4109] ? kmem_cache_alloc_noprof+0x198/0x3c0 [ 48.707417][ T4109] ? security_inode_alloc+0x37/0x100 [ 48.707440][ T4109] ? __rcu_read_unlock+0x4e/0x70 [ 48.707464][ T4109] ? avc_has_perm_noaudit+0xa3/0x120 [ 48.707564][ T4109] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 48.707592][ T4109] ? _copy_from_user+0x89/0xb0 [ 48.707649][ T4109] ? bpf_test_init+0xf4/0x130 [ 48.707748][ T4109] bpf_prog_test_run_xdp+0x559/0x9e0 [ 48.707814][ T4109] ? __rcu_read_unlock+0x4e/0x70 [ 48.707839][ T4109] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.707893][ T4109] bpf_prog_test_run+0x208/0x340 [ 48.707925][ T4109] __sys_bpf+0x8da/0xc30 [ 48.707954][ T4109] ? vfs_write+0x760/0x990 [ 48.708045][ T4109] __x64_sys_bpf+0x69/0x80 [ 48.708072][ T4109] x64_sys_call+0x10cb/0x3020 [ 48.708168][ T4109] do_syscall_64+0x136/0x3c0 [ 48.708193][ T4109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.708214][ T4109] RIP: 0033:0x7f0088c2e019 [ 48.708231][ T4109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.708248][ T4109] RSP: 002b:00007f0087687028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.708333][ T4109] RAX: ffffffffffffffda RBX: 00007f0088eb5fa0 RCX: 00007f0088c2e019 [ 48.708347][ T4109] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 48.708360][ T4109] RBP: 00007f0087687090 R08: 0000000000000000 R09: 0000000000000000 [ 48.708373][ T4109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.708385][ T4109] R13: 00007f0088eb6038 R14: 00007f0088eb5fa0 R15: 00007fffe721f8c8 [ 48.708473][ T4109] [ 48.825701][ T28] audit: type=1400 audit(1785462202.735:1349): avc: denied { write } for pid=4114 comm="syz.0.189" name="functions" dev="configfs" ino=5907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.831991][ T4107] netlink: 20 bytes leftover after parsing attributes in process `syz.3.184'. [ 48.836142][ T28] audit: type=1400 audit(1785462202.745:1350): avc: denied { write } for pid=4114 comm="syz.0.189" name="midi2.usb0" dev="configfs" ino=6885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.839781][ T4107] syzkaller1: entered promiscuous mode [ 48.848153][ T28] audit: type=1400 audit(1785462202.755:1351): avc: denied { write } for pid=4114 comm="syz.0.189" name="c.1" dev="configfs" ino=5937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.848608][ T4107] syzkaller1: entered allmulticast mode [ 48.860447][ T28] audit: type=1400 audit(1785462202.755:1352): avc: denied { write } for pid=4114 comm="syz.0.189" name="c.1" dev="configfs" ino=5937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.879913][ T4115] UDC core: g1: couldn't find an available UDC or it's busy [ 49.456391][ T4138] loop0: detected capacity change from 0 to 512 [ 49.469754][ T4138] EXT4-fs: Ignoring removed i_version option [ 49.478714][ T4138] EXT4-fs: Ignoring removed bh option [ 49.504812][ T4132] loop2: detected capacity change from 0 to 8192 [ 49.526730][ T4132] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 49.617974][ T4138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.634276][ T4138] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.659012][ T4138] ªªªªª: renamed from vlan0 (while UP) [ 49.680061][ T4149] loop3: detected capacity change from 0 to 512 [ 49.700877][ T4149] msdos: Bad value for 'fmask' [ 50.239627][ T3291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.309634][ T4178] loop0: detected capacity change from 0 to 2048 [ 50.562481][ T4179] loop1: detected capacity change from 0 to 128 [ 50.583246][ T4179] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.608938][ T4179] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 50.756718][ T4178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.915968][ T4178] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.278223][ T4192] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.209: bg 0: block 345: padding at end of block bitmap is not set [ 51.488215][ T3291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.671199][ T4199] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 51.677844][ T4199] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 51.704573][ T4210] syzkaller0: entered promiscuous mode [ 51.718576][ T4210] syzkaller0: entered allmulticast mode [ 51.729901][ T4199] vhci_hcd vhci_hcd.0: Device attached [ 51.743898][ T4208] vhci_hcd: connection closed [ 51.747227][ T30] vhci_hcd vhci_hcd.0: stop threads [ 51.782470][ T30] vhci_hcd vhci_hcd.0: release socket [ 51.806323][ T4210] loop0: detected capacity change from 0 to 512 [ 51.823697][ T30] vhci_hcd vhci_hcd.0: disconnect device [ 51.840421][ T4213] FAULT_INJECTION: forcing a failure. [ 51.840421][ T4213] name failslab, interval 1, probability 0, space 0, times 0 [ 51.856348][ T4210] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 51.880608][ T4213] CPU: 1 UID: 0 PID: 4213 Comm: syz.2.217 Not tainted syzkaller #0 PREEMPT(lazy) [ 51.880639][ T4213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.880651][ T4213] Call Trace: [ 51.880659][ T4213] [ 51.880668][ T4213] __dump_stack+0x1d/0x30 [ 51.880691][ T4213] dump_stack_lvl+0x95/0xd0 [ 51.880775][ T4213] dump_stack+0x15/0x1b [ 51.880796][ T4213] should_fail_ex+0x25e/0x270 [ 51.880829][ T4213] should_failslab+0x8c/0xb0 [ 51.880850][ T4213] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 51.880932][ T4213] ? __alloc_skb+0x2db/0x6f0 [ 51.880961][ T4213] ? __alloc_skb+0x2db/0x6f0 [ 51.881034][ T4213] __alloc_skb+0x2db/0x6f0 [ 51.881062][ T4213] ? __alloc_skb+0x205/0x6f0 [ 51.881143][ T4213] netlink_alloc_large_skb+0xbf/0xf0 [ 51.881172][ T4213] netlink_sendmsg+0x40c/0x6f0 [ 51.881235][ T4213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.881263][ T4213] ____sys_sendmsg+0x532/0x580 [ 51.881359][ T4213] ___sys_sendmsg+0x195/0x1e0 [ 51.881524][ T4213] __x64_sys_sendmsg+0xd4/0x160 [ 51.881571][ T4213] x64_sys_call+0x194c/0x3020 [ 51.881654][ T4213] do_syscall_64+0x136/0x3c0 [ 51.881683][ T4213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.881730][ T4213] RIP: 0033:0x7f8da069e019 [ 51.881749][ T4213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.881768][ T4213] RSP: 002b:00007f8d9f0f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.881792][ T4213] RAX: ffffffffffffffda RBX: 00007f8da0925fa0 RCX: 00007f8da069e019 [ 51.881809][ T4213] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 51.881824][ T4213] RBP: 00007f8d9f0f7090 R08: 0000000000000000 R09: 0000000000000000 [ 51.881876][ T4213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.881888][ T4213] R13: 00007f8da0926038 R14: 00007f8da0925fa0 R15: 00007ffd767f1098 [ 51.881906][ T4213] [ 52.160187][ T4217] netlink: 40 bytes leftover after parsing attributes in process `syz.2.219'. [ 52.307928][ T4233] loop1: detected capacity change from 0 to 512 [ 52.350596][ T4233] EXT4-fs: test_dummy_encryption option not supported [ 52.398775][ T4233] FAULT_INJECTION: forcing a failure. [ 52.398775][ T4233] name failslab, interval 1, probability 0, space 0, times 0 [ 52.426904][ T4233] CPU: 0 UID: 0 PID: 4233 Comm: syz.1.218 Not tainted syzkaller #0 PREEMPT(lazy) [ 52.426938][ T4233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.426953][ T4233] Call Trace: [ 52.426962][ T4233] [ 52.426990][ T4233] __dump_stack+0x1d/0x30 [ 52.427019][ T4233] dump_stack_lvl+0x95/0xd0 [ 52.427040][ T4233] dump_stack+0x15/0x1b [ 52.427065][ T4233] should_fail_ex+0x25e/0x270 [ 52.427131][ T4233] should_failslab+0x8c/0xb0 [ 52.427151][ T4233] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 52.427189][ T4233] ? security_file_alloc+0x32/0xf0 [ 52.427250][ T4233] ? security_file_alloc+0x32/0xf0 [ 52.427307][ T4233] security_file_alloc+0x32/0xf0 [ 52.427333][ T4233] init_file+0x5b/0x1b0 [ 52.427414][ T4233] alloc_empty_file+0x85/0x1e0 [ 52.427450][ T4233] alloc_file_pseudo+0x92/0x120 [ 52.427480][ T4233] hugetlb_file_setup+0x2a6/0x3d0 [ 52.427508][ T4233] ksys_mmap_pgoff+0x13f/0x310 [ 52.427541][ T4233] x64_sys_call+0x14df/0x3020 [ 52.427569][ T4233] do_syscall_64+0x136/0x3c0 [ 52.427666][ T4233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.427686][ T4233] RIP: 0033:0x7f5a4eeae019 [ 52.427766][ T4233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.427788][ T4233] RSP: 002b:00007f5a4d8e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 52.427814][ T4233] RAX: ffffffffffffffda RBX: 00007f5a4f136090 RCX: 00007f5a4eeae019 [ 52.427829][ T4233] RDX: 0000000000000002 RSI: 0000000000400000 RDI: 0000200000000000 [ 52.427911][ T4233] RBP: 00007f5a4d8e6090 R08: ffffffffffffffff R09: 0000000000200000 [ 52.427926][ T4233] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001 [ 52.427939][ T4233] R13: 00007f5a4f136128 R14: 00007f5a4f136090 R15: 00007ffd5e0edf58 [ 52.427961][ T4233] [ 52.767299][ T4246] loop1: detected capacity change from 0 to 256 [ 53.336995][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 53.337092][ T28] audit: type=1400 audit(1785507782.247:1371): avc: denied { map } for pid=4261 comm="syz.3.233" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.416805][ T4263] loop4: detected capacity change from 0 to 128 [ 53.439903][ T4263] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.458161][ T4263] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 53.559755][ T28] audit: type=1400 audit(1785507782.247:1372): avc: denied { read write } for pid=4261 comm="syz.3.233" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 54.292426][ T28] audit: type=1400 audit(1785507783.197:1373): avc: denied { setopt } for pid=4271 comm="syz.3.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 54.316528][ T4277] loop0: detected capacity change from 0 to 128 [ 54.335584][ T28] audit: type=1400 audit(1785507783.207:1374): avc: denied { ioctl } for pid=4271 comm="syz.3.236" path="socket:[8195]" dev="sockfs" ino=8195 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.708900][ T28] audit: type=1400 audit(1785507784.607:1375): avc: denied { write } for pid=4305 comm="syz.1.248" name="udp" dev="proc" ino=4026532550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 56.039129][ T28] audit: type=1400 audit(1785507784.947:1376): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 56.542510][ T28] audit: type=1400 audit(1785507785.447:1377): avc: denied { read write } for pid=4315 comm="syz.4.251" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.604775][ T28] audit: type=1400 audit(1785507785.447:1378): avc: denied { open } for pid=4315 comm="syz.4.251" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.628893][ T28] audit: type=1400 audit(1785507785.497:1379): avc: denied { create } for pid=4315 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 56.650377][ T28] audit: type=1400 audit(1785507785.517:1380): avc: denied { sys_admin } for pid=4315 comm="syz.4.251" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 57.102190][ T4332] loop1: detected capacity change from 0 to 128 [ 57.115335][ T4332] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.130139][ T4332] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 57.685087][ T4349] loop0: detected capacity change from 0 to 512 [ 57.884634][ T4355] FAULT_INJECTION: forcing a failure. [ 57.884634][ T4355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.964715][ T4355] CPU: 0 UID: 0 PID: 4355 Comm: syz.0.263 Not tainted syzkaller #0 PREEMPT(lazy) [ 57.964745][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.964758][ T4355] Call Trace: [ 57.964767][ T4355] [ 57.964777][ T4355] __dump_stack+0x1d/0x30 [ 57.964805][ T4355] dump_stack_lvl+0x95/0xd0 [ 57.964828][ T4355] dump_stack+0x15/0x1b [ 57.964904][ T4355] should_fail_ex+0x25e/0x270 [ 57.964985][ T4355] should_fail+0xb/0x20 [ 57.965007][ T4355] should_fail_usercopy+0x1a/0x20 [ 57.965035][ T4355] _copy_from_user+0x1c/0xb0 [ 57.965059][ T4355] ___sys_sendmsg+0xc1/0x1e0 [ 57.965167][ T4355] __x64_sys_sendmsg+0xd4/0x160 [ 57.965201][ T4355] x64_sys_call+0x194c/0x3020 [ 57.965288][ T4355] do_syscall_64+0x136/0x3c0 [ 57.965318][ T4355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.965343][ T4355] RIP: 0033:0x7f0088c2e019 [ 57.965361][ T4355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.965378][ T4355] RSP: 002b:00007f0087687028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.965434][ T4355] RAX: ffffffffffffffda RBX: 00007f0088eb5fa0 RCX: 00007f0088c2e019 [ 57.965449][ T4355] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000003 [ 57.965462][ T4355] RBP: 00007f0087687090 R08: 0000000000000000 R09: 0000000000000000 [ 57.965474][ T4355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.965497][ T4355] R13: 00007f0088eb6038 R14: 00007f0088eb5fa0 R15: 00007fffe721f8c8 [ 57.965518][ T4355] [ 58.509153][ T4362] FAULT_INJECTION: forcing a failure. [ 58.509153][ T4362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.569770][ T4362] CPU: 0 UID: 0 PID: 4362 Comm: syz.3.276 Not tainted syzkaller #0 PREEMPT(lazy) [ 58.569799][ T4362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.569813][ T4362] Call Trace: [ 58.569820][ T4362] [ 58.569827][ T4362] __dump_stack+0x1d/0x30 [ 58.569859][ T4362] dump_stack_lvl+0x95/0xd0 [ 58.569888][ T4362] dump_stack+0x15/0x1b [ 58.569905][ T4362] should_fail_ex+0x25e/0x270 [ 58.569936][ T4362] should_fail+0xb/0x20 [ 58.569985][ T4362] should_fail_usercopy+0x1a/0x20 [ 58.570023][ T4362] _copy_to_user+0x20/0xa0 [ 58.570041][ T4362] simple_read_from_buffer+0xb5/0x130 [ 58.570070][ T4362] proc_fail_nth_read+0x10e/0x150 [ 58.570112][ T4362] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 58.570137][ T4362] vfs_read+0x18e/0x7c0 [ 58.570159][ T4362] ? vfs_write+0x961/0x990 [ 58.570244][ T4362] ksys_read+0xdc/0x1a0 [ 58.570267][ T4362] __x64_sys_read+0x40/0x50 [ 58.570286][ T4362] x64_sys_call+0x2886/0x3020 [ 58.570368][ T4362] do_syscall_64+0x136/0x3c0 [ 58.570408][ T4362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.570427][ T4362] RIP: 0033:0x7f0c4e18e84e [ 58.570442][ T4362] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 58.570483][ T4362] RSP: 002b:00007f0c4cc26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.570503][ T4362] RAX: ffffffffffffffda RBX: 00007f0c4cc276c0 RCX: 00007f0c4e18e84e [ 58.570517][ T4362] RDX: 000000000000000f RSI: 00007f0c4cc270a0 RDI: 0000000000000004 [ 58.570529][ T4362] RBP: 00007f0c4cc27090 R08: 0000000000000000 R09: 0000000000000000 [ 58.570566][ T4362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.570616][ T4362] R13: 00007f0c4e456038 R14: 00007f0c4e455fa0 R15: 00007ffe6dbea368 [ 58.570686][ T4362] [ 58.816914][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 58.816931][ T28] audit: type=1400 audit(1785507787.727:1384): avc: denied { firmware_load } for pid=4359 comm="syz.0.265" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 58.827949][ T4367] netlink: 'syz.1.267': attribute type 1 has an invalid length. [ 58.890755][ T4378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43673 sclass=netlink_route_socket pid=4378 comm=syz.1.267 [ 58.956461][ T4367] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.974198][ T28] audit: type=1400 audit(1785507787.887:1385): avc: denied { mount } for pid=4375 comm="syz.4.270" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.015118][ T4378] macvlan2: entered promiscuous mode [ 59.020559][ T4378] macvlan2: entered allmulticast mode [ 59.027671][ T4378] bond1: entered allmulticast mode [ 59.033012][ T4378] bond1: entered promiscuous mode [ 59.038301][ T4378] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 59.047019][ T4378] team0: Port device macvlan2 added [ 59.062530][ T4381] bond1: (slave ip6gretap1): making interface the new active one [ 59.070812][ T4381] ip6gretap1: entered promiscuous mode [ 59.076675][ T4381] ip6gretap1: entered allmulticast mode [ 59.083435][ T4381] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 59.495594][ T28] audit: type=1400 audit(1785507788.407:1386): avc: denied { ioctl } for pid=4394 comm="syz.2.277" path="mnt:[4026532384]" dev="nsfs" ino=4026532384 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 59.560075][ T4395] loop2: detected capacity change from 0 to 512 [ 59.599093][ T4395] EXT4-fs: Ignoring removed bh option [ 59.605059][ T4395] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 59.636504][ T4395] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 59.651045][ T4395] EXT4-fs (loop2): 1 truncate cleaned up [ 59.657488][ T4395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.671086][ T28] audit: type=1400 audit(1785507788.577:1387): avc: denied { write } for pid=4394 comm="syz.2.277" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.693192][ T28] audit: type=1400 audit(1785507788.577:1388): avc: denied { map } for pid=4394 comm="syz.2.277" path="/61/bus/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.752534][ T4405] loop1: detected capacity change from 0 to 128 [ 59.802597][ T4403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.280'. [ 59.812493][ T4403] netlink: 16 bytes leftover after parsing attributes in process `syz.3.280'. [ 59.821960][ T4405] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.857398][ T28] audit: type=1400 audit(1785507788.767:1389): avc: denied { bind } for pid=4414 comm="syz.4.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 59.897806][ T4405] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 60.019651][ T28] audit: type=1400 audit(1785507788.927:1390): avc: denied { write } for pid=4414 comm="syz.4.285" path="socket:[7498]" dev="sockfs" ino=7498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 60.124478][ T28] audit: type=1400 audit(1785507788.977:1391): avc: denied { accept } for pid=4419 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.195284][ T28] audit: type=1400 audit(1785507788.977:1392): avc: denied { read } for pid=4414 comm="syz.4.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 60.263926][ T4418] loop1: detected capacity change from 0 to 256 [ 60.311094][ T4396] ================================================================== [ 60.319567][ T4396] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 60.327387][ T4396] [ 60.329715][ T4396] write to 0xffffea0004fb6ed8 of 8 bytes by task 4394 on cpu 0: [ 60.337342][ T4396] __filemap_remove_folio+0x201/0x2e0 [ 60.342713][ T4396] filemap_remove_folio+0x6d/0x1d0 [ 60.347820][ T4396] truncate_inode_folio+0x42/0x50 [ 60.352838][ T4396] shmem_undo_range+0x27f/0xb60 [ 60.357687][ T4396] shmem_evict_inode+0x132/0x520 [ 60.362630][ T4396] evict+0x2a5/0x510 [ 60.366519][ T4396] iput+0x430/0x5a0 [ 60.370334][ T4396] dentry_unlink_inode+0x24a/0x260 [ 60.375703][ T4396] dentry_kill+0x184/0x500 [ 60.380120][ T4396] finish_dput+0x16/0x1d0 [ 60.384441][ T4396] dput+0x48/0x50 [ 60.388086][ T4396] __fput+0x43e/0x630 [ 60.392065][ T4396] ____fput+0x1c/0x30 [ 60.396230][ T4396] task_work_run+0x130/0x1a0 [ 60.400816][ T4396] exit_to_user_mode_loop+0x1e4/0x8c0 [ 60.406182][ T4396] do_syscall_64+0x23c/0x3c0 [ 60.410780][ T4396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.416663][ T4396] [ 60.418981][ T4396] read to 0xffffea0004fb6ed8 of 8 bytes by task 4396 on cpu 1: [ 60.426510][ T4396] folio_mapping+0xa1/0xe0 [ 60.430916][ T4396] evict_folios+0xdc7/0x2d60 [ 60.436419][ T4396] try_to_shrink_lruvec+0x7c5/0xb10 [ 60.441632][ T4396] shrink_lruvec+0x25e/0x1b60 [ 60.446314][ T4396] shrink_node+0x69d/0x20f0 [ 60.450811][ T4396] do_try_to_free_pages+0x408/0xc90 [ 60.456025][ T4396] try_to_free_mem_cgroup_pages+0x201/0x420 [ 60.461913][ T4396] mem_cgroup_resize_max+0x1cd/0x240 [ 60.467190][ T4396] mem_cgroup_write+0x1ad/0x250 [ 60.472036][ T4396] cgroup_file_write+0x197/0x350 [ 60.476963][ T4396] kernfs_fop_write_iter+0x1d2/0x2e0 [ 60.482258][ T4396] vfs_write+0x57d/0x990 [ 60.486515][ T4396] ksys_write+0xdc/0x1a0 [ 60.490746][ T4396] __x64_sys_write+0x40/0x50 [ 60.495326][ T4396] x64_sys_call+0x27e1/0x3020 [ 60.500011][ T4396] do_syscall_64+0x136/0x3c0 [ 60.504605][ T4396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.510511][ T4396] [ 60.512836][ T4396] value changed: 0xffff888103d194f0 -> 0x0000000000000000 [ 60.519961][ T4396] [ 60.523109][ T4396] Reported by Kernel Concurrency Sanitizer on: [ 60.530308][ T4396] CPU: 1 UID: 0 PID: 4396 Comm: syz.2.277 Not tainted syzkaller #0 PREEMPT(lazy) [ 60.539510][ T4396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.549565][ T4396] ================================================================== [ 60.768006][ T4418] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.972785][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.100320][ T28] audit: type=1400 audit(1785507789.997:1393): avc: denied { ioctl } for pid=4419 comm="syz.3.287" path="socket:[7511]" dev="sockfs" ino=7511 ioctlcmd=0x8935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 61.311683][ T4360] loop0: detected capacity change from 0 to 512 [ 61.319887][ T4360] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 61.330253][ T4360] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 61.338420][ T4360] EXT4-fs (loop0): orphan cleanup on readonly fs [ 61.345120][ T4360] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.265: Block bitmap for bg 0 marked uninitialized [ 61.358621][ T4360] fserror_report: 3 callbacks suppressed [ 61.358639][ T4360] loop0: lost filesystem error report for type 5 error -117 [ 61.364623][ T4360] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 61.372366][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 61.380659][ T4360] loop0: lost filesystem error report for type 5 error -117 [ 61.387080][ C1] EXT4-fs (loop0): initial error at time 1785507790: ext4_read_block_bitmap_nowait:517 [ 61.404746][ C1] EXT4-fs (loop0): last error at time 1785507790: ext4_mb_clear_bb:6679 [ 61.413802][ T4360] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.265: Block bitmap for bg 0 marked uninitialized [ 61.426907][ T4360] loop0: lost filesystem error report for type 5 error -117 [ 61.427162][ T4360] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 61.443270][ T4360] loop0: lost filesystem error report for type 5 error -117 [ 61.443485][ T4360] EXT4-fs (loop0): 1 orphan inode deleted [ 61.456931][ T4360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 61.477244][ T3291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.