last executing test programs: 2.83637276s ago: executing program 3 (id=435): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xe) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 2.448723025s ago: executing program 3 (id=439): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x808e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x2aa, &(0x7f0000000c80)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x0, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000006}, 0x4890) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031614d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.349957682s ago: executing program 2 (id=441): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x7, 0x103482) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}, 0x20002800) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000008b80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @private2, 0x7}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="cf", 0x1}], 0x1}}], 0x1, 0x240408d1) shutdown(r2, 0x1) setsockopt(r2, 0x84, 0x80, &(0x7f00000001c0)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @remote}}}, 0x84) 2.178292361s ago: executing program 3 (id=443): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) statfs(0x0, &(0x7f0000000080)=""/186) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c004) sendto$inet(r1, 0x0, 0x0, 0x88050000, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 2.167052193s ago: executing program 2 (id=444): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) mkdir(0x0, 0x74) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setns(0xc9, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x7ff, r1, 0x4}, 0x38) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r3, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@xdp, 0x80, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x104f}, {&(0x7f0000000080)=""/236, 0xec}], 0x2, &(0x7f0000002f40)=""/107, 0x61}}, {{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001300)=""/68, 0x44}, {&(0x7f0000001380)=""/197, 0xc5}], 0x2e3, &(0x7f00000014c0)=""/45, 0x38}}], 0x3, 0x0, 0x0) 1.954922479s ago: executing program 3 (id=445): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000180)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r3, 0x0, 0xf, 0x0, &(0x7f00000008c0)="c1dfb080cd21d308098e000081007e", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.922612484s ago: executing program 0 (id=446): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x42600, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8], 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffdf8, 0x0, &(0x7f0000000fc0)="dd5e48aa95ac0000"}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.894023609s ago: executing program 2 (id=447): epoll_create1(0x0) r0 = socket$unix(0x1, 0x1, 0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.812628543s ago: executing program 2 (id=448): r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.685651905s ago: executing program 1 (id=450): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) close(0xffffffffffffffff) 1.6524815s ago: executing program 0 (id=452): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x1, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x3, 0x4c, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x8, 0x12, 0x3f}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x85, 0x0, 0x5, 0x10, 0x80}, 0x19, &(0x7f0000000280)={0x5, 0xf, 0x19, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x40, 0x6}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1, 0xe, 0x9, 0x1}]}, 0x2, [{0x6a, &(0x7f00000002c0)=@string={0x6a, 0x3, "fc7875937fcdd23a226e65a6a1c0024d81391f05c4fa030af43b56117cf8e7678ae0a0d0071eb52eff0c979626ef9f26f6b13bd5301d7d5bf7f0e6b0d774fa66cd1ed4b3ed7efda360fbe534ac47e848decce2b8254d4209ed73fa8f96b506666e511d0b7aabfb9a"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x100a}}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x5c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_SEQ_ADJ_ORIG={0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x4004) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xfffffffffffffffb}, {0x0, 0xfffffffffffffffd, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}, 0x1, 0x0, 0x0, 0x24004811}, 0x2c000010) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f00000001c0)) 1.637253143s ago: executing program 1 (id=453): r0 = socket(0x1d, 0x2, 0x6) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_open_dev$evdev(&(0x7f0000000380), 0x14a, 0x400) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x318, 0xfc0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x2, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@deltclass={0x24, 0x29, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffff}, {0x1, 0x8}, {0x6, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xfd27c4eff795f0e1}, 0x480c5) close(r0) 1.259786577s ago: executing program 4 (id=457): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) eventfd2(0xbd49, 0x800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0) r1 = fsopen(0x0, 0x1) fsmount(r1, 0x0, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10002, 0xfffffffe, 0x0, 0x0, 0x7ffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'batadv0\x00', &(0x7f0000000100)=@ethtool_sset_info={0x37, 0xf96, 0x7fff}}) 1.195400408s ago: executing program 4 (id=458): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.110102002s ago: executing program 0 (id=459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0), 0x9, r2}, 0x38) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000100)=r4) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 990.672912ms ago: executing program 1 (id=460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x7, 0x163, 0x6, 0xfffffff0, 0x7, 0x9, 0x8, 0xffffffff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200", 0x4}], 0x1}, 0x20004801) 854.353605ms ago: executing program 2 (id=461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f00000018c0)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec970000382c00fe8000000000000000000000849311b7a1000000aaff0200000000000000000000000000013a0000000000000002009078"], 0x6e) 714.538839ms ago: executing program 1 (id=462): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x78b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x2, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1007fff}}]}, 0x38}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x11, 0x800, r2}, 0x14) 714.314689ms ago: executing program 4 (id=463): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000) listen(0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x1, 0x0, 0xfffffffd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x4}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) 652.039189ms ago: executing program 4 (id=464): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) 566.079314ms ago: executing program 0 (id=465): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fffffe, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x8000], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 565.280854ms ago: executing program 3 (id=466): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)=""/245, 0xf5}], 0x1, &(0x7f00000004c0)=""/31, 0x1f}, 0x3}], 0x1, 0x40000100, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 556.176966ms ago: executing program 1 (id=467): write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000140)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x1ff) mount(0x0, &(0x7f0000000480)='./mysys\x00', 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="1400000034000b43d300fff5e700000001d25a80", 0x14}], 0x1}, 0x0) 546.978427ms ago: executing program 2 (id=468): socket(0x15, 0x5, 0x0) socket(0x40000000015, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 504.512414ms ago: executing program 1 (id=469): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x200000, 0x2, 0x0, 0x3, 0xe}, 0x20) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) inotify_init1(0x80800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newroute={0x40, 0x18, 0x601, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @private=0xa000000}, @RTA_OIF={0x8, 0x4, 0x1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x8, 0x1, [{0x100, 0x0, 0x1}]}}]}, 0x40}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x2, 0x1f90, @private=0xa000001}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x21, 0x4000004, 0x4, 0x10000, 0x2004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3, 0x0, 0x0, @void, @value=0xff070000, @void, @value=0xff070000}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r6) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1bc, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x26f2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf29}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4b86}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x896}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x527}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x986}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff81}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40000}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x156a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff01}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1bc}}, 0x44048) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x80000001}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48080}, 0x4040010) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) setsockopt(r5, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)="6a35df891be09646b62710b05dfd4983b3a3641b115da91add39ce244b4d2e84f97b30a8dbd7ee7826690df19b34ba8a38f981b6ec353b4dbdf87398cb1ccbe26cef31c3cbcb5a1900f1e841bd3a4e159c31128f993820818879c2c86002896232b30d1cc5d70880e37197681c4425a1bd07409e34a6e31392d755521e33572e353b592b0337bfc83f10bac0b47aea5d8f51060a48064811c640cf1327d6793bac03891403c0", 0xa6}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) sendto$inet6(r5, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) 489.120767ms ago: executing program 0 (id=470): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_setup(0x899, 0x0) setns(0xc9, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x2c, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x2}]}]}, 0x2c}}, 0x0) 157.708953ms ago: executing program 4 (id=471): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x90}}, 0x0) write$tun(r0, &(0x7f00000001c0)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1}, {0x0, 0x6558, 0x8}}}}}}, 0x2e) 157.095923ms ago: executing program 0 (id=481): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x121440, 0x10) 21.752576ms ago: executing program 3 (id=472): syz_clone3(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) mlockall(0x7) write(r0, &(0x7f00000002c0)='0', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect$uac2(0x5, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r1 = creat(&(0x7f0000000140)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) fallocate(r1, 0x0, 0xbf5, 0x2000402) io_setup(0x81, 0x0) 0s ago: executing program 4 (id=473): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) kernel console output (not intermixed with test programs): [ 24.863666][ T29] audit: type=1400 audit(1791018985.294:103): avc: denied { search } for pid=3179 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.863707][ T29] audit: type=1400 audit(1791018985.294:104): avc: denied { search } for pid=3179 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.952340][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 24.952359][ T29] audit: type=1400 audit(1791018985.384:112): avc: denied { write } for pid=3191 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.952394][ T29] audit: type=1400 audit(1791018985.384:113): avc: denied { remove_name } for pid=3191 comm="rm" name="resolv.conf.ifb1.ipv4ll" dev="tmpfs" ino=518 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.269899][ T29] audit: type=1400 audit(1791018985.704:114): avc: denied { write } for pid=3194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.303151][ T29] audit: type=1400 audit(1791018985.734:115): avc: denied { write } for pid=3205 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.638255][ T29] audit: type=1400 audit(1791018986.064:116): avc: denied { write } for pid=3208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.668369][ T29] audit: type=1400 audit(1791018986.104:117): avc: denied { write } for pid=3219 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.076617][ T29] audit: type=1400 audit(1791018986.504:118): avc: denied { write } for pid=3223 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.108345][ T29] audit: type=1400 audit(1791018986.544:119): avc: denied { write } for pid=3234 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.184055][ T29] audit: type=1400 audit(1791018986.614:120): avc: denied { write } for pid=3237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.219575][ T29] audit: type=1400 audit(1791018986.654:121): avc: denied { write } for pid=3248 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.37' (ED25519) to the list of known hosts. [ 30.425436][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 30.425454][ T29] audit: type=1400 audit(1791018990.854:126): avc: denied { mounton } for pid=3283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.425750][ T29] audit: type=1400 audit(1791018990.854:127): avc: denied { mount } for pid=3283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.426369][ T3283] cgroup: Unknown subsys name 'net' [ 30.426644][ T29] audit: type=1400 audit(1791018990.854:128): avc: denied { unmount } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.550137][ T3283] cgroup: Unknown subsys name 'cpuset' [ 30.550928][ T3283] cgroup: Unknown subsys name 'rlimit' [ 30.667863][ T29] audit: type=1400 audit(1791018991.094:129): avc: denied { setattr } for pid=3283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.668933][ T29] audit: type=1400 audit(1791018991.094:130): avc: denied { create } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.669040][ T29] audit: type=1400 audit(1791018991.094:131): avc: denied { write } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.669228][ T29] audit: type=1400 audit(1791018991.094:132): avc: denied { read } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.688059][ T29] audit: type=1400 audit(1791018991.114:133): avc: denied { mounton } for pid=3283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.692913][ T29] audit: type=1400 audit(1791018991.124:134): avc: denied { mount } for pid=3283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.717902][ T29] audit: type=1400 audit(1791018991.144:135): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 30.830427][ T3290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.849264][ T3283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.046591][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.046630][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.046757][ T3297] bridge_slave_0: entered allmulticast mode [ 33.047282][ T3297] bridge_slave_0: entered promiscuous mode [ 33.088026][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.088061][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.088172][ T3297] bridge_slave_1: entered allmulticast mode [ 33.088629][ T3297] bridge_slave_1: entered promiscuous mode [ 33.136962][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.136997][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.137115][ T3296] bridge_slave_0: entered allmulticast mode [ 33.137547][ T3296] bridge_slave_0: entered promiscuous mode [ 33.155508][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.155610][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.155777][ T3302] bridge_slave_0: entered allmulticast mode [ 33.156920][ T3302] bridge_slave_0: entered promiscuous mode [ 33.159405][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.159498][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.159674][ T3302] bridge_slave_1: entered allmulticast mode [ 33.160858][ T3302] bridge_slave_1: entered promiscuous mode [ 33.172930][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.191005][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.191108][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.191403][ T3296] bridge_slave_1: entered allmulticast mode [ 33.193156][ T3296] bridge_slave_1: entered promiscuous mode [ 33.216329][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.236994][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.237101][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.237268][ T3301] bridge_slave_0: entered allmulticast mode [ 33.238784][ T3301] bridge_slave_0: entered promiscuous mode [ 33.272449][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.272480][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.272622][ T3304] bridge_slave_0: entered allmulticast mode [ 33.273774][ T3304] bridge_slave_0: entered promiscuous mode [ 33.287254][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.287358][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.287578][ T3301] bridge_slave_1: entered allmulticast mode [ 33.290141][ T3301] bridge_slave_1: entered promiscuous mode [ 33.294160][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.294386][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.294499][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.294682][ T3304] bridge_slave_1: entered allmulticast mode [ 33.295906][ T3304] bridge_slave_1: entered promiscuous mode [ 33.299439][ T3297] team0: Port device team_slave_0 added [ 33.301866][ T3297] team0: Port device team_slave_1 added [ 33.316663][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.351160][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.353400][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.387948][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.409604][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.409619][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.409644][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.412953][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.415889][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.442187][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.444265][ T3296] team0: Port device team_slave_0 added [ 33.446514][ T3296] team0: Port device team_slave_1 added [ 33.458561][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.458610][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.458643][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.472861][ T3302] team0: Port device team_slave_0 added [ 33.502033][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.502077][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.502353][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.504816][ T3304] team0: Port device team_slave_0 added [ 33.507382][ T3304] team0: Port device team_slave_1 added [ 33.510656][ T3302] team0: Port device team_slave_1 added [ 33.542615][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.542658][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.542784][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.576395][ T3301] team0: Port device team_slave_0 added [ 33.600953][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.600995][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.601086][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.615995][ T3301] team0: Port device team_slave_1 added [ 33.631857][ T3297] hsr_slave_0: entered promiscuous mode [ 33.632791][ T3297] hsr_slave_1: entered promiscuous mode [ 33.634182][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.634223][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.634320][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.646453][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.646495][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.646603][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.659917][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.659958][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.660035][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.670691][ T3296] hsr_slave_0: entered promiscuous mode [ 33.671528][ T3296] hsr_slave_1: entered promiscuous mode [ 33.673117][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 33.673159][ T3296] Cannot create hsr debugfs directory [ 33.685273][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.685308][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.685422][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.698863][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.698904][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.698991][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.792301][ T3304] hsr_slave_0: entered promiscuous mode [ 33.794811][ T3304] hsr_slave_1: entered promiscuous mode [ 33.795392][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 33.795435][ T3304] Cannot create hsr debugfs directory [ 33.872246][ T3302] hsr_slave_0: entered promiscuous mode [ 33.873178][ T3302] hsr_slave_1: entered promiscuous mode [ 33.873896][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 33.873938][ T3302] Cannot create hsr debugfs directory [ 33.907645][ T3301] hsr_slave_0: entered promiscuous mode [ 33.908547][ T3301] hsr_slave_1: entered promiscuous mode [ 33.909224][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 33.909261][ T3301] Cannot create hsr debugfs directory [ 34.225951][ T3297] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.228384][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.229071][ T3297] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.231195][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.231721][ T3297] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.243274][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.244667][ T3297] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.249973][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.302117][ T3296] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.304218][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.304841][ T3296] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.306993][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.338362][ T3296] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.347018][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.348076][ T3296] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.363947][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.388411][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.397556][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.406861][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.409096][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.430183][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.432161][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.432703][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.434767][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.471601][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.473851][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.474455][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.476433][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.509639][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.511326][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.511939][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.514041][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.553877][ T3301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.555889][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.558982][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.577351][ T3301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.584481][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.585877][ T3301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.593535][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.607169][ T3301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.613527][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.646433][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.663159][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.663195][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.666229][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.666262][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.674507][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.729090][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.736777][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.755208][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.755244][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.760928][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.761042][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.791356][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.796767][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.820816][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.823888][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.827130][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.846214][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.846315][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.852284][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.852318][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.871581][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.871678][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.877888][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.877993][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.914731][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.914768][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.948005][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.948035][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.066847][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.241978][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.311862][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.346271][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.364697][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.403247][ T3297] veth0_vlan: entered promiscuous mode [ 35.409757][ T3297] veth1_vlan: entered promiscuous mode [ 35.445950][ T3297] veth0_macvtap: entered promiscuous mode [ 35.466147][ T3297] veth1_macvtap: entered promiscuous mode [ 35.479243][ T3304] veth0_vlan: entered promiscuous mode [ 35.495154][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.495925][ T3304] veth1_vlan: entered promiscuous mode [ 35.513142][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.560141][ T3296] veth0_vlan: entered promiscuous mode [ 35.561872][ T3304] veth0_macvtap: entered promiscuous mode [ 35.580821][ T3304] veth1_macvtap: entered promiscuous mode [ 35.588776][ T3301] veth0_vlan: entered promiscuous mode [ 35.597173][ T3301] veth1_vlan: entered promiscuous mode [ 35.607531][ T3296] veth1_vlan: entered promiscuous mode [ 35.618944][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 35.618958][ T29] audit: type=1400 audit(1791018996.044:146): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.5ChLUO/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 35.619089][ T29] audit: type=1400 audit(1791018996.044:147): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 35.624933][ T29] audit: type=1400 audit(1791018996.054:148): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.5ChLUO/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 35.626062][ T29] audit: type=1400 audit(1791018996.054:149): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 35.628479][ T29] audit: type=1400 audit(1791018996.054:150): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.5ChLUO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 35.629265][ T29] audit: type=1400 audit(1791018996.054:151): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.5ChLUO/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 35.633739][ T29] audit: type=1400 audit(1791018996.064:152): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.657098][ T29] audit: type=1400 audit(1791018996.084:153): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 35.657193][ T29] audit: type=1400 audit(1791018996.084:154): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="gadgetfs" ino=4827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 35.658638][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.660373][ T135] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.660578][ T135] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.660701][ T135] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.669600][ T325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.739085][ T3302] veth0_vlan: entered promiscuous mode [ 35.744929][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.746216][ T3301] veth0_macvtap: entered promiscuous mode [ 35.770498][ T3301] veth1_macvtap: entered promiscuous mode [ 35.793067][ T3302] veth1_vlan: entered promiscuous mode [ 35.855466][ T3296] veth0_macvtap: entered promiscuous mode [ 35.874366][ T3296] veth1_macvtap: entered promiscuous mode [ 35.880950][ T3297] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.885699][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.921789][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.961087][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.961176][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.961260][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.961454][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.966289][ T3302] veth0_macvtap: entered promiscuous mode [ 35.967055][ T29] audit: type=1400 audit(1791018996.394:155): avc: denied { read } for pid=3297 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.010096][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.018658][ T3302] veth1_macvtap: entered promiscuous mode [ 36.024475][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.057292][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.086226][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.102362][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.150526][ T135] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.151983][ T667] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.152102][ T667] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.153474][ T325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.153519][ T325] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.153590][ T325] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.200242][ T38] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.200440][ T38] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.200546][ T38] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.200749][ T38] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.249526][ T667] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.327136][ T3510] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 36.477290][ T3519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 36.493069][ T3519] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.694786][ T3517] syz.1.7 (3517) used greatest stack depth: 10632 bytes left [ 37.132143][ T3559] syz_tun: entered allmulticast mode [ 37.149413][ T3563] Zero length message leads to an empty skb [ 37.190604][ T3565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.190749][ T3565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.220913][ T3565] loop0: detected capacity change from 0 to 164 [ 37.466899][ T3577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27'. [ 37.503559][ T3519] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.512652][ T3579] syz.4.28 (3579) used greatest stack depth: 10504 bytes left [ 37.531860][ T3581] loop4: detected capacity change from 0 to 512 [ 37.532387][ T3581] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.532880][ T3581] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 37.540920][ T3581] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.29: bad orphan inode 2048 [ 37.540950][ T3581] loop4: lost filesystem error report for type 5 error -117 [ 37.547960][ T3581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.647785][ T3587] netlink: 'syz.4.29': attribute type 10 has an invalid length. [ 37.651795][ T3587] veth1_macvtap: left promiscuous mode [ 37.677256][ T3589] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 37.919116][ T3600] syz.1.36 uses obsolete (PF_INET,SOCK_PACKET) [ 37.959012][ T3600] syzkaller0: entered promiscuous mode [ 37.959038][ T3600] syzkaller0: entered allmulticast mode [ 38.093031][ T3609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.40'. [ 38.392138][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.502681][ T3519] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.555028][ T3519] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.561725][ T3618] FAULT_INJECTION: forcing a failure. [ 38.561725][ T3618] name fail_futex, interval 1, probability 0, space 0, times 1 [ 38.561903][ T3618] CPU: 1 UID: 0 PID: 3618 Comm: syz.4.44 Not tainted syzkaller #0 PREEMPT(lazy) [ 38.561984][ T3618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 38.562046][ T3618] Call Trace: [ 38.562067][ T3618] [ 