last executing test programs: 1.468606413s ago: executing program 4 (id=499): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001e14"], 0x20}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="bf16000000000000b7000000000000007b0af8ff000000007b0af0ff000000007b0ae8ff000000007b0ae0ff000000007b0ad8ff000000007b0ad0ff000000007b0ac8ff000000007b0ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000b70200007f000001632ae0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002000)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742e86c0d85ff9782764532db", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.422148595s ago: executing program 4 (id=504): perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000100)=r3) 1.323820407s ago: executing program 2 (id=508): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f0000000040)='./file2\x00', 0x0, 0xf3) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd900, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0xffff888237d05000, 0x1}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13f00, 0xffffffff}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000001140)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440), 0x1) link(0x0, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000000c0), 0x1) r2 = openat$incfs(0xffffffffffffff9c, 0x0, 0x10000, 0x100) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1000}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x29, 0x2, 0x81, 0x8, 0xff46, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback={0x300}, 0x8000, 0x8000, 0x1, 0x1}}) ioctl$BTRFS_IOC_DEFRAG(r0, 0x4c00, 0x3) socket(0x1d, 0x2, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r6, &(0x7f00000002c0)='0', 0x1) 1.272158978s ago: executing program 4 (id=511): r0 = io_uring_setup(0x2e71, &(0x7f00000003c0)={0x0, 0x800000, 0x400, 0x2, 0x131}) r1 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r1, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000300)={0x0}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x800) 1.102652113s ago: executing program 0 (id=516): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x0, 0x0}, 0x10) 1.019773015s ago: executing program 0 (id=518): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000001a00)=ANY=[], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000240)="b8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)="f7", 0x1}], 0x1}}], 0x2, 0x40) 980.226705ms ago: executing program 1 (id=519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60fca33f00083c00fe800000000000000000000000000000fe8000000066e7041f6062e0b2135cc4d8b44fbc00000000000000000000aa0000fd00660000008acaae36c2d94aa8f508cfc8ab5e9dc92c5897886a47b5152e56e5ec61ccf8932cfa62d785b0a75b"], 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01002654be9aed879b32372a2d5030bd7000fddbdf2504004f"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3930, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f00000000c0)=0xffffffff, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800480000340000000000069078ac1414bbac1414aa440c0841ac1414aa000003744e224001", @ANYRES32, @ANYRES32=0x41424344, @ANYBLOB="5002fffe90782e86"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) syz_extract_tcp_res(&(0x7f0000002140)={0x41424344, 0x41424344}, 0x7, 0x9) syz_emit_ethernet(0x149, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000004983121b85a186dd618f79570113060000000000000000000000000000000000fc0200000000000000000000000000004e234e23", @ANYRES32, @ANYRES32=r4, @ANYBLOB="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"], 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002080)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a000004050001000700000092aa2ad474cf023b270092619c88cc6b5406c079d68df16344aa779219267dc2da4afb27fc0d0b9d0376e103ddbf8f4ada3b6327aafa605108fb651c26f91ee1dc118a523bb1e813086491d3204da79ba1b8dda8009c31a9dc72778b3e1f2b9f0c7d59960100000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x10021, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f00000000c0)=0xffeffff8, 0x4) sendto$inet(r5, 0x0, 0x0, 0x6040, &(0x7f0000000000)={0x2, 0x4e28}, 0x10) recvmmsg$unix(r5, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002040, 0x0) 815.94802ms ago: executing program 1 (id=521): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = epoll_create(0x20000000) r1 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r2 = openat(r1, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x1}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x3c, r3, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000003, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setresuid(0xee00, 0xee00, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000d40), 0x0, 0x0, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000100)={'bond_slave_0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'team_slave_0\x00', {0x2}, 0xa}) 815.52298ms ago: executing program 3 (id=522): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000010425bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="031700001b0801001c00128009000100766c616e000000000c00028006000100020000000800"], 0x4c}, 0x1, 0x0, 0x0, 0x4d088}, 0x0) 798.51954ms ago: executing program 1 (id=523): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000024000380040001001c0003800c000180080001"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x11c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xec, 0x2, {{0xfffffffe, 0x2, 0x10000, 0xa, 0xe7, 0xcc36}, [@TCA_NETEM_LOSS={0xb8, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x40, 0xf, 0xa, 0x4006559, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xfffffffa, 0xa, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0xd82c, 0x8, 0x6, 0x0, 0xc5e0}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1000, 0x8000, 0x0, 0x8, 0x1}}, @NETEM_LOSS_GI={0x18, 0x1, {0x4, 0x4, 0x9de, 0x9, 0xb502}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x0, 0xfffff001, 0xf6, 0x3}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5b, 0xffff3272, 0x3, 0xa}}, @NETEM_LOSS_GE={0x14, 0x2, {0xd827, 0x7ff, 0x1, 0x7}}]}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x2}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x40009, 0xae}}]}}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4546cfee17049510}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001e14"], 0x20}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) 748.610102ms ago: executing program 3 (id=524): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x242, 0x2e0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) sendfile(r0, r0, 0x0, 0xa) socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCGETA(r3, 0x89f3, &(0x7f0000000180)) 679.992153ms ago: executing program 1 (id=525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe8}}, 0x0) 671.402403ms ago: executing program 2 (id=526): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000024000380040001001c0003800c000180080001"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001e14"], 0x20}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="bf16000000000000b7000000000000007b0af8ff000000007b0af0ff000000007b0ae8ff000000007b0ae0ff000000007b0ad8ff000000007b0ad0ff000000007b0ac8ff000000007b0ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000b70200007f000001632ae0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002000)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742e86c0d85ff9782764532db", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 653.955974ms ago: executing program 1 (id=527): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) mkdirat(r0, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x44002, 0xc) write(r1, &(0x7f0000000000)='3', 0x4e) ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/dev_mcast\x00') 609.164385ms ago: executing program 3 (id=528): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2111, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x5}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0000}, 0x8000) 608.906035ms ago: executing program 3 (id=529): r0 = socket(0x10, 0x800, 0x0) lsetxattr(&(0x7f0000000480)='.\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="73656375056974792e5b504c00"], 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0x3, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800, 0x1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvlan1\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b4040000000008", "bb67102a8bcaae4ffc222da7000200", "8c76287d", "3d8efa05fdffffff"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r3, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0xfe04}], 0x1) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) r7 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r7) syz_emit_ethernet(0x389, &(0x7f0000000980)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "28b090", 0x353, 0x0, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x43}, {[@fragment={0x73, 0x0, 0x3, 0x1, 0x0, 0x3, 0x64}, @dstopts={0x6c, 0x12, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x26}, @enc_lim={0x4, 0x1, 0x60}, @generic={0xfd, 0x7d, "a3a1dce670c3ebfabf90668ec78528180974b7879d1d3252c2c9140cefa50ba51848f3d98e356e0222c8e54317b8a47e31f1aafd91d1d811405d9e9a32535d776c176e0921a76117f17324ce6149b4cdd586e70e441175fb2631dbe6317e006a7d9a8bd3dded04d639b80aff5e27403bf40a7831bc14e7bdc975bea4e2"}, @enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0x725}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @srh={0x2f, 0x4, 0x4, 0x2, 0x52, 0x78, 0x459, [@remote, @private0]}, @routing={0x0, 0xc, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @local, @mcast1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2]}, @srh={0x2b, 0x8, 0x4, 0x4, 0x2, 0x60, 0x7, [@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1, @empty]}, @srh={0x67, 0x12, 0x4, 0x9, 0xfe, 0x0, 0x3, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2, @mcast2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2]}, @routing={0x73, 0x10, 0x0, 0x4, 0x0, [@loopback, @empty, @mcast1, @private0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @remote]}], "d9d65ac743d42902379625fd9c529dbd0894d3207591d9c7394dd1c698ab3019c7e1e501469f0047a54d41d5d1ebbe632a9b685696bcd0ba1792499ea380a8cd1389c42236ac80b1d31cd4a23e941412633ce858f040fe8e9883b12c0e84d9ed074bfd5646e8975e036f407caf17f13c1ff7d2d36211eea84118c9d840b3a704d87b9610c1aebbb2be348589ab61c504def8f3b38174d0d985748c7d3342c6e4d3e92d15c35ffe87872c087199df11b3a84730"}}}}}, 0x0) 608.615654ms ago: executing program 2 (id=530): syz_emit_ethernet(0x3e, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c6, 0x4, @perf_config_ext={0xffffffffffffffff, 0xdf52}, 0x11030, 0x6, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9899}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r1, &(0x7f0000010440)=[{&(0x7f0000000180)=""/160, 0xa0}], 0x1, 0xc03, 0x0) 572.175306ms ago: executing program 1 (id=531): r0 = socket$rds(0x15, 0x5, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x80000000000000, 0x1113a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000008, 0x2, @perf_config_ext={0x0, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x305, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0x18, &(0x7f00000006c0)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x52}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @exit, @alu={0x7, 0x0, 0x9, 0x4, 0x3, 0x18, 0x8}, @jmp={0x5, 0x0, 0x1, 0x7, 0xa, 0xfffffffffffffff8, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44040) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a740000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000480003801c0000800c00018006000100d10300000c000440000000002df31abd240000800c00044000000000000000050800034000000002"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x410, 0x4) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000400)=0x8, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000300)={@local, @random="facfff00716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x26, 0x24, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3}}}}}}}, 0x0) recvfrom$inet(r6, 0x0, 0x0, 0x101, 0x0, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000400)=0x9) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200405, &(0x7f00000005c0), 0x5, 0x565, &(0x7f0000000600)="$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") socket$unix(0x1, 0x2, 0x0) connect$inet(r5, &(0x7f0000000e80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) close(r5) recvmmsg(r0, &(0x7f0000005b80)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x140, 0x0) 572.020706ms ago: executing program 4 (id=532): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x11, 0x80, &(0x7f0000005640)={'broute\x00', 0x0, 0x0, 0x0, [0x413c, 0x3, 0x5, 0x4000000000008, 0x80000001, 0x10001]}, &(0x7f00000056c0)=0x78) 571.528866ms ago: executing program 2 (id=533): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = epoll_create(0x20000000) r1 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r2 = openat(r1, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x1}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x3c, r3, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000003, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setresuid(0xee00, 0xee00, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000d40), 0x0, 0x0, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000100)={'bond_slave_0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'team_slave_0\x00', {0x2}, 0xa}) 495.996418ms ago: executing program 2 (id=534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4041}, 0x44010) 495.831348ms ago: executing program 4 (id=535): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x54, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x0, 0xffffffff, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x7, 0xd, "85dea0"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 491.983928ms ago: executing program 2 (id=536): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@user_xattr}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") socket$packet(0x11, 0xa, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x5, 0x2000003, 0x401d031, 0xffffffffffffffff, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) (async) pwritev(r0, &(0x7f0000000680)=[{&(0x7f0000000040)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003f60000000001010101", 0x2e}], 0x1, 0x6, 0x0) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f00000007c0)="00214500001400000000400600000a0000010a000002005000500005ffff0005ffff683003e80000e40201010101", 0x2e}], 0x1, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c0000001a0a01040000000000"], 0x154}}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f0000000280), 0x2, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x4000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) (async) clock_getres(0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) getdents64(0xffffffffffffff9c, 0xffffffffffffffff, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x400c4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) (async) syz_usb_connect$midi(0x3, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x499, 0x1032, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x3, 0x30, 0xd, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3}}}}}]}}, 0x0) 481.522968ms ago: executing program 4 (id=537): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f0000000040)='./file2\x00', 0x0, 0xf3) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd900, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0xffff888237d05000, 0x1}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13f00, 0xffffffff}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000001140)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440), 