last executing test programs: 3.903746553s ago: executing program 2 (id=274): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1811403, &(0x7f0000000000)={[{@noload}]}, 0x0, 0x5e6, &(0x7f0000000100)="$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") 3.823538638s ago: executing program 2 (id=276): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000400)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x4000, 0x0, 0x4040010}, 0xb0) 2.879968772s ago: executing program 2 (id=296): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) (async) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1709a70000000000000101000000080009007b08000014001f00000000000000000000000000e00000011400200000000000000000000000ffffe2ffffff0500070000000000060002000101000008000a"], 0x5c}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x5}}) (async) write$tun(0xffffffffffffffff, &(0x7f0000001500)=ANY=[@ANYBLOB="6a0003009078002809030000", @ANYRES32=0x41424344, @ANYRES64=r0, @ANYBLOB="016f08000127000000000084104a008947782b14144187d4bb8e58540a7972a5616a90835baa00dd0000"], 0x3a) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000010c0)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d0780b668947990b7ad5cfefaff7d11a7efe3bc0dad6a33b71742d2692dd217068dd4d681a9b26ffb82174cb23d63bb8feb7582cb40aac79413c7d01a5dcb4974848b339f2db4c5f1b08b640716ccb7b7b9390fd784165d77e828b17955d3dcf5f6f340d4e706fa88a7fba8f5fbaf577434a816750823d5c750a56166c895570a90a41ae6facde192a7", 0xdb}], 0x1}, 0x854) close(r2) (async) sigaltstack(&(0x7f0000001000)={&(0x7f0000000000)=""/4088, 0x80000001, 0xff8}, 0x0) (async) sigaltstack(0x0, &(0x7f0000001280)={0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async, rerun: 64) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x1614052, 0x0) (rerun: 64) fcntl$getownex(r0, 0x10, &(0x7f0000001040)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000001240)='projid_map\x00') lseek(r6, 0xfffd, 0x4) (async) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x4102) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) (async) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90324fc601000050008000900053582c137153e37000c0180fc0b1d00f80b", 0x33fe0}], 0x1, 0x0, 0x0, 0x12}, 0x0) (async, rerun: 32) recvmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net\x00') getdents64(r9, &(0x7f0000002f40)=""/4098, 0x1002) (async) sigaltstack(&(0x7f0000001300)={&(0x7f00000014c0)=""/40, 0x80000003, 0x28}, &(0x7f0000001400)={&(0x7f0000001340)=""/176, 0x0, 0xb0}) (async) ioctl$USBDEVFS_GET_CAPABILITIES(r9, 0x8004551a, &(0x7f0000001080)) (async, rerun: 64) getdents(r7, &(0x7f0000001440)=""/83, 0x53) (rerun: 64) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000", 0x4}], 0x1}, 0x0) 2.865285693s ago: executing program 2 (id=299): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, r1, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x55}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008010}, 0x45) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYRES16=r1, @ANYBLOB, @ANYRES32, @ANYBLOB="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"/947], 0x3d0}, 0x1, 0x0, 0x0, 0x8050}, 0xe7b908ead40de8a0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6bc0"], 0x7c}}, 0x4) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000801, 0x0, &(0x7f0000000380)={0x2, 0x8, 0x5, 0xfffffffffffffff9, 0x3, 0x0, 0x80, 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) unshare(0x2c020400) openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000400)={0x18, 0x0, {0x2, @random="d61fa74c04e8", 'vcan0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000200)=0x1) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfb61cb0106df6c98}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x411, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.24428089s ago: executing program 0 (id=307): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000e04eefdd3113460700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = open(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x600402, 0x25) r2 = open$dir(&(0x7f0000000800)='./file0\x00', 0x4000, 0x92) move_mount(r1, &(0x7f00000007c0)='./file1\x00', r2, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000020000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(0xfffffffffffffffd, 0x44) creat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c) 2.097083008s ago: executing program 0 (id=308): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r2 = epoll_create1(0x0) epoll_pwait2(r2, &(0x7f0000000200)=[{}], 0x1, &(0x7f0000000000), 0x0, 0x2a) chown(0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) lgetxattr(0x0, 0x0, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc, 0x15, {0x2}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07edc3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8, 0x5, 0x7b2d}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x9}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x2014) msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3000) setsockopt$inet_buf(r3, 0x0, 0x9, 0x0, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x9c) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0) 2.095922708s ago: executing program 2 (id=310): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x9a93, 0x3, 0x43, 0x4}, {0x9, 0x9, 0x12, 0xb}]}) getresgid(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gr\xe7lo_', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='ccnA\xf6gr\xe7lo_', 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x810000, &(0x7f0000000100)=ANY=[@ANYBLOB="009a01e963dfe7a3eb78b5f65ef23b62ab923203cc3f769f2d844ae0670e8c132465fd0c06a3307fa11f360c04da0ac1d22eac6ad1fc4a28a0edbbfd06f2380762d93be8a32be88fd74c06bf5291acd1fc5f"], 0x3, 0x534, &(0x7f0000000980)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101940, 0x100) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x380, 0x7ffffffe) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b57ae45bb7c1626db645bb0b0c052db8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a00400000063112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977a2b37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90ba90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c30"], 0x0}, 0x94) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x1a3801, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000900)={{0x4, 0xc}, {0xfffffffffffffffd, 0x9}, 0x1000, 0x7}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000180)={'team0\x00', 0x10001}) r5 = geteuid() mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x40040, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYRES8=r4, @ANYRESDEC=r5, @ANYBLOB=',pcr=00000000000000000002,permit_directio,fsmagic=0x0000000000000003,dont_measure,\x00']) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f00000001c0)=@nullb, r5, &(0x7f0000000200)) 2.027172802s ago: executing program 4 (id=311): socket$kcm(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r3) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24004054}, 0x801) getsockname$packet(r5, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r6, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf250100000008000200010000ef08000100", @ANYRES32=r6], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x1b) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40001, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000440)="a4", 0x1}, {0x0}], 0x2) 1.959887736s ago: executing program 2 (id=312): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = syz_clone(0x20008200, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x12) setsockopt$inet6_buf(r1, 0x29, 0x32, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x20, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = inotify_init1(0x0) inotify_add_watch(r7, 0x0, 0xa4000061) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r8) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r9, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x71) writev(r9, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) bind$can_j1939(r0, 0x0, 0x0) r10 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r12, @ANYBLOB="140800000000000000ef700108000800020700c000000000"], 0x34}}, 0x44) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="48000000200000032dbd7000fddbdf2502142025082fd2427f63cc4b13a57800dd29eb552d0000020900010008000100ac141432080018004e214e2208000b00010000000c000c400000000000000f6208000200ac1414bbc9ec3a3e40c99b8475e015f719542fb326d2667d59d698d91ffb350674bbc8306189584d70a6ed59bb74d5636df9170c4a0f772c02744fd3ab15553e8a4c106a68a246e8d942de4bbe773c0e4bca21d5c9"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1.953158106s ago: executing program 0 (id=322): socket$kcm(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r3) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24004054}, 0x801) getsockname$packet(r5, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r6, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf250100000008000200010000ef08000100", @ANYRES32=r6], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x1b) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40001, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000440)="a4", 0x1}, {0x0}], 0x2) 1.251029917s ago: executing program 3 (id=323): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000280)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc) r3 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r3, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000004b00)=""/191, 0xbf}, {&(0x7f0000000580)=""/4072, 0xfe8}, {&(0x7f0000005c00)=""/253, 0xfd}, {&(0x7f0000005d00)=""/215, 0xd7}], 0x6}}], 0x1, 0x0, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r4 = socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) 1.143858643s ago: executing program 3 (id=327): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0x0}}, './file0\x00'}) setresgid(0xee00, r0, 0x0) r1 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='environ\x00') 1.121575044s ago: executing program 3 (id=328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f00000005c0)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000190001002cbd700000c8c3532d"], 0x24}}, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x1105e2, 0x5, 0x0, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x0, r1, 0x0) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r5 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x800, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x30) shutdown(r4, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) close(r8) syz_clone(0x65140000, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)="b142d5c09507c2c65817f345407c07b6054a752a6e9b393c0aaf8dbd2cc9bd32769930a9489d399c8f08249d169240") r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmsg(r10, &(0x7f0000000840)={&(0x7f0000000100)=@isdn={0x22, 0x4, 0x5, 0xf, 0xa}, 0x80, 0x0}, 