38.562088][ T3618] __dump_stack+0x1d/0x30 [ 38.562290][ T3618] dump_stack_lvl+0x95/0xd0 [ 38.562373][ T3618] dump_stack+0x15/0x1b [ 38.562461][ T3618] should_fail_ex+0x262/0x280 [ 38.562614][ T3618] should_fail+0xb/0x20 [ 38.562697][ T3618] get_futex_key+0x12d/0xb10 [ 38.562800][ T3618] futex_wake+0x89/0x400 [ 38.562881][ T3618] do_futex+0x3f8/0x460 [ 38.563007][ T3618] __se_sys_futex+0x2f6/0x370 [ 38.563145][ T3618] __x64_sys_futex+0x78/0x90 [ 38.563214][ T3618] x64_sys_call+0x22e2/0x2550 [ 38.563240][ T3618] do_syscall_64+0x112/0x360 [ 38.563453][ T3618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.563514][ T3618] RIP: 0033:0x7fa93df5e159 [ 38.563631][ T3618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.563696][ T3618] RSP: 002b:00007fa93c9b70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 38.563777][ T3618] RAX: ffffffffffffffda RBX: 00007fa93e1e5fa8 RCX: 00007fa93df5e159 [ 38.563835][ T3618] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa93e1e5fac [ 38.563920][ T3618] RBP: 00007fa93e1e5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 38.563971][ T3618] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 38.564074][ T3618] R13: 00007fa93e1e6038 R14: 00007fff77148b20 R15: 00007fff77148c08 [ 38.564133][ T3618] [ 38.661320][ T667] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.708531][ T667] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.849614][ T667] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.850111][ T667] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.377248][ T3659] ip6t_hbh: too many supported opts specified [ 40.267741][ T3703] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 40.589557][ T3721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'. [ 40.592186][ T3721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'. [ 40.688752][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 40.688771][ T29] audit: type=1400 audit(1791019001.114:348): avc: denied { bind } for pid=3724 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 40.765649][ T3729] netlink: 'syz.1.91': attribute type 10 has an invalid length. [ 40.765804][ T3729] syz_tun: entered promiscuous mode [ 40.804566][ T3729] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 40.876195][ T135] bond0: (slave bond_slave_0): interface is now down [ 40.876226][ T135] bond0: (slave bond_slave_1): interface is now down [ 40.876243][ T135] bond0: (slave syz_tun): interface is now down [ 40.899546][ T135] bond0: (slave bond_slave_0): interface is now down [ 40.899611][ T135] bond0: (slave bond_slave_1): interface is now down [ 40.899697][ T135] bond0: (slave syz_tun): interface is now down [ 40.901228][ T135] bond0: now running without any active interface! [ 41.063398][ T29] audit: type=1400 audit(1791019001.494:349): avc: denied { listen } for pid=3724 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 41.176095][ T29] audit: type=1400 audit(1791019001.604:350): avc: denied { accept } for pid=3724 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 41.882633][ T29] audit: type=1400 audit(1791019002.314:351): avc: denied { connect } for pid=3741 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.885848][ T3744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.97'. [ 42.065143][ T29] audit: type=1400 audit(1791019002.494:352): avc: denied { name_connect } for pid=3747 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 42.093301][ T29] audit: type=1400 audit(1791019002.524:353): avc: denied { bpf } for pid=3747 comm="syz.1.99" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 42.097957][ T29] audit: type=1400 audit(1791019002.524:354): avc: denied { setopt } for pid=3745 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.214951][ T29] audit: type=1400 audit(1791019002.644:355): avc: denied { create } for pid=3742 comm="syz.4.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 42.278839][ T3754] FAULT_INJECTION: forcing a failure. [ 42.278839][ T3754] name failslab, interval 1, probability 0, space 0, times 1 [ 42.278877][ T3754] CPU: 1 UID: 0 PID: 3754 Comm: syz.3.101 Not tainted syzkaller #0 PREEMPT(lazy) [ 42.278913][ T3754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 42.278931][ T3754] Call Trace: [ 42.278940][ T3754] [ 42.278950][ T3754] __dump_stack+0x1d/0x30 [ 42.278997][ T3754] dump_stack_lvl+0x95/0xd0 [ 42.279030][ T3754] dump_stack+0x15/0x1b [ 42.279061][ T3754] should_fail_ex+0x262/0x280 [ 42.279100][ T3754] ? mpi_alloc+0x31/0xd0 [ 42.279195][ T3754] should_failslab+0x8c/0xb0 [ 42.279317][ T3754] __kmalloc_cache_noprof+0x7a/0x400 [ 42.279427][ T3754] ? mpi_alloc+0x31/0xd0 [ 42.279458][ T3754] ? sg_miter_next+0x2cf/0x3d0 [ 42.279528][ T3754] mpi_alloc+0x31/0xd0 [ 42.279562][ T3754] mpi_read_raw_from_sgl+0x1e5/0x3d0 [ 42.279584][ T3754] ? __kmalloc_cache_noprof+0x19b/0x400 [ 42.279629][ T3754] rsa_enc+0xad/0x290 [ 42.279724][ T3754] rsassa_pkcs1_verify+0x2b5/0x650 [ 42.279894][ T3754] public_key_verify_signature+0x412/0x4e0 [ 42.280039][ T3754] x509_check_for_self_signed+0x1c4/0x250 [ 42.280145][ T3754] x509_cert_parse+0x3bf/0x450 [ 42.280170][ T3754] x509_key_preparse+0x3c/0x420 [ 42.280196][ T3754] asymmetric_key_preparse+0x68/0xb0 [ 42.280231][ T3754] __key_create_or_update+0x2df/0x840 [ 42.280426][ T3754] key_create_or_update+0x42/0x60 [ 42.280485][ T3754] __se_sys_add_key+0x2a5/0x360 [ 42.280523][ T3754] __x64_sys_add_key+0x67/0x80 [ 42.280553][ T3754] x64_sys_call+0x1fa9/0x2550 [ 42.280729][ T3754] do_syscall_64+0x112/0x360 [ 42.280767][ T3754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.280806][ T3754] RIP: 0033:0x7f4b0e30e159 [ 42.280830][ T3754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.280857][ T3754] RSP: 002b:00007f4b0cd67028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 42.280891][ T3754] RAX: ffffffffffffffda RBX: 00007f4b0e595fa0 RCX: 00007f4b0e30e159 [ 42.280913][ T3754] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 42.280932][ T3754] RBP: 00007f4b0e3a506b R08: 0000000026648ede R09: 0000000000000000 [ 42.280951][ T3754] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 42.280983][ T3754] R13: 00007f4b0e596038 R14: 00007f4b0e595fa0 R15: 00007ffec6548b98 [ 42.281010][ T3754] [ 42.352200][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.353860][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.355312][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.356749][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.386650][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.411390][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.417994][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.446372][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.460505][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.466810][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.476842][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.495376][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.502235][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.509084][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.513617][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.522464][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.542176][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.552344][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.574383][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.581722][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.596105][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.604133][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.615278][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.631145][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.635878][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.641279][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.648018][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.653207][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.673198][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.681442][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.686307][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.702524][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.706168][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.728685][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.733548][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.746869][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.755658][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.779934][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.788621][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.802627][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.819526][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.845873][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.858179][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.864011][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.899045][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.905320][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.932464][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.940732][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.953081][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.962178][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.984173][ T29] audit: type=1400 audit(1791019003.404:356): avc: denied { perfmon } for pid=3763 comm="syz.3.104" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 42.988194][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 42.998704][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.003016][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.009092][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.027789][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.047289][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.063490][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.064303][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.076827][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.094323][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.102338][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.111572][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.117299][ T3764] netlink: 'syz.3.104': attribute type 83 has an invalid length. [ 