0x1) link(0x0, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000000c0), 0x1) r2 = openat$incfs(0xffffffffffffff9c, 0x0, 0x10000, 0x100) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1000}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x29, 0x2, 0x81, 0x8, 0xff46, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback={0x300}, 0x8000, 0x8000, 0x1, 0x1}}) ioctl$BTRFS_IOC_DEFRAG(r0, 0x4c00, 0x3) socket(0x1d, 0x2, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r6, &(0x7f00000002c0)='0', 0x1) 190.234995ms ago: executing program 3 (id=538): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x242, 0x2e0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) sendfile(r0, r0, 0x0, 0xa) socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000180)={0x1f, 0x3eb, 0x4}, 0x6) perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCGETA(r3, 0x89f3, &(0x7f0000000180)) 143.874616ms ago: executing program 0 (id=539): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x424}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400008c}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=ANY=[@ANYBLOB="64000000142001002cbd7000fcdbdf25fe8000000000000000000000000000bbff0200000000000000000000000000014e2423934e2000070200200088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000020000000a001000000000000000000008001f0003000000"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4000084) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x608, 0x208, 0x450, 0x330, 0x208, 0x0, 0x538, 0x538, 0x538, 0x538, 0x538, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast2, 0x29, 0x28, 0x6d}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@rand_addr=0x64010100, 0x3a, 0x34, 0x2662}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@srh={{0x30}, {0x63a189c11e5304be, 0x80, 0x7, 0x3, 0x81, 0x1814, 0x8}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x39}}}, {{@ipv6={@private0, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xffffff00, 0x0, 0xffffffff], [0xff, 0x0, 0xff, 0xff], 'vxcan1\x00', 'bridge0\x00', {0xff}, {0xff}, 0x1d, 0x0, 0x2, 0x47}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x42, 0x7, @ipv4=@remote, 0x4e20}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x668) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xffffdfffffffffff, 0x800, 0x0, 0x1}, 0x20) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000005640)={'filter\x00', 0x0, 0x0, 0x0, [0x413c, 0x3, 0x5, 0x4000000000008, 0x2, 0x11001]}, &(0x7f00000056c0)=0x78) 121.225367ms ago: executing program 0 (id=540): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x54, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x0, 0xffffffff, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x7, 0xd, "85dea0"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) (fail_nth: 3) 93.484038ms ago: executing program 0 (id=541): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000024000380040001001c0003800c000180080001"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001e14"], 0x20}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="bf16000000000000b7000000000000007b0af8ff000000007b0af0ff000000007b0ae8ff000000007b0ae0ff000000007b0ad8ff000000007b0ad0ff000000007b0ac8ff000000007b0ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000b70200007f000001632ae0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002000)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742e86c0d85ff9782764532db", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 49.665749ms ago: executing program 0 (id=542): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x120, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0xa, 0x2, 0x7, 0x7, 0x6, r2}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xd8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) 0s ago: executing program 3 (id=543): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x4d, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x16, 0x0, 0x3, 0x1ffffffd}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000140)={[{@resuid}, {@noauto_da_alloc}, {@auto_da_alloc_val}, {@stripe={'stripe', 0x3d, 0x4}}, {@bsdgroups}, {@noblock_validity}, {@minixdf}, {@nouid32}, {@dioread_lock}, {@nolazytime}, {@oldalloc}, {@usrquota}]}, 0x0, 0x515, &(0x7f0000000c40)="$eJzs3d9rm2sdAPDvmzZru/Wc9qgXxwMei+dId9Al7eq24sWcIHo1UOf9LG1aStOmNGm3liEd/gGCiApeeeWN4B8gyP4EEQZ6LyqKuM1deKORJG+2Nkvarkua0Xw+8O59nvdHv98na9+8T56HvAEMrKmIuBURQxHxSURMpNsz6RL7jaV23LOnDxZrSxLV6p1/JZGk25o/K0nXl9LTRiPiu9+KiCfVamvc8u7e2kKxWNhK6/nK+ma+vLt3ZXV9YaWwUtiYm5u9Pn9j/tr8zKnbthNJM6WYjIib3/jbT3/0q2/e/N2X7/357j8u/6C2czzdf7Ad3dRIIFt/LZqGI2KrF8H6YChtT7bfiQAAcCK1+9NPRcQX6vf/EzFUv5s7ytgZZQYAAAB0S/Vr45GN6kgVAAAAOLcy9TmwSSaXzvcdj0wml2vM4f1MXMwUS+XKl5ZL2xtLjbmyk5HNLK8WCzPpXOHJyCa1+mw6x7ZZv9pSn4uI9yLiJxNj9XpusVRc6veHHwAAADAgLrX0/59PNPr/AAAAwDkz2e8EAAAAgJ7T/wcAAIDzT/8fAAAAzrVv375dW6rN518v7exur5V2riwVymu59e3F3GJpazO3Uiqt1L+zb/24n1cslTa/Ehvb9/OVQrmSL+/u3V0vbW9U7q4eegQ2AAAAcIbe+/yjPyURsf/VsfoSScSFdF+2z7kBvZV5nYP/2rs8gLM31O8EgL4Z7ncCQN/o4wPJMfs7Tt75ffdzAQAAemP6sy3j/2H8HwbFa43/A+eK8X8YXG3G/00JgAGRdQcAA6/34//V6mslBAAAdN14fUkyuXQscDwymVwu4p36YwGyyfJqsTATEe9GxB8nsiO1+mz9zOTYPgMAAAAAAAAAAAAAAAAAAAAAAAAA0FCtJlE9heenOQkAAADoi4jM35P0+V/TEx+Pt34+cCH5z0R9HRH3fnHnZ/cXKpWt2dr2Jy+2V36ebr968Mz9Vz9s8LBxAAAAOBPNfnqzHw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fTs6YPF5hLZs4v7z69HxGRL/LrhGK2vR+vpXPx3EsMHzksiYqgL8fcfRsT77eIntbRiMs2iNX4mIsb6HP9SF+LDIHtUu/7cavf3l4mp+rr9399wurypg9e/2uXgYPzm9W+ow/XvnRPG+ODxb/Id4z+M+GC4/fWnGT/pEP+jjhFHDtW+/729vU5HVn8ZMd36/vMiwstSvrK+mS/v7l1ZXV9YKawUNubmZq/P35i/Nj+TX14tFtJ/28b48ed++7+j2n+xQ/zJY9r/ccf2H/bfx/effrpRfOWdtRb/8keH40+l+97vED+Tvvd9MS3X9k83y/uN8kEf/voPH75Iuk38pQ7tP+7//3KzMnp0+z/5zg//csxLBACcofLu3tpCsVjYOmVhJ0568FT7Xc07opMH3Y83zFnhLSsMxeEtzfvULsfKnvB3fvQteVlOUHj3wJYLafO6FKIPFyMAAKCnXt70n+DgQwPuI71LCgAAAAAAAAAAAAAAAAAAAAbMWXxRWWvM/f40FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSP8PAAD//22Dxkw=") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x4d, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x16, 0x0, 0x3, 0x1ffffffd}]}) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000140)={[{@resuid}, {@noauto_da_alloc}, {@auto_da_alloc_val}, {@stripe={'stripe', 0x3d, 0x4}}, {@bsdgroups}, {@noblock_validity}, {@minixdf}, {@nouid32}, {@dioread_lock}, {@nolazytime}, {@oldalloc}, {@usrquota}]}, 0x0, 0x515, &(0x7f0000000c40)="$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") (async) kernel console output (not intermixed with test programs): udit(1791095956.913:109): avc: denied { getattr } for pid=3181 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.473775][ T29] audit: type=1400 audit(1791095956.963:110): avc: denied { write } for pid=3180 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.473806][ T29] audit: type=1400 audit(1791095956.963:111): avc: denied { add_name } for pid=3180 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.488544][ T29] audit: type=1400 audit(1791095956.973:112): avc: denied { write } for pid=3191 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.46' (ED25519) to the list of known hosts. [ 26.626630][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 26.626647][ T29] audit: type=1400 audit(1791095963.113:126): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.626876][ T29] audit: type=1400 audit(1791095963.113:127): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.627332][ T3286] cgroup: Unknown subsys name 'net' [ 26.627537][ T29] audit: type=1400 audit(1791095963.113:128): avc: denied { unmount } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.752343][ T3286] cgroup: Unknown subsys name 'cpuset' [ 26.752970][ T3286] cgroup: Unknown subsys name 'rlimit' [ 26.837180][ T29] audit: type=1400 audit(1791095963.323:129): avc: denied { setattr } for pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.838165][ T29] audit: type=1400 audit(1791095963.323:130): avc: denied { create } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.838309][ T29] audit: type=1400 audit(1791095963.323:131): avc: denied { write } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.838487][ T29] audit: type=1400 audit(1791095963.323:132): avc: denied { read } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.843744][ T29] audit: type=1400 audit(1791095963.333:133): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.843836][ T29] audit: type=1400 audit(1791095963.333:134): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.870580][ T29] audit: type=1400 audit(1791095963.363:135): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 26.913271][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.018907][ T3286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.430641][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.430672][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.430816][ T3301] bridge_slave_0: entered allmulticast mode [ 28.431300][ T3301] bridge_slave_0: entered promiscuous mode [ 28.442136][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.442221][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.442275][ T3304] bridge_slave_0: entered allmulticast mode [ 28.442720][ T3304] bridge_slave_0: entered promiscuous mode [ 28.446598][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.446647][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.446701][ T3296] bridge_slave_0: entered allmulticast mode [ 28.447221][ T3296] bridge_slave_0: entered promiscuous mode [ 28.448685][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.448713][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.448763][ T3296] bridge_slave_1: entered allmulticast mode [ 28.449152][ T3296] bridge_slave_1: entered promiscuous mode [ 28.464950][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.464982][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.465118][ T3304] bridge_slave_1: entered allmulticast mode [ 28.465692][ T3304] bridge_slave_1: entered promiscuous mode [ 28.475542][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.475573][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.475716][ T3301] bridge_slave_1: entered allmulticast mode [ 28.476128][ T3301] bridge_slave_1: entered promiscuous mode [ 28.499929][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.499960][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.500010][ T3297] bridge_slave_0: entered allmulticast mode [ 28.500602][ T3297] bridge_slave_0: entered promiscuous mode [ 28.502488][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.503856][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.519684][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.519716][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.519768][ T3297] bridge_slave_1: entered allmulticast mode [ 28.520256][ T3297] bridge_slave_1: entered promiscuous mode [ 28.526987][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.527182][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.527223][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.527351][ T3302] bridge_slave_0: entered allmulticast mode [ 28.527791][ T3302] bridge_slave_0: entered promiscuous mode [ 28.529253][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.530654][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.551273][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.551494][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.551523][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.551572][ T3302] bridge_slave_1: entered allmulticast mode [ 28.552042][ T3302] bridge_slave_1: entered promiscuous mode [ 28.563503][ T3296] team0: Port device team_slave_0 added [ 28.568778][ T3304] team0: Port device team_slave_0 added [ 28.569651][ T3304] team0: Port device team_slave_1 added [ 28.575361][ T3296] team0: Port device team_slave_1 added [ 28.576293][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.577550][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.599783][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.600785][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.610855][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.610869][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.610965][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.612382][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.612394][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.612484][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.613293][ T3301] team0: Port device team_slave_0 added [ 28.614335][ T3301] team0: Port device team_slave_1 added [ 28.628721][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.628735][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.628762][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.629326][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.629337][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.629383][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.647131][ T3302] team0: Port device team_slave_0 added [ 28.652840][ T3297] team0: Port device team_slave_0 added [ 28.664777][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.664789][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.664813][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.665613][ T3302] team0: Port device team_slave_1 added [ 28.666374][ T3297] team0: Port device team_slave_1 added [ 28.678485][ T3304] hsr_slave_0: entered promiscuous mode [ 28.678804][ T3304] hsr_slave_1: entered promiscuous mode [ 28.679497][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.679508][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.679535][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.707734][ T3296] hsr_slave_0: entered promiscuous mode [ 28.708134][ T3296] hsr_slave_1: entered promiscuous mode [ 28.708402][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 28.708415][ T3296] Cannot create hsr debugfs directory [ 28.709285][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.709296][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.709322][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.715433][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.715446][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.715473][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.715784][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.715795][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.715853][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.734260][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.734274][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.734332][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.746818][ T3301] hsr_slave_0: entered promiscuous mode [ 28.747185][ T3301] hsr_slave_1: entered promiscuous mode [ 28.747585][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 28.747597][ T3301] Cannot create hsr debugfs directory [ 28.787691][ T3302] hsr_slave_0: entered promiscuous mode [ 28.788063][ T3302] hsr_slave_1: entered promiscuous mode [ 28.788811][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 28.788824][ T3302] Cannot create hsr debugfs directory [ 28.796425][ T3297] hsr_slave_0: entered promiscuous mode [ 28.796806][ T3297] hsr_slave_1: entered promiscuous mode [ 28.797298][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 28.797311][ T3297] Cannot create hsr debugfs directory [ 29.031600][ T3296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.038940][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.062529][ T3296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.070024][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.088101][ T3296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.103133][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.119076][ T3296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.124770][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.128081][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.130324][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.141516][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.168560][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.182058][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.185974][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.186429][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.212522][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.219169][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.222973][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.223468][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.229453][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.237027][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.237059][ T3296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.237195][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.237224][ T3296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.238321][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.255848][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.262644][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.266046][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.275489][ T3302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.298918][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.316721][ T3302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.320405][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.321015][ T3302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.326384][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.337322][ T3302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.344538][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.345680][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.345711][ T3304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.345859][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.345950][ T3304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.363835][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.369619][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.381893][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.388821][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.561123][ T3297] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.564016][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.564691][ T3297] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.570836][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.577258][ T3297] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.584184][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.597745][ T3297] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.604681][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.608609][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.708148][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.721185][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.721221][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.723262][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.723292][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.738170][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.759353][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.785593][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.789577][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.802183][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.802219][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.810990][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.811018][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.825704][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.827638][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.827668][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.829075][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.829103][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.874915][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.887248][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.901198][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.910556][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.910592][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.930173][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.930210][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.931809][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.931839][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.958094][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.958129][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.980006][ T3297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.107511][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.135359][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.210113][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.269677][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.271389][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.282004][ T3296] veth0_vlan: entered promiscuous mode [ 30.296966][ T3296] veth1_vlan: entered promiscuous mode [ 30.336942][ T3296] veth0_macvtap: entered promiscuous mode [ 30.340108][ T3296] veth1_macvtap: entered promiscuous mode [ 30.350903][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.352426][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.379609][ T3301] veth0_vlan: entered promiscuous mode [ 30.381553][ T363] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.381590][ T363] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.381693][ T363] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.381723][ T363] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.393457][ T3301] veth1_vlan: entered promiscuous mode [ 30.464485][ T3301] veth0_macvtap: entered promiscuous mode [ 30.466400][ T3301] veth1_macvtap: entered promiscuous mode [ 30.478751][ T3297] veth0_vlan: entered promiscuous mode [ 30.497011][ T3297] veth1_vlan: entered promiscuous mode [ 30.508665][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.522743][ T3296] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.525386][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.525536][ T3302] veth0_vlan: entered promiscuous mode [ 30.572544][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.572583][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.572668][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.572686][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.573627][ T3297] veth0_macvtap: entered promiscuous mode [ 30.574995][ T3302] veth1_vlan: entered promiscuous mode [ 30.580599][ T3297] veth1_macvtap: entered promiscuous mode [ 30.640611][ T3302] veth0_macvtap: entered promiscuous mode [ 30.641163][ T3304] veth0_vlan: entered promiscuous mode [ 30.657376][ T3302] veth1_macvtap: entered promiscuous mode [ 30.674184][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.681673][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.682039][ T3304] veth1_vlan: entered promiscuous mode [ 30.690517][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.699397][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.699520][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.699663][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.699718][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.707703][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.730261][ T3304] veth0_macvtap: entered promiscuous mode [ 30.748832][ T3304] veth1_macvtap: entered promiscuous mode [ 30.780528][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.795283][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.841887][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.842284][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.842428][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.842549][ T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.842582][ T41] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.842610][ T41] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.842731][ T41] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.842883][ T41] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.691821][ T3531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 31.694604][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 31.694617][ T29] audit: type=1400 audit(1791095968.183:185): avc: denied { bind } for pid=3530 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.696827][ T3531] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10'. [ 31.850207][ T29] audit: type=1400 audit(1791095968.333:186): avc: denied { create } for pid=3503 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.861789][ T29] audit: type=1400 audit(1791095968.343:187): avc: denied { write } for pid=3503 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.919258][ T29] audit: type=1400 audit(1791095968.403:188): avc: denied { write } for pid=3534 comm="syz.4.11" path="socket:[5202]" dev="sockfs" ino=5202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 31.922642][ T29] audit: type=1400 audit(1791095968.413:189): avc: denied { create } for pid=3534 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 31.923264][ T29] audit: type=1400 audit(1791095968.413:190): avc: denied { setopt } for pid=3534 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 31.962495][ T3512] syz.2.3 (3512) used greatest stack depth: 10056 bytes left [ 31.963519][ T29] audit: type=1400 audit(1791095968.443:191): avc: denied { unlink } for pid=3302 comm="syz-executor" name="file2" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.018798][ T3536] loop4: detected capacity change from 0 to 512 [ 32.019081][ T29] audit: type=1400 audit(1791095968.513:192): avc: denied { write } for pid=3534 comm="syz.4.11" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.019183][ T3536] EXT4-fs: Ignoring removed i_version option [ 32.019281][ T3536] EXT4-fs: Ignoring removed nobh option [ 32.019667][ T3536] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.019750][ T3536] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 32.064776][ T3535] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 32.092077][ T3536] EXT4-fs (loop4): 1 truncate cleaned up [ 32.092548][ T3536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.092819][ T29] audit: type=1400 audit(1791095968.583:193): avc: denied { mount } for pid=3534 comm="syz.4.11" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.196524][ T29] audit: type=1400 audit(1791095968.683:194): avc: denied { tracepoint } for pid=3542 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.305402][ C0] Illegal XDP return value 16128 on prog (id 7) dev lo, expect packet loss! [ 32.333591][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.584432][ T3548] syz.4.15 (3548) used greatest stack depth: 9696 bytes left [ 33.957431][ T3593] loop3: detected capacity change from 0 to 128 [ 34.057047][ T3597] loop4: detected capacity change from 0 to 164 [ 34.069848][ T3597] iso9660: Unknown parameter 'iocset' [ 34.105389][ T3599] loop1: detected capacity change from 0 to 512 [ 34.111866][ T3599] ======================================================= [ 34.111866][ T3599] WARNING: The mand mount option has been deprecated and [ 34.111866][ T3599] and is ignored by this kernel. Remove the mand [ 34.111866][ T3599] option from the mount to silence this warning. [ 34.111866][ T3599] ======================================================= [ 34.117511][ T3599] EXT4-fs: Invalid want_extra_isize 4194314 [ 34.245140][ T3599] loop1: detected capacity change from 0 to 512 [ 34.285007][ T3599] EXT4-fs (loop1): 1 truncate cleaned up [ 34.293401][ T3599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.340771][ T3599] 9p: Bad value for 'port' [ 34.426735][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.736204][ T3620] FAULT_INJECTION: forcing a failure. [ 34.736204][ T3620] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 34.736292][ T3620] CPU: 0 UID: 0 PID: 3620 Comm: syz.2.36 Not tainted syzkaller #0 PREEMPT(lazy) [ 34.736321][ T3620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.736343][ T3620] Call Trace: [ 34.736350][ T3620] [ 34.736398][ T3620] __dump_stack+0x1d/0x30 [ 34.736414][ T3620] dump_stack_lvl+0x95/0xd0 [ 34.736427][ T3620] dump_stack+0x15/0x1b [ 34.736438][ T3620] should_fail_ex+0x262/0x280 [ 34.736484][ T3620] should_fail+0xb/0x20 [ 34.736498][ T3620] should_fail_usercopy+0x1a/0x20 [ 34.736534][ T3620] set_fd_set+0x29/0x90 [ 34.736545][ T3620] core_sys_select+0x5aa/0x730 [ 34.736601][ T3620] __se_sys_pselect6+0x23f/0x2a0 [ 34.736631][ T3620] __x64_sys_pselect6+0x78/0x90 [ 34.736657][ T3620] x64_sys_call+0x1dfc/0x2550 [ 34.736676][ T3620] do_syscall_64+0x112/0x360 [ 34.736716][ T3620] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 34.736733][ T3620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.736747][ T3620] RIP: 0033:0x7f230ea4e159 [ 34.736815][ T3620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.736826][ T3620] RSP: 002b:00007f230d4a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 34.736913][ T3620] RAX: ffffffffffffffda RBX: 00007f230ecd5fa0 RCX: 00007f230ea4e159 [ 34.736921][ T3620] RDX: 0000200000000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.736929][ T3620] RBP: 00007f230eae506b R08: 0000200000000400 R09: 0000000000000000 [ 34.736937][ T3620] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000000 [ 34.736944][ T3620] R13: 00007f230ecd6038 R14: 00007f230ecd5fa0 R15: 00007ffe4e001bd8 [ 34.737021][ T3620] [ 35.396994][ T3633] capability: warning: `syz.2.42' uses deprecated v2 capabilities in a way that may be insecure [ 35.605344][ T3635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.43'. [ 35.605453][ T3635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.43'. [ 35.633341][ T3635] loop0: detected capacity change from 0 to 512 [ 35.644333][ T3635] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 35.644378][ T3635] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 35.644424][ T3635] System zones: 0-1, 15-15, 18-18, 34-34 [ 35.644536][ T3635] EXT4-fs (loop0): orphan cleanup on readonly fs [ 35.644603][ T3635] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 35.644630][ T3635] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 35.646031][ T3635] EXT4-fs (loop0): 1 truncate cleaned up [ 35.646464][ T3635] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.767980][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.863972][ T3638] loop0: detected capacity change from 0 to 512 [ 35.867407][ T3638] EXT4-fs: Invalid want_extra_isize 4194314 [ 35.910896][ T3638] loop0: detected capacity change from 0 to 512 [ 35.918683][ T3631] FAULT_INJECTION: forcing a failure. [ 35.918683][ T3631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 35.918712][ T3631] CPU: 0 UID: 0 PID: 3631 Comm: syz.1.40 Not tainted syzkaller #0 PREEMPT(lazy) [ 35.918740][ T3631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.918761][ T3631] Call Trace: [ 35.918769][ T3631] [ 35.918778][ T3631] __dump_stack+0x1d/0x30 [ 35.918875][ T3631] dump_stack_lvl+0x95/0xd0 [ 35.918899][ T3631] dump_stack+0x15/0x1b [ 35.918923][ T3631] should_fail_ex+0x262/0x280 [ 35.918953][ T3631] should_fail+0xb/0x20 [ 35.919004][ T3631] should_fail_usercopy+0x1a/0x20 [ 35.919036][ T3631] _copy_to_user+0x20/0xa0 [ 35.919066][ T3631] simple_read_from_buffer+0xb5/0x130 [ 35.919173][ T3631] proc_fail_nth_read+0x10e/0x150 [ 35.919201][ T3631] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 35.919227][ T3631] vfs_read+0x18e/0x7c0 [ 35.919259][ T3631] ? __rcu_read_unlock+0x4e/0x70 [ 35.919371][ T3631] ? __fget_files+0x184/0x1c0 [ 35.919397][ T3631] ? mutex_lock+0x57/0x90 [ 35.919427][ T3631] ksys_read+0xdc/0x1a0 [ 35.919531][ T3631] __x64_sys_read+0x40/0x50 [ 35.919561][ T3631] x64_sys_call+0x2135/0x2550 [ 35.919661][ T3631] do_syscall_64+0x112/0x360 [ 35.919689][ T3631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.919712][ T3631] RIP: 0033:0x7fe7bc19e98e [ 35.919802][ T3631] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 35.919822][ T3631] RSP: 002b:00007fe7bac36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 35.919881][ T3631] RAX: ffffffffffffffda RBX: 00007fe7bac376c0 RCX: 00007fe7bc19e98e [ 35.919897][ T3631] RDX: 000000000000000f RSI: 00007fe7bac370a0 RDI: 0000000000000005 [ 35.919912][ T3631] RBP: 00007fe7bac37090 R08: 0000000000000000 R09: 0000000000000000 [ 35.920003][ T3631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.920017][ T3631] R13: 00007fe7bc466038 R14: 00007fe7bc465fa0 R15: 00007fff383122c8 [ 35.920039][ T3631] [ 36.007107][ T3638] EXT4-fs (loop0): 1 truncate cleaned up [ 36.013857][ T3638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.030161][ T3638] 9p: Bad value for 'port' [ 36.065029][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.871527][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 36.871557][ T29] audit: type=1400 audit(1791095973.353:245): avc: denied { bind } for pid=3656 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.988154][ T3659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.50'. [ 36.988338][ T3659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.50'. [ 37.006349][ T3659] loop1: detected capacity change from 0 to 512 [ 37.011116][ T3659] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 37.014651][ T3659] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 37.014682][ T3659] System zones: 0-1, 15-15, 18-18, 34-34 [ 37.014930][ T3659] EXT4-fs (loop1): orphan cleanup on readonly fs [ 37.014960][ T3659] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 37.014988][ T3659] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 37.015015][ T3659] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 37.015392][ T3659] EXT4-fs (loop1): 1 truncate cleaned up [ 37.016135][ T3659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.207742][ T29] audit: type=1400 audit(1791095973.693:246): avc: denied { create } for pid=3661 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 37.215623][ T29] audit: type=1400 audit(1791095973.703:247): avc: denied { write } for pid=3661 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 37.232100][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.308445][ T29] audit: type=1400 audit(1791095973.793:248): avc: denied { bind } for pid=3665 comm="syz.4.53" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.308733][ T29] audit: type=1400 audit(1791095973.793:249): avc: denied { name_bind } for pid=3665 comm="syz.4.53" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 37.308759][ T29] audit: type=1400 audit(1791095973.793:250): avc: denied { node_bind } for pid=3665 comm="syz.4.53" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 37.309348][ T29] audit: type=1400 audit(1791095973.793:251): avc: denied { write } for pid=3665 comm="syz.4.53" laddr=172.20.20.170 lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.404742][ T3669] FAULT_INJECTION: forcing a failure. [ 37.404742][ T3669] name failslab, interval 1, probability 0, space 0, times 1 [ 37.404791][ T3669] CPU: 1 UID: 0 PID: 3669 Comm: syz.4.53 Not tainted syzkaller #0 PREEMPT(lazy) [ 37.404863][ T3669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.404878][ T3669] Call Trace: [ 37.404885][ T3669] [ 37.404894][ T3669] __dump_stack+0x1d/0x30 [ 37.404922][ T3669] dump_stack_lvl+0x95/0xd0 [ 37.404960][ T3669] dump_stack+0x15/0x1b [ 37.404984][ T3669] should_fail_ex+0x262/0x280 [ 37.405087][ T3669] ? alloc_workqueue_va+0x61c/0x1630 [ 37.405176][ T3669] should_failslab+0x8c/0xb0 [ 37.405276][ T3669] __kmalloc_cache_node_noprof+0x81/0x420 [ 37.405309][ T3669] ? alloc_workqueue_va+0x61c/0x1630 [ 37.405338][ T3669] alloc_workqueue_va+0x61c/0x1630 [ 37.405414][ T3669] alloc_workqueue_noprof+0x84/0xb0 [ 37.405439][ T3669] ? should_fail_ex+0xdb/0x280 [ 37.405535][ T3669] bond_init+0x94/0x2a0 [ 37.405561][ T3669] register_netdevice+0x239/0x11a0 [ 37.405589][ T3669] bond_newlink+0x2f/0xb0 [ 37.405617][ T3669] ? __pfx_bond_newlink+0x10/0x10 [ 37.405687][ T3669] rtnl_newlink_create+0x1e4/0x4a0 [ 37.405721][ T3669] ? security_capable+0x7b/0x90 [ 37.405747][ T3669] ? netlink_ns_capable+0x86/0xa0 [ 37.405852][ T3669] rtnl_newlink+0x1255/0x1510 [ 37.405887][ T3669] ? try_charge_memcg+0x269/0xae0 [ 37.405943][ T3669] ? __memcg_slab_free_hook+0x154/0x340 [ 37.405998][ T3669] ? __rcu_read_unlock+0x4e/0x70 [ 37.406032][ T3669] ? avc_has_perm_noaudit+0xac/0x160 [ 37.406058][ T3669] ? cred_has_capability+0x224/0x2a0 [ 37.406089][ T3669] ? selinux_capable+0x31/0x40 [ 37.406122][ T3669] ? security_capable+0x7b/0x90 [ 37.406149][ T3669] ? ns_capable+0x80/0xb0 [ 37.406167][ T3669] ? __pfx_rtnl_newlink+0x10/0x10 [ 37.406197][ T3669] rtnetlink_rcv_msg+0x64b/0x720 [ 37.406252][ T3669] netlink_rcv_skb+0x11e/0x220 [ 37.406274][ T3669] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 37.406370][ T3669] rtnetlink_rcv+0x1c/0x30 [ 37.406398][ T3669] netlink_unicast+0x5a9/0x680 [ 37.406432][ T3669] netlink_sendmsg+0x5be/0x6f0 [ 37.406458][ T3669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 37.406497][ T3669] ____sys_sendmsg+0x532/0x580 [ 37.406588][ T3669] ___sys_sendmsg+0x195/0x1e0 [ 37.406669][ T3669] __x64_sys_sendmsg+0xd4/0x160 [ 37.406694][ T3669] x64_sys_call+0x22ab/0x2550 [ 37.406726][ T3669] do_syscall_64+0x112/0x360 [ 37.406752][ T3669] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 37.406786][ T3669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.406851][ T3669] RIP: 0033:0x7f26b73ae159 [ 37.406865][ T3669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.406903][ T3669] RSP: 002b:00007f26b5e07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.406926][ T3669] RAX: ffffffffffffffda RBX: 00007f26b7635fa0 RCX: 00007f26b73ae159 [ 37.406942][ T3669] RDX: 0000000020040040 RSI: 0000200000000000 RDI: 0000000000000005 [ 37.406955][ T3669] RBP: 00007f26b744506b R08: 0000000000000000 R09: 0000000000000000 [ 37.406967][ T3669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.406978][ T3669] R13: 00007f26b7636038 R14: 00007f26b7635fa0 R15: 00007fff7dd02a48 [ 37.406996][ T3669] [ 37.485067][ T3673] loop3: detected capacity change from 0 to 128 [ 37.648272][ T3681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.59'. [ 38.079509][ T3697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.65'. [ 38.096131][ T3697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.65'. [ 38.190449][ T3697] loop0: detected capacity change from 0 to 512 [ 38.214910][ T3697] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 38.214928][ T3697] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 38.215526][ T3697] System zones: 0-1, 15-15, 18-18, 34-34 [ 38.247356][ T3697] EXT4-fs (loop0): orphan cleanup on readonly fs [ 38.248591][ T3697] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 38.249264][ T3697] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 38.249320][ T3697] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 38.313182][ T3697] EXT4-fs (loop0): 1 truncate cleaned up [ 38.318786][ T3697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.527521][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.706672][ T3707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.67'. [ 38.706790][ T3707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.67'. [ 38.812986][ T29] audit: type=1400 audit(1791095975.293:252): avc: denied { relabelfrom } for pid=3710 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 38.849430][ T3719] FAULT_INJECTION: forcing a failure. [ 38.849430][ T3719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.849460][ T3719] CPU: 0 UID: 0 PID: 3719 Comm: syz.0.72 Not tainted syzkaller #0 PREEMPT(lazy) [ 38.849509][ T3719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.849521][ T3719] Call Trace: [ 38.849527][ T3719] [ 38.849533][ T3719] __dump_stack+0x1d/0x30 [ 38.849557][ T3719] dump_stack_lvl+0x95/0xd0 [ 38.849581][ T3719] dump_stack+0x15/0x1b [ 38.849641][ T3719] should_fail_ex+0x262/0x280 [ 38.849667][ T3719] should_fail+0xb/0x20 [ 38.849726][ T3719] should_fail_usercopy+0x1a/0x20 [ 38.849757][ T3719] set_fd_set+0x29/0x90 [ 38.849779][ T3719] core_sys_select+0x5aa/0x730 [ 38.849833][ T3719] __se_sys_pselect6+0x23f/0x2a0 [ 38.849876][ T3719] __x64_sys_pselect6+0x78/0x90 [ 38.849897][ T3719] x64_sys_call+0x1dfc/0x2550 [ 38.850006][ T3719] do_syscall_64+0x112/0x360 [ 38.850034][ T3719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.850071][ T3719] RIP: 0033:0x7fe8241be159 [ 38.850088][ T3719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.850108][ T3719] RSP: 002b:00007fe822c17028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 38.850190][ T3719] RAX: ffffffffffffffda RBX: 00007fe824445fa0 RCX: 00007fe8241be159 [ 38.850204][ T3719] RDX: 0000200000000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 38.850243][ T3719] RBP: 00007fe82425506b R08: 0000200000000400 R09: 0000200000000480 [ 38.850289][ T3719] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000000 [ 38.850302][ T3719] R13: 00007fe824446038 R14: 00007fe824445fa0 R15: 00007ffc2e71e5a8 [ 38.850323][ T3719] [ 39.108915][ T3735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.76'. [ 39.118456][ T3742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.79'. [ 39.118503][ T3742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.79'. [ 40.354458][ T3782] FAULT_INJECTION: forcing a failure. [ 40.354458][ T3782] name failslab, interval 1, probability 0, space 0, times 0 [ 40.354563][ T3782] CPU: 0 UID: 0 PID: 3782 Comm: syz.1.85 Not tainted syzkaller #0 PREEMPT(lazy) [ 40.354579][ T3782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.354586][ T3782] Call Trace: [ 40.354591][ T3782] [ 40.354596][ T3782] __dump_stack+0x1d/0x30 [ 40.354611][ T3782] dump_stack_lvl+0x95/0xd0 [ 40.354639][ T3782] dump_stack+0x15/0x1b [ 40.354651][ T3782] should_fail_ex+0x262/0x280 [ 40.354703][ T3782] ? alloc_empty_file+0x70/0x1e0 [ 40.354717][ T3782] should_failslab+0x8c/0xb0 [ 40.354738][ T3782] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 40.354767][ T3782] ? alloc_empty_file+0x70/0x1e0 [ 40.354831][ T3782] alloc_empty_file+0x70/0x1e0 [ 40.354845][ T3782] path_openat+0x50/0x10d0 [ 40.354887][ T3782] ? irqentry_exit+0x58f/0x610 [ 40.354899][ T3782] do_file_open+0x16c/0x290 [ 40.354920][ T3782] do_sys_openat2+0xa0/0x130 [ 40.354936][ T3782] __x64_sys_openat+0xf2/0x120 [ 40.354980][ T3782] x64_sys_call+0x1f72/0x2550 [ 40.355004][ T3782] do_syscall_64+0x112/0x360 [ 40.355130][ T3782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.355143][ T3782] RIP: 0033:0x7fe7bc19e98e [ 40.355153][ T3782] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 40.355163][ T3782] RSP: 002b:00007fe7bac36f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 40.355176][ T3782] RAX: ffffffffffffffda RBX: 00007fe7bac376c0 RCX: 00007fe7bc19e98e [ 40.355215][ T3782] RDX: 0000000000000002 RSI: 00007fe7bc274972 RDI: ffffffffffffff9c [ 40.355229][ T3782] RBP: 00007fe7bc27506b R08: 0000000000000000 R09: 0000000000000000 [ 40.355306][ T3782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.355313][ T3782] R13: 00007fe7bc466038 R14: 00007fe7bc465fa0 R15: 00007fff383122c8 [ 40.355324][ T3782] [ 40.560947][ T3789] FAULT_INJECTION: forcing a failure. [ 40.560947][ T3789] name failslab, interval 1, probability 0, space 0, times 0 [ 40.561232][ T3789] CPU: 1 UID: 0 PID: 3789 Comm: syz.1.88 Not tainted syzkaller #0 PREEMPT(lazy) [ 40.561258][ T3789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.561304][ T3789] Call Trace: [ 40.561358][ T3789] [ 40.561366][ T3789] __dump_stack+0x1d/0x30 [ 40.561407][ T3789] dump_stack_lvl+0x95/0xd0 [ 40.561430][ T3789] dump_stack+0x15/0x1b [ 40.561534][ T3789] should_fail_ex+0x262/0x280 [ 40.561563][ T3789] ? copy_fs_struct+0x31/0x110 [ 40.561596][ T3789] should_failslab+0x8c/0xb0 [ 40.561630][ T3789] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 40.561701][ T3789] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 40.561737][ T3789] ? copy_fs_struct+0x31/0x110 [ 40.561778][ T3789] copy_fs_struct+0x31/0x110 [ 40.561816][ T3789] copy_fs+0x92/0x190 [ 40.561839][ T3789] copy_process+0x1002/0x2360 [ 40.561888][ T3789] kernel_clone+0x1c0/0x5f0 [ 40.561987][ T3789] ? do_futex+0x391/0x460 [ 40.562021][ T3789] __x64_sys_clone+0x143/0x180 [ 40.562059][ T3789] x64_sys_call+0x2479/0x2550 [ 40.562225][ T3789] do_syscall_64+0x112/0x360 [ 40.562252][ T3789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.562277][ T3789] RIP: 0033:0x7fe7bc1de159 [ 40.562294][ T3789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.562387][ T3789] RSP: 002b:00007fe7bac36fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 40.562409][ T3789] RAX: ffffffffffffffda RBX: 00007fe7bc465fa0 RCX: 00007fe7bc1de159 [ 40.562425][ T3789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100411 [ 40.562438][ T3789] RBP: 00007fe7bc27506b R08: 0000000000000000 R09: 0000000000000000 [ 40.562452][ T3789] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 40.562465][ T3789] R13: 00007fe7bc466038 R14: 00007fe7bc465fa0 R15: 00007fff383122c8 [ 40.562493][ T3789] [ 41.685434][ T3815] loop4: detected capacity change from 0 to 512 [ 41.687543][ T3815] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 41.687561][ T3815] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 41.687686][ T3815] System zones: 0-1, 15-15, 18-18, 34-34 [ 41.687967][ T3815] EXT4-fs (loop4): orphan cleanup on readonly fs [ 41.688011][ T3815] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 41.688086][ T3815] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 41.688513][ T3815] EXT4-fs (loop4): 1 truncate cleaned up [ 41.751210][ T3815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.838332][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.870398][ T3830] netlink: 'syz.4.104': attribute type 1 has an invalid length. [ 41.881594][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 41.881613][ T29] audit: type=1400 audit(1791095978.363:260): avc: denied { setopt } for pid=3829 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.524918][ T3839] FAULT_INJECTION: forcing a failure. [ 42.524918][ T3839] name failslab, interval 1, probability 0, space 0, times 0 [ 42.524950][ T3839] CPU: 0 UID: 0 PID: 3839 Comm: syz.3.108 Not tainted syzkaller #0 PREEMPT(lazy) [ 42.524977][ T3839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.524992][ T3839] Call Trace: [ 42.524999][ T3839] [ 42.525010][ T3839] __dump_stack+0x1d/0x30 [ 42.525035][ T3839] dump_stack_lvl+0x95/0xd0 [ 42.525056][ T3839] dump_stack+0x15/0x1b [ 42.525079][ T3839] should_fail_ex+0x262/0x280 [ 42.525191][ T3839] ? io_cache_alloc_new+0x2a/0xb0 [ 42.525221][ T3839] should_failslab+0x8c/0xb0 [ 42.525421][ T3839] __kmalloc_noprof+0xd0/0x4d0 [ 42.525451][ T3839] ? io_cache_alloc_new+0x2a/0xb0 [ 42.525552][ T3839] ? __rcu_read_unlock+0x4e/0x70 [ 42.525592][ T3839] io_cache_alloc_new+0x2a/0xb0 [ 42.525622][ T3839] io_rsrc_node_alloc+0x97/0xf0 [ 42.525840][ T3839] io_sqe_files_register+0x234/0x4e0 [ 42.525869][ T3839] __se_sys_io_uring_register+0xe7e/0x1330 [ 42.525895][ T3839] ? __se_sys_futex+0x2f6/0x370 [ 42.525940][ T3839] __x64_sys_io_uring_register+0x55/0x70 [ 42.525967][ T3839] x64_sys_call+0x1ff6/0x2550 [ 42.525997][ T3839] do_syscall_64+0x112/0x360 [ 42.526172][ T3839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.526198][ T3839] RIP: 0033:0x7fddc1c4e159 [ 42.526215][ T3839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.526300][ T3839] RSP: 