0x24040800) close(r3) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000001000010000000020000000000a01040000000000000000010000000900020073797a31000000000900010073797a300000000014006c001000010000000000000000000000000a"], 0x54}}, 0x0) 1.082222987s ago: executing program 4 (id=329): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = syz_clone(0x20008200, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x12) setsockopt$inet6_buf(r1, 0x29, 0x32, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x20, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = inotify_init1(0x0) inotify_add_watch(r7, 0x0, 0xa4000061) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r8) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r9, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x71) writev(r9, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) bind$can_j1939(r0, 0x0, 0x0) r10 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r12, @ANYBLOB="140800000000000000ef700108000800020700c000000000"], 0x34}}, 0x44) socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000)=0x3, 0x4) 989.769262ms ago: executing program 0 (id=332): unshare(0x24060400) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0xa, @val=@tcx}, 0x1c) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0xc0000) dup3(r2, r1, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) io_submit(r3, 0x1, &(0x7f0000000800)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x0, 0x0, r1, 0x0}]) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x3d) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r5, 0x2}}, 0x10) 720.332378ms ago: executing program 0 (id=334): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0xa}}, 0x20) 719.894868ms ago: executing program 0 (id=336): r0 = socket$can_raw(0x1d, 0x3, 0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000000)={0x20002008}) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r1, &(0x7f0000000600)={0xa, 0x4e24, 0x4, @loopback={0xfec0ffff00000000}}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000002c0)={0x40000, 0x0, 0x22}, 0x18) open(&(0x7f0000000100)='./file4\x00', 0x143140, 0x80) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000800)) 682.91569ms ago: executing program 1 (id=338): r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='environ\x00') 654.319022ms ago: executing program 1 (id=339): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b04000/0x10000)=nil, 0x10000, 0x100000b, 0x8031, 0xffffffffffffffff, 0xfdffa000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) pwritev(r0, 0x0, 0x0, 0x1, 0x1f5) 515.77418ms ago: executing program 1 (id=340): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000900)="89000000120081ae08060cdc030ec0007f03e3f7feff000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf00d7815e381ad6e706033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001000400446b9bbc7a46e3988285dcdf12f21308f868fece01951fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unshare(0x28000600) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) fadvise64(r1, 0xf8b1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x58, &(0x7f00000001c0)=0x0) r5 = shmget(0x3, 0x3000, 0x400, &(0x7f0000000000/0x3000)=nil) shmat(r5, &(0x7f0000003000/0x1000)=nil, 0x800) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0xfffd, r2, 0x0}]) write(r2, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x180, 0x0) connect$unix(r3, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000002008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x80008000, 0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r6, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0) 482.762432ms ago: executing program 1 (id=341): r0 = socket$inet(0xa, 0x801, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) close(0x3) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)='B', 0x1}], 0x1, 0x0, 0xfdc9, 0x5c656f613d3ffcde}}], 0x2, 0x4000044) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r2, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) sendto$inet6(r2, &(0x7f0000000180)="93", 0x1, 0x8840, 0x0, 0x0) close(r2) 279.871833ms ago: executing program 1 (id=342): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0xff00, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x4}, 0x18) 203.693388ms ago: executing program 1 (id=343): r0 = syz_io_uring_setup(0x837, &(0x7f0000000540)={0x0, 0x2b94, 0x80, 0x7, 0x3cf}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x41, 0x0, 0x0, 0x9, 0x0, 0x1, 0x4}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_setup(0x60, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000001400)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}]) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 89.977424ms ago: executing program 3 (id=344): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 89.726265ms ago: executing program 4 (id=345): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 88.446994ms ago: executing program 3 (id=346): shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000818001801"], 0x50) 88.078644ms ago: executing program 4 (id=347): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0xa}}, 0x20) 77.116395ms ago: executing program 4 (id=348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2200}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 52.866037ms ago: executing program 3 (id=349): r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='environ\x00') 0s ago: executing program 4 (id=350): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r2 = epoll_create1(0x0) epoll_pwait2(r2, &(0x7f0000000200)=[{}], 0x1, &(0x7f0000000000), 0x0, 0x2a) chown(0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) lgetxattr(0x0, 0x0, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc, 0x15, {0x2}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07edc3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8, 0x5, 0x7b2d}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x9}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x2014) msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3000) setsockopt$inet_buf(r3, 0x0, 0x9, 0x0, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x9c) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0) kernel console output (not intermixed with test programs): [ 19.010890][ T28] audit: type=1400 audit(1771157014.694:62): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.032915][ T28] audit: type=1400 audit(1771157014.694:63): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.055551][ T28] audit: type=1400 audit(1771157014.694:64): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.078682][ T28] audit: type=1400 audit(1771157014.694:65): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.102115][ T28] audit: type=1400 audit(1771157014.704:66): avc: denied { read open } for pid=3193 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.104' (ED25519) to the list of known hosts. [ 24.413488][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 24.413502][ T28] audit: type=1400 audit(1771157020.104:70): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.442584][ T28] audit: type=1400 audit(1771157020.134:71): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.443321][ T3298] cgroup: Unknown subsys name 'net' [ 24.470483][ T28] audit: type=1400 audit(1771157020.154:72): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.602927][ T3298] cgroup: Unknown subsys name 'cpuset' [ 24.609295][ T3298] cgroup: Unknown subsys name 'rlimit' [ 24.738719][ T28] audit: type=1400 audit(1771157020.424:73): avc: denied { setattr } for pid=3298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.767498][ T28] audit: type=1400 audit(1771157020.424:74): avc: denied { create } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.787946][ T28] audit: type=1400 audit(1771157020.424:75): avc: denied { write } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.808390][ T28] audit: type=1400 audit(1771157020.424:76): avc: denied { read } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.828775][ T28] audit: type=1400 audit(1771157020.424:77): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 24.849872][ T28] audit: type=1400 audit(1771157020.424:78): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.855633][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.874918][ T28] audit: type=1400 audit(1771157020.424:79): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.931769][ T3298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.027771][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 26.101127][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 26.123594][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 26.141081][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.148233][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.155391][ T3309] bridge_slave_0: entered allmulticast mode [ 26.161755][ T3309] bridge_slave_0: entered promiscuous mode [ 26.170567][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.177915][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.185077][ T3309] bridge_slave_1: entered allmulticast mode [ 26.191411][ T3309] bridge_slave_1: entered promiscuous mode [ 26.227068][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.248836][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.276025][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 26.296556][ T3309] team0: Port device team_slave_0 added [ 26.302187][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.309328][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.316597][ T3317] bridge_slave_0: entered allmulticast mode [ 26.322846][ T3317] bridge_slave_0: entered promiscuous mode [ 26.329258][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 26.353838][ T3309] team0: Port device team_slave_1 added [ 26.364106][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.371225][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.378379][ T3317] bridge_slave_1: entered allmulticast mode [ 26.384835][ T3317] bridge_slave_1: entered promiscuous mode [ 26.415983][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.423246][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.430324][ T3310] bridge_slave_0: entered allmulticast mode [ 26.436654][ T3310] bridge_slave_0: entered promiscuous mode [ 26.445756][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.452745][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.478644][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.495499][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.502655][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.509884][ T3310] bridge_slave_1: entered allmulticast mode [ 26.516322][ T3310] bridge_slave_1: entered promiscuous mode [ 