43.136249][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.137841][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.144599][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.154423][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.154958][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.165462][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.176672][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.184374][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.195887][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.204804][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.227582][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.238842][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.261602][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.262130][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.270280][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.286355][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.297154][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.330545][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.331375][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.341061][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.349485][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.363454][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.382682][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.406473][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.406879][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.417011][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.418003][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.429434][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.441062][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.448509][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.457613][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.470910][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.472012][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.480952][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.488969][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.500661][ T3771] loop2: detected capacity change from 0 to 512 [ 43.507078][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.507999][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.521670][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.543415][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.560774][ T3771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.560880][ T3771] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.561445][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.561871][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.562209][ T3757] 9pnet_fd: p9_fd_create_tcp (3757): problem connecting socket to 127.0.0.1 [ 43.684827][ T29] audit: type=1400 audit(1791019004.114:357): avc: denied { write } for pid=3775 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 43.731213][ T3783] netlink: 28 bytes leftover after parsing attributes in process `syz.3.110'. [ 43.747526][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.958926][ T3807] loop3: detected capacity change from 0 to 1024 [ 43.976335][ T3807] ======================================================= [ 43.976335][ T3807] WARNING: The mand mount option has been deprecated and [ 43.976335][ T3807] and is ignored by this kernel. Remove the mand [ 43.976335][ T3807] option from the mount to silence this warning. [ 43.976335][ T3807] ======================================================= [ 43.976502][ T3807] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.976842][ T3807] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.978490][ T3807] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 44.046232][ T3807] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.118: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 44.046293][ T3807] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 44.046474][ T3807] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.118: couldn't read orphan inode 11 (err -117) [ 44.046509][ T3807] loop3: lost filesystem error report for type 5 error -117 [ 44.047093][ T3807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.054591][ T3802] loop4: detected capacity change from 0 to 512 [ 44.100493][ T3802] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.100553][ T3802] EXT4-fs (loop4): invalid #clusters per group: 95 [ 44.149496][ T3811] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 44.167224][ T3814] uprobe: syz.0.122:3814 failed to unregister, leaking uprobe [ 44.167338][ T3814] uprobe: syz.0.122:3814 failed to unregister, leaking uprobe [ 44.184642][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.817802][ T3842] loop4: detected capacity change from 0 to 512 [ 44.843783][ T3842] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.131: iget: bad i_size value: 38620345925642 [ 44.843890][ T3842] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.844071][ T3842] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.131: couldn't read orphan inode 15 (err -117) [ 44.844123][ T3842] loop4: lost filesystem error report for type 5 error -117 [ 44.844755][ T3842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.912182][ T3846] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.131: bg 0: block 5: invalid block bitmap [ 44.915251][ T3846] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 616 with error 28 [ 44.915287][ T3846] EXT4-fs (loop4): This should not happen!! Data will be lost [ 44.915287][ T3846] [ 44.915300][ T3846] EXT4-fs (loop4): Total free blocks count 0 [ 44.915337][ T3846] EXT4-fs (loop4): Free/Dirty block details [ 44.915357][ T3846] EXT4-fs (loop4): free_blocks=0 [ 44.915373][ T3846] EXT4-fs (loop4): dirty_blocks=617 [ 44.915390][ T3846] EXT4-fs (loop4): Block reservation details [ 44.915406][ T3846] EXT4-fs (loop4): i_reserved_data_blocks=617 [ 45.029219][ T3842] EXT4-fs (loop4): shut down requested (0) [ 45.103568][ T3851] netlink: 'syz.0.135': attribute type 34 has an invalid length. [ 45.103748][ T3851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 45.355516][ T3875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.141'. [ 45.531386][ T3885] loop3: detected capacity change from 0 to 1024 [ 45.548981][ T3885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.564099][ T3891] FAULT_INJECTION: forcing a failure. [ 45.564099][ T3891] name failslab, interval 1, probability 0, space 0, times 0 [ 45.564152][ T3891] CPU: 1 UID: 0 PID: 3891 Comm: syz.0.146 Not tainted syzkaller #0 PREEMPT(lazy) [ 45.564185][ T3891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 45.564203][ T3891] Call Trace: [ 45.564213][ T3891] [ 45.564241][ T3891] __dump_stack+0x1d/0x30 [ 45.564274][ T3891] dump_stack_lvl+0x95/0xd0 [ 45.564344][ T3891] dump_stack+0x15/0x1b [ 45.564380][ T3891] should_fail_ex+0x262/0x280 [ 45.564417][ T3891] ? security_inode_alloc+0x37/0x100 [ 45.564532][ T3891] should_failslab+0x8c/0xb0 [ 45.564575][ T3891] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 45.564726][ T3891] ? security_inode_alloc+0x37/0x100 [ 45.564764][ T3891] security_inode_alloc+0x37/0x100 [ 45.564799][ T3891] inode_init_always_gfp+0x495/0x4e0 [ 45.564884][ T3891] ? __pfx_proc_alloc_inode+0x10/0x10 [ 45.564920][ T3891] alloc_inode+0x58/0x170 [ 45.564950][ T3891] new_inode+0x1d/0xe0 [ 45.564983][ T3891] proc_get_inode+0x21/0x370 [ 45.565112][ T3891] proc_fill_super+0x2ea/0x3c0 [ 45.565151][ T3891] ? __pfx_proc_fill_super+0x10/0x10 [ 45.565211][ T3891] get_tree_nodev+0x83/0x100 [ 45.565319][ T3891] proc_get_tree+0x1c/0x30 [ 45.565354][ T3891] vfs_get_tree+0x57/0x1d0 [ 45.565438][ T3891] do_new_mount+0x288/0x8d0 [ 45.565467][ T3891] ? security_capable+0x7b/0x90 [ 45.565552][ T3891] path_mount+0x4ad/0xb90 [ 45.565583][ T3891] __se_sys_mount+0x28c/0x2e0 [ 45.565615][ T3891] __x64_sys_mount+0x67/0x80 [ 45.565646][ T3891] x64_sys_call+0xc3b/0x2550 [ 45.565751][ T3891] do_syscall_64+0x112/0x360 [ 45.565786][ T3891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.565844][ T3891] RIP: 0033:0x7fb121b8e159 [ 45.565866][ T3891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.565892][ T3891] RSP: 002b:00007fb1205e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 45.565918][ T3891] RAX: ffffffffffffffda RBX: 00007fb121e15fa0 RCX: 00007fb121b8e159 [ 45.565987][ T3891] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000 [ 45.566013][ T3891] RBP: 00007fb121c2506b R08: 0000000000000000 R09: 0000000000000000 [ 45.566031][ T3891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.566048][ T3891] R13: 00007fb121e16038 R14: 00007fb121e15fa0 R15: 00007ffc831aea98 [ 45.566076][ T3891] [ 45.727402][ T3891] proc_fill_super: get root inode failed [ 45.744163][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 45.744181][ T29] audit: type=1400 audit(1791019006.174:386): avc: denied { write } for pid=3884 comm="syz.3.144" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.744214][ T29] audit: type=1400 audit(1791019006.174:387): avc: denied { read write } for pid=3884 comm="syz.3.144" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.744247][ T29] audit: type=1400 audit(1791019006.174:388): avc: denied { open } for pid=3884 comm="syz.3.144" path="/37/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.850187][ T29] audit: type=1400 audit(1791019006.274:389): avc: denied { map } for pid=3884 comm="syz.3.144" path="/37/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.005570][ T3903] loop4: detected capacity change from 0 to 512 [ 46.014967][ T29] audit: type=1400 audit(1791019006.434:390): avc: denied { create } for pid=3904 comm="syz.1.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 46.056050][ T29] audit: type=1400 audit(1791019006.484:391): avc: denied { mount } for pid=3902 comm="syz.4.150" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 46.102608][ T3903] smc: net device vlan1 applied user defined pnetid SYZ2 [ 46.174511][ T29] audit: type=1400 audit(1791019006.604:392): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 46.335244][ T29] audit: type=1400 audit(1791019006.764:393): avc: denied { write } for pid=3917 comm="syz.1.158" path="socket:[8304]" dev="sockfs" ino=8304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.376686][ T3897] syz.3.144 (3897) used greatest stack depth: 10232 bytes left [ 46.439567][ T29] audit: type=1400 audit(1791019006.864:394): avc: denied { getopt } for pid=3911 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 46.453012][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.537998][ T29] audit: type=1400 audit(1791019006.964:395): avc: denied { read } for pid=3922 comm="syz.1.