002b:00007fddc06a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 42.526361][ T3839] RAX: ffffffffffffffda RBX: 00007fddc1ed5fa0 RCX: 00007fddc1c4e159 [ 42.526374][ T3839] RDX: 0000200000002d40 RSI: 0000000000000002 RDI: 0000000000000004 [ 42.526386][ T3839] RBP: 00007fddc1ce506b R08: 0000000000000000 R09: 0000000000000000 [ 42.526399][ T3839] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 42.526413][ T3839] R13: 00007fddc1ed6038 R14: 00007fddc1ed5fa0 R15: 00007fff03323298 [ 42.526471][ T3839] [ 42.875079][ T29] audit: type=1326 audit(1791095979.363:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3843 comm="syz.1.110" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bc1de159 code=0x7ffc0000 [ 42.875113][ T29] audit: type=1326 audit(1791095979.363:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3843 comm="syz.1.110" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bc1de159 code=0x7ffc0000 [ 42.921664][ T3847] ip_tables: iptables: counters copy to user failed while replacing table [ 42.921937][ T3847] ip_tables: iptables: counters copy to user failed while replacing table [ 42.922089][ T3847] ip_tables: iptables: counters copy to user failed while replacing table [ 42.922251][ T3847] ip_tables: iptables: counters copy to user failed while replacing table [ 42.922373][ T3847] ip_tables: iptables: counters copy to user failed while replacing table [ 42.922523][ T3847] ip_tables: iptables: counters copy to user failed while replacing table [ 42.922667][ T3847] ip_tables: iptables: counters copy to user failed while replacing table [ 42.922827][ T3847] ip_tables: iptables: counters copy to user failed while replacing table [ 42.928301][ T3847] ip_tables: iptables: counters copy to user failed while replacing table [ 42.930834][ T3847] ip_tables: iptables: counters copy to user failed while replacing table [ 42.972748][ T29] audit: type=1326 audit(1791095979.453:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3843 comm="syz.1.110" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bc1de159 code=0x7ffc0000 [ 42.972783][ T29] audit: type=1326 audit(1791095979.453:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3843 comm="syz.1.110" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bc1de159 code=0x7ffc0000 [ 42.972907][ T29] audit: type=1326 audit(1791095979.453:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3843 comm="syz.1.110" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe7bc1de159 code=0x7ffc0000 [ 43.032158][ T29] audit: type=1326 audit(1791095979.503:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3843 comm="syz.1.110" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bc1de159 code=0x7ffc0000 [ 43.032274][ T29] audit: type=1326 audit(1791095979.503:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3843 comm="syz.1.110" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe7bc1ddec2 code=0x7ffc0000 [ 43.032301][ T29] audit: type=1326 audit(1791095979.503:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3843 comm="syz.1.110" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe7bc1ddf57 code=0x7ffc0000 [ 43.032327][ T29] audit: type=1326 audit(1791095979.503:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3843 comm="syz.1.110" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe7bc19ae51 code=0x7ffc0000 [ 43.037054][ T3857] __nla_validate_parse: 3 callbacks suppressed [ 43.037083][ T3857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'. [ 43.146582][ T3842] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.146982][ T3842] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.366636][ T3842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.369044][ T3842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.404467][ T3873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.114'. [ 43.404595][ T3873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.114'. [ 43.409921][ T3873] loop3: detected capacity change from 0 to 512 [ 43.440420][ T3873] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 43.440440][ T3873] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 43.440540][ T3873] System zones: 0-1, 15-15, 18-18, 34-34 [ 43.440783][ T3873] EXT4-fs (loop3): orphan cleanup on readonly fs [ 43.440827][ T3873] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 43.440854][ T3873] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 43.441398][ T3873] EXT4-fs (loop3): 1 truncate cleaned up [ 43.442027][ T3873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.535266][ T3853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.111'. [ 43.542817][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.542943][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.542981][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.543022][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.685325][ T3858] loop1: detected capacity change from 0 to 32768 [ 43.691373][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.732511][ T3858] loop1: p1 p3 < > [ 43.875810][ T3866] udevd[3866]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 43.879658][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 43.922269][ T3913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'. [ 44.003809][ T3915] netlink: 25 bytes leftover after parsing attributes in process `syz.1.124'. [ 44.043793][ T3918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.125'. [ 44.110126][ T3921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 44.139418][ T3900] loop4: detected capacity change from 0 to 32768 [ 44.177583][ T3900] loop4: p1 p3 < > [ 44.183518][ T3925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.127'. [ 44.183623][ T3925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.127'. [ 44.240369][ T3925] loop1: detected capacity change from 0 to 512 [ 44.247613][ T3925] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 44.247633][ T3925] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 44.247661][ T3925] System zones: 0-1, 15-15, 18-18, 34-34 [ 44.247793][ T3925] EXT4-fs (loop1): orphan cleanup on readonly fs [ 44.247834][ T3925] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 44.247900][ T3925] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 44.253046][ T3925] EXT4-fs (loop1): 1 truncate cleaned up [ 44.253456][ T3925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.438931][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.575854][ T3938] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 45.331302][ T3961] loop4: detected capacity change from 0 to 512 [ 45.394740][ T3961] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 45.395105][ T3961] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 45.395306][ T3961] System zones: 0-1, 15-15, 18-18, 34-34 [ 45.396010][ T3961] EXT4-fs (loop4): orphan cleanup on readonly fs [ 45.396417][ T3961] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 45.396444][ T3961] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 45.397570][ T3961] EXT4-fs (loop4): 1 truncate cleaned up [ 45.400375][ T3961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.466558][ T3955] netlink: 'syz.2.140': attribute type 18 has an invalid length. [ 45.497701][ T3955] netlink: 'syz.2.140': attribute type 18 has an invalid length. [ 45.529055][ T3955] Zero length message leads to an empty skb [ 45.538798][ T70] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.538840][ T70] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.538984][ T70] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.539085][ T70] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.635669][ T3969] loop1: detected capacity change from 0 to 128 [ 45.648284][ T3970] netlink: 'syz.1.144': attribute type 12 has an invalid length. [ 45.665205][ T3969] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 45.665293][ T3969] FAT-fs (loop1): Filesystem has been set read-only [ 45.668568][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.712994][ T3985] FAULT_INJECTION: forcing a failure. [ 45.712994][ T3985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.713029][ T3985] CPU: 1 UID: 0 PID: 3985 Comm: syz.4.148 Not tainted syzkaller #0 PREEMPT(lazy) [ 45.713055][ T3985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.713069][ T3985] Call Trace: [ 45.713074][ T3985] [ 45.713097][ T3985] __dump_stack+0x1d/0x30 [ 45.713123][ T3985] dump_stack_lvl+0x95/0xd0 [ 45.713145][ T3985] dump_stack+0x15/0x1b [ 45.713165][ T3985] should_fail_ex+0x262/0x280 [ 45.713194][ T3985] should_fail+0xb/0x20 [ 45.713284][ T3985] should_fail_usercopy+0x1a/0x20 [ 45.713337][ T3985] _copy_from_user+0x1c/0xb0 [ 45.713364][ T3985] ___sys_sendmsg+0xc1/0x1e0 [ 45.713386][ T3985] ? _raw_spin_unlock+0x9/0x30 [ 45.713459][ T3985] __sys_sendmmsg+0x185/0x320 [ 45.713493][ T3985] __x64_sys_sendmmsg+0x57/0x70 [ 45.713537][ T3985] x64_sys_call+0x1fb4/0x2550 [ 45.713628][ T3985] do_syscall_64+0x112/0x360 [ 45.713650][ T3985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.713670][ T3985] RIP: 0033:0x7f26b73ae159 [ 45.713685][ T3985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.713751][ T3985] RSP: 002b:00007f26b5e07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 45.713769][ T3985] RAX: ffffffffffffffda RBX: 00007f26b7635fa0 RCX: 00007f26b73ae159 [ 45.713782][ T3985] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 45.713794][ T3985] RBP: 00007f26b5e07090 R08: 0000000000000000 R09: 0000000000000000 [ 45.713806][ T3985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.713817][ T3985] R13: 00007f26b7636038 R14: 00007f26b7635fa0 R15: 00007fff7dd02a48 [ 45.713865][ T3985] [ 46.080144][ T4002] loop3: detected capacity change from 0 to 512 [ 46.161738][ T4002] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 46.161889][ T4002] System zones: 1-12 [ 46.193093][ T4002] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.153: missing EA_INODE flag [ 46.193132][ T4002] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 46.195449][ T4002] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.153: error while reading EA inode 12 err=-117 [ 46.195499][ T4002] loop3: lost filesystem error report for type 5 error -117 [ 46.197026][ T4002] EXT4-fs (loop3): 1 orphan inode deleted [ 46.365896][ T4002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.991490][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.064885][ T4042] loop2: detected capacity change from 0 to 128 [ 47.124687][ T4036] loop1: detected capacity change from 0 to 512 [ 47.140243][ T4036] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 47.140263][ T4036] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 47.140298][ T4036] System zones: 0-1, 15-15, 18-18, 34-34 [ 47.140450][ T4036] EXT4-fs (loop1): orphan cleanup on readonly fs [ 47.140480][ T4036] __quota_error: 496 callbacks suppressed [ 47.140492][ T4036] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 47.140523][ T4036] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 47.140550][ T4036] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 47.141026][ T4036] EXT4-fs (loop1): 1 truncate cleaned up [ 47.147893][ T4036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.307141][ T29] audit: type=1400 audit(1791095983.793:763): avc: denied { create } for pid=4056 comm="syz.3.164" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rxrpc_socket permissive=1 [ 47.311251][ T29] audit: type=1400 audit(1791095983.793:764): avc: denied { create } for pid=4056 comm="syz.3.164" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=icmp_socket permissive=1 [ 47.364544][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.400713][ T29] audit: type=1400 audit(1791095983.883:765): avc: denied { setopt } for pid=4056 comm="syz.3.164" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=icmp_socket permissive=1 [ 47.437342][ T29] audit: type=1400 audit(1791095983.893:766): avc: denied { create } for pid=4056 comm="syz.3.164" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=alg_socket permissive=1 [ 47.437425][ T29] audit: type=1400 audit(1791095983.893:767): avc: denied { module_request } for pid=4056 comm="syz.3.164" kmod="net-pf-38" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.465724][ T29] audit: type=1400 audit(1791095983.933:768): avc: denied { write } for pid=4047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.577608][ T29] audit: type=1400 audit(1791095984.063:769): avc: denied { write } for pid=4072 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.401979][ T29] audit: type=1400 audit(1791095984.893:770): avc: denied { write } for pid=4081 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.469054][ T29] audit: type=1400 audit(1791095984.953:771): avc: denied { write } for pid=4108 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.574204][ T4118] loop3: detected capacity change from 0 to 128 [ 48.654063][ T4120] __nla_validate_parse: 12 callbacks suppressed [ 48.654176][ T4120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.176'. [ 48.654371][ T4120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.176'. [ 48.694739][ T4120] loop2: detected capacity change from 0 to 512 [ 48.720370][ T4120] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 48.720388][ T4120] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 48.720480][ T4120] System zones: 0-1, 15-15, 18-18, 34-34 [ 48.720765][ T4120] EXT4-fs (loop2): orphan cleanup on readonly fs [ 48.720805][ T4120] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 48.720840][ T4120] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 48.722909][ T4120] EXT4-fs (loop2): 1 truncate cleaned up [ 48.723403][ T4120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.882350][ T4124] FAULT_INJECTION: forcing a failure. [ 48.882350][ T4124] name failslab, interval 1, probability 0, space 0, times 0 [ 48.882392][ T4124] CPU: 0 UID: 0 PID: 4124 Comm: syz.0.179 Not tainted syzkaller #0 PREEMPT(lazy) [ 48.882513][ T4124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.882528][ T4124] Call Trace: [ 48.882537][ T4124] [ 48.882546][ T4124] __dump_stack+0x1d/0x30 [ 48.882577][ T4124] dump_stack_lvl+0x95/0xd0 [ 48.882599][ T4124] dump_stack+0x15/0x1b [ 48.882658][ T4124] should_fail_ex+0x262/0x280 [ 48.882712][ T4124] ? __kthread_create_on_node+0x80/0x240 [ 48.882735][ T4124] should_failslab+0x8c/0xb0 [ 48.882808][ T4124] __kmalloc_cache_noprof+0x7a/0x400 [ 48.882847][ T4124] ? __kthread_create_on_node+0x80/0x240 [ 48.882869][ T4124] ? __pfx_rescuer_thread+0x10/0x10 [ 48.882881][ T4124] __kthread_create_on_node+0x80/0x240 [ 48.882935][ T4124] ? __pfx_rescuer_thread+0x10/0x10 [ 48.882946][ T4124] kthread_create_on_node+0x89/0xc0 [ 48.883043][ T4124] ? scnprintf+0xb2/0xf0 [ 48.883063][ T4124] init_rescuer+0x17c/0x290 [ 48.883091][ T4124] ? __flush_workqueue+0x980/0xb20 [ 48.883104][ T4124] alloc_workqueue_va+0x145b/0x1630 [ 48.883121][ T4124] alloc_workqueue_noprof+0x84/0xb0 [ 48.883211][ T4124] ? should_fail_ex+0xdb/0x280 [ 48.883230][ T4124] bond_init+0x94/0x2a0 [ 48.883286][ T4124] register_netdevice+0x239/0x11a0 [ 48.883302][ T4124] bond_newlink+0x2f/0xb0 [ 48.883318][ T4124] ? __pfx_bond_newlink+0x10/0x10 [ 48.883340][ T4124] rtnl_newlink_create+0x1e4/0x4a0 [ 48.883363][ T4124] ? security_capable+0x7b/0x90 [ 48.883380][ T4124] ? netlink_ns_capable+0x86/0xa0 [ 48.883402][ T4124] rtnl_newlink+0x1255/0x1510 [ 48.883426][ T4124] ? __rcu_read_unlock+0x4e/0x70 [ 48.883445][ T4124] ? avc_has_perm_noaudit+0xac/0x160 [ 48.883518][ T4124] ? cred_has_capability+0x224/0x2a0 [ 48.883581][ T4124] ? selinux_capable+0x31/0x40 [ 48.883616][ T4124] ? security_capable+0x7b/0x90 [ 48.883634][ T4124] ? ns_capable+0x80/0xb0 [ 48.883646][ T4124] ? __pfx_rtnl_newlink+0x10/0x10 [ 48.883737][ T4124] rtnetlink_rcv_msg+0x64b/0x720 [ 48.883787][ T4124] netlink_rcv_skb+0x11e/0x220 [ 48.883881][ T4124] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 48.883902][ T4124] rtnetlink_rcv+0x1c/0x30 [ 48.883918][ T4124] netlink_unicast+0x5a9/0x680 [ 48.883962][ T4124] netlink_sendmsg+0x5be/0x6f0 [ 48.883975][ T4124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.884025][ T4124] ____sys_sendmsg+0x532/0x580 [ 48.884042][ T4124] ___sys_sendmsg+0x195/0x1e0 [ 48.884117][ T4124] __x64_sys_sendmsg+0xd4/0x160 [ 48.884244][ T4124] x64_sys_call+0x22ab/0x2550 [ 48.884273][ T4124] do_syscall_64+0x112/0x360 [ 48.884288][ T4124] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 48.884307][ T4124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.884322][ T4124] RIP: 0033:0x7fe8241be159 [ 48.884407][ T4124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.884490][ T4124] RSP: 002b:00007fe822c17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.884574][ T4124] RAX: ffffffffffffffda RBX: 00007fe824445fa0 RCX: 00007fe8241be159 [ 48.884650][ T4124] RDX: 0000000020040040 RSI: 0000200000000000 RDI: 0000000000000005 [ 48.884658][ T4124] RBP: 00007fe82425506b R08: 0000000000000000 R09: 0000000000000000 [ 48.884669][ T4124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.884677][ T4124] R13: 00007fe824446038 R14: 00007fe824445fa0 R15: 00007ffc2e71e5a8 [ 48.884689][ T4124] [ 48.893104][ T4124] workqueue: Failed to create a rescuer kthread for wq "bond1": -ENOMEM [ 48.914988][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.071586][ T4136] 8021q: VLANs not supported on ip6tnl0 [ 50.104551][ T4152] FAULT_INJECTION: forcing a failure. [ 50.104551][ T4152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.104668][ T4152] CPU: 0 UID: 0 PID: 4152 Comm: syz.1.188 Not tainted syzkaller #0 PREEMPT(lazy) [ 50.104696][ T4152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.104710][ T4152] Call Trace: [ 50.104717][ T4152] [ 50.104725][ T4152] __dump_stack+0x1d/0x30 [ 50.104752][ T4152] dump_stack_lvl+0x95/0xd0 [ 50.104845][ T4152] dump_stack+0x15/0x1b [ 50.104867][ T4152] should_fail_ex+0x262/0x280 [ 50.104892][ T4152] should_fail+0xb/0x20 [ 50.104916][ T4152] should_fail_usercopy+0x1a/0x20 [ 50.105021][ T4152] _copy_from_user+0x1c/0xb0 [ 50.105054][ T4152] ___sys_sendmsg+0xc1/0x1e0 [ 50.105263][ T4152] __x64_sys_sendmsg+0xd4/0x160 [ 50.105302][ T4152] x64_sys_call+0x22ab/0x2550 [ 50.105332][ T4152] do_syscall_64+0x112/0x360 [ 50.105362][ T4152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.105415][ T4152] RIP: 0033:0x7fe7bc1de159 [ 50.105434][ T4152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.105453][ T4152] RSP: 002b:00007fe7bac37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.105476][ T4152] RAX: ffffffffffffffda RBX: 00007fe7bc465fa0 RCX: 00007fe7bc1de159 [ 50.105491][ T4152] RDX: 0000000000004054 RSI: 0000200000000140 RDI: 0000000000000003 [ 50.105505][ T4152] RBP: 00007fe7bac37090 R08: 0000000000000000 R09: 0000000000000000 [ 50.105554][ T4152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.105566][ T4152] R13: 00007fe7bc466038 R14: 00007fe7bc465fa0 R15: 00007fff383122c8 [ 50.105627][ T4152] [ 50.262313][ T4156] dns_resolver: Unsupported content type (152) [ 50.466859][ T4164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.192'. [ 50.466972][ T4164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.192'. [ 50.620730][ T4171] loop0: detected capacity change from 0 to 512 [ 50.639976][ T4171] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 50.640005][ T4171] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 50.640112][ T4171] System zones: 0-1, 15-15, 18-18, 34-34 [ 50.640651][ T4171] EXT4-fs (loop0): orphan cleanup on readonly fs [ 50.640918][ T4171] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 50.640942][ T4171] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 50.702955][ T4171] EXT4-fs (loop0): 1 truncate cleaned up [ 50.704336][ T4171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.681660][ T4186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.196'. [ 51.682975][ T4186] netlink: 20 bytes leftover after parsing attributes in process `syz.4.196'. [ 51.710074][ T4186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.196'. [ 51.710158][ T4186] netlink: 20 bytes leftover after parsing attributes in process `syz.4.196'. [ 51.713265][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.721680][ T363] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.721791][ T363] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.721825][ T363] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.721858][ T363] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.087820][ T4195] netlink: 'syz.0.201': attribute type 16 has an invalid length. [ 52.087838][ T4195] netlink: 'syz.0.201': attribute type 3 has an invalid length. [ 52.087848][ T4195] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.201'. [ 53.097164][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 53.097190][ T29] audit: type=1400 audit(1791095989.583:782): avc: denied { mount } for pid=4203 comm="syz.1.205" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 53.100874][ T29] audit: type=1400 audit(1791095989.583:783): avc: denied { write } for pid=4203 comm="syz.1.205" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 53.100943][ T29] audit: type=1400 audit(1791095989.583:784): avc: denied { write } for pid=4203 comm="syz.1.205" path="/44/dev/kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 53.178711][ T29] audit: type=1400 audit(1791095989.673:785): avc: denied { read write } for pid=4213 comm="syz.4.208" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 53.178792][ T29] audit: type=1400 audit(1791095989.673:786): avc: denied { open } for pid=4213 comm="syz.4.208" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 53.201288][ T29] audit: type=1400 audit(1791095989.673:787): avc: denied { ioctl } for pid=4213 comm="syz.4.208" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 53.857781][ T29] audit: type=1400 audit(1791095990.343:788): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 54.117095][ T29] audit: type=1400 audit(1791095990.593:789): avc: denied { name_bind } for pid=4225 comm="syz.1.212" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 54.178227][ T29] audit: type=1400 audit(1791095990.663:790): avc: denied { ioctl } for pid=4225 comm="syz.1.212" path="socket:[7418]" dev="sockfs" ino=7418 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 54.181171][ T29] audit: type=1400 audit(1791095990.663:791): avc: denied { mount } for pid=4225 comm="syz.1.212" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 54.783840][ T4241] loop3: detected capacity change from 0 to 512 [ 54.841179][ T4241] ext4: Unknown parameter 'nouser_xattr' [ 55.039773][ T4241] IPVS: Scheduler module ip_vs_mh not found [ 55.494557][ T4255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.220'. [ 55.697594][ T4264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.223'. [ 55.933074][ T4289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.229'. [ 55.933142][ T4289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.229'. [ 55.970238][ T4289] loop2: detected capacity change from 0 to 512 [ 55.983939][ T4289] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 55.983961][ T4289] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 55.983997][ T4289] System zones: 0-1, 15-15, 18-18, 34-34 [ 55.984206][ T4289] EXT4-fs (loop2): orphan cleanup on readonly fs [ 55.984315][ T4289] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 55.984407][ T4289] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 55.985084][ T4289] EXT4-fs (loop2): 1 truncate cleaned up [ 55.985484][ T4289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.264600][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.590418][ T4321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=4321 comm=syz.1.236 [ 56.607868][ T4317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.234'. [ 56.764392][ T4327] loop2: detected capacity change from 0 to 512 [ 56.827915][ T4327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.828405][ T4327] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.885401][ T4334] loop4: detected capacity change from 0 to 512 [ 56.938543][ T4334] EXT4-fs (loop4): 1 truncate cleaned up [ 56.940743][ T4334] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.975663][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.005959][ T4334] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.240: bg 0: block 465: padding at end of block bitmap is not set [ 57.006907][ T4334] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 57.006934][ T4334] EXT4-fs (loop4): This should not happen!! Data will be lost [ 57.006934][ T4334] [ 57.006980][ T4334] EXT4-fs (loop4): Total free blocks count 0 [ 57.007001][ T4334] EXT4-fs (loop4): Free/Dirty block details [ 57.007021][ T4334] EXT4-fs (loop4): free_blocks=0 [ 57.007051][ T4334] EXT4-fs (loop4): dirty_blocks=1 [ 57.007093][ T4334] EXT4-fs (loop4): Block reservation details [ 57.007112][ T4334] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 57.129997][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.262138][ T4339] netlink: 28 bytes leftover after parsing attributes in process `syz.2.242'. [ 57.291489][ T4341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.243'. [ 57.291588][ T4341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.243'. [ 57.325177][ T4341] loop4: detected capacity change from 0 to 512 [ 57.330437][ T4341] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 57.330455][ T4341] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 57.330486][ T4341] System zones: 0-1, 15-15, 18-18, 34-34 [ 57.330624][ T4341] EXT4-fs (loop4): orphan cleanup on readonly fs [ 57.330703][ T4341] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 57.330730][ T4341] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 57.331062][ T4341] EXT4-fs (loop4): 1 truncate cleaned up [ 57.331786][ T4341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.604468][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.056277][ T4363] loop4: detected capacity change from 0 to 512 [ 58.072921][ T4363] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.078123][ T4363] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.251: bad orphan inode 131083 [ 58.078184][ T4363] loop4: lost filesystem error report for type 5 error -117 [ 58.080069][ T4363] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.130405][ T4363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.140641][ T4359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.250'. [ 58.494297][ T4376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.254'. [ 58.864502][ T4392] loop4: detected capacity change from 0 to 512 [ 58.867265][ T4392] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.868823][ T4392] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.261: bad orphan inode 131083 [ 58.868851][ T4392] loop4: lost filesystem error report for type 5 error -117 [ 58.871002][ T4392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.946492][ T4395] loop0: detected capacity change from 0 to 512 [ 58.956230][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 58.956245][ T29] audit: type=1400 audit(1791095995.443:811): avc: denied { write } for pid=4390 comm="syz.4.261" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.973762][ T29] audit: type=1400 audit(1791095995.463:812): avc: denied { bind } for pid=4390 comm="syz.4.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.974624][ T4395] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 58.974641][ T4395] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 58.974683][ T4395] System zones: 0-1, 15-15, 18-18, 34-34 [ 58.974875][ T4395] EXT4-fs (loop0): orphan cleanup on readonly fs [ 58.974957][ T4395] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 58.974990][ T4395] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 58.975067][ T4395] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 58.978983][ T4395] EXT4-fs (loop0): 1 truncate cleaned up [ 58.979462][ T4395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.686019][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.809388][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.190084][ T4436] netlink: 'syz.4.273': attribute type 16 has an invalid length. [ 60.190215][ T4436] netlink: 'syz.4.273': attribute type 3 has an invalid length. [ 60.547505][ T4444] loop2: detected capacity change from 0 to 512 [ 60.561941][ T4444] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.588968][ T4444] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.280: bad orphan inode 131083 [ 60.589444][ T4444] loop2: lost filesystem error report for type 5 error -117 [ 60.601767][ T4442] loop3: detected capacity change from 0 to 512 [ 60.633744][ T4444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.641772][ T29] audit: type=1400 audit(1791095997.133:813): avc: denied { write } for pid=4443 comm="syz.2.280" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.656577][ T4442] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 60.656626][ T4442] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 60.656654][ T4442] System zones: 0-1, 15-15, 18-18, 34-34 [ 60.656781][ T4442] EXT4-fs (loop3): orphan cleanup on readonly fs [ 60.656822][ T4442] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 60.656853][ T4442] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 60.656880][ T4442] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 60.693249][ T4442] EXT4-fs (loop3): 1 truncate cleaned up [ 60.693775][ T4442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.069423][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.321462][ T29] audit: type=1400 audit(1791095997.803:814): avc: denied { create } for pid=4457 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 61.359971][ T29] audit: type=1400 audit(1791095997.853:815): avc: denied { bind } for pid=4457 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 61.392650][ T29] audit: type=1400 audit(1791095997.883:816): avc: denied { listen } for pid=4457 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 61.424887][ T29] audit: type=1400 audit(1791095997.893:817): avc: denied { connect } for pid=4457 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 61.424976][ T29] audit: type=1400 audit(1791095997.893:818): avc: denied { accept } for pid=4457 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 61.495540][ T4467] __nla_validate_parse: 9 callbacks suppressed [ 61.495567][ T4467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.289'. [ 61.695001][ T4475] loop3: detected capacity change from 0 to 512 [ 61.699978][ T4475] EXT4-fs error (device loop3): ext4_xattr_inode_iget:473: comm syz.3.293: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 61.700012][ T4475] loop3: lost filesystem error report for type 5 error -117 [ 61.700267][ T4475] EXT4-fs (loop3): 1 orphan inode deleted [ 61.700623][ T4475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.825821][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.863712][ T4480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.294'. [ 61.863753][ T4480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.294'. [ 61.922319][ T4481] loop2: detected capacity change from 0 to 512 [ 61.944142][ T4481] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 61.944172][ T4481] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 61.944230][ T4481] System zones: 0-1, 15-15, 18-18, 34-34 [ 61.944411][ T4481] EXT4-fs (loop2): orphan cleanup on readonly fs [ 61.944459][ T4481] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 61.944494][ T4481] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 61.945664][ T4481] EXT4-fs (loop2): 1 truncate cleaned up [ 61.946050][ T4481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 62.137013][ T4491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'. [ 62.224904][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.267492][ T4501] loop0: detected capacity change from 0 to 1024 [ 62.302951][ T4501] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.302: Failed to acquire dquot type 0 [ 62.303060][ T4501] loop0: lost filesystem error report for type 5 error -5 [ 62.308936][ T4501] EXT4-fs (loop0): 1 truncate cleaned up [ 62.309443][ T4501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.788521][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.920118][ T4527] loop3: detected capacity change from 0 to 128 [ 63.054157][ T4535] loop3: detected capacity change from 0 to 512 [ 63.075940][ T4535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.076029][ T4535] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.092302][ T4535] FAULT_INJECTION: forcing a failure. [ 63.092302][ T4535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.092326][ T4535] CPU: 1 UID: 0 PID: 4535 Comm: syz.3.317 Not tainted syzkaller #0 PREEMPT(lazy) [ 63.092341][ T4535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.092376][ T4535] Call Trace: [ 63.092384][ T4535] [ 63.092393][ T4535] __dump_stack+0x1d/0x30 [ 63.092422][ T4535] dump_stack_lvl+0x95/0xd0 [ 63.092457][ T4535] dump_stack+0x15/0x1b [ 63.092485][ T4535] should_fail_ex+0x262/0x280 [ 63.092513][ T4535] should_fail+0xb/0x20 [ 63.092538][ T4535] should_fail_usercopy+0x1a/0x20 [ 63.092604][ T4535] _copy_from_user+0x1c/0xb0 [ 63.092686][ T4535] quota_setquota+0x89/0x410 [ 63.092724][ T4535] do_quotactl+0x5af/0x660 [ 63.092756][ T4535] __se_sys_quotactl+0x1f5/0x640 [ 63.092838][ T4535] __x64_sys_quotactl+0x55/0x70 [ 63.092869][ T4535] x64_sys_call+0x13d5/0x2550 [ 63.092896][ T4535] do_syscall_64+0x112/0x360 [ 63.092990][ T4535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.093014][ T4535] RIP: 0033:0x7fddc1c4e159 [ 63.093031][ T4535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.093142][ T4535] RSP: 002b:00007fddc06a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 63.093163][ T4535] RAX: ffffffffffffffda RBX: 00007fddc1ed5fa0 RCX: 00007fddc1c4e159 [ 63.093177][ T4535] RDX: 0000000000000000 RSI: 0000200000005bc0 RDI: ffffffff80000800 [ 63.093191][ T4535] RBP: 00007fddc06a7090 R08: 0000000000000000 R09: 0000000000000000 [ 63.093238][ T4535] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.093252][ T4535] R13: 00007fddc1ed6038 R14: 00007fddc1ed5fa0 R15: 00007fff03323298 [ 63.093272][ T4535] [ 63.146607][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.293814][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.589119][ T4560] loop4: detected capacity change from 0 to 4096 [ 63.636244][ T4560] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 63.674246][ T4560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.922804][ T4529] syz.2.313 (4529) used greatest stack depth: 9416 bytes left [ 63.989864][ T4573] loop1: detected capacity change from 0 to 128 [ 64.088751][ T4570] loop2: detected capacity change from 0 to 512 [ 64.131656][ T4570] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.325: iget: bad i_size value: 38620345925642 [ 64.131693][ T4570] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 64.131858][ T4570] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.325: couldn't read orphan inode 15 (err -117) [ 64.131943][ T4570] loop2: lost filesystem error report for type 5 error -117 [ 64.136979][ T4570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.160218][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 64.160260][ T29] audit: type=1400 audit(1791096000.633:842): avc: denied { write } for pid=4569 comm="syz.2.325" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.238700][ T29] audit: type=1400 audit(1791096000.723:843): avc: denied { setopt } for pid=4569 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.239818][ T29] audit: type=1400 audit(1791096000.723:844): avc: denied { accept } for pid=4569 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.399001][ T29] audit: type=1400 audit(1791096000.883:845): avc: denied { write } for pid=4569 comm="syz.2.325" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.399055][ T29] audit: type=1400 audit(1791096000.883:846): avc: denied { remove_name } for pid=4569 comm="syz.2.325" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.399218][ T29] audit: type=1400 audit(1791096000.883:847): avc: denied { rmdir } for pid=4569 comm="syz.2.325" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 64.807639][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.809191][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.847210][ T29] audit: type=1400 audit(1791096001.333:848): avc: denied { ioctl } for pid=4580 comm="syz.2.330" path="socket:[8778]" dev="sockfs" ino=8778 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.848689][ T4581] netlink: 3084 bytes leftover after parsing attributes in process `syz.2.330'. [ 64.848709][ T4581] netlink: 'syz.2.330': attribute type 1 has an invalid length. [ 64.848769][ T4581] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.330'. [ 64.850662][ T41] IPVS: starting estimator thread 0... [ 64.931045][ T4579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.331'. [ 64.952412][ T4582] IPVS: using max 2496 ests per chain, 124800 per kthread [ 64.957064][ T4590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.334'. [ 64.957173][ T4590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.334'. [ 64.994867][ T4590] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 64.994912][ T4590] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 64.994943][ T4590] System zones: 0-1, 15-15, 18-18, 34-34 [ 64.995097][ T4590] EXT4-fs (loop1): orphan cleanup on readonly fs [ 64.995159][ T4590] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 64.995187][ T4590] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 64.995212][ T4590] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 64.995944][ T4590] EXT4-fs (loop1): 1 truncate cleaned up [ 64.996616][ T4590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.253889][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.482228][ T29] audit: type=1400 audit(1791096001.963:849): avc: denied { read } for pid=3023 comm="dhcpcd" name="n33" dev="tmpfs" ino=1331 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.485253][ T29] audit: type=1400 audit(1791096001.973:850): avc: denied { open } for pid=3023 comm="dhcpcd" path="/run/udev/data/n33" dev="tmpfs" ino=1331 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.712997][ T4621] set_capacity_and_notify: 1 callbacks suppressed [ 65.713070][ T4621] loop2: detected capacity change from 0 to 128 [ 65.792541][ T4629] loop4: detected capacity change from 0 to 128 [ 66.019452][ T4657] loop3: detected capacity change from 0 to 512 [ 66.036175][ T4657] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.353: missing EA_INODE flag [ 66.036211][ T4657] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 66.036556][ T4657] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.353: error while reading EA inode 12 err=-117 [ 66.036603][ T4657] loop3: lost filesystem error report for type 5 error -117 [ 66.038942][ T4657] EXT4-fs (loop3): 1 orphan inode deleted [ 66.039422][ T4657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.127098][ T4664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.350'. [ 66.145877][ T4659] netlink: 'syz.1.352': attribute type 39 has an invalid length. [ 66.234949][ T4671] loop0: detected capacity change from 0 to 512 [ 66.255731][ T4671] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 66.255753][ T4671] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 66.255783][ T4671] System zones: 0-1, 15-15, 18-18, 34-34 [ 66.256039][ T4671] EXT4-fs (loop0): orphan cleanup on readonly fs [ 66.256121][ T4671] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 66.256150][ T4671] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 66.309708][ T4671] EXT4-fs (loop0): 1 truncate cleaned up [ 66.310038][ T4671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.889253][ T4657] __nla_validate_parse: 1 callbacks suppressed [ 66.889275][ T4657] netlink: 16 bytes leftover after parsing attributes in process `syz.3.353'. [ 66.913680][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.016231][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.075038][ T4684] net_ratelimit: 4 callbacks suppressed [ 67.075064][ T4684] ip_tables: iptables: counters copy to user failed while replacing table [ 67.082972][ T4684] netlink: 'syz.1.358': attribute type 21 has an invalid length. [ 67.083001][ T4684] netlink: 128 bytes leftover after parsing attributes in process `syz.1.358'. [ 67.083052][ T4684] netlink: 'syz.1.358': attribute type 4 has an invalid length. [ 67.083062][ T4684] netlink: 'syz.1.358': attribute type 5 has an invalid length. [ 67.083074][ T4684] netlink: 3 bytes leftover after parsing attributes in process `syz.1.358'. [ 67.087359][ T4687] loop0: detected capacity change from 0 to 128 [ 67.107414][ T4690] ipt_rpfilter: unknown options [ 67.127542][ T4690] loop3: detected capacity change from 0 to 128 [ 67.133386][ T4690] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.137874][ T4690] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.210608][ T70] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.436580][ T4709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.369'. [ 67.436631][ T4709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.369'. [ 67.466824][ T4709] loop1: detected capacity change from 0 to 512 [ 67.474799][ T4711] loop0: detected capacity change from 0 to 512 [ 67.476002][ T4709] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 67.476019][ T4709] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 67.476047][ T4709] System zones: 0-1, 15-15, 18-18, 34-34 [ 67.476205][ T4709] EXT4-fs (loop1): orphan cleanup on readonly fs [ 67.476262][ T4709] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 67.476287][ T4709] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 67.476848][ T4709] EXT4-fs (loop1): 1 truncate cleaned up [ 67.477298][ T4709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.566975][ T4712] xt_CT: No such helper "snmp_trap" [ 67.569433][ T4711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.569663][ T4711] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.578016][ T4711] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.370: corrupted xattr block 33: invalid checksum [ 67.578448][ T4711] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 67.578508][ T4711] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.370: corrupted xattr block 33: invalid checksum [ 67.578703][ T4711] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 67.578898][ T4711] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.370: corrupted xattr block 33: invalid checksum [ 67.584695][ T4711] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 67.588707][ T4711] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.370: corrupted xattr block 33: invalid checksum [ 67.588919][ T4711] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 67.593399][ T4711] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.370: corrupted xattr block 33: invalid checksum [ 67.593647][ T4711] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 67.593673][ T4711] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.370: corrupted xattr block 33: invalid checksum [ 67.593822][ T4711] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 67.594084][ T4711] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.370: corrupted xattr block 33: invalid checksum [ 67.599421][ T4710] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2933: inode #15: comm syz.0.370: corrupted xattr block 33: invalid checksum [ 67.599501][ T4710] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -74 [ 67.599703][ T4710] EXT4-fs warning (device loop0): ext4_evict_inode:288: xattr delete (err -74) [ 67.661309][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.847762][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.980191][ T4733] loop2: detected capacity change from 0 to 128 [ 68.491232][ T4747] loop1: detected capacity change from 0 to 512 [ 68.502178][ T4747] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.391: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 68.502263][ T4747] loop1: lost filesystem error report for type 5 error -117 [ 68.502948][ T4747] EXT4-fs (loop1): 1 orphan inode deleted [ 68.504050][ T4747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.737303][ T4754] netlink: 'syz.4.382': attribute type 29 has an invalid length. [ 68.810325][ T4759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.810427][ T4759] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.812713][ T4759] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.384: corrupted xattr block 33: invalid checksum [ 68.812978][ T4759] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 68.813007][ T4759] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.384: corrupted xattr block 33: invalid checksum [ 68.813173][ T4759] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 68.813197][ T4759] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.384: corrupted xattr block 33: invalid checksum [ 68.813381][ T4759] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 68.814471][ T4759] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.384: corrupted xattr block 33: invalid checksum [ 68.814742][ T4759] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 68.815550][ T4759] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.384: corrupted xattr block 33: invalid checksum [ 68.815759][ T4759] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 68.815809][ T4759] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.384: corrupted xattr block 33: invalid checksum [ 68.816006][ T4759] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 68.816194][ T4759] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.384: corrupted xattr block 33: invalid checksum [ 68.818365][ T4758] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2933: inode #15: comm syz.0.384: corrupted xattr block 33: invalid checksum [ 68.818399][ T4758] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -74 [ 68.818645][ T4758] EXT4-fs warning (device loop0): ext4_evict_inode:288: xattr delete (err -74) [ 68.851209][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.158813][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.517432][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 69.517468][ T29] audit: type=1400 audit(1791096006.003:904): avc: denied { read append } for pid=4791 comm="syz.1.399" name="cpu_dma_latency" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 69.517523][ T29] audit: type=1400 audit(1791096006.003:905): avc: denied { open } for pid=4791 comm="syz.1.399" path="/90/dev/cpu_dma_latency" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 69.610737][ T4793] EXT4-fs: Ignoring removed oldalloc option [ 69.640586][ T4799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.640665][ T4799] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.641117][ T29] audit: type=1400 audit(1791096006.133:906): avc: denied { write } for pid=4798 comm="syz.0.401" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.641189][ T4799] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.401: corrupted xattr block 33: invalid checksum [ 69.698416][ T4793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.698650][ T4793] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.700911][ T4799] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 