26.525251][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.532334][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.558463][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.572743][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.587259][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.607179][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.614326][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.621474][ T3318] bridge_slave_0: entered allmulticast mode [ 26.627986][ T3318] bridge_slave_0: entered promiscuous mode [ 26.638928][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.646094][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.653213][ T3318] bridge_slave_1: entered allmulticast mode [ 26.659512][ T3318] bridge_slave_1: entered promiscuous mode [ 26.685192][ T3317] team0: Port device team_slave_0 added [ 26.704325][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.719011][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.729120][ T3317] team0: Port device team_slave_1 added [ 26.734801][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.741902][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.749310][ T3315] bridge_slave_0: entered allmulticast mode [ 26.755837][ T3315] bridge_slave_0: entered promiscuous mode [ 26.764162][ T3309] hsr_slave_0: entered promiscuous mode [ 26.770184][ T3309] hsr_slave_1: entered promiscuous mode [ 26.777089][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.794799][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.801873][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.809288][ T3315] bridge_slave_1: entered allmulticast mode [ 26.815851][ T3315] bridge_slave_1: entered promiscuous mode [ 26.823285][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.850207][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.857530][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.883823][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.895074][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.902016][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.927930][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.939307][ T3310] team0: Port device team_slave_0 added [ 26.959631][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.972739][ T3310] team0: Port device team_slave_1 added [ 26.979103][ T3318] team0: Port device team_slave_0 added [ 26.985871][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.014740][ T3318] team0: Port device team_slave_1 added [ 27.027547][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.034515][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.060570][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.072114][ T3315] team0: Port device team_slave_0 added [ 27.101461][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.110874][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.137001][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.148760][ T3315] team0: Port device team_slave_1 added [ 27.167736][ T3317] hsr_slave_0: entered promiscuous mode [ 27.174101][ T3317] hsr_slave_1: entered promiscuous mode [ 27.179834][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 27.185617][ T3317] Cannot create hsr debugfs directory [ 27.204218][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.211334][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.237382][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.248518][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.255731][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.282191][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.306692][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.313668][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.340194][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.363623][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.370673][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.396662][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.417173][ T3310] hsr_slave_0: entered promiscuous mode [ 27.423268][ T3310] hsr_slave_1: entered promiscuous mode [ 27.429050][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 27.434803][ T3310] Cannot create hsr debugfs directory [ 27.467917][ T3318] hsr_slave_0: entered promiscuous mode [ 27.473936][ T3318] hsr_slave_1: entered promiscuous mode [ 27.479757][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 27.485485][ T3318] Cannot create hsr debugfs directory [ 27.511946][ T3315] hsr_slave_0: entered promiscuous mode [ 27.518261][ T3315] hsr_slave_1: entered promiscuous mode [ 27.524049][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 27.529753][ T3315] Cannot create hsr debugfs directory [ 27.602798][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.613704][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.634860][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.657073][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.712067][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.720887][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.730436][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.743612][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.776972][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.786480][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.797609][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.807167][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.839176][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.848763][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.857521][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.872089][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.907160][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.914356][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.925073][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.938325][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.947490][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.971908][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.979789][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.000683][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.007756][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.029170][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.037793][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.044954][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.064602][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.071739][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.089334][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.106419][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.117157][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.124240][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.139592][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.169879][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.177030][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.192043][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.201795][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.210853][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.218025][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.246324][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.256689][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.263785][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.272619][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.280016][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.321021][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.328131][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.344755][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.351819][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.377546][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.394016][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.417892][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.451680][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.537847][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.560723][ T3317] veth0_vlan: entered promiscuous mode [ 28.580218][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.594742][ T3317] veth1_vlan: entered promiscuous mode [ 28.619535][ T3309] veth0_vlan: entered promiscuous mode [ 28.631027][ T3315] veth0_vlan: entered promiscuous mode [ 28.645578][ T3309] veth1_vlan: entered promiscuous mode [ 28.664993][ T3317] veth0_macvtap: entered promiscuous mode [ 28.672068][ T3317] veth1_macvtap: entered promiscuous mode [ 28.685539][ T3315] veth1_vlan: entered promiscuous mode [ 28.699204][ T3315] veth0_macvtap: entered promiscuous mode [ 28.707557][ T3315] veth1_macvtap: entered promiscuous mode [ 28.729639][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.737753][ T3309] veth0_macvtap: entered promiscuous mode [ 28.750196][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.761418][ T3310] veth0_vlan: entered promiscuous mode [ 28.769248][ T3309] veth1_macvtap: entered promiscuous mode [ 28.779601][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.789248][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.802925][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.814872][ T3310] veth1_vlan: entered promiscuous mode [ 28.822643][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.831846][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.844615][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.854203][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.870804][ T3310] veth0_macvtap: entered promiscuous mode [ 28.880878][ T3310] veth1_macvtap: entered promiscuous mode [ 28.899883][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.913857][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.927216][ T202] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.943575][ T202] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.953896][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.974858][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.983689][ T202] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.001654][ T202] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.023980][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.042610][ T202] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.060297][ T202] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.069305][ T202] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.108140][ T202] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.137136][ T3318] veth0_vlan: entered promiscuous mode [ 29.145857][ T202] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.191234][ T202] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.207383][ T3484] loop1: detected capacity change from 0 to 512 [ 29.212740][ T202] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.231835][ T3318] veth1_vlan: entered promiscuous mode [ 29.246009][ T3483] wireguard0: entered promiscuous mode [ 29.251598][ T3483] wireguard0: entered allmulticast mode [ 29.272374][ T3484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.276795][ T3318] veth0_macvtap: entered promiscuous mode [ 29.298411][ T3318] veth1_macvtap: entered promiscuous mode [ 29.311311][ T3484] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.345525][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.374752][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.386594][ C0] hrtimer: interrupt took 26945 ns [ 29.395538][ T3496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6'. [ 29.408839][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.418196][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.435722][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 29.435736][ T28] audit: type=1400 audit(1771157025.124:114): avc: denied { add_name } for pid=3481 comm="syz.1.2" name="cpuset.effective_mems" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.464829][ T28] audit: type=1400 audit(1771157025.154:115): avc: denied { create } for pid=3481 comm="syz.1.2" name="cpuset.effective_mems" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.487827][ T3497] xfrm0: entered promiscuous mode [ 29.504922][ T28] audit: type=1400 audit(1771157025.154:116): avc: denied { create } for pid=3481 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 29.511384][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.525405][ T28] audit: type=1400 audit(1771157025.154:117): avc: denied { setopt } for pid=3481 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 29.556068][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.565820][ T28] audit: type=1400 audit(1771157025.154:118): avc: denied { bind } for pid=3481 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 29.586048][ T28] audit: type=1400 audit(1771157025.154:119): avc: denied { name_bind } for pid=3481 comm="syz.1.2" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 29.609202][ T28] audit: type=1400 audit(1771157025.154:120): avc: denied { node_bind } for pid=3481 comm="syz.1.2" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 29.635979][ T28] audit: type=1400 audit(1771157025.154:121): avc: denied { write } for pid=3481 comm="syz.1.2" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 29.674947][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.682219][ T28] audit: type=1400 audit(1771157025.154:122): avc: denied { connect } for pid=3481 comm="syz.1.2" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 29.705165][ T28] audit: type=1400 audit(1771157025.154:123): avc: denied { name_connect } for pid=3481 comm="syz.1.2" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 29.736380][ T3500] €Â: renamed from bond_slave_0 (while UP) [ 30.081639][ T3510] loop2: detected capacity change from 0 to 1764 [ 30.102576][ T3510] iso9660: Bad value for 'mode' [ 30.519427][ T3525] xfrm0: entered promiscuous mode [ 30.612374][ T3529] syz.0.18 uses obsolete (PF_INET,SOCK_PACKET) [ 30.924009][ T3548] hub 8-0:1.0: USB hub found [ 30.928822][ T3548] hub 8-0:1.0: 8 ports detected [ 31.352503][ T3539] Zero length message leads to an empty skb [ 31.403052][ T3539] syz.3.22 (3539) used greatest stack depth: 9928 bytes left [ 31.525408][ T3560] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.807939][ T3562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25'. [ 31.816789][ T3562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25'. [ 31.842421][ T3564] random: crng reseeded on system resumption [ 31.924392][ T3568] capability: warning: `syz.3.27' uses deprecated v2 capabilities in a way that may be insecure [ 32.143520][ T3577] netlink: 20 bytes leftover after parsing attributes in process `syz.2.29'. [ 32.576531][ T3589] netlink: 28 bytes leftover after parsing attributes in process `syz.2.32'. [ 32.802821][ T3593] wireguard1: entered promiscuous mode [ 32.819823][ T3593] wireguard1: entered allmulticast mode [ 33.381138][ T3604] loop3: detected capacity change from 0 to 256 [ 33.445063][ T3604] FAT-fs (loop3): Directory bread(block 64) failed [ 33.451626][ T3604] FAT-fs (loop3): Directory bread(block 65) failed [ 33.458172][ T3604] FAT-fs (loop3): Directory bread(block 66) failed [ 33.464863][ T3604] FAT-fs (loop3): Directory bread(block 67) failed [ 33.471447][ T3604] FAT-fs (loop3): Directory bread(block 68) failed [ 33.478031][ T3604] FAT-fs (loop3): Directory bread(block 69) failed [ 33.484562][ T3604] FAT-fs (loop3): Directory bread(block 70) failed [ 33.491087][ T3604] FAT-fs (loop3): Directory bread(block 71) failed [ 33.497634][ T3604] FAT-fs (loop3): Directory bread(block 72) failed [ 33.504323][ T3604] FAT-fs (loop3): Directory bread(block 73) failed [ 33.522914][ T3604] netlink: 16 bytes leftover after parsing attributes in process `syz.3.37'. [ 33.821484][ T3603] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 33.828138][ T3603] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 33.984127][ T3603] vhci_hcd vhci_hcd.0: Device attached [ 34.274429][ T3615] loop2: detected capacity change from 0 to 512 [ 34.282274][ T23] usb 4-1: SetAddress Request (2) to port 0 [ 34.288216][ T23] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 34.357095][ T3615] EXT4-fs: Ignoring removed nobh option [ 34.412248][ T3615] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.458677][ T3615] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.504474][ T3615] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.540319][ T3615] EXT4-fs (loop2): 1 truncate cleaned up [ 34.560876][ T3615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.628772][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 34.628784][ T28] audit: type=1400 audit(1771157030.314:181): avc: denied { read append open } for pid=3614 comm="syz.2.39" path="/9/file2/blkio.bfq.avg_queue_size" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.683226][ T3621] loop4: detected capacity change from 0 to 512 [ 34.718352][ T28] audit: type=1400 audit(1771157030.404:182): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 34.771721][ T28] audit: type=1326 audit(1771157030.444:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3622 comm="syz.0.43" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8cc67bbf79 code=0x0 [ 34.801209][ T28] audit: type=1400 audit(1771157030.484:184): avc: denied { bind } for pid=3614 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.823297][ T28] audit: type=1400 audit(1771157030.484:185): avc: denied { create } for pid=3614 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.843018][ T28] audit: type=1400 audit(1771157030.514:186): avc: denied { connect } for pid=3614 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.863868][ T3631] loop0: detected capacity change from 0 to 512 [ 34.874561][ T3631] ext4: Unknown parameter 'noacl' [ 34.884177][ T3627] loop3: detected capacity change from 0 to 512 [ 34.899200][ T3627] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 34.923009][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.923508][ T3627] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.42: bg 0: block 255: padding at end of block bitmap is not set [ 34.947123][ T3627] loop3: lost filesystem error report for type 5 error -117 [ 34.952168][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 34.962265][ T3627] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 34.965881][ C1] EXT4-fs (loop3): initial error at time 1771157030: ext4_validate_block_bitmap:441 [ 34.965903][ C1] EXT4-fs (loop3): last error at time 1771157030: ext4_validate_block_bitmap:441 [ 35.005546][ T3627] loop3: lost filesystem error report for type 5 error -117 [ 35.005734][ T3627] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.42: invalid indirect mapped block 1 (level 1) [ 35.029913][ T3627] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 35.032233][ T3627] EXT4-fs (loop3): 1 truncate cleaned up [ 35.052625][ T3627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.123533][ T28] audit: type=1400 audit(1771157030.804:187): avc: denied { write } for pid=3636 comm="syz.4.46" name="pfkey" dev="proc" ino=4026532953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 35.177026][ T3637] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.184264][ T3637] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.194670][ T3610] vhci_hcd: connection reset by peer [ 35.204098][ T202] vhci_hcd vhci_hcd.1: stop threads [ 35.209394][ T202] vhci_hcd vhci_hcd.1: release socket [ 35.211575][ T28] audit: type=1400 audit(1771157030.894:188): avc: denied { create } for pid=3626 comm="syz.3.42" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 35.215127][ T202] vhci_hcd vhci_hcd.1: disconnect device [ 35.278341][ T3637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.294200][ T28] audit: type=1400 audit(1771157030.974:189): avc: denied { connect } for pid=3642 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.297537][ T3637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.330431][ T28] audit: type=1400 audit(1771157030.984:190): avc: denied { ioctl } for pid=3642 comm="syz.1.49" path="socket:[5258]" dev="sockfs" ino=5258 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.369365][ T3627] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 35.397662][ T59] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.406826][ T59] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.436055][ T59] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.459048][ T59] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.471952][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.642676][ T3657] Illegal XDP return value 3657 on prog (id 15) dev N/A, expect packet loss! [ 35.772188][ T3665] loop0: detected capacity change from 0 to 128 [ 36.751765][ T3777] wireguard0: entered promiscuous mode [ 36.788882][ T3777] wireguard0: entered allmulticast mode [ 36.797546][ T3786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'. [ 36.889171][ T3798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.60'. [ 36.944224][ T3804] wireguard0: entered promiscuous mode [ 36.957168][ T3804] wireguard0: entered allmulticast mode [ 37.006691][ T3798] team_slave_0: entered promiscuous mode [ 37.012423][ T3798] team_slave_1: entered promiscuous mode [ 37.038245][ T3798] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 37.068279][ T3786] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 37.115060][ T3814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.63'. [ 37.123940][ T3814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.136871][ T3814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.166525][ T3816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 37.173760][ T3816] IPv6: NLM_F_CREATE should be set when creating new route [ 37.181044][ T3816] IPv6: NLM_F_CREATE should be set when creating new route [ 37.188335][ T3816] IPv6: NLM_F_CREATE should be set when creating new route [ 37.226858][ T3818] netlink: 236 bytes