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.979845][ T3939] FAULT_INJECTION: forcing a failure. [ 46.979845][ T3939] name fail_futex, interval 1, probability 0, space 0, times 0 [ 46.979883][ T3939] CPU: 0 UID: 0 PID: 3939 Comm: syz.3.165 Not tainted syzkaller #0 PREEMPT(lazy) [ 46.979914][ T3939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 46.979988][ T3939] Call Trace: [ 46.979995][ T3939] [ 46.980003][ T3939] __dump_stack+0x1d/0x30 [ 46.980033][ T3939] dump_stack_lvl+0x95/0xd0 [ 46.980068][ T3939] dump_stack+0x15/0x1b [ 46.980154][ T3939] should_fail_ex+0x262/0x280 [ 46.980206][ T3939] should_fail+0xb/0x20 [ 46.980258][ T3939] get_futex_key+0x12d/0xb10 [ 46.980290][ T3939] ? sock_common_setsockopt+0x69/0x80 [ 46.980323][ T3939] ? x64_sys_call+0x248f/0x2550 [ 46.980386][ T3939] futex_wait_setup+0x49/0x3e0 [ 46.980409][ T3939] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 46.980429][ T3939] ? hrtimer_active+0xe4/0x110 [ 46.980453][ T3939] __futex_wait+0xa9/0x260 [ 46.980479][ T3939] ? __pfx_futex_wake_mark+0x10/0x10 [ 46.980533][ T3939] futex_wait+0x98/0x1c0 [ 46.980558][ T3939] do_futex+0x391/0x460 [ 46.980594][ T3939] ? tcp_setsockopt+0x98/0xb0 [ 46.980626][ T3939] __se_sys_futex+0x2f6/0x370 [ 46.980746][ T3939] ? xfd_validate_state+0x45/0xf0 [ 46.980784][ T3939] __x64_sys_futex+0x78/0x90 [ 46.980817][ T3939] x64_sys_call+0x22e2/0x2550 [ 46.980876][ T3939] do_syscall_64+0x112/0x360 [ 46.980923][ T3939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.980949][ T3939] RIP: 0033:0x7f4b0e30e159 [ 46.980970][ T3939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.980995][ T3939] RSP: 002b:00007f4b0cd670e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 46.981021][ T3939] RAX: ffffffffffffffda RBX: 00007f4b0e595fa8 RCX: 00007f4b0e30e159 [ 46.981035][ T3939] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4b0e595fa8 [ 46.981117][ T3939] RBP: 00007f4b0e595fa0 R08: 0000000000000000 R09: 0000000000000000 [ 46.981130][ T3939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.981143][ T3939] R13: 00007f4b0e596038 R14: 00007ffec6548ab0 R15: 00007ffec6548b98 [ 46.981162][ T3939] [ 47.343167][ T3951] FAULT_INJECTION: forcing a failure. [ 47.343167][ T3951] name failslab, interval 1, probability 0, space 0, times 0 [ 47.343214][ T3951] CPU: 1 UID: 0 PID: 3951 Comm: syz.2.170 Not tainted syzkaller #0 PREEMPT(lazy) [ 47.343312][ T3951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 47.343328][ T3951] Call Trace: [ 47.343338][ T3951] [ 47.343348][ T3951] __dump_stack+0x1d/0x30 [ 47.343401][ T3951] dump_stack_lvl+0x95/0xd0 [ 47.343430][ T3951] dump_stack+0x15/0x1b [ 47.343450][ T3951] should_fail_ex+0x262/0x280 [ 47.343674][ T3951] ? sctp_add_bind_addr+0x71/0x1e0 [ 47.343778][ T3951] should_failslab+0x8c/0xb0 [ 47.343824][ T3951] __kmalloc_cache_noprof+0x7a/0x400 [ 47.343873][ T3951] ? sctp_add_bind_addr+0x71/0x1e0 [ 47.343957][ T3951] sctp_add_bind_addr+0x71/0x1e0 [ 47.344003][ T3951] sctp_copy_local_addr_list+0x1b4/0x250 [ 47.344163][ T3951] sctp_copy_one_addr+0x7f/0x280 [ 47.344201][ T3951] sctp_bind_addr_copy+0x79/0x290 [ 47.344266][ T3951] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 47.344305][ T3951] sctp_connect_new_asoc+0x1c3/0x3a0 [ 47.344340][ T3951] sctp_sendmsg+0x105f/0x1d00 [ 47.344446][ T3951] ? __pfx_sctp_sendmsg+0x10/0x10 [ 47.344472][ T3951] ? __pfx_inet_sendmsg+0x10/0x10 [ 47.344512][ T3951] inet_sendmsg+0xc5/0xd0 [ 47.344617][ T3951] __sys_sendto+0x3be/0x470 [ 47.344673][ T3951] __x64_sys_sendto+0x76/0x90 [ 47.344702][ T3951] x64_sys_call+0x200c/0x2550 [ 47.344738][ T3951] do_syscall_64+0x112/0x360 [ 47.344774][ T3951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.344819][ T3951] RIP: 0033:0x7fc38612e159 [ 47.344841][ T3951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.344860][ T3951] RSP: 002b:00007fc384b87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 47.344912][ T3951] RAX: ffffffffffffffda RBX: 00007fc3863b5fa0 RCX: 00007fc38612e159 [ 47.344930][ T3951] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000005 [ 47.344947][ T3951] RBP: 00007fc3861c506b R08: 000020000005ffe4 R09: 000000000000001c [ 47.344965][ T3951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.344983][ T3951] R13: 00007fc3863b6038 R14: 00007fc3863b5fa0 R15: 00007ffce4ee36b8 [ 47.345016][ T3951] [ 47.601543][ T3960] netlink: 'syz.1.174': attribute type 1 has an invalid length. [ 47.617739][ T3960] bond1: entered promiscuous mode [ 47.617964][ T3960] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.665319][ T3960] ipvlan2: entered allmulticast mode [ 47.665341][ T3960] bond1: entered allmulticast mode [ 47.697699][ T3960] bond1: (slave bridge1): making interface the new active one [ 47.697723][ T3960] bridge1: entered promiscuous mode [ 47.697893][ T3960] bridge1: entered allmulticast mode [ 47.712239][ T3960] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 47.748754][ T3970] netlink: 52 bytes leftover after parsing attributes in process `syz.0.178'. [ 47.760082][ T3970] tipc: Started in network mode [ 47.760125][ T3970] tipc: Node identity ac1414aa, cluster identity 4711 [ 47.760263][ T3970] tipc: New replicast peer: 172.20.20.187 [ 47.760438][ T3970] tipc: Enabled bearer , priority 10 [ 47.886813][ T3978] loop4: detected capacity change from 0 to 512 [ 47.897027][ T3978] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.915466][ T3981] netlink: 28 bytes leftover after parsing attributes in process `syz.2.177'. [ 47.930311][ T3978] EXT4-fs (loop4): 1 truncate cleaned up [ 47.930695][ T3978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.952350][ T3982] loop0: detected capacity change from 0 to 512 [ 47.967048][ T3982] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.967589][ T3982] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 47.967793][ T3982] EXT4-fs (loop0): orphan cleanup on readonly fs [ 47.968532][ T3982] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4223: comm syz.0.180: Allocating blocks 41-42 which overlap fs metadata [ 47.968580][ T3982] loop0: lost filesystem error report for type 5 error -117 [ 47.968718][ T3982] EXT4-fs (loop0): Remounting filesystem read-only [ 47.968835][ T3982] EXT4-fs (loop0): 1 truncate cleaned up [ 47.977095][ T3982] EXT4-fs (loop0): pa ffff888105ddf460: logic 1, phys. 41, len 23 [ 47.978054][ T3982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.123667][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.326105][ T4000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 48.351084][ T4006] raw_sendmsg: syz.2.188 forgot to set AF_INET. Fix it! [ 48.770771][ T24] tipc: Node number set to 2886997162 [ 49.108187][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.640153][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 53.640168][ T29] audit: type=1400 audit(1791019014.074:442): avc: denied { write } for pid=4020 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.708348][ T29] audit: type=1400 audit(1791019014.134:443): avc: denied { write } for pid=4020 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.750837][ T29] audit: type=1400 audit(1791019014.184:444): avc: denied { write } for pid=4034 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.184669][ T29] audit: type=1400 audit(1791019015.614:445): avc: denied { create } for pid=4039 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.209647][ T29] audit: type=1400 audit(1791019015.644:446): avc: denied { bind } for pid=4039 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.211689][ T29] audit: type=1400 audit(1791019015.644:447): avc: denied { setopt } for pid=4039 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.213306][ T29] audit: type=1400 audit(1791019015.644:448): avc: denied { write } for pid=4039 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.218010][ T29] audit: type=1400 audit(1791019015.644:449): avc: denied { setopt } for pid=4045 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 55.218037][ T29] audit: type=1400 audit(1791019015.644:450): avc: denied { write } for pid=4045 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 55.337687][ T29] audit: type=1400 audit(1791019015.764:451): avc: denied { wake_alarm } for pid=4049 comm="syz.4.199" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.455340][ T4054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.201'. [ 55.497070][ T4060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.203'. [ 55.510779][ T4060] vlan2: entered promiscuous mode [ 55.510801][ T4060] syz_tun: entered promiscuous mode [ 55.975567][ T4095] syz_tun: entered allmulticast mode [ 56.188115][ T4110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.222'. [ 56.420809][ T3341] wacom 0003:056A:003F.0001: item fetching failed at offset 14/15 [ 56.420878][ T3341] wacom 0003:056A:003F.0001: parse failed [ 56.420983][ T3341] wacom 0003:056A:003F.0001: probe with driver wacom failed with error -22 [ 56.467757][ T4123] syzkaller0: entered promiscuous mode [ 56.467838][ T4123] syzkaller0: entered allmulticast mode [ 56.883105][ T4150] netlink: 'syz.1.237': attribute type 2 has an invalid length. [ 56.885906][ T4150] 0: entered promiscuous mode [ 57.278144][ T4183] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 57.278144][ T4183] Please contact the netfilter-devel mailing list or update your nftables rules. [ 57.465486][ T4197] loop3: detected capacity change from 0 to 1024 [ 57.484716][ T4197] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 57.485315][ T4197] JBD2: no valid journal superblock found [ 57.485327][ T4197] EXT4-fs (loop3): Could not load journal inode [ 57.562374][ T4199] syzkaller0: entered promiscuous mode [ 57.562394][ T4199] syzkaller0: entered allmulticast mode [ 57.574211][ T4197] netlink: 'syz.3.255': attribute type 1 has an invalid length. [ 57.574264][ T4197] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.255'. [ 57.574567][ T4197] netlink: 9 bytes leftover after parsing attributes in process `syz.3.255'. [ 57.844193][ T4211] loop2: detected capacity change from 0 to 128 [ 57.872444][ T4211] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 57.872516][ T4211] System zones: 1-3, 19-19, 35-36 [ 57.890242][ T4211] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 57.908006][ T4211] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.964278][ T4208] clocksource: Switched to clocksource acpi_pm [ 57.975937][ T4208] mmap: syz.4.261 (4208) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 57.997761][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.107060][ T4217] loop2: detected capacity change from 0 to 512 [ 58.127794][ T4217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.127976][ T4217] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.885856][ T325] tipc: Subscription rejected, illegal request [ 58.991140][ T4236] ip_tables: iptables: counters copy to user failed while replacing table [ 58.998819][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.005926][ T4236] loop3: detected capacity change from 0 to 512 [ 59.047120][ T4236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.047284][ T4236] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.086064][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 59.086083][ T29] audit: type=1400 audit(1791019275.513:503): avc: denied { write } for pid=4235 comm="syz.3.272" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.086115][ T29] audit: type=1400 audit(1791019275.513:504): avc: denied { add_name } for pid=4235 comm="syz.3.272" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.121096][ T29] audit: type=1400 audit(1791019275.553:505): avc: denied { setattr } for pid=4235 comm="syz.3.272" path="/54/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.155480][ T29] audit: type=1400 audit(1791019275.583:506): avc: denied { ioctl } for pid=4235 comm="syz.3.272" path="/54/file0/file1" dev="loop3" ino=15 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.157736][ T4236] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #18: comm syz.3.272: corrupted inode contents [ 59.157831][ T4236] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 59.158575][ T4236] EXT4-fs error (device loop3): ext4_dirty_inode:6736: inode #18: comm syz.3.272: mark_inode_dirty error [ 59.158694][ T4236] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 59.159146][ T4236] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #18: comm syz.3.272: corrupted inode contents [ 59.159357][ T4236] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 59.160445][ T4236] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #18: comm syz.3.272: mark_inode_dirty error [ 59.160648][ T4236] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 59.161148][ T4236] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2965: inode #18: comm syz.3.272: mark inode dirty (error -117) [ 59.161241][ T4236] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 59.161620][ T4236] EXT4-fs warning (device loop3): ext4_evict_inode:288: xattr delete (err -117) [ 59.321624][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.473817][ T29] audit: type=1400 audit(1791019275.903:507): avc: denied { read } for pid=4246 comm="syz.2.276" path="socket:[9278]" dev="sockfs" ino=9278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.841839][ T4253] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 60.940750][ T29] audit: type=1400 audit(1791019277.373:508): avc: denied { sqpoll } for pid=4268 comm="syz.3.