69.701002][ T4799] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.401: corrupted xattr block 33: invalid checksum [ 69.705214][ T4799] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 69.705252][ T4799] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.401: corrupted xattr block 33: invalid checksum [ 69.707703][ T4799] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 69.709253][ T29] audit: type=1400 audit(1791096006.203:907): avc: denied { write } for pid=4791 comm="syz.1.399" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.724552][ T29] audit: type=1400 audit(1791096006.213:908): avc: denied { write } for pid=4791 comm="syz.1.399" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 69.724683][ T29] audit: type=1400 audit(1791096006.213:909): avc: denied { add_name } for pid=4791 comm="syz.1.399" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 69.731503][ T29] audit: type=1400 audit(1791096006.223:910): avc: denied { write } for pid=4791 comm="syz.1.399" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.733046][ T29] audit: type=1400 audit(1791096006.223:911): avc: denied { write } for pid=4791 comm="syz.1.399" name="file0" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 69.733080][ T29] audit: type=1400 audit(1791096006.223:912): avc: denied { write } for pid=4791 comm="syz.1.399" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.733141][ T29] audit: type=1400 audit(1791096006.223:913): avc: denied { rename } for pid=4791 comm="syz.1.399" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.734903][ T4793] EXT4-fs error (device loop1): ext4_get_first_dir_block:3550: inode #12: comm syz.1.399: directory missing '.' [ 69.755304][ T4799] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.401: corrupted xattr block 33: invalid checksum [ 69.755541][ T4799] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 69.759228][ T4799] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.401: corrupted xattr block 33: invalid checksum [ 69.759409][ T4799] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 69.759432][ T4799] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.401: corrupted xattr block 33: invalid checksum [ 69.759594][ T4799] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 69.759803][ T4799] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.401: corrupted xattr block 33: invalid checksum [ 69.760483][ T4798] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2933: inode #15: comm syz.0.401: corrupted xattr block 33: invalid checksum [ 69.760511][ T4798] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -74 [ 69.760640][ T4798] EXT4-fs warning (device loop0): ext4_evict_inode:288: xattr delete (err -74) [ 70.412190][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.414649][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.550674][ T4812] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.689757][ T4804] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 70.689784][ T4804] FAT-fs (loop3): Filesystem has been set read-only [ 70.963390][ T4826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.410'. [ 70.963597][ T4826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.410'. [ 71.127475][ T4835] set_capacity_and_notify: 6 callbacks suppressed [ 71.128139][ T4835] loop1: detected capacity change from 0 to 512 [ 71.139554][ T4835] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 71.139591][ T4835] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 71.139618][ T4835] System zones: 0-1, 15-15, 18-18, 34-34 [ 71.139898][ T4835] EXT4-fs (loop1): orphan cleanup on readonly fs [ 71.139939][ T4835] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 71.139966][ T4835] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 71.140227][ T4835] EXT4-fs (loop1): 1 truncate cleaned up [ 71.140786][ T4835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.514719][ T4846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 71.669526][ T4855] loop2: detected capacity change from 0 to 512 [ 71.761204][ T4858] netlink: 16 bytes leftover after parsing attributes in process `syz.2.421'. [ 71.761519][ T4860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 71.906895][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.574666][ T4890] __nla_validate_parse: 2 callbacks suppressed [ 72.574684][ T4890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.436'. [ 72.574719][ T4890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.436'. [ 72.585542][ T4876] loop0: detected capacity change from 0 to 1024 [ 72.640306][ T4876] EXT4-fs (loop0): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 72.657367][ T4893] loop4: detected capacity change from 0 to 512 [ 72.674487][ T4893] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 72.674506][ T4893] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 72.674531][ T4893] System zones: 0-1, 15-15, 18-18, 34-34 [ 72.674753][ T4893] EXT4-fs (loop4): orphan cleanup on readonly fs [ 72.674790][ T4893] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 72.674817][ T4893] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 72.675119][ T4893] EXT4-fs (loop4): 1 truncate cleaned up [ 72.675598][ T4893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.737083][ T4876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.792914][ T4876] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.430: bg 0: block 153: padding at end of block bitmap is not set [ 72.796973][ T4876] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 72.894202][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.459242][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.615256][ T4925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.449'. [ 74.383283][ T4954] FAULT_INJECTION: forcing a failure. [ 74.383283][ T4954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.383316][ T4954] CPU: 0 UID: 0 PID: 4954 Comm: syz.1.460 Not tainted syzkaller #0 PREEMPT(lazy) [ 74.383339][ T4954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.383351][ T4954] Call Trace: [ 74.383357][ T4954] [ 74.383407][ T4954] __dump_stack+0x1d/0x30 [ 74.383470][ T4954] dump_stack_lvl+0x95/0xd0 [ 74.383494][ T4954] dump_stack+0x15/0x1b [ 74.383517][ T4954] should_fail_ex+0x262/0x280 [ 74.383547][ T4954] should_fail+0xb/0x20 [ 74.383578][ T4954] should_fail_usercopy+0x1a/0x20 [ 74.383604][ T4954] _copy_from_user+0x1c/0xb0 [ 74.383635][ T4954] ___sys_sendmsg+0xc1/0x1e0 [ 74.383669][ T4954] __x64_sys_sendmsg+0xd4/0x160 [ 74.383717][ T4954] x64_sys_call+0x22ab/0x2550 [ 74.383740][ T4954] do_syscall_64+0x112/0x360 [ 74.383763][ T4954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.383848][ T4954] RIP: 0033:0x7fe7bc1de159 [ 74.383865][ T4954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.383929][ T4954] RSP: 002b:00007fe7bac37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.383950][ T4954] RAX: ffffffffffffffda RBX: 00007fe7bc465fa0 RCX: 00007fe7bc1de159 [ 74.383962][ T4954] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 74.383974][ T4954] RBP: 00007fe7bac37090 R08: 0000000000000000 R09: 0000000000000000 [ 74.383986][ T4954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.383998][ T4954] R13: 00007fe7bc466038 R14: 00007fe7bc465fa0 R15: 00007fff383122c8 [ 74.384076][ T4954] [ 74.524360][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 74.524377][ T29] audit: type=1400 audit(1791096011.003:943): avc: denied { read } for pid=3296 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 74.541227][ T29] audit: type=1400 audit(1791096011.023:944): avc: denied { create } for pid=4961 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 74.549429][ T29] audit: type=1400 audit(1791096011.033:945): avc: denied { execmem } for pid=4961 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 74.557715][ T29] audit: type=1400 audit(1791096011.043:946): avc: denied { create } for pid=4963 comm="syz.1.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 74.561603][ T29] audit: type=1400 audit(1791096011.043:947): avc: denied { read } for pid=3304 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 74.591286][ T29] audit: type=1400 audit(1791096011.073:948): avc: denied { read } for pid=3296 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 74.596219][ T29] audit: type=1400 audit(1791096011.083:949): avc: denied { read } for pid=3297 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 74.613244][ T29] audit: type=1400 audit(1791096011.103:951): avc: denied { read } for pid=3302 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 74.621405][ T29] audit: type=1400 audit(1791096011.103:952): avc: denied { create } for pid=4966 comm="syz.1.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 74.639972][ T29] audit: type=1400 audit(1791096011.093:950): avc: denied { create } for pid=4967 comm="syz.3.469" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=0 [ 74.864262][ T4978] syz.4.473 uses obsolete (PF_INET,SOCK_PACKET) [ 74.940169][ T4983] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 75.044120][ T4989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.478'. [ 75.468042][ T5026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.495'. [ 75.771606][ T5061] FAULT_INJECTION: forcing a failure. [ 75.771606][ T5061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.771636][ T5061] CPU: 1 UID: 0 PID: 5061 Comm: syz.3.512 Not tainted syzkaller #0 PREEMPT(lazy) [ 75.771662][ T5061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.771674][ T5061] Call Trace: [ 75.771687][ T5061] [ 75.771695][ T5061] __dump_stack+0x1d/0x30 [ 75.771821][ T5061] dump_stack_lvl+0x95/0xd0 [ 75.771845][ T5061] dump_stack+0x15/0x1b [ 75.771884][ T5061] should_fail_ex+0x262/0x280 [ 75.771930][ T5061] should_fail+0xb/0x20 [ 75.772000][ T5061] should_fail_usercopy+0x1a/0x20 [ 75.772060][ T5061] _copy_from_user+0x1c/0xb0 [ 75.772098][ T5061] kstrtouint_from_user+0x69/0xf0 [ 75.772160][ T5061] ? 0xffffffff81000000 [ 75.772215][ T5061] ? avc_policy_seqno+0x15/0x30 [ 75.772312][ T5061] proc_fail_nth_write+0x50/0x160 [ 75.772339][ T5061] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 75.772365][ T5061] vfs_write+0x254/0x9a0 [ 75.772399][ T5061] ? __fget_files+0x184/0x1c0 [ 75.772509][ T5061] ? mutex_lock+0x57/0x90 [ 75.772548][ T5061] ksys_write+0xdc/0x1a0 [ 75.772576][ T5061] __x64_sys_write+0x40/0x50 [ 75.772688][ T5061] x64_sys_call+0x154e/0x2550 [ 75.772791][ T5061] do_syscall_64+0x112/0x360 [ 75.772817][ T5061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.772837][ T5061] RIP: 0033:0x7fddc1c0e98e [ 75.772851][ T5061] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 75.772953][ T5061] RSP: 002b:00007fddc06a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.773026][ T5061] RAX: ffffffffffffffda RBX: 00007fddc06a76c0 RCX: 00007fddc1c0e98e [ 75.773038][ T5061] RDX: 0000000000000001 RSI: 00007fddc06a70a0 RDI: 0000000000000003 [ 75.773049][ T5061] RBP: 00007fddc06a7090 R08: 0000000000000000 R09: 0000000000000000 [ 75.773114][ T5061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.773125][ T5061] R13: 00007fddc1ed6038 R14: 00007fddc1ed5fa0 R15: 00007fff03323298 [ 75.773179][ T5061] [ 75.789866][ T5063] netlink: 'syz.0.513': attribute type 10 has an invalid length. [ 75.790220][ T5063] bridge0: port 3(netdevsim2) entered blocking state [ 75.790255][ T5063] bridge0: port 3(netdevsim2) entered disabled state [ 75.790445][ T5063] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 75.791151][ T5063] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 76.194238][ T5083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.522'. [ 76.953510][ T5134] ================================================================== [ 76.953543][ T5134] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 76.953577][ T5134] [ 76.953583][ T5134] write to 0xffff88810550df28 of 8 bytes by task 5131 on cpu 0: [ 76.953601][ T5134] mas_wr_store_entry+0x3370/0x5ac0 [ 76.953626][ T5134] mas_store_prealloc+0x421/0x670 [ 76.953651][ T5134] commit_merge+0x7b4/0x840 [ 76.953671][ T5134] vma_expand+0x2d4/0x440 [ 76.953691][ T5134] vma_merge_new_range+0x285/0x2f0 [ 76.953714][ T5134] mmap_region+0x10d4/0x2310 [ 76.953740][ T5134] do_mmap+0xa20/0xc70 [ 76.953757][ T5134] vm_mmap_pgoff+0x183/0x2d0 [ 76.953783][ T5134] ksys_mmap_pgoff+0xc1/0x310 [ 76.953800][ T5134] x64_sys_call+0x23b3/0x2550 [ 76.953824][ T5134] do_syscall_64+0x112/0x360 [ 76.953847][ T5134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.953867][ T5134] [ 76.953873][ T5134] read to 0xffff88810550df28 of 8 bytes by task 5134 on cpu 1: [ 76.953887][ T5134] mtree_range_walk+0x210/0x480 [ 76.954033][ T5134] mas_walk+0x1ac/0x340 [ 76.954051][ T5134] lock_vma_under_rcu+0xc9/0x210 [ 76.954075][ T5134] do_user_addr_fault+0x239/0x1060 [ 76.954309][ T5134] exc_page_fault+0x62/0xa0 [ 76.954336][ T5134] asm_exc_page_fault+0x26/0x30 [ 76.954354][ T5134] [ 76.954358][ T5134] value changed: 0x00007fddc0665fff -> 0x00007fddc0644fff [ 76.954368][ T5134] [ 76.954372][ T5134] Reported by Kernel Concurrency Sanitizer on: [ 76.954382][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: syz.3.543 Not tainted syzkaller #0 PREEMPT(lazy) [ 76.954403][ T5134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.954415][ T5134] ================================================================== [ 79.531777][ T29] kauditd_printk_skb: 30862 callbacks suppressed [ 79.531795][ T29] audit: type=1400 audit(1791096016.013:31815): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 79.531898][ T29] audit: type=1400 audit(1791096016.023:31816): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 79.531923][ T29] audit: type=1400 audit(1791096016.023:31817): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 79.532008][ T29] audit: type=1400 audit(1791096016.023:31818): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 79.532029][ T29] audit: type=1400 audit(1791096016.023:31819): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 79.532138][ T29] audit: type=1400 audit(1791096016.023:31820): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 79.532158][ T29] audit: type=1400 audit(1791096016.023:31821): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 79.532180][ T29] audit: type=1400 audit(1791096016.023:31822): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 79.532276][ T29] audit: type=1400 audit(1791096016.023:31823): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 79.532329][ T29] audit: type=1400 audit(1791096016.023:31824): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 84.541570][ T29] kauditd_printk_skb: 49674 callbacks suppressed [ 84.541586][ T29] audit: type=1400 audit(1791096021.033:81499): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 84.541678][ T29] audit: type=1400 audit(1791096021.033:81500): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 84.541757][ T29] audit: type=1400 audit(1791096021.033:81501): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 84.541782][ T29] audit: type=1400 audit(1791096021.033:81502): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 84.541804][ T29] audit: type=1400 audit(1791096021.033:81503): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 84.541904][ T29] audit: type=1400 audit(1791096021.033:81504): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 84.541929][ T29] audit: type=1400 audit(1791096021.033:81505): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 84.542021][ T29] audit: type=1400 audit(1791096021.033:81506): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 84.542165][ T29] audit: type=1400 audit(1791096021.033:81507): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 84.542188][ T29] audit: type=1400 audit(1791096021.033:81508): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0