leftover after parsing attributes in process `syz.0.64'. [ 37.232286][ T3816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 37.301174][ T3820] wireguard0: entered promiscuous mode [ 37.307023][ T3820] wireguard0: entered allmulticast mode [ 37.607861][ T3385] IPVS: starting estimator thread 0... [ 37.712362][ T3829] IPVS: using max 2496 ests per chain, 124800 per kthread [ 37.821217][ T3761] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.866049][ T3761] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.959345][ T3761] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.968133][ T3761] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.003371][ T3837] wireguard0: entered promiscuous mode [ 38.014116][ T3837] wireguard0: entered allmulticast mode [ 38.097147][ T3843] wireguard1: entered promiscuous mode [ 38.102808][ T3843] wireguard1: entered allmulticast mode [ 38.387731][ T3849] wireguard0: entered promiscuous mode [ 38.401684][ T3849] wireguard0: entered allmulticast mode [ 38.418239][ T3850] wireguard0: entered promiscuous mode [ 38.423996][ T3850] wireguard0: entered allmulticast mode [ 38.678327][ T3860] capability: warning: `syz.1.77' uses 32-bit capabilities (legacy support in use) [ 38.871894][ T3868] wireguard0: entered promiscuous mode [ 38.885518][ T3868] wireguard0: entered allmulticast mode [ 38.930534][ T3871] wireguard0: entered promiscuous mode [ 38.948642][ T3871] wireguard0: entered allmulticast mode [ 39.432653][ T23] usb 4-1: device descriptor read/8, error -110 [ 39.602346][ T23] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 39.662286][ T23] usb 4-1: enqueue for inactive port 0 [ 39.718663][ T23] usb 4-1: enqueue for inactive port 0 [ 39.749582][ T23] usb 4-1: enqueue for inactive port 0 [ 39.949224][ T3886] wireguard1: entered promiscuous mode [ 39.974655][ T3886] wireguard1: entered allmulticast mode [ 39.988352][ T3895] netlink: 32 bytes leftover after parsing attributes in process `syz.2.86'. [ 40.171735][ T3900] wireguard0: entered promiscuous mode [ 40.188521][ T3900] wireguard0: entered allmulticast mode [ 40.306374][ T3899] wireguard0: entered promiscuous mode [ 40.311920][ T3899] wireguard0: entered allmulticast mode [ 40.325939][ T3905] wireguard0: entered promiscuous mode [ 40.331540][ T3905] wireguard0: entered allmulticast mode [ 40.446755][ T3915] wireguard0: entered promiscuous mode [ 40.452503][ T3915] wireguard0: entered allmulticast mode [ 40.520408][ T3921] wireguard0: entered promiscuous mode [ 40.526269][ T3921] wireguard0: entered allmulticast mode [ 40.605552][ T3925] netlink: 32 bytes leftover after parsing attributes in process `syz.4.97'. [ 40.616521][ T3927] wireguard0: entered promiscuous mode [ 40.622098][ T3927] wireguard0: entered allmulticast mode [ 40.904603][ T23] usb usb4-port1: attempt power cycle [ 41.377872][ T3943] wireguard0: entered promiscuous mode [ 41.402541][ T3943] wireguard0: entered allmulticast mode [ 41.636859][ T3960] wireguard0: entered promiscuous mode [ 41.652946][ T3960] wireguard0: entered allmulticast mode [ 41.833518][ T3972] wireguard0: entered promiscuous mode [ 41.839090][ T3972] wireguard0: entered allmulticast mode [ 42.193921][ T3549] IPVS: starting estimator thread 0... [ 42.286403][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 42.286422][ T28] audit: type=1326 audit(1771157037.974:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b061bbf79 code=0x7ffc0000 [ 42.368246][ T4020] IPVS: using max 2544 ests per chain, 127200 per kthread [ 42.530937][ T28] audit: type=1326 audit(1771157038.014:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b061bbf79 code=0x7ffc0000 [ 42.580570][ T28] audit: type=1326 audit(1771157038.014:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8b061bbf79 code=0x7ffc0000 [ 42.631766][ T28] audit: type=1326 audit(1771157038.014:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b061bbf79 code=0x7ffc0000 [ 42.655913][ T28] audit: type=1326 audit(1771157038.014:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b061bbf79 code=0x7ffc0000 [ 42.681037][ T28] audit: type=1326 audit(1771157038.034:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8b061bbf79 code=0x7ffc0000 [ 42.707391][ T28] audit: type=1326 audit(1771157038.034:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b061bbf79 code=0x7ffc0000 [ 42.730996][ T28] audit: type=1326 audit(1771157038.034:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b061bbf79 code=0x7ffc0000 [ 42.792529][ T28] audit: type=1326 audit(1771157038.034:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b061bbf79 code=0x7ffc0000 [ 42.822394][ T28] audit: type=1326 audit(1771157038.034:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b061bbf79 code=0x7ffc0000 [ 42.874808][ T23] usb usb4-port1: unable to enumerate USB device [ 42.995068][ T4029] wireguard0: entered promiscuous mode [ 43.000550][ T4029] wireguard0: entered allmulticast mode [ 43.095773][ T4034] netlink: 32 bytes leftover after parsing attributes in process `syz.3.109'. [ 44.866888][ T4064] loop3: detected capacity change from 0 to 512 [ 44.892573][ T4064] ext4: Unknown parameter 'noacl' [ 45.061010][ T4075] loop0: detected capacity change from 0 to 512 [ 45.180844][ T4081] xfrm0: entered promiscuous mode [ 45.735742][ T4118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 45.746205][ T4118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 45.785184][ T4118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.804824][ T4118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.891756][ T4141] netlink: 'syz.2.129': attribute type 16 has an invalid length. [ 45.914495][ T4141] netlink: 'syz.2.129': attribute type 17 has an invalid length. [ 46.588844][ T4118] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.639287][ T4118] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.798094][ T4141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 46.953418][ T4209] loop3: detected capacity change from 0 to 512 [ 46.976644][ T4211] loop1: detected capacity change from 0 to 512 [ 46.996552][ T4211] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 47.011592][ T4211] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.137: bg 0: block 255: padding at end of block bitmap is not set [ 47.028213][ T4211] loop1: lost filesystem error report for type 5 error -117 [ 47.028348][ T4211] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 47.035703][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 47.035721][ C1] EXT4-fs (loop1): initial error at time 1771157042: ext4_validate_block_bitmap:441 [ 47.035754][ C1] EXT4-fs (loop1): last error at time 1771157042: ext4_validate_block_bitmap:441 [ 47.072673][ T4211] loop1: lost filesystem error report for type 5 error -117 [ 47.072843][ T4211] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.137: invalid indirect mapped block 1 (level 1) [ 47.093686][ T4211] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 47.093928][ T4211] EXT4-fs (loop1): 1 truncate cleaned up [ 47.109402][ T4211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.137536][ T4211] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 47.181377][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.265357][ T4223] loop4: detected capacity change from 0 to 512 [ 47.280881][ T4223] ext4: Unknown parameter 'noacl' [ 47.610858][ T4230] netlink: 32 bytes leftover after parsing attributes in process `syz.1.145'. [ 47.803115][ T4253] netlink: 32 bytes leftover after parsing attributes in process `syz.1.156'. [ 47.972939][ T4277] netlink: 32 bytes leftover after parsing attributes in process `syz.1.159'. [ 48.281377][ T4289] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 48.288053][ T4289] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 48.296572][ T4289] vhci_hcd vhci_hcd.0: Device attached [ 48.582818][ T23] usb 6-1: SetAddress Request (2) to port 0 [ 48.602427][ T23] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 48.609445][ T4359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'. [ 48.683386][ T4359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'. [ 48.743266][ T4365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.762787][ T4365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.922220][ T4363] netlink: 'syz.0.155': attribute type 16 has an invalid length. [ 48.943349][ T4363] netlink: 'syz.0.155': attribute type 17 has an invalid length. [ 49.000440][ T4298] vhci_hcd: connection reset by peer [ 49.032690][ T12] vhci_hcd vhci_hcd.2: stop threads [ 49.038702][ T12] vhci_hcd vhci_hcd.2: release socket [ 49.049473][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 49.121852][ T4359] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.168683][ T4359] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.330401][ T4363] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 49.440899][ T4370] syzkaller0: entered promiscuous mode [ 49.446554][ T4370] syzkaller0: entered allmulticast mode [ 49.736137][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 49.736153][ T28] audit: type=1400 audit(1771157045.424:271): avc: denied { load_policy } for pid=4390 comm="syz.1.164" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 49.748361][ T4391] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 49.772902][ T4391] SELinux: failed to load policy [ 49.869349][ T4399] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 49.967971][ T4408] hub 2-0:1.0: USB hub found [ 49.998123][ T4408] hub 2-0:1.0: 8 ports detected [ 50.161533][ T28] audit: type=1400 audit(1771157045.844:272): avc: denied { ioctl } for pid=4443 comm="syz.1.172" path="socket:[6860]" dev="sockfs" ino=6860 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.795273][ T4510] FAULT_INJECTION: forcing a failure. [ 50.795273][ T4510] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.829830][ T4510] CPU: 0 UID: 0 PID: 4510 Comm: syz.2.175 Not tainted syzkaller #0 PREEMPT(full) [ 50.829864][ T4510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 50.829881][ T4510] Call Trace: [ 50.829886][ T4510] [ 50.829894][ T4510] __dump_stack+0x1d/0x30 [ 50.830042][ T4510] dump_stack_lvl+0x95/0xd0 [ 50.830066][ T4510] dump_stack+0x15/0x1b [ 50.830089][ T4510] should_fail_ex+0x263/0x280 [ 50.830116][ T4510] should_fail+0xb/0x20 [ 50.830138][ T4510] should_fail_usercopy+0x1a/0x20 [ 50.830196][ T4510] _copy_to_user+0x20/0xa0 [ 50.830226][ T4510] simple_read_from_buffer+0xb5/0x130 [ 50.830281][ T4510] proc_fail_nth_read+0x10e/0x150 [ 50.830306][ T4510] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 50.830332][ T4510] vfs_read+0x1ab/0x7f0 [ 50.830389][ T4510] ? __rcu_read_unlock+0x4e/0x70 [ 50.830413][ T4510] ? __fget_files+0x184/0x1c0 [ 50.830494][ T4510] ? mutex_lock+0x57/0x90 [ 50.830521][ T4510] ksys_read+0xdc/0x1a0 [ 50.830549][ T4510] __x64_sys_read+0x40/0x50 [ 50.830639][ T4510] x64_sys_call+0x2886/0x3020 [ 50.830686][ T4510] do_syscall_64+0x12c/0x370 [ 50.830787][ T4510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.830811][ T4510] RIP: 0033:0x7f19e860c84e [ 50.830828][ T4510] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 50.830843][ T4510] RSP: 002b:00007f19e709efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 50.830881][ T4510] RAX: ffffffffffffffda RBX: 00007f19e709f6c0 RCX: 00007f19e860c84e [ 50.830895][ T4510] RDX: 000000000000000f RSI: 00007f19e709f0a0 RDI: 0000000000000005 [ 50.830909][ T4510] RBP: 00007f19e709f090 R08: 0000000000000000 R09: 0000000000000000 [ 50.830923][ T4510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.830936][ T4510] R13: 00007f19e88c6038 R14: 00007f19e88c5fa0 R15: 00007ffee43f6908 [ 50.830970][ T4510] [ 51.308046][ T4529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.183'. [ 51.429951][ T4547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.430020][ T4547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.464207][ T4547] netlink: 'syz.4.183': attribute type 16 has an invalid length. [ 51.464228][ T4547] netlink: 'syz.4.183': attribute type 17 has an invalid length. [ 51.536303][ T4547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.561423][ T4547] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.595723][ T4547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 51.620529][ T28] audit: type=1400 audit(1771157047.304:273): avc: denied { audit_write } for pid=4559 comm="syz.1.188" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 51.661031][ T28] audit: type=1107 audit(1771157047.304:274): pid=4559 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='•' [ 51.721448][ T4566] loop1: detected capacity change from 0 to 256 [ 51.737834][ T4566] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.791888][ T4566] FAT-fs (loop1): Directory bread(block 64) failed [ 51.811587][ T4570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65048 sclass=netlink_route_socket pid=4570 comm=syz.2.190 [ 51.824364][ T4566] FAT-fs (loop1): Directory bread(block 65) failed [ 51.830901][ T4566] FAT-fs (loop1): Directory bread(block 66) failed [ 51.839447][ T4566] FAT-fs (loop1): Directory bread(block 67) failed [ 51.852810][ T4566] FAT-fs (loop1): Directory bread(block 68) failed [ 51.862241][ T4566] FAT-fs (loop1): Directory bread(block 69) failed [ 51.872247][ T4566] FAT-fs (loop1): Directory bread(block 70) failed [ 51.886163][ T4566] FAT-fs (loop1): Directory bread(block 71) failed [ 51.900621][ T4566] FAT-fs (loop1): Directory bread(block 72) failed [ 51.907337][ T4566] FAT-fs (loop1): Directory bread(block 73) failed [ 52.328857][ T4650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.194'. [ 52.384874][ T4650] netlink: 32 bytes leftover after parsing attributes in process `syz.3.194'. [ 52.387109][ T4650] lo speed is unknown, defaulting to 1000 [ 52.387130][ T4650] lo speed is unknown, defaulting to 1000 [ 52.387368][ T4650] lo speed is unknown, defaulting to 1000 [ 52.387689][ T4650] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 52.388095][ T4650] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 52.409063][ T28] audit: type=1400 audit(1771157048.074:275): avc: denied { create } for pid=4641 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 52.409159][ T28] audit: type=1400 audit(1771157048.074:276): avc: denied { write } for pid=4641 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 52.431889][ T4650] lo speed is unknown, defaulting to 1000 [ 52.432324][ T4650] lo speed is unknown, defaulting to 1000 [ 52.432669][ T4650] lo speed is unknown, defaulting to 1000 [ 52.432938][ T4650] lo speed is unknown, defaulting to 1000 [ 52.433253][ T4650] lo speed is unknown, defaulting to 1000 [ 52.433552][ T4650] lo speed is unknown, defaulting to 1000 [ 52.616941][ T28] audit: type=1400 audit(1771157048.304:277): avc: denied { create } for pid=4687 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 52.624434][ T28] audit: type=1400 audit(1771157048.304:278): avc: denied { ioctl } for pid=4687 comm="syz.0.200" path="socket:[6951]" dev="sockfs" ino=6951 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 52.664455][ T28] audit: type=1400 audit(1771157048.354:279): avc: denied { perfmon } for pid=4690 comm="syz.0.201" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 52.665531][ T4686] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 52.682021][ T28] audit: type=1400 audit(1771157048.364:280): avc: denied { bpf } for pid=4690 comm="syz.0.201" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 53.120852][ T4698] loop3: detected capacity change from 0 to 512 [ 53.123933][ T4698] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.124706][ T4698] EXT4-fs (loop3): orphan cleanup on readonly fs [ 53.125171][ T4698] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4224: comm syz.3.202: Allocating blocks 41-42 which overlap fs metadata [ 53.125198][ T4698] loop3: lost filesystem error report for type 5 error -117 [ 53.125535][ T4698] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4224: comm syz.3.202: Allocating blocks 41-42 which overlap fs metadata [ 53.125560][ T4698] loop3: lost filesystem error report for type 5 error -117 [ 53.125736][ T4698] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.202: Failed to acquire dquot type 1 [ 53.125872][ T4698] loop3: lost filesystem error report for type 5 error -117 [ 53.126146][ T4698] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 53.126274][ T4698] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #12: comm syz.3.202: corrupted inode contents [ 53.126296][ T4698] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 53.126501][ T4698] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #12: comm syz.3.202: mark_inode_dirty error [ 53.126525][ T4698] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 53.126622][ T4698] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #12: comm syz.3.202: corrupted inode contents [ 53.126645][ T4698] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 53.126897][ T4698] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #12: comm syz.3.202: mark_inode_dirty error [ 53.126951][ T4698] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 53.127106][ T4698] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #12: comm syz.3.202: corrupted inode contents [ 53.127157][ T4698] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 53.127336][ T4698] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 53.127355][ T4698] loop3: lost filesystem error report for type 5 error -117 [ 53.127578][ T4698] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #12: comm syz.3.202: corrupted inode contents [ 53.127627][ T4698] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 53.127706][ T4698] EXT4-fs error (device loop3): ext4_truncate:4587: inode #12: comm syz.3.202: mark_inode_dirty error [ 53.127796][ T4698] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 53.127893][ T4698] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 53.127911][ T4698] loop3: lost filesystem error report for type 5 error -117 [ 53.128084][ T4698] EXT4-fs (loop3): 1 truncate cleaned up [ 53.128584][ T4698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.129089][ T4698] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.672919][ T23] usb 6-1: device descriptor read/8, error -110 [ 54.142229][ T23] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 54.173719][ T23] usb 6-1: enqueue for inactive port 0 [ 54.173824][ T23] usb 6-1: enqueue for inactive port 0 [ 54.173842][ T23] usb 6-1: enqueue for inactive port 0 [ 54.428136][ T4810] loop0: detected capacity change from 0 to 2048 [ 54.497095][ T4810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.499237][ T4810] netlink: 'syz.0.213': attribute type 4 has an invalid length. [ 54.499273][ T4810] netlink: 17 bytes leftover after parsing attributes in process `syz.0.213'. [ 54.586183][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.601994][ T4832] loop4: detected capacity change from 0 to 512 [ 54.788024][ T4854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.214'. [ 55.188072][ T4898] loop4: detected capacity change from 0 to 128 [ 55.195017][ T23] usb usb6-port1: attempt power cycle [ 55.301728][ T4914] loop3: detected capacity change from 0 to 2048 [ 55.352944][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 55.353024][ T28] audit: type=1400 audit(1771157051.044:284): avc: denied { name_bind } for pid=4919 comm="syz.1.230" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 55.390043][ T28] audit: type=1326 audit(1771157051.074:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a590bf79 code=0x7ffc0000 [ 55.454527][ T28] audit: type=1326 audit(1771157051.104:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fb4a590bf79 code=0x7ffc0000 [ 55.478996][ T28] audit: type=1326 audit(1771157051.104:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a590bf79 code=0x7ffc0000 [ 55.513637][ T4935] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 55.520200][ T4935] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 55.532222][ T28] audit: type=1326 audit(1771157051.104:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fb4a590bf79 code=0x7ffc0000 [ 55.560635][ T4935] vhci_hcd vhci_hcd.0: Device attached [ 55.566782][ T28] audit: type=1326 audit(1771157051.104:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a590bf79 code=0x7ffc0000 [ 55.569879][ T4942] FAULT_INJECTION: forcing a failure. [ 55.569879][ T4942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.590544][ T28] audit: type=1326 audit(1771157051.104:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb4a590bf79 code=0x7ffc0000 [ 55.615584][ T4942] CPU: 1 UID: 0 PID: 4942 Comm: syz.4.237 Not tainted syzkaller #0 PREEMPT(full) [ 55.615613][ T4942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 55.615693][ T4942] Call Trace: [ 55.615700][ T4942] [ 55.615708][ T4942] __dump_stack+0x1d/0x30 [ 55.615776][ T4942] dump_stack_lvl+0x95/0xd0 [ 55.615799][ T4942] dump_stack+0x15/0x1b [ 55.615820][ T4942] should_fail_ex+0x263/0x280 [ 55.615845][ T4942] should_fail+0xb/0x20 [ 55.615866][ T4942] should_fail_usercopy+0x1a/0x20 [ 55.615955][ T4942] _copy_from_user+0x1c/0xb0 [ 55.615984][ T4942] __copy_msghdr+0x244/0x300 [ 55.616011][ T4942] ___sys_sendmsg+0x10c/0x1e0 [ 55.616118][ T4942] __x64_sys_sendmsg+0xd4/0x160 [ 55.616148][ T4942] x64_sys_call+0x194c/0x3020 [ 55.616173][ T4942] do_syscall_64+0x12c/0x370 [ 55.616230][ T4942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.616299][ T4942] RIP: 0033:0x7fb4a590bf79 [ 55.616315][ T4942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.616333][ T4942] RSP: 002b:00007fb4a4367028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.616410][ T4942] RAX: ffffffffffffffda RBX: 00007fb4a5b85fa0 RCX: 00007fb4a590bf79 [ 55.616453][ T4942] RDX: 0000000000000004 RSI: 0000200000000400 RDI: 