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 61.573990][ T29] audit: type=1326 audit(1791019278.003:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4281 comm="syz.1.288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ff598186f31 code=0x7ffc0000 [ 61.574031][ T29] audit: type=1326 audit(1791019278.003:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4281 comm="syz.1.288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5973be159 code=0x7ffc0000 [ 61.574085][ T29] audit: type=1326 audit(1791019278.003:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4281 comm="syz.1.288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5973be159 code=0x7ffc0000 [ 61.574180][ T29] audit: type=1326 audit(1791019278.003:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4281 comm="syz.1.288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ff598186f31 code=0x7ffc0000 [ 61.684888][ T4293] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.291'. [ 61.715991][ T4292] netlink: 'syz.2.291': attribute type 10 has an invalid length. [ 61.932629][ T4305] syzkaller0: entered promiscuous mode [ 61.932648][ T4305] syzkaller0: entered allmulticast mode [ 62.207471][ T3385] wiimote 0005:057E:0330.0002: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz0 [ 62.207639][ T3385] wiimote 0005:057E:0330.0002: New device registered [ 62.234826][ T4323] wiimote 0005:057E:0330.0002: Device removed [ 62.304279][ T4328] fido_id[4328]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 63.199754][ T4348] loop3: detected capacity change from 0 to 4096 [ 63.223121][ T4348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.243786][ T3385] wiimote 0005:057E:0330.0002: detected device: Nintendo Wii Remote Plus (Gen 2) [ 63.263306][ T3385] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0002/input/input6 [ 63.265276][ T3385] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0002/input/input7 [ 63.266448][ T3385] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0002/input/input5 [ 63.427839][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.627745][ T4364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4364 comm=syz.3.313 [ 63.642025][ T4364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.313'. [ 63.798628][ T4372] syzkaller0: entered promiscuous mode [ 63.798652][ T4372] syzkaller0: entered allmulticast mode [ 63.960683][ T4384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.323'. [ 64.809315][ T4400] loop0: detected capacity change from 0 to 128 [ 64.861064][ T4400] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.861407][ T4400] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.901429][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 64.901481][ T29] audit: type=1400 audit(1791019281.323:680): avc: denied { write } for pid=4399 comm="syz.0.328" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.935183][ T29] audit: type=1400 audit(1791019281.363:681): avc: denied { lock } for pid=4399 comm="syz.0.328" path="/53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cpuacct.usage_sys" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.938892][ T29] audit: type=1400 audit(1791019281.363:682): avc: denied { write } for pid=4399 comm="syz.0.328" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.939043][ T29] audit: type=1400 audit(1791019281.363:683): avc: denied { remove_name } for pid=4399 comm="syz.0.328" name="cpuacct.usage_sys" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.939149][ T29] audit: type=1400 audit(1791019281.363:684): avc: denied { unlink } for pid=4399 comm="syz.0.328" name="cpuacct.usage_sys" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.000043][ T29] audit: type=1400 audit(1791019281.433:685): avc: denied { write } for pid=4399 comm="syz.0.328" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.102569][ T3296] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.136673][ T4410] loop0: detected capacity change from 0 to 1024 [ 65.164089][ T4410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.167575][ T29] audit: type=1400 audit(1791019281.593:686): avc: denied { write } for pid=4409 comm="syz.0.332" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.251600][ T29] audit: type=1400 audit(1791019281.683:687): avc: denied { watch } for pid=4409 comm="syz.0.332" path="/54/file1" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.292918][ T29] audit: type=1400 audit(1791019281.723:688): avc: denied { cmd } for pid=4419 comm="syz.4.337" path="socket:[9135]" dev="sockfs" ino=9135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 65.371040][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.417184][ T29] audit: type=1326 audit(1791019281.843:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.1.336" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ff598186f31 code=0x7ffc0000 [ 67.964289][ T4449] netlink: 7 bytes leftover after parsing attributes in process `syz.0.346'. [ 68.149106][ T4453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4453 comm=syz.0.348 [ 68.505089][ T4459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.351'. [ 68.515157][ T4459] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.998946][ T4475] support for the xor transformation has been removed. [ 69.359801][ T4480] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 69.439960][ T4484] loop4: detected capacity change from 0 to 128 [ 70.721135][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 70.721220][ T29] audit: type=1400 audit(1791019287.153:934): avc: denied { create } for pid=4518 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.722636][ T29] audit: type=1400 audit(1791019287.153:935): avc: denied { bind } for pid=4518 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.723397][ T29] audit: type=1400 audit(1791019287.153:936): avc: denied { connect } for pid=4518 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.725386][ T29] audit: type=1400 audit(1791019287.153:937): avc: denied { write } for pid=4518 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.886598][ T4527] loop4: detected capacity change from 0 to 2048 [ 70.923960][ T4527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.941337][ T29] audit: type=1400 audit(1791019287.383:938): avc: denied { write } for pid=4526 comm="syz.4.375" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.941410][ T29] audit: type=1400 audit(1791019287.383:939): avc: denied { read } for pid=4526 comm="syz.4.375" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 70.947942][ T29] audit: type=1400 audit(1791019287.383:940): avc: denied { append } for pid=4532 comm="syz.3.377" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.992973][ T29] audit: type=1400 audit(1791019287.413:941): avc: denied { read } for pid=4535 comm="syz.2.378" name="kcore" dev="proc" ino=4026532042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 70.993010][ T29] audit: type=1400 audit(1791019287.413:942): avc: denied { open } for pid=4535 comm="syz.2.378" path="/59/proc_mnt/kcore" dev="proc" ino=4026532042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 71.017481][ T29] audit: type=1400 audit(1791019287.433:943): avc: denied { getopt } for pid=4535 comm="syz.2.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.104222][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.417563][ T4566] FAULT_INJECTION: forcing a failure. [ 71.417563][ T4566] name failslab, interval 1, probability 0, space 0, times 0 [ 71.417610][ T4566] CPU: 0 UID: 0 PID: 4566 Comm: syz.0.385 Not tainted syzkaller #0 PREEMPT(lazy) [ 71.417677][ T4566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 71.417764][ T4566] Call Trace: [ 71.417774][ T4566] [ 71.417785][ T4566] __dump_stack+0x1d/0x30 [ 71.417815][ T4566] dump_stack_lvl+0x95/0xd0 [ 71.417846][ T4566] dump_stack+0x15/0x1b [ 71.417870][ T4566] should_fail_ex+0x262/0x280 [ 71.417971][ T4566] should_failslab+0x8c/0xb0 [ 71.418007][ T4566] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 71.418049][ T4566] ? nfs_get_tree+0x999/0xc60 [ 71.418121][ T4566] ? nfs_get_tree+0x999/0xc60 [ 71.418149][ T4566] kmemdup_nul+0x36/0xc0 [ 71.418177][ T4566] nfs_get_tree+0x999/0xc60 [ 71.418310][ T4566] vfs_get_tree+0x57/0x1d0 [ 71.418371][ T4566] vfs_cmd_create+0x8a/0x140 [ 71.418495][ T4566] vfs_fsconfig_locked+0x6f/0x210 [ 71.418537][ T4566] __se_sys_fsconfig+0x671/0x7e0 [ 71.418604][ T4566] __x64_sys_fsconfig+0x67/0x80 [ 71.418644][ T4566] x64_sys_call+0xaa0/0x2550 [ 71.418720][ T4566] do_syscall_64+0x112/0x360 [ 71.418755][ T4566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.418786][ T4566] RIP: 0033:0x7fb121b8e159 [ 71.418829][ T4566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.418849][ T4566] RSP: 002b:00007fb1205e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 71.418870][ T4566] RAX: ffffffffffffffda RBX: 00007fb121e15fa0 RCX: 00007fb121b8e159 [ 71.418924][ T4566] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 71.418936][ T4566] RBP: 00007fb121c2506b R08: 0000000000000000 R09: 0000000000000000 [ 71.418949][ T4566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.418962][ T4566] R13: 00007fb121e16038 R14: 00007fb121e15fa0 R15: 00007ffc831aea98 [ 71.418987][ T4566] [ 72.010486][ T4595] FAULT_INJECTION: forcing a failure. [ 72.010486][ T4595] name failslab, interval 1, probability 0, space 0, times 0 [ 72.010521][ T4595] CPU: 1 UID: 0 PID: 4595 Comm: syz.2.398 Not tainted syzkaller #0 PREEMPT(lazy) [ 72.010549][ T4595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 72.010631][ T4595] Call Trace: [ 72.010639][ T4595] [ 72.010648][ T4595] __dump_stack+0x1d/0x30 [ 72.010677][ T4595] dump_stack_lvl+0x95/0xd0 [ 72.010751][ T4595] dump_stack+0x15/0x1b [ 72.010773][ T4595] should_fail_ex+0x262/0x280 [ 72.010839][ T4595] ? sk_prot_alloc+0xa8/0x180 [ 72.010864][ T4595] should_failslab+0x8c/0xb0 [ 72.010968][ T4595] __kmalloc_noprof+0xd0/0x4d0 [ 72.011093][ T4595] ? sk_prot_alloc+0xa8/0x180 [ 72.011118][ T4595] sk_prot_alloc+0xa8/0x180 [ 72.011142][ T4595] sk_alloc+0x34/0x3e0 [ 72.011186][ T4595] xsk_create+0xc6/0x3c0 [ 72.011211][ T4595] __sock_create+0x2e5/0x580 [ 72.011247][ T4595] __sys_socket+0xaf/0x180 [ 72.011342][ T4595] __x64_sys_socket+0x3f/0x50 [ 72.011377][ T4595] x64_sys_call+0x246e/0x2550 [ 72.011407][ T4595] do_syscall_64+0x112/0x360 [ 72.011435][ T4595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.011483][ T4595] RIP: 0033:0x7fc38612e159 [ 72.011502][ T4595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.011523][ T4595] RSP: 002b:00007fc384b87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 72.011547][ T4595] RAX: ffffffffffffffda RBX: 00007fc3863b5fa0 RCX: 00007fc38612e159 [ 72.011563][ T4595] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c [ 72.011578][ T4595] RBP: 00007fc3861c506b R08: 0000000000000000 R09: 0000000000000000 [ 72.011592][ T4595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.011683][ T4595] R13: 00007fc3863b6038 R14: 00007fc3863b5fa0 R15: 00007ffce4ee36b8 [ 72.011705][ T4595] [ 72.338817][ T4604] syzkaller0: entered promiscuous mode [ 72.338848][ T4604] syzkaller0: entered allmulticast mode [ 72.624030][ T4616] 9p: Bad value for 'rfdno' [ 73.163958][ T4625] tipc: Started in network mode [ 73.163989][ T4625] tipc: Node identity 1001001, cluster identity 4711 [ 73.164017][ T4625] tipc: Node number set to 16781313 [ 73.222452][ T4628] loop4: detected capacity change from 0 to 512 [ 73.222906][ T4628] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 73.457231][ T4634] syzkaller0: entered promiscuous mode [ 73.457282][ T4634] syzkaller0: entered allmulticast mode [ 73.997117][ T4644] 9pnet_fd: p9_fd_create_tcp (4644): problem connecting socket to 127.0.0.1 [ 74.064428][ T4648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.064645][ T4648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.260939][ T4655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4655 comm=syz.0.422 [ 74.735910][ T12] IPVS: starting estimator thread 0... [ 74.818321][ T4660] IPVS: using max 432 ests per chain, 21600 per kthread [ 74.933781][ T4663] loop2: detected capacity change from 0 to 512 [ 74.950458][ T4663] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.424: corrupted in-inode xattr: invalid ea_ino [ 74.950499][ T4663] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 74.953276][ T4663] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.424: couldn't read orphan inode 15 (err -117) [ 74.953315][ T4663] loop2: lost filesystem error report for type 5 error -117 [ 74.967027][ T4663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.116463][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.190090][ T4672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.427'. [ 75.216000][ T4672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.277268][ T4672] vlan2: entered allmulticast mode [ 75.277305][ T4672] bond1: entered allmulticast mode [ 75.310052][ T4675] loop0: detected capacity change from 0 to 512 [ 75.313380][ T4672] dummy0: entered allmulticast mode [ 75.314404][ T4672] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 75.342024][ T4675] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 75.363646][ T4675] EXT4-fs (loop0): 1 truncate cleaned up [ 75.364507][ T4675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.417513][ T4672] netlink: 'syz.2.427': attribute type 10 has an invalid length. [ 75.417544][ T4672] netlink: 40 bytes leftover after parsing attributes in process `syz.2.427'. [ 75.417610][ T4672] dummy0: entered promiscuous mode [ 75.447692][ T4672] bond1: (slave dummy0): Releasing backup interface [ 75.472157][ T4672] dummy0: left allmulticast mode [ 75.676208][ T4680] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.676381][ T4680] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.980958][ T4680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.997512][ T4680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.158626][ T135] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.158693][ T135] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.158733][ T135] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.158811][ T135] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.306946][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 76.306961][ T29] audit: type=1400 audit(1791019292.733:1167): avc: denied { read write } for pid=4704 comm="syz.2.432" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 76.307076][ T29] audit: type=1400 audit(1791019292.733:1168): avc: denied { open } for pid=4704 comm="syz.2.432" path="/dev/ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 76.337808][ T29] audit: type=1400 audit(1791019292.743:1169): avc: denied { ioctl } for pid=4704 comm="syz.2.432" path="/dev/ppp" dev="devtmpfs" ino=139 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 76.475135][ T4711] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.519011][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.570822][ T4711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'. [ 76.570840][ T4711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.435'. [ 76.603842][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.616544][ T4711] bond1: (slave bond0): making interface the new active one [ 76.628084][ T4719] netlink: 'syz.3.435': attribute type 4 has an invalid length. [ 76.628106][ T4719] netlink: 152 bytes leftover after parsing attributes in process `syz.3.435'. [ 76.628820][ T4711] bond1: (slave bond0): Enslaving as an active interface with an up link [ 76.671793][ T4719] .`: renamed from bond0 (while UP) [ 76.695865][ T29] audit: type=1400 audit(1791019293.123:1170): avc: denied { create } for pid=4709 comm="syz.1.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 76.698759][ T29] audit: type=1400 audit(1791019293.133:1171): avc: denied { write } for pid=4709 comm="syz.1.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 76.732710][ T667] bond1: (slave .`): link status definitely down, disabling slave [ 76.749293][ T667] bond1: now running without any active interface! [ 76.840827][ T29] audit: type=1400 audit(1791019293.273:1172): avc: denied { bind } for pid=4722 comm="syz.0.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 76.874529][ T4728] loop3: detected capacity change from 0 to 128 [ 76.890314][ T4728] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 76.946212][ T4730] loop0: detected capacity change from 0 to 1024 [ 76.955875][ T4730] EXT4-fs: Ignoring removed orlov option [ 76.971185][ T4730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.010337][ T29] audit: type=1400 audit(1791019293.443:1173): avc: denied { write } for pid=4737 comm="syz.0.440" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.110158][ T29] audit: type=1400 audit(1791019293.543:1174): avc: denied { write } for pid=4729 comm="syz.0.440" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.110252][ T29] audit: type=1400 audit(1791019293.543:1175): avc: denied { write } for pid=4729 comm="syz.0.440" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.110291][ T29] audit: type=1400 audit(1791019293.543:1176): avc: denied { rename } for pid=4729 comm="syz.0.440" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.366691][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.417559][ T4746] loop3: detected capacity change from 0 to 1024 [ 77.426391][ T4746] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 77.427144][ T4746] JBD2: no valid journal superblock found [ 77.427154][ T4746] EXT4-fs (loop3): Could not load journal inode [ 77.644741][ T4761] loop4: detected capacity change from 0 to 1024 [ 77.655173][ T4761] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 77.667955][ T4761] JBD2: no valid journal superblock found [ 77.667988][ T4761] EXT4-fs (loop4): Could not load journal inode [ 77.721201][ T4761] netlink: 'syz.4.451': attribute type 32 has an invalid length. [ 77.777123][ T4770] loop4: detected capacity change from 0 to 512 [ 77.790123][ T4770] EXT4-fs: Mount option(s) incompatible with ext3 [ 77.883148][ T4772] openvswitch: netlink: Flow key attr not present in new flow. [ 78.126285][ T4778] syzkaller0: entered promiscuous mode [ 78.126303][ T4778] syzkaller0: entered allmulticast mode [ 78.510997][ T4781] syzkaller0: entered promiscuous mode [ 78.511024][ T4781] syzkaller0: entered allmulticast mode [ 78.805818][ T4822] loop0: detected capacity change from 0 to 128 [ 78.825158][ T4822] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.837456][ T4820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4820 comm=syz.1.469 [ 78.854725][ T4822] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.917842][ T3296] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.320524][ T4835] netlink: 'syz.4.473': attribute type 1 has an invalid length. [ 79.371634][ T4835] veth3: entered allmulticast mode [ 79.373880][ T4835] bond2: (slave veth3): Enslaving as an active interface with a down link [ 79.407979][ T4835] bond2: (slave veth0_to_bond): making interface the new active one [ 79.408488][ T4835] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 79.431660][ T4837] loop3: detected capacity change from 0 to 512 [ 79.457383][ T4828] ================================================================== [ 79.457421][ T4828] BUG: KCSAN: data-race in dentry_kill / fast_dput [ 79.457483][ T4828] [ 79.457490][ T4828] write to 0xffff888105d8f610 of 8 bytes by task 4831 on cpu 0: [ 79.457513][ T4828] dentry_kill+0x139/0x500 [ 79.457536][ T4828] finish_dput+0x16/0x1d0 [ 79.457565][ T4828] dput+0x48/0x50 [ 79.457588][ T4828] lookup_open+0xcc0/0x10d0 [ 79.457625][ T4828] path_openat+0x415/0x10d0 [ 79.457680][ T4828] do_file_open+0x16c/0x290 [ 79.457726][ T4828] do_sys_openat2+0xa0/0x130 [ 79.457758][ T4828] __x64_sys_openat+0xf2/0x120 [ 79.457802][ T4828] x64_sys_call+0x1f72/0x2550 [ 79.457866][ T4828] do_syscall_64+0x112/0x360 [ 79.457898][ T4828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.457927][ T4828] [ 79.457935][ T4828] read to 0xffff888105d8f610 of 8 bytes by task 4828 on cpu 1: [ 79.457957][ T4828] fast_dput+0x64/0x300 [ 79.457988][ T4828] dput+0x1f/0x50 [ 79.458016][ T4828] filename_symlinkat+0x11f/0x2b0 [ 79.458044][ T4828] __se_sys_symlinkat+0x43/0x1b0 [ 79.458071][ T4828] __x64_sys_symlinkat+0x43/0x50 [ 79.458098][ T4828] x64_sys_call+0x1cf4/0x2550 [ 79.458132][ T4828] do_syscall_64+0x112/0x360 [ 79.458161][ T4828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.458189][ T4828] [ 79.458194][ T4828] value changed: 0xffff888237598cb0 -> 0x0000000000000000 [ 79.458211][ T4828] [ 79.458216][ T4828] Reported by Kernel Concurrency Sanitizer on: [ 79.458231][ T4828] CPU: 1 UID: 0 PID: 4828 Comm: syz.0.481 Not tainted syzkaller #0 PREEMPT(lazy) [ 79.458290][ T4828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 79.458308][ T4828] ================================================================== [ 79.636260][ T4837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.636367][ T4837] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.724927][ T4837] EXT4-fs (loop3): shut down requested (1) [ 80.496206][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.