0000000000000003 [ 55.616481][ T4942] RBP: 00007fb4a4367090 R08: 0000000000000000 R09: 0000000000000000 [ 55.616494][ T4942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.616507][ T4942] R13: 00007fb4a5b86038 R14: 00007fb4a5b85fa0 R15: 00007ffe91201808 [ 55.616527][ T4942] [ 55.752183][ T4936] vhci_hcd: connection closed [ 55.757725][ T28] audit: type=1326 audit(1771157051.104:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a590bf79 code=0x7ffc0000 [ 55.763281][ T3758] vhci_hcd vhci_hcd.2: stop threads [ 55.769962][ T28] audit: type=1400 audit(1771157051.124:292): avc: denied { read } for pid=4929 comm="syz.4.233" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 55.781384][ T3758] vhci_hcd vhci_hcd.2: release socket [ 55.786397][ T28] audit: type=1400 audit(1771157051.124:293): avc: denied { open } for pid=4929 comm="syz.4.233" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 55.837729][ T3758] vhci_hcd vhci_hcd.2: disconnect device [ 55.971440][ T4956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.241'. [ 56.201901][ T4962] syzkaller0: entered promiscuous mode [ 56.207547][ T4962] syzkaller0: entered allmulticast mode [ 56.227459][ T4962] tipc: Started in network mode [ 56.232757][ T4962] tipc: Node identity 62aec12f156e, cluster identity 4711 [ 56.240080][ T4962] tipc: Enabled bearer , priority 0 [ 56.249017][ T4961] tipc: Resetting bearer [ 56.257857][ T4961] tipc: Disabling bearer [ 56.379861][ T4974] syzkaller0: entered promiscuous mode [ 56.387770][ T4974] syzkaller0: entered allmulticast mode [ 56.396689][ T4973] tipc: Started in network mode [ 56.401629][ T4973] tipc: Node identity ca93557c504f, cluster identity 4711 [ 56.409059][ T4973] tipc: Enabled bearer , priority 0 [ 56.419471][ T4973] loop2: detected capacity change from 0 to 512 [ 56.427141][ T4973] ======================================================= [ 56.427141][ T4973] WARNING: The mand mount option has been deprecated and [ 56.427141][ T4973] and is ignored by this kernel. Remove the mand [ 56.427141][ T4973] option from the mount to silence this warning. [ 56.427141][ T4973] ======================================================= [ 56.477347][ T4973] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.493501][ T4973] EXT4-fs (loop2): 1 truncate cleaned up [ 56.500789][ T4973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.542849][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.551711][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.572796][ T4972] tipc: Resetting bearer [ 56.610453][ T4985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'. [ 56.620291][ T4972] tipc: Disabling bearer [ 56.656969][ T4985] netlink: 16 bytes leftover after parsing attributes in process `syz.1.251'. [ 56.672604][ T4989] netlink: 28 bytes leftover after parsing attributes in process `syz.4.253'. [ 56.694695][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.706966][ T4989] loop4: detected capacity change from 0 to 512 [ 56.721613][ T4985] team_slave_0: entered promiscuous mode [ 56.727327][ T4985] team_slave_1: entered promiscuous mode [ 56.743322][ T4989] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.253: iget: bad i_size value: 38620345925642 [ 56.795542][ T4989] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 56.795779][ T4989] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.253: couldn't read orphan inode 15 (err -117) [ 56.804965][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 56.804982][ C0] EXT4-fs (loop4): initial error at time 1771157052: ext4_orphan_get:1391: inode 15 [ 56.805029][ C0] EXT4-fs (loop4): last error at time 1771157052: ext4_orphan_get:1391: inode 15 [ 56.855870][ T4985] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 56.872716][ T4989] loop4: lost filesystem error report for type 5 error -117 [ 56.873445][ T4989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.906821][ T4995] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 56.960944][ T5007] FAULT_INJECTION: forcing a failure. [ 56.960944][ T5007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.975536][ T4989] netlink: 'syz.4.253': attribute type 29 has an invalid length. [ 56.975660][ T5003] SELinux: failed to load policy [ 56.984364][ T4989] netlink: 'syz.4.253': attribute type 29 has an invalid length. [ 56.998570][ T4989] netlink: 500 bytes leftover after parsing attributes in process `syz.4.253'. [ 57.008070][ T5007] CPU: 0 UID: 0 PID: 5007 Comm: syz.2.261 Not tainted syzkaller #0 PREEMPT(full) [ 57.008096][ T5007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 57.008110][ T5007] Call Trace: [ 57.008116][ T5007] [ 57.008123][ T5007] __dump_stack+0x1d/0x30 [ 57.008194][ T5007] dump_stack_lvl+0x95/0xd0 [ 57.008215][ T5007] dump_stack+0x15/0x1b [ 57.008234][ T5007] should_fail_ex+0x263/0x280 [ 57.008327][ T5007] should_fail+0xb/0x20 [ 57.008344][ T5007] should_fail_usercopy+0x1a/0x20 [ 57.008366][ T5007] _copy_from_user+0x1c/0xb0 [ 57.008436][ T5007] input_event_from_user+0x5e/0x190 [ 57.008459][ T5007] ? input_inject_event+0x104/0x120 [ 57.008487][ T5007] evdev_write+0x1b0/0x2b0 [ 57.008577][ T5007] ? __pfx_evdev_write+0x10/0x10 [ 57.008605][ T5007] vfs_write+0x269/0x9f0 [ 57.008635][ T5007] ? __rcu_read_unlock+0x4e/0x70 [ 57.008657][ T5007] ? __fget_files+0x184/0x1c0 [ 57.008699][ T5007] ksys_write+0xdc/0x1a0 [ 57.008723][ T5007] __x64_sys_write+0x40/0x50 [ 57.008750][ T5007] x64_sys_call+0x27e1/0x3020 [ 57.008851][ T5007] do_syscall_64+0x12c/0x370 [ 57.008898][ T5007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.008917][ T5007] RIP: 0033:0x7f19e864bf79 [ 57.008931][ T5007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.009006][ T5007] RSP: 002b:00007f19e709f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 57.009027][ T5007] RAX: ffffffffffffffda RBX: 00007f19e88c5fa0 RCX: 00007f19e864bf79 [ 57.009041][ T5007] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000004 [ 57.009053][ T5007] RBP: 00007f19e709f090 R08: 0000000000000000 R09: 0000000000000000 [ 57.009065][ T5007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 57.009079][ T5007] R13: 00007f19e88c6038 R14: 00007f19e88c5fa0 R15: 00007ffee43f6908 [ 57.009129][ T5007] [ 57.142600][ T23] usb usb6-port1: unable to enumerate USB device [ 57.222806][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.272260][ T3377] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 57.597526][ T5049] loop2: detected capacity change from 0 to 1024 [ 57.699739][ T5059] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.769451][ T5070] FAULT_INJECTION: forcing a failure. [ 57.769451][ T5070] name failslab, interval 1, probability 0, space 0, times 0 [ 57.786616][ T5070] CPU: 0 UID: 0 PID: 5070 Comm: syz.1.281 Not tainted syzkaller #0 PREEMPT(full) [ 57.786698][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 57.786769][ T5070] Call Trace: [ 57.786776][ T5070] [ 57.786783][ T5070] __dump_stack+0x1d/0x30 [ 57.786810][ T5070] dump_stack_lvl+0x95/0xd0 [ 57.786867][ T5070] dump_stack+0x15/0x1b [ 57.786889][ T5070] should_fail_ex+0x263/0x280 [ 57.786915][ T5070] should_failslab+0x8c/0xb0 [ 57.786945][ T5070] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 57.787007][ T5070] ? sidtab_sid2str_get+0xa0/0x130 [ 57.787040][ T5070] kmemdup_noprof+0x2b/0x70 [ 57.787071][ T5070] sidtab_sid2str_get+0xa0/0x130 [ 57.787103][ T5070] security_sid_to_context_core+0x1eb/0x2e0 [ 57.787195][ T5070] security_sid_to_context+0x27/0x40 [ 57.787226][ T5070] avc_audit_post_callback+0x9d/0x540 [ 57.787248][ T5070] ? audit_log_lsm_data+0xb3e/0xbb0 [ 57.787343][ T5070] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 57.787367][ T5070] common_lsm_audit+0x1ba/0x230 [ 57.787467][ T5070] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 57.787573][ T5070] slow_avc_audit+0x14c/0x190 [ 57.787598][ T5070] avc_has_perm+0x144/0x190 [ 57.787622][ T5070] selinux_socket_getsockopt+0x192/0x1c0 [ 57.787693][ T5070] security_socket_getsockopt+0x42/0x80 [ 57.787720][ T5070] do_sock_getsockopt+0x57/0x210 [ 57.787781][ T5070] __x64_sys_getsockopt+0x11d/0x1a0 [ 57.787812][ T5070] x64_sys_call+0x2dcf/0x3020 [ 57.787839][ T5070] do_syscall_64+0x12c/0x370 [ 57.787893][ T5070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.787916][ T5070] RIP: 0033:0x7f00e644bf79 [ 57.787945][ T5070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.788013][ T5070] RSP: 002b:00007f00e4ea7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 57.788035][ T5070] RAX: ffffffffffffffda RBX: 00007f00e66c5fa0 RCX: 00007f00e644bf79 [ 57.788050][ T5070] RDX: 0000000000000011 RSI: 0000000000000113 RDI: 0000000000000003 [ 57.788063][ T5070] RBP: 00007f00e4ea7090 R08: 0000200000000080 R09: 0000000000000000 [ 57.788117][ T5070] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 57.788132][ T5070] R13: 00007f00e66c6038 R14: 00007f00e66c5fa0 R15: 00007ffc26d37348 [ 57.788153][ T5070] [ 57.810184][ T5072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.279'. [ 57.880055][ T5077] netlink: 16 bytes leftover after parsing attributes in process `syz.4.279'. [ 58.016327][ T5079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.284'. [ 58.055587][ T5059] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.096487][ T5083] loop0: detected capacity change from 0 to 128 [ 58.162263][ T5091] netlink: 'syz.1.287': attribute type 27 has an invalid length. [ 58.187508][ T5059] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.211534][ T5095] netlink: 'syz.1.287': attribute type 2 has an invalid length. [ 58.238443][ T5080] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 58.252490][ T5077] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 58.260839][ T5091] A link change request failed with some changes committed already. Interface netdevsim1 may have been left with an inconsistent configuration, please check. [ 58.289036][ T5059] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.362539][ T3755] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.391922][ T3755] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.430533][ T3755] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.447991][ T3755] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.477627][ T5111] netlink: 'syz.1.294': attribute type 5 has an invalid length. [ 58.596270][ T5118] loop3: detected capacity change from 0 to 1024 [ 58.627730][ T5118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.651571][ T5118] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.682056][ T5137] netlink: 'syz.2.299': attribute type 13 has an invalid length. [ 58.823514][ T5118] program syz.3.297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.195649][ T5137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.254847][ T5174] loop0: detected capacity change from 0 to 512 [ 59.264697][ T5174] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 59.289810][ T5174] EXT4-fs (loop0): 1 truncate cleaned up [ 59.300926][ T5174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.316718][ T3755] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.330493][ T3755] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.359673][ T3755] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.368174][ T3755] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.399867][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.411059][ T5183] loop2: detected capacity change from 0 to 164 [ 59.438503][ T5183] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 59.533219][ T5191] __nla_validate_parse: 2 callbacks suppressed [ 59.533234][ T5191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.311'. [ 59.583449][ T5196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 59.592960][ T5197] netlink: 16 bytes leftover after parsing attributes in process `syz.4.311'. [ 59.603474][ T5199] FAULT_INJECTION: forcing a failure. [ 59.603474][ T5199] name failslab, interval 1, probability 0, space 0, times 0 [ 59.631020][ T5191] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 59.653089][ T5191] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 59.660228][ T5199] CPU: 1 UID: 0 PID: 5199 Comm: syz.1.324 Not tainted syzkaller #0 PREEMPT(full) [ 59.660311][ T5199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 59.660322][ T5199] Call Trace: [ 59.660328][ T5199] [ 59.660335][ T5199] __dump_stack+0x1d/0x30 [ 59.660358][ T5199] dump_stack_lvl+0x95/0xd0 [ 59.660377][ T5199] dump_stack+0x15/0x1b [ 59.660415][ T5199] should_fail_ex+0x263/0x280 [ 59.660440][ T5199] should_failslab+0x8c/0xb0 [ 59.660520][ T5199] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 59.660615][ T5199] ? __alloc_skb+0x2d6/0x690 [ 59.660638][ T5199] __alloc_skb+0x2d6/0x690 [ 59.660661][ T5199] ? __alloc_skb+0x200/0x690 [ 59.660683][ T5199] netlink_ack+0xfd/0x500 [ 59.660725][ T5199] netlink_rcv_skb+0x192/0x220 [ 59.660749][ T5199] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 59.660837][ T5199] nfnetlink_rcv+0x167/0x1720 [ 59.660860][ T5199] ? __kfree_skb+0x109/0x150 [ 59.660880][ T5199] ? nlmon_xmit+0x4f/0x60 [ 59.660965][ T5199] ? consume_skb+0x4b/0x160 [ 59.660989][ T5199] ? nlmon_xmit+0x4f/0x60 [ 59.661020][ T5199] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 59.661048][ T5199] ? __dev_queue_xmit+0x1393/0x1f40 [ 59.661145][ T5199] ? __dev_queue_xmit+0x148/0x1f40 [ 59.661206][ T5199] ? ref_tracker_free+0x37d/0x3e0 [ 59.661235][ T5199] ? __netlink_deliver_tap+0x4dc/0x500 [ 59.661266][ T5199] netlink_unicast+0x5c0/0x690 [ 59.661292][ T5199] netlink_sendmsg+0x5c8/0x6f0 [ 59.661358][ T5199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.661382][ T5199] ____sys_sendmsg+0x5af/0x600 [ 59.661506][ T5199] ___sys_sendmsg+0x195/0x1e0 [ 59.661541][ T5199] __x64_sys_sendmsg+0xd4/0x160 [ 59.661626][ T5199] x64_sys_call+0x194c/0x3020 [ 59.661681][ T5199] do_syscall_64+0x12c/0x370 [ 59.661710][ T5199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.661729][ T5199] RIP: 0033:0x7f00e644bf79 [ 59.661858][ T5199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.661873][ T5199] RSP: 002b:00007f00e4ea7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.661891][ T5199] RAX: ffffffffffffffda RBX: 00007f00e66c5fa0 RCX: 00007f00e644bf79 [ 59.661903][ T5199] RDX: 0000000000000040 RSI: 0000200000001500 RDI: 0000000000000003 [ 59.661915][ T5199] RBP: 00007f00e4ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.661948][ T5199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.661962][ T5199] R13: 00007f00e66c6038 R14: 00007f00e66c5fa0 R15: 00007ffc26d37348 [ 59.661984][ T5199] [ 59.915821][ T5203] netlink: 16 bytes leftover after parsing attributes in process `syz.0.322'. [ 59.959231][ T5196] team_slave_0: entered promiscuous mode [ 59.965180][ T5196] team_slave_1: entered promiscuous mode [ 59.979801][ T5196] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 59.991651][ T5205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.315'. [ 60.000649][ T5205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.014559][ T5205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.038212][ T5203] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 60.098931][ T5209] netlink: 68 bytes leftover after parsing attributes in process `syz.1.317'. [ 60.257486][ T5219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=5219 comm=syz.3.323 [ 60.395114][ T28] kauditd_printk_skb: 131 callbacks suppressed [ 60.395128][ T28] audit: type=1400 audit(1771157056.084:423): avc: denied { read } for pid=5227 comm="syz.3.328" path="socket:[8849]" dev="sockfs" ino=8849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.501757][ T28] audit: type=1400 audit(1771157056.184:424): avc: denied { tracepoint } for pid=5234 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 60.525377][ T28] audit: type=1400 audit(1771157056.214:425): avc: denied { create } for pid=5229 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 60.545216][ T28] audit: type=1400 audit(1771157056.214:426): avc: denied { setopt } for pid=5237 comm="syz.0.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.565013][ T28] audit: type=1400 audit(1771157056.214:427): avc: denied { read write } for pid=5237 comm="syz.0.332" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 60.594323][ T28] audit: type=1400 audit(1771157056.214:428): avc: denied { open } for pid=5237 comm="syz.0.332" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 60.620246][ T28] audit: type=1400 audit(1771157056.214:429): avc: denied { name_bind } for pid=5229 comm="syz.4.329" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 60.649717][ T5235] netlink: 64 bytes leftover after parsing attributes in process `syz.3.328'. [ 60.650847][ T5243] netlink: 28 bytes leftover after parsing attributes in process `syz.4.329'. [ 60.679404][ T28] audit: type=1400 audit(1771157056.214:430): avc: denied { node_bind } for pid=5229 comm="syz.4.329" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 60.707556][ T28] audit: type=1400 audit(1771157056.214:431): avc: denied { ioctl } for pid=5234 comm="syz.1.331" path="socket:[8879]" dev="sockfs" ino=8879 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.733931][ T28] audit: type=1400 audit(1771157056.334:432): avc: denied { write } for pid=5227 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.466941][ T5259] ================================================================== [ 61.475042][ T5259] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 61.481981][ T5259] [ 61.484291][ T5259] read-write to 0xffff88811edd3eac of 4 bytes by task 5252 on cpu 0: [ 61.492350][ T5259] fifo_open+0x86/0x5d0 [ 61.496512][ T5259] do_dentry_open+0x4ca/0xa90 [ 61.501202][ T5259] vfs_open+0x37/0x1e0 [ 61.505280][ T5259] path_openat+0x1b70/0x2050 [ 61.509863][ T5259] do_file_open+0x16c/0x290 [ 61.514361][ T5259] do_sys_openat2+0x94/0x130 [ 61.518948][ T5259] __se_sys_openat2+0x193/0x1f0 [ 61.523790][ T5259] __x64_sys_openat2+0x55/0x70 [ 61.528544][ T5259] x64_sys_call+0x2170/0x3020 [ 61.533212][ T5259] do_syscall_64+0x12c/0x370 [ 61.537800][ T5259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.543693][ T5259] [ 61.546002][ T5259] read to 0xffff88811edd3eac of 4 bytes by task 5259 on cpu 1: [ 61.553699][ T5259] wait_for_partner+0xd5/0x1e0 [ 61.558451][ T5259] fifo_open+0x462/0x5d0 [ 61.562779][ T5259] do_dentry_open+0x4ca/0xa90 [ 61.567454][ T5259] vfs_open+0x37/0x1e0 [ 61.571508][ T5259] path_openat+0x1b70/0x2050 [ 61.576093][ T5259] do_file_open+0x16c/0x290 [ 61.580599][ T5259] do_sys_openat2+0x94/0x130 [ 61.585363][ T5259] __x64_sys_open+0xe6/0x110 [ 61.589954][ T5259] x64_sys_call+0x14b9/0x3020 [ 61.594626][ T5259] do_syscall_64+0x12c/0x370 [ 61.599214][ T5259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.605094][ T5259] [ 61.607401][ T5259] value changed: 0x00000001 -> 0x00000002 [ 61.613142][ T5259] [ 61.615447][ T5259] Reported by Kernel Concurrency Sanitizer on: [ 61.621579][ T5259] CPU: 1 UID: 0 PID: 5259 Comm: syz.0.336 Not tainted syzkaller #0 PREEMPT(full) [ 61.630767][ T5259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 61.640817][ T5259] ================================================================== [ 66.089221][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 66.089234][ T28] audit: type=1400 audit(1771157061.774:436): avc: denied { search } for pid=3038 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.129812][ T202] bridge_slave_1: left allmulticast mode [ 66.135801][ T202] bridge_slave_1: left promiscuous mode [ 66.141577][ T202] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.149508][ T28] audit: type=1400 audit(1771157061.774:437): avc: denied { search } for pid=3038 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.171747][ T202] bridge_slave_0: left allmulticast mode [ 66.177785][ T28] audit: type=1400 audit(1771157061.774:438): avc: denied { search } for pid=3038 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.183930][ T202] bridge_slave_0: left promiscuous mode [ 66.209390][ T28] audit: type=1400 audit(1771157061.774:439): avc: denied { read } for pid=3038 comm="dhcpcd" name="n26" dev="tmpfs" ino=2362 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.231212][ T202] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.234157][ T28] audit: type=1400 audit(1771157061.774:440): avc: denied { open } for pid=3038 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=2362 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.264270][ T28] audit: type=1400 audit(1771157061.774:441): avc: denied { getattr } for pid=3038 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=2362 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.288596][ T28] audit: type=1400 audit(1771157061.864:442): avc: denied { read open } for pid=5294 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.324074][ T28] audit: type=1400 audit(1771157061.864:443): avc: denied { getattr } for pid=5294 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.356223][ T28] audit: type=1400 audit(1771157062.044:444): avc: denied { add_name } for pid=5293 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.380223][ T28] audit: type=1400 audit(1771157062.044:445): avc: denied { create } for pid=5293 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.404989][ T202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.414301][ T202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.424224][ T202] bond0 (unregistering): Released all slaves [ 66.463342][ T202] tipc: Left network mode [ 66.476924][ T202] hsr_slave_0: left promiscuous mode [ 66.484183][ T202] hsr_slave_1: left promiscuous mode [ 66.490579][ T202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.527951][ T202] team0 (unregistering): Port device team_slave_1 removed [ 66.549724][ T202] team0 (unregistering): Port device team_slave_0 removed [ 66.806078][ T202] IPVS: stop unused estimator thread 0...